Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks Enterprise Data Loss Prevention vs Zscaler Zero Trust Exchange Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (13th)
Palo Alto Networks Enterpri...
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
7
Ranking in other categories
Data Loss Prevention (DLP) (18th)
Zscaler Zero Trust Exchange...
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
65
Ranking in other categories
Data Loss Prevention (DLP) (6th), Cloud Access Security Brokers (CASB) (8th), Application Control (6th), ZTNA as a Service (2nd), Secure Access Service Edge (SASE) (3rd), Remote Browser Isolation (RBI) (1st)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
ST
Consultant at Tata Consultancy
Good security and DLP capabilities that protects from unauthorized access
There are a lot of problems reported, which get sorted out. I really cannot remember what those problems are. It's mostly performance issues. Performance issues might be based on the pricing, and perhaps the customer has not properly sized the requirement. I have not personally seen this, but maybe I need to check with my committee.
Sumit Bhanwala - PeerSpot reviewer
architect at Tata Consultancy
Cloud-based platform simplifies device and data center management
I find it to be good. The solution is cloud-based with the latest inspection engines, which I find to be amazing. We are less dependent on data centers and device management, which reduces our efforts significantly. It improves our device management, data center management, and updating devices. We need fewer engineers for this management, and it reduces time and efforts for data center management, device upgrades, and IT support.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Smaller businesses have seen great ROI due to the low investment and strong performance."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"The most valuable feature of Cloudflare DNS is its global reach and it is always evolving."
"I like Cloudflare's application gateway and DDoS protection."
"The most valuable feature of Cloudflare is that it has a free version. They give us the free version with the anti-DDoS features and also the load balancing solution."
"Centralized, full-featured DNS."
"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"It is easier to configure and develop documentation to see how we have configured firewalls."
"The security aspect in finance is crucial for controlling from a DLP perspective and ensuring protection."
"Another important feature is that the solution doesn't require any additional infrastructure to implement. It's a software license that is compatible with our existing hardware. We were able to install and configure the product seamlessly and effortlessly."
"The primary feature is managing firewalls through Panorama, especially when handling multiple firewalls across different sites like headquarters and remote sites."
"The most valuable feature of Palo Alto Networks Enterprise Data Loss Prevention is its comprehensive end-to-end solution in Cloud Delivery Security Services, which includes URL, data loss prevention, and advanced threat prevention as features that can be enabled just by clicking a checkbox."
"The setup is very easy as we just need to switch on and switch off."
"It is a stable solution with good support."
"Our clients primarily deploy Palo Alto Networks Enterprise DLP to control the flow of information in and out of their networks. The main use cases include monitoring and managing sensitive data such as credit card information and personally identifiable information."
"The security aspect in finance is crucial for controlling from a DLP perspective and ensuring protection."
"It is easy to use."
"The ZPA is a unique feature which offers VPN along with all the additional security needed."
"The policies are very easy to implement."
"I find all Zscaler Private Access features valuable because each replaces flawed technologies, such as EPAs being replacements for VPN and PR as a replacement for PAM, so I can't mention only one valuable feature. Overall, Zscaler Private Access is a good solution."
"SASE's most valuable features are proxy and content filtering."
"It's one of the easier products on the market as far as set-ups and deployments. Even across their whole product suite, they've made it pretty simple."
"The most valuable features of this solution are the CASB solutions, which is protecting their Office 365."
"The solution is cloud-based with the latest inspection engines, which I find to be amazing."
 

Cons

"The solution could be more user-friendly."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"There are some issues with the CDN services."
"The documentation could improve for Cloudflare DNS."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"Its scalability is not on par with the features of others."
"There are mostly performance issues."
"The configuration for Palo Alto Networks firewalls requires specifying many details, such as protocols and services."
"The product is still overly complicated compared to other vendors such as Check Point, which could be improved."
"Pricing is expensive."
"The solution needs improvement in stability. There has been feedback regarding the accuracy of file categorization."
"You need to have an external solution to backup everything. For example, you need to have Syslog installed on your server as well so that you can back it up to another place."
"There is room for improvement in the documentation around the maintenance of the product, how the automatic updates work, and pushing out new policies. A little more detail and context in that area would be helpful."
"We would like to extend the SASE applications for Zscaler."
"Zscaler Private Access could improve by improving external access. If external parties want to access locally to my company's services, we need to onboard them into our domain, otherwise, it doesn't work. Additionally, if their company also has Zscaler Private Access, then it doesn't work. They need to log in with our domain ID, not their company ID."
"There are some performance issues with the solution once the module addition begins"
"To enhance their offering, it is advisable for them to focus on strengthening the foundation of their architecture. Additionally, they should consider integrating a broader range of services that go beyond what managed service providers typically offer independently."
"The connectivity monitoring part should be included in the core license without any extra charges."
"We faced certain migration and implementation challenges in executing the tasks, so I would suggest improvement related to the stability of the solution."
"While Zscaler supports client-initiated connections, it does not support server-initiated connections. This is a feature that Zscaler may consider adding in the future."
"Setup is a bit complex because there are many steps that need to be taken before onboarding and activating the solution."
 

Pricing and Cost Advice

"The tool is a premium product, so it is very expensive."
"The product's pricing is minimal compared to other products."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"There are no additional costs beyond the standard licensing fees."
"I give the price a five out of ten."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The product's pricing is cheap."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"The pricing of the solution depends on the buyers. But, from my point of view, it is in line with the rest of the products and the price list of Palo Alto."
"It's expensive."
"The licensing model is very fair-minded and it's a good value. It scales well... Its licensing model is more streamlined when compared to other DLP solutions."
"Palo Alto Networks Enterprise Data Loss Prevention is expensive, and licensing costs are monthly."
"Zscaler CASB is an expensive solution."
"Zscaler Private Access is extremely expensive."
"It's expensive currently. But when purchasing for a large number of users, there's room to negotiate. It's really up to the procurement team."
"In the long run, cloud services are not inherently costly."
"The product is a bit expensive."
"It's an affordable solution"
"The solution is expensive."
"There is definitely an ROI."
report
Use our free recommendation engine to learn which Data Loss Prevention (DLP) solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
13%
Performing Arts
12%
Manufacturing Company
10%
Healthcare Company
9%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
No data available
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise12
Large Enterprise41
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Palo Alto Networks Enterprise Data Loss Prevention?
Palo Alto Networks' pricing can be complex. Their catalog is extensive. They have a licensing model based on credits ...
What needs improvement with Palo Alto Networks Enterprise Data Loss Prevention?
The product is still overly complicated compared to other vendors such as Check Point, which could be improved. Simpl...
What is your primary use case for Palo Alto Networks Enterprise Data Loss Prevention?
The primary use case is a part of a complete package for Government of Canada. It helps in comparing data loss preven...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What do you like most about Zscaler SASE?
The most valuable features of Zscaler Private Access are reliability, scalability, and availability.
What needs improvement with Zscaler SASE?
The solution needs to improve a lot of aspects.
 

Also Known As

Cloudflare DNS
No data available
Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Siemens, AutoNation, GE, NOV
Find out what your peers are saying about Palo Alto Networks Enterprise Data Loss Prevention vs. Zscaler Zero Trust Exchange Platform and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.