Zscaler Zero Trust Exchange Platform Reviews

The use case is employing data, PII, and even HIPAA. I do public sector work for hospitals, counties, and local governments.

I am using the latest version of Zscaler Cloud DLP. I'm a licensed installer—a subcontractor. I do a lot of installs for different companies and retailers, and one company that I do in Salesforce. There are probably 20 or 30 instances of it that I'm actively involved in at any given moment.

The solution is deployed on Zscaler's private cloud.

It's one of the easier products on the market as far as set-ups and deployments. Even across their whole product suite, they've made it pretty simple.

The infrastructure supporting it can vary: GCP, Azure, and AWS.

It really comes down to the Regex that's being used from Zscaler's DLP. That's the one area that we find technical limitations because the rest of the industries use an RE2, and Regex and Zscaler just aren't there. It's not because of the technology and they can't code it. It's because of the cost of these actual Regex strings from a query perspective. There's limited flexibility from a Regex perspective as far as data matching and expanding your DLP dictionaries and libraries.

In the next release, I would like to see RE2 Regex supported.

I have been using this solution for almost two years. We are an authorized seller.

Setup is simple.

I would rate this solution 8 out of 10.

My advice is to ensure that the solution meets your DLP use cases. I find that for 99% of the companies that are going to purchase this Cloud DLP, it has to fit their use cases. It's going to get into the Fortune 50s and the companies that are more security conscious and that are doing extremely complex DLP policies. Those folks will likely have some issues. It's not going to be a straight, "Hey, these are the DLP rules I have today. I want to move these over to Zscaler." 

That's one area where I think customers should do their own investigation and ensure that it fits their use cases before they jump in and purchase the product and then find out that maybe 25% of their DLP rules are too complex to be migrating.

The tool is a proxy service that provides inspection of URL filtering for internet access. We have probably 20 or 30 different vendors that we work with in regards to carriers. These are all providers that we use that work in conjunction with that platform. It's an agent that's installed on all of our endpoints. We whitelist and blacklist and we allow certain websites, et cetera, using this product.

Overall, the solution does a pretty good job at web filtering.

The solution does a good job of allowing us to choose what to whitelist and blacklist.

The agent easily installs on the endpoints.

The solution needs to offer better scalability.

The product needs SAML integration. That's something they should work to add in future releases.

It needs to offer SSO, single sign-on, and items of that nature.

The product needs greater zero-trust. They need to focus more on zero-trust relationships.

I have been using the solution for about three and a half years at this point. It's been a while. 

The scalability is a weak point right now. Its scaling capabilities are lacking, and we'd like to see that improve in the future.

The solution is basically an agent that is installed on endpoints in order to provide security. It's not overly complicated.

We are not using the latest version of the solution. Currently, for example, we are one version back on that, as we don't typically do the most current version.

I'd rate the solution at a nine out of ten. We've, for the most part, been quite happy with its capabilities and the level of security it provides to us.

Unlike unconventional data that's being exposed, data loss prevention can become very difficult. Several of the old technologies, such as Symantec and McAfee, can cause a range of problems. On top of that, it derives from a lot of fines for customer loss. You can go through legal ramifications and damage to your company brand when data is exposed. Zscaler creates a significant bypass of security controls. It helps you with your compliance. Basically, it will then help you protect sensitive data.

Zscaler's Cloud DLP will also assist the users off-network, protecting them against data loss. The Cloud DLP will inspect all the traffic including SSL, which will give you protection and visibility. Zscaler Cloud DLP will also allow for compliance. It'll give you compliance for all major regulations that you have to go through.

Their technology can monitor and inspect data on the corporate level. It protects all the sensitive data from within the organization. You could definitely review anything that is on the network and verify the DLP tools by setting alerts and rules in order to mitigate risks such as losing your customers' PAI.

It's a pretty solid solution.

It connects to the cloud, so it's really fast. It obviously is going to bypass the gateway, give you security controls, and also allows SSL traffic to be hidden.

You can close your data protection gaps with Zscaler. You can quickly find all the classified, sensitive data across the cloud. You can also have protection using advanced features like Exact Data Match, and that's document matching as well as machine learning.

The pricing of the solution is very good.

The solution is very stable.

The initial setup is pretty straightforward.

The product scales well.

Zscaler is an integrated platform, so it's fully integrated with zero-day protection to all the users working from home or in our offsite network, and it's going to make customers close that security gap.

Zscaler will protect PII for all users regardless of their geolocations as well it will simplify compliance requirement's by eliminating complexity of legacy systems and securing your cloud data across all channels data in motion, at rest,
and across endpoints and clouds.

I've been dealing with the solution for almost two years at this point. 

The stability is good. Every function of the Zscaler DLP performs very quickly. It's very stable, and it's powered by AI. When it comes to threat and data leakage, it's on a packet-by-packet basis. You have a zero-trust exchange and it's a complete data loss prevention or protection package. It does a full inline inspection, including SSL and TLS traffic.

The scalability is good. The transformation for scalability is based on IT operations. It is easy to add and deploy from branches. It will reduce the architecture for MTLS cost without adding any burden to the actual upgrade of your deployment.

I haven't directly dealt with technical support. I can't speak to how helpful or responsive they are as I have no direct experience with them.

I've previously used Symantec SLP. That was a couple of years ago. 

There are a few key differentiators for Zscaler. Obviously, it's faster, and it's secured. You're routing traffic directly to the internet when you use Zscaler, and in that way, you are reducing cost. There is no reason to spend a lot of money on MPLS. There is no need to buy that. You could deploy and manage security appliances or any new generation firewalls on each branch, and you're providing more security without compromising cost. You're centralizing an overall zero-trust architecture by enforcing policies just a few clicks away.

The good thing about the setup is you don't really need hardware appliances to deploy it. All you need to do is connect your Zscaler services, which is pretty simple, and forward all of your internet traffic to the Zscaler services. That's how you secure all your internet traffic. You can apply policies accordingly.

As far as the pricing, it's very competitive. The more users you have, the cheaper it ends up being annually.

Let's say you have 100 users, it'll cost $39.69 a user. And if you have 10,000 users, it will cost you $19.15 per user. The more users you have, the cheaper they are individually. If you have a ZIA Professional bundle, the pricing is pretty affordable.

The struggle from old IT infrastructure is that you're dealing with a lot of legacy hub-and-spoke architecture and companies used to spend a lot of money on MPLS say 10, five years ago. If you're using old technology and your on-premise, you're forcing to pay twice for your internet-bound traffic. Those are the reasons why customers are rethinking their current solutions and moving to an easy solution like Zscaler in a cloud.

I'm a reseller.

I'd rate the solution at a nine out of ten. I'd advise that this is one of the layers of security that most people need to have.

Zscaler Private Access is used for private data. You need to deploy Zscaler Private Access to put security and internal network after you build your application. The solution is used when you build an application and want to provide services to the public.

The most valuable features of Zscaler Private Access are reliability, scalability, and availability.

Zscaler Private Access needs to improve its collaboration with applications without compromising security. The solution needs to improve native security, seamless protection, and user experience. Users should be able to access the solution anytime, and it should be made easy to install and easy to understand.

Zscaler Private Access needs to improve its customization.

I have been using Zscaler Private Access for two years.

Zscaler Private Access is a stable solution.

I rate Zscaler Private Access an eight out of ten for stability.

The solution’s scalability is very good.

The solution’s technical support is good.

The solution's initial setup is a little bit difficult and depends on your architecture knowledge.

The solution's deployment time depends on the infrastructure, the number of computers, and the number of employees.

Zscaler Private Access can be an expensive solution, depending on the license type you will purchase.

Zscaler Private Access is deployed on-cloud in our organization. I would recommend Zscaler Private Access to other users.

Overall, I rate Zscaler Private Access a nine out of ten.

We use the product for inbound and outbound DNS scanning.

The platform provides data protection.

The product’s most valuable features are inbound and outbound scanning and API control.

There could be additional ways to define proximity. Additionally, they should provide some exclusion options for specific policies and an ability to control the DLP engine.

We have been using Zscaler Cloud DLP for four to five years.

I rate the product’s stability a nine out of ten.

For the DLP feature, I rate the scalability a seven out of ten.

We used Netskope before. However, we switched to Zscaler as we wanted a cloud-based DLP product. If we compare the two products, Netskope is better, but scaler is a good solution for cloud DLP.

The deployment time depends on specific business requirements. It is easy to deploy a standard functionality. However, it takes time for complex scenarios.

The product has reasonable pricing.

I rate Zscaler Cloud DLP a seven out of ten. I advise others to evaluate and understand their business use cases before purchasing the product.

It pretty much covers, like, if you implement it, it's going to cover, like, 80 to 90% of real estate for the organization.

On DLP terms, Zscaler Cloud DLP ensures that data doesn't go outside of the organization. So on the network level, Zscaler does a pretty good job.

The solution doesn't do a very good job of detection, but they definitely do a very good job of implementing the policies.

There is room for improvement in detection. From the detection perspective, like, how it detects the violations.

Another area of improvement is implementation through non-client connectors. The solution can be implemented in two ways. One uses the back file; the other one uses client connectors. So the client connector is pretty fast, but when it comes to non-client connectors and procedures, it's kind of delayed and slow. The policies don't reflect very soon. It takes, like, a day and, like, hours to get implemented. But if it's a client connector, it takes, like, two minutes. It's just so good.

In future releases, I would like to see two things. It's not more of a feature but more like an enhancement. So I would like to see an enhancement in their proximity when detecting credit card details and past support details, and PII data.

Another area of improvement is support. 

I have been using this solution for around nine months. I use the latest version 6.2.

I would rate the stability an eight out of ten.

Scalability is pretty good. I would rate the scalability a nine out of ten. 

There is room for improvement in support. 

Neutral

The initial deployment is pretty easy. That's pretty straightforward.

We have definitely seen an ROI. 

The price is a little bit on the higher side, especially if you are going to add, like, packs or bundles to your subscription. But otherwise, it's pretty decent.

I would suggest to keep your policies simple. Don't complicate them because it depends on your organization and how you set it up. So once you are doing it, just keep it clean and simple.

Overall, I would rate the solution an eight out of ten. 

Private Access is more for very high-powered users. It's dedicated access to certain applications. It's for more sensitive users. It's not for general users. 

The dedicated connection is the most valuable aspect of this solution. It makes the connection very secure. 

It is easy to use. 

The setup is very straightforward. 

We'd like to have two-factor authentication that is quite simple.

Users are only those at the management level or directors. The users are only high-level individuals. It's not meant for everyone. 

We previously just used an antivirus like McAfee. We use McAfee endpoint protection with this over the top now. 

This solution is very simple to set up. It's not a complex implementation. 

You just need one person to maintain the solution. It just takes one system administrator. 

The pricing is incremental. It's just a small incremental cost for each user. You do need at least 500 users. Otherwise, it is not cost-efficient. 

We're partners. We resell the solution. 

This is a good product. It's easy to deploy, secure, and good for securing employees. 

I'd rate the solution eight out of ten. 

With Private Access, from TCS, we used to support multiple customers. Some of our customers will be utilizing Private Access and we'll be supporting them. 

Mainly due to the COVID pandemic situation, many people now work from home. When working from home they needed better connectivity for a VPN solution. That is the main criteria and customers are looking for a stable solution, a cloud-based solution, which can be integrated quickly and can be managed centrally. That is the driving point. The pandemic situation was the driver, as clients needed to add capacity also. Earlier, they would give this remote access solution only to a few people. Now nearly 90% of people work from home. The capacity has to be increased. For that, clients were looking for a multi-net solution and they started deploying Private Access.

The VPN is great for the stability on offer and for the cloud updates and insights you can get. We can protect the application well. There's no need to broadcast my network. Only the application will be visible, those kinds of things are very salient features.

The pricing is good as far as I know, although I don't have an idea of the exact pricing.

It offers great user-friendliness.

We like the customization capabilities.

It's straightforward to set up.

The scalability is good.

So far, we are happy with the solution. I can't speak to any missing features. Based on the customer feedback, they're doing good. We don't see any negative point at this point in time.

I've been using this solution for nearly three or four years. Some of our clients just started using the solution for one year.

The solution is scalable and expands well. 

I don't directly deal with technical support. 

Earlier, we used to stick with on-prem solutions, and compared to on-prem, we are leveraging all the cloud benefits. With this product, the updates and signatures will be there, live updates will be there, et cetera. We don't have to worry about all those updates from a Private Access point of view. From a security perspective, you're adding a lot of security to the VPN solution. Everything is fine.

I'm not involved in the initial setup. My job is to recommend the solution and another team will be doing the setup. We're a larger organization, so there are different teams that work with customers and provide solutions.

That said, my understanding is that the initial setup is very straightforward. 

The client needs to be deployed to the user machine. That typically is done with the Active Directory integration. If you are going to deploy it for multiple people, we need to deploy it, we need to push it using AD group policy or any other software distribution.  Other than that, it is easy only to deploy. We don't see much difficulty.

If we win that proposal, definitely our team will be involved in helping with the setup. 

I cannot speak to the exact licensing costs. 

We don't see any other, private, cloud-based VPN solution. There might be others, like Prisma, and there are so many solutions also coming out. Other than that, we are ready to explore new products. However, so far, whatever we have used within the Zscaler solution is doing good.

I work for a consultancy. My customers are manufacturing customers.

We recommend the solution to customers looking for a kind of non-cloud-based VPN solution.

Typically we will use the latest version of the solution. 

While there are so many customers still having on-premise solutions, we would definitely suggest cloud-based solutions and Zscaler would be in the top three we would recommend.

I'd rate the solution eight out of ten.

I mainly use SASE for proxy and content filtering.

SASE's most valuable features are proxy and content filtering.

An area for improvement would be the ease of configuration.

I've been using Zscaler SASE for two to three years.

SASE is stable.

SASE is scalable if users need to increase the network it supports - it's quite transparent from the end-user perspective.

Zscaler's technical support is quite good.

Positive

The initial setup is fairly straightforward.

I would advise those thinking of implementing SASE to ensure that their technical requirements are well-established and that the transition process is understood. I would give SASE a rating of nine out of ten.

We are resellers and we have multiple vendors for multiple technologies.

We work with Zscaler for their proxy server.

Zscaler proxy server has two uses. It is not just application control, it is for the company users to access company data from the outside, or for the company users from inside the company to access the internet.

It's a completely SaaS-based application. 

As a cloud-based service, it is very easily implemented. This is one of the biggest advantages to choosing it.

We have been selling Zscaler Cloud DLP for between five and eight years. It's an older product now.

This is a very stable product and we plan to continue providing it to our clients.

As a completely cloud-based application, it is easy to scale. You can simply increase the number of users. We have between 30 and 40 customers who are using it.

The technical support is very prompt and very good.

It is straightforward to deploy. The length of time required for deployment depends on the number of users, but the average is within a week.

As long as you have some guidance or an understanding of the Zscaler platform, that should be enough to complete the initial setup.

Price-wise, it is a costly product and it should be reduced.

It is an auto-renewal subscription service. It is renewed annually.

This is a product that I recommend for anybody who wants a scalable, cloud-based solution.

Overall, this is a very good product. They release new features every year and they are automatically added to the platform. My only complaint is that the price is high.

I would rate this solution a nine out of ten.