Zscaler Internet Access Reviews

I utilize Zscaler Internet Access within my organization for secure web browsing and filtering traffic from websites. It serves as one of the main security elements by securing endpoints and facilitating secure Internet connections and website access.

The most valuable feature for me is the ability to see how my network and traffic looks with modules like analytics and insights. This provides a comprehensive view of the Internet connection usage and justifies the numbers related to cyberattacks. The SSL inspection also offers added security, facilitating the exchange of critical data.

Zscaler Internet Access is useful for role-based access control. In our company, we have different profiles for users, and based on the profiles, there are types of accesses that are allowed. For example, some are allowed to access social media, while some are not. It is based on their job titles, what their profiles are, and their job functions.

It is quite a valuable product for our company as we get visibility of our security posture, which is the tool's main advantage. Maintaining a consistent posture of internet security while getting rid of VPN and hovering into zero trust, are some of the areas that have been very helpful for our organization.

The product is majorly used by the IT side and is useful for pretty much all of the internet access from office, on-prem or off-site locations. As the remote workforce along with everyone else goes through the same policies, all are forced to use it in our company.

In terms of how Zscaler Internet Access has improved the area of secure web gateway management, I would say that rather than having multiple firewall tools and different types of proxies, it is better to have one platform to look at so that you can have a consistent view and visibility over what is happening across your user base, offices and it is especially helpful when you have to deal with IT and IoT kind of scenarios where you can look at specific requirements, specific exclusions, and allow IT and IoT to function in a consistent manner. The granularity of the policy, which is aligned to specific users and user groups, helps a lot in terms of giving our company wider visibility and raising the productivity of the users.

The SSL inspection capabilities of Zscaler Internet Access have had an impact on our company's security posture, especially since our organization installed its root security certificate. Most of the products have SSL inspection, but there are exceptions, such as banking or government sites, so there are some exclusions. Luckily, the tool works quite well, and our company gets to reduce the number of exceptions and make sure that pretty much all the connectivity or where the access goes through, specifically through where the secure access goes through, is inspected with the help of SSL inspection.

The product has helped save our company costs because you don't need a huge workforce. Rather than having multiple types of policies and firewall rules, the tool allows our company to be consistent across the company at the same time. You don't need a huge amount of people to maintain the policies in the tool. The tool reduces the number of devices required. For example, our company has around 80 locations, so we expect to have something like 160 firewall devices, along with 150 types of policies. Besides the aforementioned area, you plug everything into the cloud environment to reduce admin overhead and the cost of the solution and have better visibility.

Speaking about how the product handles network latency and user experience in remote locations, I would say that I have been using the product since 2010, and I have seen that it has improved a lot lately. With the tool, there are a lot of failover mechanisms you can use when one specific data center doesn't work well. The tool also has an automated switchover process. The tool has helped our company, and we haven't encountered any major latency issues.

We use Zscaler as a secure internet proxy. All of the traffic is filtered through it. We have about 3,000 users at the organization. 

All internet traffic goes through Zscaler, which protects the organization's IP, which isn't published publicly. Zscaler's cloud services filter and clear all traffic. 

Generally, we use the tool for SSE and ZTNA. We offer all the features for cloud security, zero-trust network access, or CASB. Depending on the requirements, we sometimes integrate it with SD-WAN so that we can offer SASE-based services.

The solution's most valuable features are its reliability and availability, measured by the number of ports it offers. Zscaler Internet Access and Zscaler Private Access are also good features of the product. For example, when it comes to the secure web gateway provided by Zscaler, I would say it is a very trustworthy area. The sandboxing or the DLP features can be provisioned on Zscaler, making it the value the tool offers to Zscaler Internet Access users. The tool has good reach across the globe. The number of PoPs the tool has is one of its USPs.

Primarily, it was to replace our existing on-premises box infrastructure. That's what it started with. And lately, we've been using it more for secure web gateway purposes.

It's primarily meant for perimeter security and the ability to securely access the internet and SaaS applications. So that has definitely helped us get rid of our bulky firewall hardware firewalls, at least for internet access. So that's a cost optimization. And performance. It definitely helps us boost performance.

Our customer already had the product, which they got from another vendor. They were facing some issues with their existing policies. Our role was to optimize the policy. So we optimized Threat Protection, DLP, and CASB policies per the customer’s requirements. In their environment, G Suite was completely allowed for some users, but they wanted only to allow a specific corporate domain. As per the recommendation, CASB policy must have been in place, but it wasn’t. So we optimized the tool as per their requirement and delivered it.

The product has different modules like SWG, CASB, DLP, and Threat Protection. The most valuable feature of the solution is SWG traffic. The product is very good in web traffic.

We use ZIA for outbound internet connectivity. The internet traffic of on-prem users will be directed to the ZIA cloud for security checks and web filtering. 

Zscaler does not provide dedicated IPs to each customer. Hence, they share a pool of IPs provided by Zscaler. There is a chance of blacklisting these IPs. I also do not like the multi-management portal.