Zscaler Cloud Firewall Reviews

Zscaler is truly accommodative when it comes to customer service. We have not encountered a situation where we were given excuses or have been deprived of timely support. For example, because of the geopolitical situation, sometimes we have to route our traffic from another country and Syngenta doesn't have to make a decision on which route is the best choice. Zscaler gives us clear information on which channels ensure fast and efficient connectivity, while maintaining robust control over data protection. They are excellent in categorizing the solution in the right manner and allowing flexibility in adapting security policies to changing circumstances.

We are having some issues with internet access being denied when organizational ID-based policies change. For example, a lower level employee ends up getting the same level of access as that of a higher level employee. What happens is that the organization ID does not match the one we allowed in Zscaler. As a result, we have to allow each organization ID one at a time in the Zscaler Portal. There are also problems with the mapping of the geographic location of an IP address. For example, the IP address might be in India, but the geographical location may be mapped to a US location. In the next release, I would like to see user-based access. I would like to be able to create user-based policies so that the user can be placed in the correct AD group and get access easily.

I don't see any other improvements required with regards to the use cases that we have. I think they are good for now. I have no complaints. It would be nice to have some sort of a form factor, a physical form factor perhaps, or virtual machine that you could install on devices or on a cloud, and have some cloud computing. That provides the segmentation capabilities within the environment itself, instead of going all the way to Zscaler cloud and then coming back and get all the inspection capabilities. That's definitely one thing that I would want Zscaler to explore. That would serve 100% of use cases that I look for as an architect.