Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

Cisco Secure AccessPrisma AccessAWS Systems Manager Session Manager3 of 3 products

You can compare up to 3 products. Remove one to add another.

Side-by-side comparison of Cisco Secure Access, Prisma Access, AWS Systems Manager Session Manager
Product	Cisco Secure Access by Cisco View product	Prisma Access by Palo Alto Networks View product	AWS Systems Manager Session Manager by AWS View product
Overview
What it is	Cisco Secure Access by Cisco: Secure Web Gateway and Firewall-as-a-Service. Ideal for CASB SaaS defense. Deployment: cloud. See how it compares with top SSE alternatives.	Prisma Access: globally distributed cloud fabric, Zero Trust Network Access and Cloud Secure Web Gateway. Built for hybrid workforce security. Compare SASE alternatives.	AWS Systems Manager Session Manager: TLS 1.2 end-to-end encryption. Built for secure bastionless server administration. Compare Cloud Security alternatives.
Product type	Security Service Edge (SSE) Platform	Cloud-Delivered Secure Access Service Edge (SASE)	Managed Interactive Node Access Capability
Best for	Cross-industry, Remote Workforces, Financial Services, Healthcare, Technology	Cross-industry, Enterprise, Financial Services, Retail, Technology, Healthcare	Cross-industry, Enterprise, Technology, Financial Services, Healthcare, Public Sector
Pricing
Pricing model	Contact Vendor	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes	Free trial: yes
Deployment
Deployment options	Cloud	SaaSCloud	CloudHybridOn-Premise
Deployment details	Cloud; 100% Cloud-delivered Security Service Edge (SSE)	Cloud SaaS; Cloud-delivered Anycast SASE nodes in 100+ global locations	Cloud; Hybrid; On-premises; AWS Cloud-native managed capability via outbound SSM agent
Data residency	Global distributed cloud points of presence (PoPs)	Multi-region hyperscale cloud fabric with regional compliance guarantees	Session metadata and logs stored in selected AWS Region
Key features
What it offers	Converged SSE platform Zero Trust Network Access (ZTNA) Secure Web Gateway (SWG) Cloud Access Security Broker (CASB) Remote Browser Isolation (RBI) Firewall-as-a-Service (FWaaS) Cisco Talos intelligence CASB SaaS defense	Globally distributed cloud fabric Zero Trust Network Access (ZTNA 2.0) Cloud Secure Web Gateway Cloud CASB Firewall-as-a-Service (FWaaS) Autonomous DEM Single-pass inspection engine Hybrid workforce security	Inbound-port-free shell access Browser and CLI interactive access IAM-based authentication and authorization TLS 1.2 end-to-end encryption Full session keystroke logging to S3 and CloudWatch Private port forwarding and tunneling Secure bastionless server administration Centralized access auditing
Platform & access
API access	API access: yes	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: yes	Mobile app: yes	Mobile app: yes
Supported platforms	Distributed endpointscloud applicationsweb trafficprivate data centers	Cloudremote laptopsmobile devicesbranch SD-WAN gateways	Amazon EC2 instanceson-premises serversVMware VMsIoT devices running SSM Agent
Compliance	FedRAMP Moderate Authorized, SOC 2 Type II, ISO 27001, HIPAA, PCI DSS	SOC 2 Type II, ISO 27001, HIPAA, PCI DSS, FedRAMP Moderate	SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Integrations & coverage
Integrations	Cisco Secure ClientCisco DuoCisco UmbrellaCisco ThousandEyesMicrosoft Entra IDOkta	Strata Cloud ManagerOktaMicrosoft Entra IDPing IdentityAWSAzureServiceNow	AWS IAMAWS CloudTrailAmazon CloudWatch LogsAmazon S3AWS KMSAWS Systems ManagerAWS Organizations
Industries	Cross-industryRemote WorkforcesFinancial ServicesHealthcareTechnology	Cross-industryEnterpriseFinancial ServicesRetailTechnologyHealthcare	Cross-industryEnterpriseTechnologyFinancial ServicesHealthcarePublic Sector
Regions	Global	Global	Global (all AWS Regions)
Vendor
Company	Cisco	Palo Alto Networks	AWS
Headquarters	San Jose, California, USA	Santa Clara, California, USA	Seattle, Washington, USA
Company size	80,000+	15,000+	100,000+
Founded	1984	2005	2006

Cisco Secure Access

by Cisco

View product

Prisma Access

by Palo Alto Networks

View product

AWS Systems Manager Session Manager

by AWS

View product

Overview

What it is

Cisco Secure Access

Cisco Secure Access by Cisco: Secure Web Gateway and Firewall-as-a-Service. Ideal for CASB SaaS defense. Deployment: cloud. See how it compares with top SSE alternatives.

Prisma Access

Prisma Access: globally distributed cloud fabric, Zero Trust Network Access and Cloud Secure Web Gateway. Built for hybrid workforce security. Compare SASE alternatives.

AWS Systems Manager Session Manager

AWS Systems Manager Session Manager: TLS 1.2 end-to-end encryption. Built for secure bastionless server administration. Compare Cloud Security alternatives.

Product type

Cisco Secure Access

Security Service Edge (SSE) Platform

Prisma Access

Cloud-Delivered Secure Access Service Edge (SASE)

AWS Systems Manager Session Manager

Managed Interactive Node Access Capability

Best for

Cisco Secure Access

Cross-industry, Remote Workforces, Financial Services, Healthcare, Technology

Prisma Access

Cross-industry, Enterprise, Financial Services, Retail, Technology, Healthcare

AWS Systems Manager Session Manager

Cross-industry, Enterprise, Technology, Financial Services, Healthcare, Public Sector

Pricing

Pricing model

Cisco Secure Access

Contact Vendor

Prisma Access

Contact Vendor

AWS Systems Manager Session Manager

Contact Vendor

Free trial

Cisco Secure Access

Prisma Access

AWS Systems Manager Session Manager

Deployment

Deployment options

Cisco Secure Access

Cloud

Prisma Access

SaaSCloud

AWS Systems Manager Session Manager

CloudHybridOn-Premise

Deployment details

Cisco Secure Access

Cloud; 100% Cloud-delivered Security Service Edge (SSE)

Prisma Access

Cloud SaaS; Cloud-delivered Anycast SASE nodes in 100+ global locations

AWS Systems Manager Session Manager

Cloud; Hybrid; On-premises; AWS Cloud-native managed capability via outbound SSM agent

Data residency

Cisco Secure Access

Global distributed cloud points of presence (PoPs)

Prisma Access

Multi-region hyperscale cloud fabric with regional compliance guarantees

AWS Systems Manager Session Manager

Session metadata and logs stored in selected AWS Region

Key features

What it offers

Cisco Secure Access

Converged SSE platform
Zero Trust Network Access (ZTNA)
Secure Web Gateway (SWG)
Cloud Access Security Broker (CASB)
Remote Browser Isolation (RBI)
Firewall-as-a-Service (FWaaS)
Cisco Talos intelligence
CASB SaaS defense

Prisma Access

Globally distributed cloud fabric
Zero Trust Network Access (ZTNA 2.0)
Cloud Secure Web Gateway
Cloud CASB
Firewall-as-a-Service (FWaaS)
Autonomous DEM
Single-pass inspection engine
Hybrid workforce security

AWS Systems Manager Session Manager

Inbound-port-free shell access
Browser and CLI interactive access
IAM-based authentication and authorization
TLS 1.2 end-to-end encryption
Full session keystroke logging to S3 and CloudWatch
Private port forwarding and tunneling
Secure bastionless server administration
Centralized access auditing

Platform & access

API access

Cisco Secure Access

Prisma Access

AWS Systems Manager Session Manager

Single sign-on (SSO)

Cisco Secure Access

Prisma Access

AWS Systems Manager Session Manager

Role-based access (RBAC)

Cisco Secure Access

Prisma Access

AWS Systems Manager Session Manager

Multi-tenant

Cisco Secure Access

Prisma Access

AWS Systems Manager Session Manager

Mobile app

Cisco Secure Access

Prisma Access

AWS Systems Manager Session Manager

Supported platforms

Cisco Secure Access

Distributed endpointscloud applicationsweb trafficprivate data centers

Prisma Access

Cloudremote laptopsmobile devicesbranch SD-WAN gateways

AWS Systems Manager Session Manager

Amazon EC2 instanceson-premises serversVMware VMsIoT devices running SSM Agent

Compliance

Cisco Secure Access

FedRAMP Moderate Authorized, SOC 2 Type II, ISO 27001, HIPAA, PCI DSS

Prisma Access

SOC 2 Type II, ISO 27001, HIPAA, PCI DSS, FedRAMP Moderate

AWS Systems Manager Session Manager

SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High

Integrations & coverage

Integrations

Cisco Secure Access

Cisco Secure ClientCisco DuoCisco UmbrellaCisco ThousandEyesMicrosoft Entra IDOkta

Prisma Access

Strata Cloud ManagerOktaMicrosoft Entra IDPing IdentityAWSAzureServiceNow

AWS Systems Manager Session Manager

AWS IAMAWS CloudTrailAmazon CloudWatch LogsAmazon S3AWS KMSAWS Systems ManagerAWS Organizations

Industries

Cisco Secure Access

Cross-industryRemote WorkforcesFinancial ServicesHealthcareTechnology

Prisma Access

Cross-industryEnterpriseFinancial ServicesRetailTechnologyHealthcare

AWS Systems Manager Session Manager

Cross-industryEnterpriseTechnologyFinancial ServicesHealthcarePublic Sector

Regions

Cisco Secure Access

Global

Prisma Access

Global

AWS Systems Manager Session Manager

Global (all AWS Regions)

Vendor

Company

Cisco Secure Access

Cisco

Prisma Access

Palo Alto Networks

AWS Systems Manager Session Manager

AWS

Headquarters

Cisco Secure Access

San Jose, California, USA

Prisma Access

Santa Clara, California, USA

AWS Systems Manager Session Manager

Seattle, Washington, USA

Company size

Cisco Secure Access

80,000+

Prisma Access

15,000+

AWS Systems Manager Session Manager

100,000+

Founded

Cisco Secure Access

1984

Prisma Access

2005

AWS Systems Manager Session Manager

2006