Zscaler Zero Trust Exchange Platform Reviews

I like its ease of use. It has a single pane of glass for the ZIA and ZPA pieces. It is very manageable. 

It is also very easy to deploy for secure access, and it gives half-decent coverage for visibility in terms of what the users use and what data is being proxied through the access gateway.

It has massive room for improvement. The Zscaler product itself is okay, but it doesn't give enough granularity for us as an organization to stipulate rules or processes, especially for data-driven services. For instance, we can stick on SSL inspection, but it's just a click box. It doesn't allow us to go any further into the detail of the SSL inspection. We also can't pull it out without having an additional logging server. It just doesn't give us enough granularity. 

They should give us more control over the interfaces because it is all backend. They weren't very open to discussing their backend architecture with us in terms of their own data centers. They can maybe a little bit more open about what components are there and how the backend infrastructure works alongside Zscaler.

Its licensing can be better. Some of the additional licensing costs are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. 

Their support should also be improved. I initially had a consultant from Zscaler for its deployment, but the support that I had throughout the deployment of the project wasn't the best.

We weren't using any other solution.

It is very easy. There were some constraints trying to deploy the access gateway and the endpoint client to some of our regions due to processes being blocked. They gave a list of processes that need to be allowed through ADM endpoints and our sort of antivirus products so that they're not scanned, and they're allowed through to function. However, I had some issues in following the guide and trying to get them initially deployed and allowed through. The firewall has to be off regardless of whether the port allocations were opened or not, but this could potentially be a regional issue. Other than that, the deployment was very easy.

I went through a subsidiary company of Zscaler. I initially had a consultant from Zscaler themselves, but the support that I had throughout the deployment of the project wasn't the best. They were very much technical sales as opposed to technical consultants. I myself had to work through and resolve a lot of issues that I faced during the deployment and setup.

It has been relatively reasonable for what it does. Some of the additional license costs based on the advanced next-generation firewall functions are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Overall, the cost seems reasonable.

What I would say is that try it, test it, and ensure that it sort of meets the company requirements. We were lucky enough to go through an extensive trial period. Zscaler, unfortunately, only allows a two-week trial regardless of where you are with the setup. They only give you coverage for a very basic setup. You have very limited time for trying anything further or trying the product as if it was in the production environment. Therefore, I would advise scoping out what you want and how you want to achieve it as quickly as possible. After that, you can really hammer home when you go through the initial deployment to ensure that it works and meets all the requirements.

We are now looking at Cisco Umbrella. We are a Cisco house predominantly, and Cisco Umbrella just interlinks with our VPN solution and our overall architecture. We're looking to migrate to a Meraki SD-WAN fabric because it allows us to just use that network overlay underneath the secure access edge and just incorporate it into what we already have.

I would rate Zscaler SASE a seven out of ten.

Private Access is more for very high-powered users. It's dedicated access to certain applications. It's for more sensitive users. It's not for general users. 

The dedicated connection is the most valuable aspect of this solution. It makes the connection very secure. 

It is easy to use. 

The setup is very straightforward. 

We'd like to have two-factor authentication that is quite simple.

Users are only those at the management level or directors. The users are only high-level individuals. It's not meant for everyone. 

We previously just used an antivirus like McAfee. We use McAfee endpoint protection with this over the top now. 

This solution is very simple to set up. It's not a complex implementation. 

You just need one person to maintain the solution. It just takes one system administrator. 

The pricing is incremental. It's just a small incremental cost for each user. You do need at least 500 users. Otherwise, it is not cost-efficient. 

We're partners. We resell the solution. 

This is a good product. It's easy to deploy, secure, and good for securing employees. 

I'd rate the solution eight out of ten. 

It pretty much covers, like, if you implement it, it's going to cover, like, 80 to 90% of real estate for the organization.

On DLP terms, Zscaler Cloud DLP ensures that data doesn't go outside of the organization. So on the network level, Zscaler does a pretty good job.

The solution doesn't do a very good job of detection, but they definitely do a very good job of implementing the policies.

There is room for improvement in detection. From the detection perspective, like, how it detects the violations.

Another area of improvement is implementation through non-client connectors. The solution can be implemented in two ways. One uses the back file; the other one uses client connectors. So the client connector is pretty fast, but when it comes to non-client connectors and procedures, it's kind of delayed and slow. The policies don't reflect very soon. It takes, like, a day and, like, hours to get implemented. But if it's a client connector, it takes, like, two minutes. It's just so good.

In future releases, I would like to see two things. It's not more of a feature but more like an enhancement. So I would like to see an enhancement in their proximity when detecting credit card details and past support details, and PII data.

Another area of improvement is support. 

I have been using this solution for around nine months. I use the latest version 6.2.

I would rate the stability an eight out of ten.

Scalability is pretty good. I would rate the scalability a nine out of ten. 

There is room for improvement in support. 

Neutral

The initial deployment is pretty easy. That's pretty straightforward.

We have definitely seen an ROI. 

The price is a little bit on the higher side, especially if you are going to add, like, packs or bundles to your subscription. But otherwise, it's pretty decent.

I would suggest to keep your policies simple. Don't complicate them because it depends on your organization and how you set it up. So once you are doing it, just keep it clean and simple.

Overall, I would rate the solution an eight out of ten. 

I use Zscaler Cloud DLP for its DLP features. It gives you all the basic features such as keywords, regular expressions, data identifiers, etc., but the only difference is that you can only apply the DLP policies to web traffic.

Zscaler Cloud DLP provides you with basic DLP features that you get out of the box such as keywords, regular expressions, and data identifiers, for example, your social security numbers, and credit card numbers, with everything built into the product, so you can directly use those features within the policies. You don't need to create it from scratch, and to me, this is the biggest benefit of Zscaler Cloud DLP. You have a lot of templates to choose from in the solution, rather than having to create templates from scratch or reinvent templates.

The only issue with Zscaler Cloud DLP is that it only gives you DLP protection from web traffic, which is flowing out, while a full-blown DLP solution such as Forcepoint or Symantec gives you DLP coverage for multiple channels.

Zscaler Cloud DLP doesn't give you coverage for email, fax, and USB channels, and this is the only challenge or room for improvement in the solution. It's just an extension on top of what you're buying on the proxy, so it's just an added layer, and it doesn't cover DLP on a very broad level.

I'm unsure if Zcaler is in the business of competing with a full-blown DLP solution, and if there's a plan to expand the features of Zscaler Cloud DLP beyond the web channel because you'll have to deploy a full-blown agent for it. I'm unsure if this is on the cards because the solution is just an added layer that you get with your proxy. I've asked the Zcaler team whether there's a plan to go full DLP in the future, but I didn't get a positive response.

There isn't any feature I'd like added to Zscaler Cloud DLP currently, because anything you could think of that should be in cloud or SaaS solutions is already there, except for machine learning, as it's the only functionality that seems to be lacking in the solution. Machine learning is an additional policy available in other DLP solutions in the market, but my team didn't find it in Zscaler Cloud DLP.

I've been working with Zscaler Cloud DLP for a year and a half.

Zscaler Cloud DLP is a very stable product. My team had very, very few complaints about it, and I never had a situation where an end user would come to me and complain about performance or latency issues with Zscaler Cloud DLP.

Zscaler Cloud DLP is a scalable product.

We've never contacted the Zscaler Cloud DLP technical support team because it's a very straightforward product, so we didn't need help or raised cases about it.

The initial setup for Zscaler Cloud DLP was very straightforward because the portal walks you through it, and you get initial help for a few hours from Zcaler professionals who help you and walk you through the entire setup process.  The team understands what your needs are and give you the best possible suggestions on how to use Zscaler Cloud DLP, how to administer it, and how to maintain it, so that's all good.

The licensing model for Zscaler Cloud DLP allows you to only buy what you need. You don't need to buy it as a whole, so it's good.

I evaluated Forcepoint and Symantec DLP solutions, and both are equally good.

I'm still working with Zscaler Cloud DLP.

Zscaler Cloud DLP is not difficult to maintain, and maintaining it is the vendor's responsibility, so you don't need to worry about it.

I would recommend Zscaler Cloud DLP to others because it's the best proxy product in the market at the moment.

Zscaler Cloud DLP is a pretty good product. It's just missing one or two features, so I would rate it as eight out of ten.

Our role is as consultant, architectural, and pre-sales.

Rather than purchasing new VPNs and other architecture, our clients use Zscaler SASE to allow their workers to work from home due to COVID. 

It decreases the overhead that they are running when it comes to licenses for the VPNs and allows them to merge multiple technologies, such as the VPN capabilities, and the CASB solution.

The most valuable features of this solution are the CASB solutions, which is protecting their Office 365.

The interface needs a bit of work. It could be a little more streamlined and more intuitive.

We have been selling this solution for two years.

Our clients are using the latest version.

Absolutely, this is a stable solution. It has been what we expected.

The scalability by definition is kind of intrinsically built-in. Everything that I have seen is easy to scale.

My experience with technical support is that they have always been professional, on point, and very knowledgeable.

The initial setup was straightforward.

I would rate Zscaler SASE a ten out of ten.

It serves various purposes. Overall, it's pretty good. Not bad at all.

It has been helpful in maintaining our infrastructure. The granular level control it offers allows us to set application policies per application for each user.

The most valuable feature is policy creation and creating cloud instances.

Zscaler CASB need to improve the functioning of the application, especially the sanctioning of the application.

Another area of improvement is the granular level control of how you can assign policies based on user access. Currently, their granularity is not that good. They either give you access to CloudApp or not. User management can be improved.

I have been using this solution for a year. I use the latest version.

I would rate the stability a nine out of ten. 

It is a scalable solution. 

Neutral

The initial setup was very straightforward.

We have seen an ROI.

I would advise other users to focus on properly managing the cloud instances and avoid overcomplicating cloud application policies unless it's absolutely necessary.

Overall, I would rate the solution a seven out of ten. 

We are using it for monitoring the global areas, which Zscaler considers for people who are roaming around the system to have a secure connection to internal applications.

It has made things easier and more secure while connecting to the client's private applications.

The most valuable feature is the manageability of the micro tunnels.

There is improvement in enhancing proper manageability, policies, and logs. So, log management could be improved.

Moreover, I'd just like to see an improvement in stability.

I have been using this solution for six months. We use the latest version 6.1. 

I would rate the stability a seven out of ten. 

Scalability is good. 

The setup is straightforward, but it's a little more technical. Nevertheless, it's pretty straightforward.

We have it deployed on both cloud and on-premises.

We have definitely seen an ROI. 

Overall, I'll rate it at nine out of ten.