No more typing reviews! Try our Samantha, our new voice AI agent.

Aruba ESP vs Zscaler Zero Trust Exchange Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Access Service Edge (SASE)
8th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
22
Ranking in other categories
Secure Web Gateways (SWG) (6th), Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (8th)
Aruba ESP
Ranking in Secure Access Service Edge (SASE)
28th
Average Rating
0.0
Reviews Sentiment
5.9
Number of Reviews
2
Ranking in other categories
No ranking in other categories
Zscaler Zero Trust Exchange...
Ranking in Secure Access Service Edge (SASE)
2nd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
67
Ranking in other categories
Data Loss Prevention (DLP) (5th), Cloud Access Security Brokers (CASB) (8th), Application Control (4th), ZTNA as a Service (1st), Remote Browser Isolation (RBI) (1st)
 

Mindshare comparison

As of May 2026, in the Secure Access Service Edge (SASE) category, the mindshare of iboss is 3.0%, up from 1.7% compared to the previous year. The mindshare of Aruba ESP is 1.0%, up from 0.3% compared to the previous year. The mindshare of Zscaler Zero Trust Exchange Platform is 8.9%, down from 11.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Access Service Edge (SASE) Mindshare Distribution
ProductMindshare (%)
Zscaler Zero Trust Exchange Platform8.9%
iboss3.0%
Aruba ESP1.0%
Other87.1%
Secure Access Service Edge (SASE)
 

Featured Reviews

Ashok Ananthula - PeerSpot reviewer
Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees
Cloud gateway has strengthened remote web security and now needs better Mac and ISP support
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.
SatishKumar13 - PeerSpot reviewer
Deputy Manager at Savex Technologies Pvt Ltd
Has improved remote connectivity with secure segmentation for traveling users
The scenario has totally changed after COVID. Earlier, people used to work from office culture, but now it has shifted to work from anywhere. Devices are not fixed either. Previously it was fixed asset, but now people are using smartphones, IoT devices, laptops, and other devices, connecting from anywhere. Segmenting network traffic is very difficult and complicated because putting a firewall across devices is very difficult and nearly impossible. EdgeConnect, which includes endpoint protection or SSE, is very agent-based. POPs are nearly reachable across the globe, so users can access services globally whenever they want to reach the data center or access the internet. It creates segregation, and after segregation, it comes with security functionality including CASB, web, anti-malware, and antivirus functionality. It protects the endpoint whenever connecting with unsecured networks. The first level post-check of security parameters matches all functionalities. Their segregation part allows us to define parameters through ZTNA functionality, Zero Trust Network Access where we can define postures, whether devices relate to corporate network or personal use, if antivirus is running, if OS is updated, and many more things. Based upon that, it helps customers protect the complete infrastructure, whether connecting with office network, unsecured network, or remote office.
Vibin Thomas - PeerSpot reviewer
Team Lead, Technical Content Security at Valuepoint Systems
Zero trust access has transformed remote connectivity and now simplifies secure app usage
Zscaler Zero Trust Exchange Platform, especially Zscaler Private Access, is very strong, though there are a few areas where improvements can be made. One challenge observed is around initial troubleshooting and visibility. While Zscaler Private Access provides logs, it can sometimes take time to pinpoint the exact cause of access issues, especially in complex environments with multiple policies and identity integration. Another area is the dependency on identity and connector health. Since Zscaler Private Access is heavily reliant on app connectors and identity providers, any issues with these components can impact user access, making proper monitoring critical. During the initial setup, policy configuration and application onboarding require careful planning, especially for larger environments with many applications. These challenges are manageable with proper design and monitoring. Overall, the platform delivers strong security and user experience. I would recommend a few improvements, especially around user interface, reporting, and troubleshooting experience. From a user interface perspective, while the platform is powerful, the policy configuration and navigation can feel complex, especially for new users. A more simplified and intuitive layout for policy mapping and application access would help reduce the learning curve. In terms of reporting, Zscaler Private Access provides logs, but having more built-in customizable dashboards and analytics would be very helpful. Better visibility into user access patterns, application performance, and real-time troubleshooting insights would improve operational efficiency. From a support and troubleshooting standpoint, it would be beneficial to have more granular centralized visibility, allowing for quick end-to-end tracing of a user request from authentication to application access without switching between multiple views. These improvements would make the platform even more efficient, especially for large-scale enterprise environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."
"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."
"As I mentioned, the return on investment is significant, as it saved our office locations' bandwidth because when you are working remotely at home, your internet traffic routes directly to iboss and will not go to your office building, saving bandwidth bottlenecks and ensuring that issues with our building internet circuits will not impact your internet connectivity because you are directly going to the iboss data center."
"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."
"It was a very easy product to install. It can be deployed very fast."
"iboss is definitely very good in terms of service."
"Granular setup, which was able to set different levels of filters using the OUs in the AD."
"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."
"Aruba ESP is a single place where you manage everything, and you have integrations with a lot of other vendors together on the same platform."
"It provides a single umbrella for the complete network infrastructure, which is a very key differentiator from other products."
"The most valuable feature of Zscaler Private Access is we do not have to connect to a VPN, it is seamless."
"The solution is the best for storage."
"It is a very scalable solution. Scalability-wise, I rate the solution a ten out of ten."
"I like its ease of use; it has a single pane of glass for the ZIA and ZPA pieces, is very manageable, is very easy to deploy for secure access, and gives half-decent coverage for visibility in terms of what the users use and what data is being proxied through the access gateway."
"The scalability by definition is kind of intrinsically built-in."
"This is a very good and stable solution that has all the requirements for your security solutions."
"The most valuable features of Zscaler Private Access are reliability, scalability, and availability."
"Before Zscaler, we used to use a lot of other products, however, when we were introduced to Zscaler we became confident it could meet the use cases."
 

Cons

"The problem our organization had is that iboss failed for the Mac devices; it is not able to give a successful agent for the Mac agents, and that is where in 2025 we had to migrate to the Palo Alto-based platform."
"Iboss is growing so fast that it is often hard for them to keep up with the challenges."
"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."
"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."
"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."
"I have heard they are doing DDoS filtering, but I am not certain if they are implementing it correctly."
"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."
"I'd like to see them accelerate development on the security side, particularly around data loss prevention."
"Aruba ESP should include more integrations with third-party vendors."
"Segmenting network traffic is very difficult and complicated because putting a firewall across devices is very difficult and nearly impossible."
"The product must allow users to check logs for an entire year in the local console."
"The pre-defined dictionaries could be improved."
"The connectivity monitoring part should be included in the core license without any extra charges."
"You won't find anything that can help you with the configuration part and other areas related to the product if you search for proper or exact details of Zscaler Cloud DLP online in very easy language."
"The interface needs a bit of work."
"On the improvement side, when we bypass certain internet traffic types, it's currently recommended to have a one-click option, but audio and video aren't always supported. Thus, we need to bypass that kind of traffic. So, it is an area of improvement."
"The pricing is expensive and on the higher end. Honestly, in my opinion, it is not worth the price."
"It would be better if the Zscaler Private Access team made it easier for people to find subscriptions on the portal, mainly information on what my customers subscribed to or the type of licenses purchased."
 

Pricing and Cost Advice

"The overall pricing for iboss is very competitive and transparent."
"It is expensive compared to one of its competitors."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"It is probably in line with other solutions, but I do not deal with the financial side."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"Users need to pay a yearly license for three, five, seven, or ten years based on their requirements."
"The technical support is good."
"The cost is expensive. It depends on the number of users."
"It has been relatively reasonable for what it does. Some of the additional license costs based on the advanced next-generation firewall functions are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Overall, the cost seems reasonable."
"The price is competitive."
"Zscaler CASB is an expensive solution."
"The licensing model for Zscaler Cloud DLP allows you to only buy what you need. You don't need to buy it as a whole, so it's good."
"Zscaler Private Access is extremely expensive."
"There is definitely an ROI."
report
Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.
893,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
9%
Construction Company
7%
No data available
Financial Services Firm
12%
Manufacturing Company
10%
Computer Software Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise7
Large Enterprise8
No data available
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise12
Large Enterprise45
 

Questions from the Community

What needs improvement with iboss?
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent ...
What is your primary use case for iboss?
We used iBoss mainly for Internet Access by having an Agent on Windows laptops Primarily because when we try to use i...
What is your experience regarding pricing and costs for iboss?
I am not involved in pricing, but as per the information I have, during that time, the Blue Coat proxies we were usin...
What needs improvement with Aruba ESP?
The scenario has totally changed after COVID. Earlier, people used to work from office culture, but now it has shifte...
What is your primary use case for Aruba ESP?
I am working for the SASE portfolio as a product manager, so I cannot give any comment on other products. If there ar...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What needs improvement with Zscaler SASE?
The solution needs to improve a lot of aspects.
What is your primary use case for Zscaler SASE?
We are using Zscaler Zero Trust Exchange for its Zscaler Internet Access service. It provides web security, DLP, data...
 

Also Known As

iBoss Cloud Platform
No data available
Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Information Not Available
Siemens, AutoNation, GE, NOV
Find out what your peers are saying about Aruba ESP vs. Zscaler Zero Trust Exchange Platform and other solutions. Updated: April 2026.
893,311 professionals have used our research since 2012.