Zscaler Internet Access Reviews

You can have mobile employees who forward traffic into a Zscaler client, or you could use a PAC file. So, if users connect at the beach, a hotel, coffee shop or something outside their actual office, it will give them protection.

You can use it with a secured Internet using a web gateway to deliver to the cloud.

The benefits of Zscaler Internet Access are the speed of the solution and never having performance issues or limitations. The fact that none of my end users are experiencing any threats, zero-day, bots, or malware says a lot about the solution. 

Zscaler Internet Access enables the inspection of traffic, including SSLs. You want to make sure that nothing is coming in through your HTTPS traffic. For anything that is coming in that might be a threat, you want to ensure that you are using a good proxy for that. There is malicious traffic out there, so you want to make sure you are tracking and viewing that. There are a lot of threats that come through as well as a lot of programming languages, so you definitely need to inspect traffic.

It is worth it. It works. I don't need multiple alerts, because it is set up with the right policies. Definitely, it is a beneficial device which doesn't always need constant monitoring. It inspects the encrypted traffic and verifies what threats are coming in. It intercepts incoming traffic and decrypts it, then reviews it. So, why have antivirus scanning or web filtering if Zscaler can do it? It protects me from man-in-the-middle attacks as well. When you use a firewall, you have alerts and false positives, but Zscaler Internet Access pretty much decreases those errors and alerts.

There isn't congestion on your network when you are inspecting traffic with Zscaler Internet Access. 

• The integration of the gateway that inspects all ports and protocols. So, there is threat prevention. 
• The cloud sandbox
• VNS security
• Access control that will protect URL filtering and the cloud firewall. 
• Data protection that will protect your gateway, like your CASB or your cloud DLP. The capabilities of this will point your traffic to Zscaler Cloud.

The proxy architecture is the way to go. Zscaler uses it to protect their applications on the cloud. So, if you are using Box, Office 365, or even have an end user using LinkedIn or YouTube, then it will give you updated threat updates. It will also inspect all your traffic so you don't get compromised.

Advanced Threat Protection on Zscaler Internet Access has a few functionalities. It has ways to find threats. So, if they are actually hiding, you could do an inspection of your SSL traffic. You also have DNS security in Zscaler Internet Access that will help you route suspicious command-and-control attacks as well as detect threats when it does a full inspection. 

Zscaler Internet Access protects using data loss prevention. If you have a CASB exposing your cloud out into the network, then Zscaler Internet Access will go ahead and control that unknown cloud application in the CASB, protecting it. There is also data detection with exact data match. This improves the data coming into your cloud so you are protecting it. 

It offers a Cloud Browser Isolation feature, which exfiltrates browser activities from the end user's device. This feature can eliminate our exposures on that.

I like its features because they help me eliminate firewalls. I don't need to have firewalls, SIEMs, or an IPS/IDS. So, if all my end users are remote and using Office 365, I am already protecting them because they are in the cloud. I just have to attach the security application, which makes sure that any user who is mobile or remote is protected, without spending money on other solutions.

I wish there were a lot less products to learn, because there are a lot. They just keep surprising me with new features, even in the SaaS arena, and they keep improving in every facet. We are Zscaler partners, so I got certified in two platforms, but there is a lot room for improvement. There is just too much training, where they focus a lot on protecting the Internet as everyone is moving to the cloud. I would love for the training to be shortened.

I have been exposed to it for a year.

My clients have never really called to tell me that stability has been an issue. Feedback has always been positive. 

It is a scalable solution. It is easy to scale and secure remote users. If a company hires 100 more people, I don't think it would be a problem.

The largest environment, which I reviewed, had 2000 employees.

I would rate their professional services or technical support as five out of five based on their experience and expertise. They know how to answer all my client's problems. They are really quick to trigger and understand the client's needs as well as be very supportive. They do very well when helping their clients.

What I have seen when I am doing PoCs is you need some perimeters to start building this platform and integrating policies from day one. 

An improvement would be if they could provide an out-of-the-box experience, like 20 to 30 features all ready to go. In comparison, LogRhythm offers out-of-the-box features. With Zscaler Internet Access, there is firewall IPS, multiple security services, filtering, DLP, and CASB browser isolation. These are things that all users are going to be using. However, when an administrator or architect would start building this, I would definitely need to engage professional services to help clients do it.

Every customer is different. On average, it could be a two-week deployment. If you are using other devices, like Fortinet SD-WAN deployment, you definitely have to make sure your configured IPsecs are correct. You might have to review policies and your SD-WAN roles. You need to do a lot of cleaning up before you start deploying.

We have a client who wants to start deploying the Cloud Browser Isolation feature. You can embrace this cloud platform using IPAC Files, which is just a clean way of deploying it.

I have personally worked for other vendors doing professional services as part of a professional services team. Every client decided to purchase professional services because deploying Zcaler Internet Access is too complex.

I am saving money right now because I am not using old technology, like when we had everything on-premise and in the data center. Now, I just have to direct my end users to the Zscaler file and make sure that they are connected and secure. So, I am eliminating the total cost of ownership and the headaches of on-premise devices. I am also reducing their risk by making sure that they are protected in real-time.

When I talk to clients, they mention that there is a return of investment from improving the real-time protection. There is no need anymore to buy: 

• An antivirus
• A third-party vendor to protect your DNS, like Cloudflare. 
• Check Point SandBlast 
• Symantec DLP, Forcepoint, or Netskope since you already have DLP protection. 
• LogRhythm or Splunk for logging.

Those are the benefits. I have a lot of clients explaining this to me that this is the reason to have this solution. Zscaler Internet Access is transforming all that for web traffic security.

The pricing is fair based on its competitive market.

Palo Alto's vulnerability assessment requires an on-prem solution to work with your cloud. Zscaler Internet Access has already been bundled up to provide no-hassle, free Internet network connectivity that ensures protection. When you are using Palo Alto and want to assess vulnerability in your network, you probably need to use on-prem and cloud workloads. There is no reason to do that with Zscaler Internet Access.

Zscaler Internet Access has ease of development, like minimal setups needed for connectivity. You can continue securing protection, allowing your remote users to have access to your applications. Then, it is pretty quick to set up for Zscaler Internet Access. Some companies don't have many tools, so there are no delays there. When it comes to LogRhythm, there are a lot of things that you have to deal with. You have to deal with your log server as well as setting up your authentication server, firewalls, policies, rules, and zones, then you need to get it running and customize it based on your company's needs. Because LogRhythm has 30-plus features ready to go, it can be easier and smoother to deploy. However, there will always be a couple things where you have to do some preliminary requirements before you continue.

Overall, it is a secure platform.

I actually interviewed with Zscaler to work with them because I have been impressed with their technology overall, especially over Palo Alto Networks technology who is their competitor and has a SaaS solution as well. From the top to bottom, Zscaler Internet Access is a great security product that protects my end users and remote users in the cloud.

If you want total cost of ownership and zero-trust architecture, Zscaler is the right solution to fit the needs of any environment.

I would rate the solution as 10 out of 10.

In the past, I prepared a comparative stable between Zscaler and other concurrent or alternative solutions. I saw that Zscaler has a good mark in many criteria. We use Zscaler for centralized data loss prevention (DLP) for web, endpoint, and email. It also has the capacity for SD-WAN integration, threat installation, and is easy to deploy compared to other solutions.

Zscaler, by offering many solutions for workload and remote workforce connectivity, has improved our organization's productivity. It leverages AI for threat intelligence and malware detection, which enhances our security measures.

Zscaler offers a centralized DLP solution for web, endpoint, and email. It also provides SD-WAN integration and an inspection feature that inspects one hundred percent of traffic, ensuring it is secure and meets our connectivity needs.

There are many functionalities in Zscaler Internet Access that need improvements, such as an advanced firewall and logging capabilities to track calls.

I have been using Zscaler Internet Access for one year now.

The stability is rated an eight out of ten.

I rate the scalability of the solution as eight or nine out of ten.

Customer service sometimes is not helpful, with long waiting times when issues arise. However, in some cases, the support team is faster and satisfactory.

Neutral

Before using Zscaler Internet Access, we used another solution, which secured us with a gateway.

I'd rate the setup nine out of ten. It is a relatively easy setup process.

We have seen measurable benefits, such as improvements in security measures and productivity. However, experiences with customer service have been mixed.

Compared to other solutions, Zscaler Internet Access is higher in cost.

Based on my experience, I recommend Zscaler Internet Access.

I'd rate the solution nine out of ten. 

We use the tool to manage all end-user traffic. It's mainly for web filtering on every device, not for backend server traffic. 

Zscalar Internet Access is for Internet security, like an Internet security gateway. I like how it runs seamlessly in the background with a single sign-on. The controls you can have on devices for Internet security are good, and it doesn't impact speed wherever you're connected. Overall, I think it's very good so far.

The solution's pricing is on the higher side. It would be better if it could be lower. 

I have been using the product for a year. 

The product is quite stable. There were some challenges with speed and performance when connected to a different region, but once they fixed the policy and routed through our region, everything worked fine.

The tool should be scalable - we have many employees, and it's covering well. I can't comment on limitations for other companies with thousands of computers.

We pushed it through policy to all computers, so we didn't need people to do it manually. You need someone overseeing it but not heavily involved or specifically dedicated. It can be handled with other workloads.

The main reason for getting the solution was for better security, not for time or management savings. It didn't decrease effort for our security team, but it improved our overall security posture.

I like Zscaler Internet Access. We've been using it for a while, and it's working very well. However, we're still in the early stages of identifying the full solution and requirements.

I rate it a ten out of ten. 

Zscaler Internet Access provides customers with the internet. We can easily integrate policies. 

The solution has reduced cyberattacks.

We can focus on a granular level of things. 

Zscaler Internet Access needs to integrate more ISPs. It is good to have more than three ISPs. 

I have been working with the solution for one and a half years. 

The product is stable. 

Zscaler Internet Access is scalable. 

Zscaler Internet Access has good tech support. 

The tool is moderately priced. 

I rate the product a nine out of ten. 

Basically, they usually are the endpoint VPN connection to secure the end-user device. They also integrate with the SD One solution to form a secure endpoint assessment for the SD One, with security from the endpoints to the network.

It serves as protection for the endpoint, especially laptops, to secure any internet access. Even when you assess the wireless itself, they also make sure that the traffic from the laptop is encrypted.

The way they do it is very easy to use at the moment. If you power on the laptop, they will survey. It's very easy for the user. The user doesn't really need to do anything except make sure that the access is there. That's all.

The initial setup is very straightforward.  

It is easy to scale. 

The solution is stable. 

If they can also integrate with the multi-factor authentication to prompt users to do another, second-factor authentication, that would be ideal. 

I've used the solution for 18 months. 

The solution is very stable and reliable. There are no bugs or glitches. It doesn't crash or freeze. 

The solution can scale very well. 

Very minimal technical support has been required since the solution is so stable and easy to use. 

The implementation process is easy. The agent they use runs very smoothly.

They do have a minimum number of users required to make it viable. You need to have 500 users. Based on the licensing scheme, they offer 500 users. The initial level would be $3/month per user.

I'd rate the solution eight out of ten. It is very easy to use.

We primarily use the product for proxy services. We are using that to manage services with a third party, so we are not directly exposed to Zscaler.

We enjoy all of the proxy capabilities and the capability to integrate into the SIEM/SOC solution. We also like the capability to have local agents on PCs.

We are using that in managed services, so we are happy with the managed service as it is.

It's a very complete solution and well-organized. 

Sometimes it's not easy to use during large deployments of workstations. It's a bottleneck from a network point of view.

It's a technical solution, so you need to have good architects knowledgeable on Zscaler.

We don't need any other added features.

I've been using the product for nearly two years. 

We have around 1,000 users on the solution. 

We do not have plans to increase usage. 

We have other products as well. In the current set of products, I'm not forcing any swaps or changes.

It's a managed service. We are not exposed to the initial setup process.

It's a managed service, so it's included in the service.

We don't have a direct relationship with Zscaler as we use it in a managed service. 

I'd advise new users to be sure that they have good architects to integrate. It's quite complicated.

Sometimes the complexity of integrating with legacy and other complex setups is a chore.

I'd rate the solution eight out of ten.

We are using the solution for internet security. It's mostly web-based filtering.

We are into this modern world, meaning, we are working from home in hybrid scenario. Due to the pandemic, we have seen a lot of shifts towards a hybrid model of work. That provides lots of challenges in terms of security including, how to protect the users' machines and other devices. That is one of the core use cases. Wherever you are, you need to be protected. However, the traditional approaches such as a legacy-based proxy system won't work. 

If we have some kind of critical systems, we need to figure out how we can provide the access to all these users, all these remote or roaming users, access to these critical areas, and we need to eliminate those legacy-based VPNs. Zscaler is doing it best. Zscaler offers the best service since you are protected wherever you are.

The internet access is great. It offers good web filtering. It has DLP features. We can monitor our networks with ease. We can monitor the usage, bandwidth, chop, chalking, all these things we can monitor. On top of that, it is providing advanced threat protection ATP, which means any kind of malicious network or malicious payloads that are going through our network can be detected and it can be blocked. We can have a certain kind of block list. There are multiple levels of features.

We have fewer issues with Zscaler.

In terms of user experience, that is also excellent. 

In terms of reporting to senior management, it gives us a clear picture of what needs to be achieved about that solution.

It is easy to set up the solution. 

The solution is stable.

It is a scalable product. 

In terms of user experience, it could be better. It all depends upon the configuration, though. At the moment, they are one of the best. In terms of room of improvement, it depends upon the specific use cases of the customers.

For example, it might be that some of the users are having some kind of connectivity issue. It depends upon how those users are connected. It may not be a product issue. Or maybe they are using a VPN. Local banks won't allow connectivity to their application over a VPN or over a cloud-based proxy service, for example. In some countries, the local banks restrict these kinds of communications. There needs to be some whitelisting done to get those users connected. 

At the moment, we are trying to onboard that solution. In my previous organization, I have used that solution. In my current organization, we are trying to onboard the solution.

It is a stable solution. I never faced any kind of downtime for my critical services. They have a higher availability. If one of the locations goes down, automatically, it'll scale to a preferred location.

The solution scales very well. 

In the last three or four years, there has been a shift towards this product. We likely will increase usage. 

I've never directly dealt with technical support. My team handles any issues and would deal with them directly.

It is easy to set up. However, you need manpower and you need a team to deliver these kinds of things. It's not a plug-and-play thing. It has lots of configurations. We need to deploy the agents. We need to set up those configurations. If we have multiple offices, we need to understand the routing and what mechanisms are in place. That's why it takes a team.

The length of deployment depends on the company and environment. You're looking at the number of networks, the number of servers. 

I can't speak to the costs. I don't handle the licensing. 

I'm a customer and end-user. 

I'm not sure of the exact version of the solution.

Zscaler is a cloud service provider, so they are hosting their services on their own cloud. They might be using the public cloud. I'm not sure. However, it's not an on-premise solution. It's a cloud-based proxy.

You need to perform that due diligence. You need to understand your use cases, including the number of users and how many are working from home or roaming, et cetera. You need to understand hosting, and how to protect servers. There's a lot of understanding you need to have before you can begin implementing anything.  

I'd rate the solution eight out of ten. 

Zscaler Internet Access's best feature is the granular policy controls.

Zscaler Internet Access's troubleshooting is very limited, and their textbook logs need to be more informative.

I've been using Zscaler Internet Access for over five years.

Zscaler Internet Access's stability is pretty good, and when an issue occurs, they're very quick to notify the end-users and fix it.

Zscaler Internet Access is very scalable, and requests for scalable solutions are met quickly.

Zscaler Internet Access's technical support is very good and fast. Sometimes, I've had trouble with level one people, but once an issue is escalated to higher-up engineers, they're pretty quick to provide the solutions.

The initial setup was straightforward - Zscaler Internet Access is plug-and-play, and it's the simplest proxy solution I could recommend.

Licenses are available on a per-host basis. Some features like sandboxing require an additional fee, but most standard features are included in the license.

Zscaler Internet Access is very good, and I would recommend it to others. I would give it a rating of eight out of ten.