Zscaler Zero Trust Exchange Platform Reviews

I use the solution primarily for security purposes. We are blocking other sites which are not SSL in our Indian organization.

We are refusing authorization for users to access unauthorized sites. We are blocking through Zscaler. It’s for web filtering.

Many of us are working from home, and we are still able to do the filtering of websites for our workers, wherever they are.

I like the web filtering capabilities. Those are very good.

It offers sound internet security notifications.

There aren’t too many bugs, and it is easy to debug when necessary.

There are good Outlook features available.

It is stable.

The scalability has been good.

I like the user interface.

I’m not sure if any features are lacking. I’m mostly happy with it. That said, I’m not familiar with every area of the product. I need to study it a bit more.

Sometimes applications crash on some machines, and we’d like Zscaler to give us some information as to why that may have happened. We’d like more detailed reports.

We’ve been using the solution for two or three years.

It’s a stable product right now. There are no bugs or glitches. It doesn’t crash or freeze. It’s reliable.

It’s scalable. We can add to it. It’s easy to expand.

We have 3,000 to 5,000 users on the solution currently. It’s basically used by everyone in the organization.

I wasn’t a part of the initial setup. I can’t speak to how it went or if it was easy or hard.

I’m a consultant. However, I’m just an end-user of the solution.

I’d give the solution a ten out of ten. It is working fine for us.

Zscaler Private Access is mainly used for connecting to my company network through a VPN. It's used for remote work.

What I find most valuable in Zscaler Private Access is that it's a VPN. Its connectivity as a VPN is its most valuable feature.

What could be improved in Zscaler Private Access is its notification. For example, if there's a speed issue, there should be a pop-up that alerts the user about it. If there is a network quality issue, for example, it isn't good enough to connect to, or the network quality is bad, there should be a notification from the solution.

Zscaler Private Access also needs improvement in terms of its interface and security.

I've been using Zscaler Private Access for more than two years now.

Zscaler Private Access is a stable product.

In terms of the technical support for Zscaler Private Access, I didn't need any support yet, and I haven't spoken with the support team, so I can't rate them for now. I also have not heard anything about support from my colleagues or the IT team.

I haven't used other VPN solutions apart from Zscaler Private Access.

The initial setup for Zscaler Private Access was easy. It was a hassle-free setup. It took just a few minutes and I didn't even notice when the IT team installed it.

Zscaler Private Access was implemented in-house. It was done by our IT team.

Pricing for Zscaler Private Access is moderate. It's acceptable, though I can't give you the exact price currently. It's not too expensive, and on a scale of one to five, I would rate it a four out of five in terms of pricing.

I'm using Zscaler Private Access daily for eight to twelve hours.

More than five thousand people use the solution in my company.

I would rate Zscaler Private Access eight out of ten. Other products are more efficient and better than Zscaler Private Access, particularly in terms of interface and security, so I'm unable to give the solution a perfect score.

I don't know if my company is a partner of Zscaler Private Access, but I'm sure that it is a customer.

I mainly use SASE for proxy and content filtering.

SASE's most valuable features are proxy and content filtering.

An area for improvement would be the ease of configuration.

I've been using Zscaler SASE for two to three years.

SASE is stable.

SASE is scalable if users need to increase the network it supports - it's quite transparent from the end-user perspective.

Zscaler's technical support is quite good.

Positive

The initial setup is fairly straightforward.

I would advise those thinking of implementing SASE to ensure that their technical requirements are well-established and that the transition process is understood. I would give SASE a rating of nine out of ten.

The use case is employing data, PII, and even HIPAA. I do public sector work for hospitals, counties, and local governments.

I am using the latest version of Zscaler Cloud DLP. I'm a licensed installer—a subcontractor. I do a lot of installs for different companies and retailers, and one company that I do in Salesforce. There are probably 20 or 30 instances of it that I'm actively involved in at any given moment.

The solution is deployed on Zscaler's private cloud.

It's one of the easier products on the market as far as set-ups and deployments. Even across their whole product suite, they've made it pretty simple.

The infrastructure supporting it can vary: GCP, Azure, and AWS.

It really comes down to the Regex that's being used from Zscaler's DLP. That's the one area that we find technical limitations because the rest of the industries use an RE2, and Regex and Zscaler just aren't there. It's not because of the technology and they can't code it. It's because of the cost of these actual Regex strings from a query perspective. There's limited flexibility from a Regex perspective as far as data matching and expanding your DLP dictionaries and libraries.

In the next release, I would like to see RE2 Regex supported.

I have been using this solution for almost two years. We are an authorized seller.

Setup is simple.

I would rate this solution 8 out of 10.

My advice is to ensure that the solution meets your DLP use cases. I find that for 99% of the companies that are going to purchase this Cloud DLP, it has to fit their use cases. It's going to get into the Fortune 50s and the companies that are more security conscious and that are doing extremely complex DLP policies. Those folks will likely have some issues. It's not going to be a straight, "Hey, these are the DLP rules I have today. I want to move these over to Zscaler." 

That's one area where I think customers should do their own investigation and ensure that it fits their use cases before they jump in and purchase the product and then find out that maybe 25% of their DLP rules are too complex to be migrating.

The tool is a proxy service that provides inspection of URL filtering for internet access. We have probably 20 or 30 different vendors that we work with in regards to carriers. These are all providers that we use that work in conjunction with that platform. It's an agent that's installed on all of our endpoints. We whitelist and blacklist and we allow certain websites, et cetera, using this product.

Overall, the solution does a pretty good job at web filtering.

The solution does a good job of allowing us to choose what to whitelist and blacklist.

The agent easily installs on the endpoints.

The solution needs to offer better scalability.

The product needs SAML integration. That's something they should work to add in future releases.

It needs to offer SSO, single sign-on, and items of that nature.

The product needs greater zero-trust. They need to focus more on zero-trust relationships.

I have been using the solution for about three and a half years at this point. It's been a while. 

The scalability is a weak point right now. Its scaling capabilities are lacking, and we'd like to see that improve in the future.

The solution is basically an agent that is installed on endpoints in order to provide security. It's not overly complicated.

We are not using the latest version of the solution. Currently, for example, we are one version back on that, as we don't typically do the most current version.

I'd rate the solution at a nine out of ten. We've, for the most part, been quite happy with its capabilities and the level of security it provides to us.

Unlike unconventional data that's being exposed, data loss prevention can become very difficult. Several of the old technologies, such as Symantec and McAfee, can cause a range of problems. On top of that, it derives from a lot of fines for customer loss. You can go through legal ramifications and damage to your company brand when data is exposed. Zscaler creates a significant bypass of security controls. It helps you with your compliance. Basically, it will then help you protect sensitive data.

Zscaler's Cloud DLP will also assist the users off-network, protecting them against data loss. The Cloud DLP will inspect all the traffic including SSL, which will give you protection and visibility. Zscaler Cloud DLP will also allow for compliance. It'll give you compliance for all major regulations that you have to go through.

Their technology can monitor and inspect data on the corporate level. It protects all the sensitive data from within the organization. You could definitely review anything that is on the network and verify the DLP tools by setting alerts and rules in order to mitigate risks such as losing your customers' PAI.

It's a pretty solid solution.

It connects to the cloud, so it's really fast. It obviously is going to bypass the gateway, give you security controls, and also allows SSL traffic to be hidden.

You can close your data protection gaps with Zscaler. You can quickly find all the classified, sensitive data across the cloud. You can also have protection using advanced features like Exact Data Match, and that's document matching as well as machine learning.

The pricing of the solution is very good.

The solution is very stable.

The initial setup is pretty straightforward.

The product scales well.

Zscaler is an integrated platform, so it's fully integrated with zero-day protection to all the users working from home or in our offsite network, and it's going to make customers close that security gap.

Zscaler will protect PII for all users regardless of their geolocations as well it will simplify compliance requirement's by eliminating complexity of legacy systems and securing your cloud data across all channels data in motion, at rest,
and across endpoints and clouds.

I've been dealing with the solution for almost two years at this point. 

The stability is good. Every function of the Zscaler DLP performs very quickly. It's very stable, and it's powered by AI. When it comes to threat and data leakage, it's on a packet-by-packet basis. You have a zero-trust exchange and it's a complete data loss prevention or protection package. It does a full inline inspection, including SSL and TLS traffic.

The scalability is good. The transformation for scalability is based on IT operations. It is easy to add and deploy from branches. It will reduce the architecture for MTLS cost without adding any burden to the actual upgrade of your deployment.

I haven't directly dealt with technical support. I can't speak to how helpful or responsive they are as I have no direct experience with them.

I've previously used Symantec SLP. That was a couple of years ago. 

There are a few key differentiators for Zscaler. Obviously, it's faster, and it's secured. You're routing traffic directly to the internet when you use Zscaler, and in that way, you are reducing cost. There is no reason to spend a lot of money on MPLS. There is no need to buy that. You could deploy and manage security appliances or any new generation firewalls on each branch, and you're providing more security without compromising cost. You're centralizing an overall zero-trust architecture by enforcing policies just a few clicks away.

The good thing about the setup is you don't really need hardware appliances to deploy it. All you need to do is connect your Zscaler services, which is pretty simple, and forward all of your internet traffic to the Zscaler services. That's how you secure all your internet traffic. You can apply policies accordingly.

As far as the pricing, it's very competitive. The more users you have, the cheaper it ends up being annually.

Let's say you have 100 users, it'll cost $39.69 a user. And if you have 10,000 users, it will cost you $19.15 per user. The more users you have, the cheaper they are individually. If you have a ZIA Professional bundle, the pricing is pretty affordable.

The struggle from old IT infrastructure is that you're dealing with a lot of legacy hub-and-spoke architecture and companies used to spend a lot of money on MPLS say 10, five years ago. If you're using old technology and your on-premise, you're forcing to pay twice for your internet-bound traffic. Those are the reasons why customers are rethinking their current solutions and moving to an easy solution like Zscaler in a cloud.

I'm a reseller.

I'd rate the solution at a nine out of ten. I'd advise that this is one of the layers of security that most people need to have.

We are resellers and we have multiple vendors for multiple technologies.

We work with Zscaler for their proxy server.

Zscaler proxy server has two uses. It is not just application control, it is for the company users to access company data from the outside, or for the company users from inside the company to access the internet.

It's a completely SaaS-based application. 

As a cloud-based service, it is very easily implemented. This is one of the biggest advantages to choosing it.

We have been selling Zscaler Cloud DLP for between five and eight years. It's an older product now.

This is a very stable product and we plan to continue providing it to our clients.

As a completely cloud-based application, it is easy to scale. You can simply increase the number of users. We have between 30 and 40 customers who are using it.

The technical support is very prompt and very good.

It is straightforward to deploy. The length of time required for deployment depends on the number of users, but the average is within a week.

As long as you have some guidance or an understanding of the Zscaler platform, that should be enough to complete the initial setup.

Price-wise, it is a costly product and it should be reduced.

It is an auto-renewal subscription service. It is renewed annually.

This is a product that I recommend for anybody who wants a scalable, cloud-based solution.

Overall, this is a very good product. They release new features every year and they are automatically added to the platform. My only complaint is that the price is high.

I would rate this solution a nine out of ten.

I like its ease of use. It has a single pane of glass for the ZIA and ZPA pieces. It is very manageable. 

It is also very easy to deploy for secure access, and it gives half-decent coverage for visibility in terms of what the users use and what data is being proxied through the access gateway.

It has massive room for improvement. The Zscaler product itself is okay, but it doesn't give enough granularity for us as an organization to stipulate rules or processes, especially for data-driven services. For instance, we can stick on SSL inspection, but it's just a click box. It doesn't allow us to go any further into the detail of the SSL inspection. We also can't pull it out without having an additional logging server. It just doesn't give us enough granularity. 

They should give us more control over the interfaces because it is all backend. They weren't very open to discussing their backend architecture with us in terms of their own data centers. They can maybe a little bit more open about what components are there and how the backend infrastructure works alongside Zscaler.

Its licensing can be better. Some of the additional licensing costs are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. 

Their support should also be improved. I initially had a consultant from Zscaler for its deployment, but the support that I had throughout the deployment of the project wasn't the best.

We weren't using any other solution.

It is very easy. There were some constraints trying to deploy the access gateway and the endpoint client to some of our regions due to processes being blocked. They gave a list of processes that need to be allowed through ADM endpoints and our sort of antivirus products so that they're not scanned, and they're allowed through to function. However, I had some issues in following the guide and trying to get them initially deployed and allowed through. The firewall has to be off regardless of whether the port allocations were opened or not, but this could potentially be a regional issue. Other than that, the deployment was very easy.

I went through a subsidiary company of Zscaler. I initially had a consultant from Zscaler themselves, but the support that I had throughout the deployment of the project wasn't the best. They were very much technical sales as opposed to technical consultants. I myself had to work through and resolve a lot of issues that I faced during the deployment and setup.

It has been relatively reasonable for what it does. Some of the additional license costs based on the advanced next-generation firewall functions are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Overall, the cost seems reasonable.

What I would say is that try it, test it, and ensure that it sort of meets the company requirements. We were lucky enough to go through an extensive trial period. Zscaler, unfortunately, only allows a two-week trial regardless of where you are with the setup. They only give you coverage for a very basic setup. You have very limited time for trying anything further or trying the product as if it was in the production environment. Therefore, I would advise scoping out what you want and how you want to achieve it as quickly as possible. After that, you can really hammer home when you go through the initial deployment to ensure that it works and meets all the requirements.

We are now looking at Cisco Umbrella. We are a Cisco house predominantly, and Cisco Umbrella just interlinks with our VPN solution and our overall architecture. We're looking to migrate to a Meraki SD-WAN fabric because it allows us to just use that network overlay underneath the secure access edge and just incorporate it into what we already have.

I would rate Zscaler SASE a seven out of ten.