We performed a comparison between Netskope Next Gen Secure Web Gateway and Zscaler SASE based on real PeerSpot user reviews.Find out in this report how the two Secure Web Gateways (SWG) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
"I was able to implement it myself. It was really easy to install. You could install it on a server locally if you want to. If you have the biggest site, you would do that, but for my site, it was just directing all the traffic out through the Cisco Umbrella DNS. It was really handy. When the owners of the company went overseas, I knew that they would be secure because even if they were not on the company network, they would still go through the Cisco Umbrella servers. It was a complete solution for protecting the company with outgoing data."
"The most valuable features of this solution are the Web Filtering and the APT."
"The single-pane-of-glass management is really important. In today's era, administration costs and operational expenses will cost you a lot, and it reduces that as well. You don't need extra resources to manage all your parameter firewalls, looking at every single device to allow resources internal access. By just introducing the single-pane-of-glass management, it has lifted the burden off of management, especially the network management."
"It has improved our organization from a security posture perspective. We feel more confident now knowing that we can block phishing attempts or any type of malware that is DNS-related. This is a very nice feature that provides peace of mind."
"We've found it to be stable and good for our customers."
"Cisco Umbrella is a totally different solution. They are the first to come up with this idea of security. It's a totally new concept of security for everybody, for every time, real time, perfectionism."
"I haven't found any issues related to latency or any other issue."
"Cisco Umbrella is such a solution and can be implemented very fast and easy. All that we must do is redirect the DNS registers in their routers, or the active directory service of the enterprise that are going to use in Umbrella services. If you buy the service now, in two hours you are protected by the service because it's very fast to put in service."
"We've found the solution to be quite stable."
"Overall, the product is nice, and I like the URL filtering, CASB, and other security stacks like threat prevention."
"Web filtering and DLP are good features."
"The solution has some useful features, such as microservices. They have sandboxing that allows the prevention, encryption, and remote browser isolation."
"Prevents data leakage and protects data."
"It is for secure web trafficking, and it is doing what it needs to do. It allows customers to consolidate and eliminate multiple technologies onto Netskope and just kind of turn the dial and use more features, such as CASB, VPN. SWG is another feature. You can monitor and govern all the traffic."
"One of the valuable features of the solution is that everything is on the cloud. It has no on-premise hardware to deal with."
"SASE's most valuable features are proxy and content filtering."
"I like its ease of use. It has a single pane of glass for the ZIA and ZPA pieces. It is very manageable. It is also very easy to deploy for secure access, and it gives half-decent coverage for visibility in terms of what the users use and what data is being proxied through the access gateway."
"Yes, it is very stable. I have never seen it go down, not once."
"The most valuable features of this solution are the CASB solutions, which is protecting their Office 365."
"The pricing could always be a little bit better."
"The integration with other solutions is a little complex. If you want to integrate with something like ArcSight or LogRhythm or Splunk, you need to do a lot of configuration. There are no easy ways to implement it."
"I feel that the application needs other characteristics that are available with other applications in the market."
"It had the ability to do a lot of app control. So, every single app that went through that portal was registered, but there is a general issue with the whole app control. As soon as you add a mobile phone to your network, all of the apps get registered through the system, and you can approve, reject, or just let them go through. When I looked at it, it was impossible to manage app control. There was just so much data. I didn't apply that service because I just didn't have the time to manage it. It would be good if there was a way to categorize applications."
"Its on-prem rollout is quite challenging. It needs better coordination with the Internet Service Provider. It is a cloud-based solution, and any endpoint that connects to it has to go through all the gateway ISPs, but some of the ISPs block HTTPS-based DNS. That's where the challenge occurs with Umbrella."
"Having ready-to-go templates with best practices is definitely something that would be an improvement. Deployment, from day one, is something that definitely needs to be improved for Cisco customers."
"We would like to see the enhancements made to the EDR, as we see features that are running endpoint management."
"Something on our end that might make it better is alerting going to our ticketing system. It's not something that we have discussed, but that would be a proactive option for us to provide a learning experience for the staff."
"The stability of the solution to be very good. It is not the best and could improve but it is better than other solutions, such as Forcepoint."
"The solution lacks a good reporting feature."
"Cost competitiveness is its area of improvement. They will have to figure out how can they strategically price it because there are a few players in the game who have been doing it for a long time. They will have to figure out how to go to market on the pricing."
"The solution could improve the features for Zero Trust Network Access. They should add more security components to that module."
"The accuracy could be improved."
"Netskope can only provide the high level related to threats."
"The initial setup is a bit complex in that it takes a lot of time. In order to get the product to work as you need it to, there is a lot of configuration required."
"The interface needs a bit of work."
"An area for improvement would be the ease of configuration."
"It has massive room for improvement. The Zscaler product itself is okay, but it doesn't give enough granularity for us as an organization to stipulate rules or processes, especially for data-driven services. For instance, we can stick on SSL inspection, but it's just a click box. It doesn't allow us to go any further into the detail of the SSL inspection. We also can't pull it out without having an additional logging server. It just doesn't give us enough granularity. They should give us more control over the interfaces because it is all backend. They weren't very open to discussing their backend architecture with us in terms of their own data centers. They can maybe a little bit more open about what components are there and how the backend infrastructure works alongside Zscaler. Its licensing can be better. Some of the additional licensing costs are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Their support should also be improved. I initially had a consultant from Zscaler for its deployment, but the support that I had throughout the deployment of the project wasn't the best."
"Conflicts arise if you do not have the same management teams on the product."
Cisco Umbrella offers flexible, cloud-delivered security according to users’ requirements Cisco Umbrella includes secure web gateway, firewall, and cloud access security broker (CASB) functionality all delivered from a single cloud security service. Cisco Umbrella’s protection is extended to devices, remote users, and distributed locations anywhere. As company employees work from many locations and devices, Cisco Umbrella is the easiest way to effectively protect users everywhere in minutes.
Cisco Umbrella uses machine learning to search for, identify, and even predict malicious domains. By learning from internet activity patterns, this DNS-layer security solution can automatically identify attacker infrastructure being staged for the next threat. These domains are then proactively blocked, protecting networks from potential compromise. Cisco Umbrella analyzes terabytes of data in real time across all markets, geographies, and protocols.
Cisco Umbrella works with leading IT companies to integrate its security enforcement and intelligence. Built with a bidirectional API, Cisco Umbrella makes it easy to extend protection from on-premises security appliances to cloud controlled devices and sites.
Cisco Umbrella is suitable for small businesses without dedicated security professionals, as well as for multinational enterprises with complex environments.
Why use Cisco Umbrella?
Reviews from Real Users
Cisco Umbrella stands out among its competitors for a number of reasons. Some of the major ones are its DNS-based protection, ability to protect users no matter where they are located, stability, and high performance.
Daniel B., a network specialist at Syswind Kft, writes, “We primarily use the solution as cloud security for our branches. It protects us from direct internet outbreaks. It makes for good flexibility. The solution is very easy to manage. We found the initial setup, for example, to be quite simple. Efficient protection on the DNS level and even higher. The sandboxing feature analyses and handles the complicated security risks.”
Victor M., SOC & Security Services Director at BEST, notes, “It provides security for the remote workers and it helps to improve enterprise security in a very easy way. We mainly enjoy web software protection capabilities. It prevents the end-users from getting into bad sites or sites that potentially could have malware or could be phishing. It helps end-users avoid the wrong sites. The solution works very smoothly. The user interface is good.”
Netskope’s Next Generation SWG is a cloud-based web security solution that prevents malware, detects advanced threats, filters by category, protects data, and controls app use for any user, location, device. It unifies our industry-leading CASB, SWG, and DLP into common policy controls with custom reporting and rich metadata for ad-hoc queries.
For the last 30 years, networks have been connecting users to applications in the data center, which was surrounded by a secure perimeter to keep apps and data safe from the outside. But with applications moving to the cloud, IoT becoming more common, and users connecting from everywhere, network security is no longer able to solve the fundamental challenge of security and is instead adding significant complexity and cost.
Netskope Next Gen Secure Web Gateway is ranked 11th in Secure Web Gateways (SWG) with 7 reviews while Zscaler SASE is ranked 10th in Secure Access Service Edge (SASE) with 4 reviews. Netskope Next Gen Secure Web Gateway is rated 8.4, while Zscaler SASE is rated 8.6. The top reviewer of Netskope Next Gen Secure Web Gateway writes "Scalable with good technical support and very good data leak prevention". On the other hand, the top reviewer of Zscaler SASE writes "Easy to deploy, use, and manage, but needs more granularity and control over the interfaces and better licensing and support". Netskope Next Gen Secure Web Gateway is most compared with Fortinet FortiGate SWG, Prisma Access by Palo Alto Networks, Symantec Proxy, Netskope CASB and Cato Networks, whereas Zscaler SASE is most compared with Prisma Access by Palo Alto Networks, Cato Networks, Netskope CASB, VMware SD-WAN and Akamai Enterprise Application Access. See our Netskope Next Gen Secure Web Gateway vs. Zscaler SASE report.
We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.