Zscaler provides web security on the cloud for any device at any place all the time. If you use local appliances, users are not protected when they are connecting from outside the corporate network (e.g., home office, hotspots, airports, etc.).
We use Zscaler from all our locations, and for our roaming users too. In order to integrate our users to Zscaler, we use Okta (ADFS) for authentication, cloud security connectors for traffic redirection from locations (tunnels to the Zscaler cloud), and the Zscaler app for roaming users.
One on the main benefits is protection all time from anywhere.
Zscaler excels in security protection and the cloud is always up-to-date. It does not matter if you are a small or big organisation, you will receive the same security quality.
In terms of management and visibility, there is a single panel where you can configure the policies for your entire organisation worldwide and the reporting tools are brilliant.
Zscaler provides a lot of features in terms of control (URL filtering, cloud app control, etc.), which can be found in other solutions as well, but in terms of security, it is quite unique. SSL inspection, Advanced Threat Security, and Cloud Sandbox are probably the most valuable.
- SSL inspection is easy to implement and the performance is great (it is the responsibility of Zscaler to provide it).
- Advanced Threat Security protects you from most threats that can bypass the classic anti-malware solution.
- Cloud Sandbox completes the stack of security requirements stopping zero-day malware.
Do not expect to pay for the service and start using it, like Gmail. Zscaler requires a proper implementation to be done to make it successful.
More than five years.
When you have appliances, SSL inspection is always a headache due to poor performance and/or lack of ciphers implemented.
After a proper implementation, the maintenance is very low.
Be aware that you will need to invest some time and money to adapt your environment for Zscaler (traffic redirection, software deployment, authentication, etc).
So the SSL inspection is done at the IP level and not at the application level (with a transparent Web proxy for instance) with ZScaller. Do you have any information regarding the pros and cons of doing SSL inspection at the IP or HTTP level? What about the necessity to deploy a CA certificate at the client side? Is it mandatory?