OpenVPN Access Server vs Prisma Access

OpenVPN Access Server is a business VPN hosted in a customer's environment, including Linux systems, virtual appliances, containers and public clouds. Its free plan lasts indefinitely, includes all features, requires no credit card and permits up to two simultaneous connections. Growth costs $7 a month per connection and supports up to 2,000 connections; Enterprise & IoT has custom pricing and unlimited connections. A 14-day trial is available for five or more connections. Administrators have a Web UI, self-service client UI, CLI, REST API and automation templates. Authentication options include PAM, RADIUS, LDAP, SAML, local and custom methods. User- and group-level access controls are available, as are protocol and port restrictions. Identity, device and location context can be used to control application access. OpenVPN Connect supports Windows, macOS, Android, iOS and ChromeOS. Deployment options include Docker, Hyper-V, VMware ESXi, Kubernetes Helm and public cloud marketplaces. The listed security and compliance items include SOC 2 Type 2, ISO/IEC 27001:2022, HIPAA and GDPR.

Prisma Access is a cloud-delivered security solution for users, applications, devices, and data across office, branch, and remote locations. It provides least-privileged application access and is designed to reduce reliance on traditional VPNs. Secure Web Gateway protection addresses web threats, while CASB capabilities provide SaaS visibility, inline and API-based controls, and contextual policies for sensitive data. Firewall as a Service adds threat prevention, application control, and Zero Trust policies. Prisma Agent connects users to organizational networks, SaaS applications, and the internet while extending security policies to their devices. The agent supports Windows, macOS, Linux, iOS, and Android, with requirements varying by platform. Authentication integrations include Cloud Identity Engine, SAML, TACACS+, RADIUS, LDAP, Kerberos, MFA, and local database authentication. Administrators use Panorama or Strata Cloud Manager, but must select the interface before setup because it cannot later be changed. Insights APIs monitor deployment health and performance. The service is paid, has no free plan, and pricing is on request.