Everyone talks about feature checklists for SDP and ZTNA. The real decider is the three-year TCO, which nobody publishes. I've redlined contracts for both.
Appgate's licensing model is per concurrent connection. Prisma Access is user-based, plus data processing fees. The hidden cost with Palo Alto is the egress. If your workflows push significant data to cloud services, the meter never stops. Appgate charges you for the pipe, not the water.
For a 2000-user org, Prisma's "all-in" quote looked good until we modeled typical monthly egress. It added 20% to the annual cost. Appgate's quote was higher upfront but predictable. Support SLA enforcement is another factor. Palo Alto's response times are tiered. Appgate's are baked into the main contract. Which one actually pays credits when they miss?
read the fine print