Zscaler is securing entire cooperate traffic using its different modules. This includes URL & aapplication filtering, malware & threat protection, bandwidth control, sand boxing and advanced fire-walling etc. Specifically, I like the URL filtering/user authentication. DLP and firewall features are also an added advantages. Also, there are various traffic forwarding mechanisms such GRE, pac file, VPN etc.
Technical Specialist with 5,001-10,000 employees
No need to maintain multiple devices on the data center and secure entire traffic.
What is most valuable?
How has it helped my organization?
Since this is a cloud based product, we don't have to bother about the hardware/physical status and space. No need to monitor and manage the hardware. If there's an issue, Zscaler will switchover to another node to process the customer traffic.
What needs improvement?
Using location admin users should be better so we can merge any centralized authentication servers like AD, Radius, and any other server. This would help centralize the server management. v5.2 is being released shortly, and will have a lot of new features for TLS and HTTPS transactions.
For how long have I used the solution?
Morethan 6 years
Buyer's Guide
Zscaler Internet Access
October 2024
Learn what your peers think about Zscaler Internet Access. Get advice and tips from experienced pros sharing their opinions. Updated: October 2024.
815,854 professionals have used our research since 2012.
What was my experience with deployment of the solution?
NO
What do I think about the stability of the solution?
Initially there were issues interms of stability and improved a lot now.
What do I think about the scalability of the solution?
Zscaler is very easy to scale.
How are customer service and support?
They have very excellent support team
Which other solutions did I evaluate?
It's an excellent product, and there's no need to worry about the hardware and maintenance cost.
What other advice do I have?
We can manage our IT rules and policies using online portal.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Chief Executive Officer at a tech services company with 1-10 employees
There is a single panel where you can configure the policies for your entire organisation worldwide
Pros and Cons
- "Zscaler excels in security protection and the cloud is always up-to-date. It does not matter if you are a small or big organisation, you will receive the same security quality."
- "One on the main benefits is protection all time from anywhere."
- "In terms of management and visibility, there is a single panel where you can configure the policies for your entire organisation worldwide."
- "After a proper implementation, the maintenance is very low."
- "When you have appliances, SSL inspection is always a headache due to poor performance and/or lack of ciphers implemented. "
- "Do not expect to pay for the service and start using it, like Gmail. Zscaler requires a proper implementation to be done to make it successful."
What is our primary use case?
Zscaler provides web security on the cloud for any device at any place all the time. If you use local appliances, users are not protected when they are connecting from outside the corporate network (e.g., home office, hotspots, airports, etc.).
We use Zscaler from all our locations, and for our roaming users too. In order to integrate our users to Zscaler, we use Okta (ADFS) for authentication, cloud security connectors for traffic redirection from locations (tunnels to the Zscaler cloud), and the Zscaler app for roaming users.
How has it helped my organization?
One on the main benefits is protection all time from anywhere.
Zscaler excels in security protection and the cloud is always up-to-date. It does not matter if you are a small or big organisation, you will receive the same security quality.
In terms of management and visibility, there is a single panel where you can configure the policies for your entire organisation worldwide and the reporting tools are brilliant.
What is most valuable?
Zscaler provides a lot of features in terms of control (URL filtering, cloud app control, etc.), which can be found in other solutions as well, but in terms of security, it is quite unique. SSL inspection, Advanced Threat Security, and Cloud Sandbox are probably the most valuable.
- SSL inspection is easy to implement and the performance is great (it is the responsibility of Zscaler to provide it).
- Advanced Threat Security protects you from most threats that can bypass the classic anti-malware solution.
- Cloud Sandbox completes the stack of security requirements stopping zero-day malware.
What needs improvement?
Do not expect to pay for the service and start using it, like Gmail. Zscaler requires a proper implementation to be done to make it successful.
For how long have I used the solution?
More than five years.
What do I think about the stability of the solution?
When you have appliances, SSL inspection is always a headache due to poor performance and/or lack of ciphers implemented.
How was the initial setup?
After a proper implementation, the maintenance is very low.
What's my experience with pricing, setup cost, and licensing?
Be aware that you will need to invest some time and money to adapt your environment for Zscaler (traffic redirection, software deployment, authentication, etc).
Disclosure: My company has a business relationship with this vendor other than being a customer: We are Zscaler technology partners.
Buyer's Guide
Zscaler Internet Access
October 2024
Learn what your peers think about Zscaler Internet Access. Get advice and tips from experienced pros sharing their opinions. Updated: October 2024.
815,854 professionals have used our research since 2012.
IT Projects & Innovation Manager at a pharma/biotech company with 1,001-5,000 employees
Protects from malware and malicious attacks but it needs better integration
Pros and Cons
- "The most valuable feature is bandwidth control."
- "It also needs better integration with other applications as well. There are some restrictions."
What is our primary use case?
Our primary use case of this solution is for the protection from malware and malicious attacks. We also use it for bandwidth control to compare business and individual use. We use it in conjunction with Palo Alto.
What is most valuable?
The most valuable feature is bandwidth control. It has good traffic visibility.
What needs improvement?
The implementation process needs improvement. Even if you have implemented it, it doesn't mean that it is done, you have to pay for the service afterward. It's not a one-shot implementation, you need to spend some more effort on it afterward.
It also needs better integration with other applications as well. There are some restrictions.
I would like to see them incorporate a user ID or application ID in the next release of this solution.
For how long have I used the solution?
I have been using Zscaler for around eight months.
What do I think about the stability of the solution?
Since you need to maintain it the maintenance payout is not that good. I cannot say that it's stable.
What do I think about the scalability of the solution?
In my company, we have around five thousand users, but just the main account would be around three thousand.
It works every day and it's protecting against the attacks and so we are using on a daily basis.
How are customer service and technical support?
I would rate their technical a four out of five, based on my experience with some support cases. Their support is good.
How was the initial setup?
The initial setup was okay but the problem is that afterward, you have to put in more time and money.
What about the implementation team?
We used a consultant for the deployment.
What's my experience with pricing, setup cost, and licensing?
It's not an expensive solution but it is more expensive than some of its competitors. The licensing model is good if you pay for the medium-level licensing model. We get many features with the license but if you would like to integrate with other things, you have to spend time and money for the maintenance but other than that you don't have to buy additional new licenses.
What other advice do I have?
It was also one of four other products I believe but the Zscaler I can say that for bandwidth control, it is good, so we are not using at the moment data loss prevention feature so I cannot comment on that, but I believe, when you use Zscaler, you are not protected from all malware and malicious attacks, so you may need another tool just to cover these gaps. Zscaler is not enough for advanced protection. You need an additional tool.
Bandwidth control, reporting, and visibility are good but the cloud-based and the advanced protection aren't so great so I would give it a six out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Zscaler Internet Access Report and get advice and tips from experienced pros
sharing their opinions.
Updated: October 2024
Popular Comparisons
Fortinet FortiGate
Netgate pfSense
Cisco Secure Firewall
Cloudflare
Sophos XG
Cisco Umbrella
CyberArk Privileged Access Manager
Meraki MX
Prisma Access by Palo Alto Networks
Qualys VMDR
Palo Alto Networks NG Firewalls
Azure Firewall
Check Point NGFW
WatchGuard Firebox
Buyer's Guide
Download our free Zscaler Internet Access Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Looking Into Implementing a Web Security Solution.
- Can I deploy Zscaller as a transparent proxy?
- Which is the better security solution - Cisco Umbrella or Zscaler?
- Which is better, Zscaler internet access or Netsckope CASB?
- How does Prisma SaaS by Palo Alto Networks compare with Zscaler internet access?
- When evaluating Web Security Gateways, what aspect do you think is the most important to look for?
- What is the best security web gateway?
- Is Netskope's SWG as good as the Zscaler SWG?
- What secure web gateway do you recommend?
So the SSL inspection is done at the IP level and not at the application level (with a transparent Web proxy for instance) with ZScaller. Do you have any information regarding the pros and cons of doing SSL inspection at the IP or HTTP level? What about the necessity to deploy a CA certificate at the client side? Is it mandatory?