Zscaler Zero Trust Exchange Platform Reviews

I use Zscaler Cloud DLP for its DLP features. It gives you all the basic features such as keywords, regular expressions, data identifiers, etc., but the only difference is that you can only apply the DLP policies to web traffic.

Zscaler Cloud DLP provides you with basic DLP features that you get out of the box such as keywords, regular expressions, and data identifiers, for example, your social security numbers, and credit card numbers, with everything built into the product, so you can directly use those features within the policies. You don't need to create it from scratch, and to me, this is the biggest benefit of Zscaler Cloud DLP. You have a lot of templates to choose from in the solution, rather than having to create templates from scratch or reinvent templates.

The only issue with Zscaler Cloud DLP is that it only gives you DLP protection from web traffic, which is flowing out, while a full-blown DLP solution such as Forcepoint or Symantec gives you DLP coverage for multiple channels.

Zscaler Cloud DLP doesn't give you coverage for email, fax, and USB channels, and this is the only challenge or room for improvement in the solution. It's just an extension on top of what you're buying on the proxy, so it's just an added layer, and it doesn't cover DLP on a very broad level.

I'm unsure if Zcaler is in the business of competing with a full-blown DLP solution, and if there's a plan to expand the features of Zscaler Cloud DLP beyond the web channel because you'll have to deploy a full-blown agent for it. I'm unsure if this is on the cards because the solution is just an added layer that you get with your proxy. I've asked the Zcaler team whether there's a plan to go full DLP in the future, but I didn't get a positive response.

There isn't any feature I'd like added to Zscaler Cloud DLP currently, because anything you could think of that should be in cloud or SaaS solutions is already there, except for machine learning, as it's the only functionality that seems to be lacking in the solution. Machine learning is an additional policy available in other DLP solutions in the market, but my team didn't find it in Zscaler Cloud DLP.

I've been working with Zscaler Cloud DLP for a year and a half.

Zscaler Cloud DLP is a very stable product. My team had very, very few complaints about it, and I never had a situation where an end user would come to me and complain about performance or latency issues with Zscaler Cloud DLP.

Zscaler Cloud DLP is a scalable product.

We've never contacted the Zscaler Cloud DLP technical support team because it's a very straightforward product, so we didn't need help or raised cases about it.

The initial setup for Zscaler Cloud DLP was very straightforward because the portal walks you through it, and you get initial help for a few hours from Zcaler professionals who help you and walk you through the entire setup process.  The team understands what your needs are and give you the best possible suggestions on how to use Zscaler Cloud DLP, how to administer it, and how to maintain it, so that's all good.

The licensing model for Zscaler Cloud DLP allows you to only buy what you need. You don't need to buy it as a whole, so it's good.

I evaluated Forcepoint and Symantec DLP solutions, and both are equally good.

I'm still working with Zscaler Cloud DLP.

Zscaler Cloud DLP is not difficult to maintain, and maintaining it is the vendor's responsibility, so you don't need to worry about it.

I would recommend Zscaler Cloud DLP to others because it's the best proxy product in the market at the moment.

Zscaler Cloud DLP is a pretty good product. It's just missing one or two features, so I would rate it as eight out of ten.

I mainly use SASE for proxy and content filtering.

SASE's most valuable features are proxy and content filtering.

An area for improvement would be the ease of configuration.

I've been using Zscaler SASE for two to three years.

SASE is stable.

SASE is scalable if users need to increase the network it supports - it's quite transparent from the end-user perspective.

Zscaler's technical support is quite good.

Positive

The initial setup is fairly straightforward.

I would advise those thinking of implementing SASE to ensure that their technical requirements are well-established and that the transition process is understood. I would give SASE a rating of nine out of ten.

The use case is employing data, PII, and even HIPAA. I do public sector work for hospitals, counties, and local governments.

I am using the latest version of Zscaler Cloud DLP. I'm a licensed installer—a subcontractor. I do a lot of installs for different companies and retailers, and one company that I do in Salesforce. There are probably 20 or 30 instances of it that I'm actively involved in at any given moment.

The solution is deployed on Zscaler's private cloud.

It's one of the easier products on the market as far as set-ups and deployments. Even across their whole product suite, they've made it pretty simple.

The infrastructure supporting it can vary: GCP, Azure, and AWS.

It really comes down to the Regex that's being used from Zscaler's DLP. That's the one area that we find technical limitations because the rest of the industries use an RE2, and Regex and Zscaler just aren't there. It's not because of the technology and they can't code it. It's because of the cost of these actual Regex strings from a query perspective. There's limited flexibility from a Regex perspective as far as data matching and expanding your DLP dictionaries and libraries.

In the next release, I would like to see RE2 Regex supported.

I have been using this solution for almost two years. We are an authorized seller.

Setup is simple.

I would rate this solution 8 out of 10.

My advice is to ensure that the solution meets your DLP use cases. I find that for 99% of the companies that are going to purchase this Cloud DLP, it has to fit their use cases. It's going to get into the Fortune 50s and the companies that are more security conscious and that are doing extremely complex DLP policies. Those folks will likely have some issues. It's not going to be a straight, "Hey, these are the DLP rules I have today. I want to move these over to Zscaler." 

That's one area where I think customers should do their own investigation and ensure that it fits their use cases before they jump in and purchase the product and then find out that maybe 25% of their DLP rules are too complex to be migrating.

The tool is a proxy service that provides inspection of URL filtering for internet access. We have probably 20 or 30 different vendors that we work with in regards to carriers. These are all providers that we use that work in conjunction with that platform. It's an agent that's installed on all of our endpoints. We whitelist and blacklist and we allow certain websites, et cetera, using this product.

Overall, the solution does a pretty good job at web filtering.

The solution does a good job of allowing us to choose what to whitelist and blacklist.

The agent easily installs on the endpoints.

The solution needs to offer better scalability.

The product needs SAML integration. That's something they should work to add in future releases.

It needs to offer SSO, single sign-on, and items of that nature.

The product needs greater zero-trust. They need to focus more on zero-trust relationships.

I have been using the solution for about three and a half years at this point. It's been a while. 

The scalability is a weak point right now. Its scaling capabilities are lacking, and we'd like to see that improve in the future.

The solution is basically an agent that is installed on endpoints in order to provide security. It's not overly complicated.

We are not using the latest version of the solution. Currently, for example, we are one version back on that, as we don't typically do the most current version.

I'd rate the solution at a nine out of ten. We've, for the most part, been quite happy with its capabilities and the level of security it provides to us.

Unlike unconventional data that's being exposed, data loss prevention can become very difficult. Several of the old technologies, such as Symantec and McAfee, can cause a range of problems. On top of that, it derives from a lot of fines for customer loss. You can go through legal ramifications and damage to your company brand when data is exposed. Zscaler creates a significant bypass of security controls. It helps you with your compliance. Basically, it will then help you protect sensitive data.

Zscaler's Cloud DLP will also assist the users off-network, protecting them against data loss. The Cloud DLP will inspect all the traffic including SSL, which will give you protection and visibility. Zscaler Cloud DLP will also allow for compliance. It'll give you compliance for all major regulations that you have to go through.

Their technology can monitor and inspect data on the corporate level. It protects all the sensitive data from within the organization. You could definitely review anything that is on the network and verify the DLP tools by setting alerts and rules in order to mitigate risks such as losing your customers' PAI.

It's a pretty solid solution.

It connects to the cloud, so it's really fast. It obviously is going to bypass the gateway, give you security controls, and also allows SSL traffic to be hidden.

You can close your data protection gaps with Zscaler. You can quickly find all the classified, sensitive data across the cloud. You can also have protection using advanced features like Exact Data Match, and that's document matching as well as machine learning.

The pricing of the solution is very good.

The solution is very stable.

The initial setup is pretty straightforward.

The product scales well.

Zscaler is an integrated platform, so it's fully integrated with zero-day protection to all the users working from home or in our offsite network, and it's going to make customers close that security gap.

Zscaler will protect PII for all users regardless of their geolocations as well it will simplify compliance requirement's by eliminating complexity of legacy systems and securing your cloud data across all channels data in motion, at rest,
and across endpoints and clouds.

I've been dealing with the solution for almost two years at this point. 

The stability is good. Every function of the Zscaler DLP performs very quickly. It's very stable, and it's powered by AI. When it comes to threat and data leakage, it's on a packet-by-packet basis. You have a zero-trust exchange and it's a complete data loss prevention or protection package. It does a full inline inspection, including SSL and TLS traffic.

The scalability is good. The transformation for scalability is based on IT operations. It is easy to add and deploy from branches. It will reduce the architecture for MTLS cost without adding any burden to the actual upgrade of your deployment.

I haven't directly dealt with technical support. I can't speak to how helpful or responsive they are as I have no direct experience with them.

I've previously used Symantec SLP. That was a couple of years ago. 

There are a few key differentiators for Zscaler. Obviously, it's faster, and it's secured. You're routing traffic directly to the internet when you use Zscaler, and in that way, you are reducing cost. There is no reason to spend a lot of money on MPLS. There is no need to buy that. You could deploy and manage security appliances or any new generation firewalls on each branch, and you're providing more security without compromising cost. You're centralizing an overall zero-trust architecture by enforcing policies just a few clicks away.

The good thing about the setup is you don't really need hardware appliances to deploy it. All you need to do is connect your Zscaler services, which is pretty simple, and forward all of your internet traffic to the Zscaler services. That's how you secure all your internet traffic. You can apply policies accordingly.

As far as the pricing, it's very competitive. The more users you have, the cheaper it ends up being annually.

Let's say you have 100 users, it'll cost $39.69 a user. And if you have 10,000 users, it will cost you $19.15 per user. The more users you have, the cheaper they are individually. If you have a ZIA Professional bundle, the pricing is pretty affordable.

The struggle from old IT infrastructure is that you're dealing with a lot of legacy hub-and-spoke architecture and companies used to spend a lot of money on MPLS say 10, five years ago. If you're using old technology and your on-premise, you're forcing to pay twice for your internet-bound traffic. Those are the reasons why customers are rethinking their current solutions and moving to an easy solution like Zscaler in a cloud.

I'm a reseller.

I'd rate the solution at a nine out of ten. I'd advise that this is one of the layers of security that most people need to have.

We are resellers and we have multiple vendors for multiple technologies.

We work with Zscaler for their proxy server.

Zscaler proxy server has two uses. It is not just application control, it is for the company users to access company data from the outside, or for the company users from inside the company to access the internet.

It's a completely SaaS-based application. 

As a cloud-based service, it is very easily implemented. This is one of the biggest advantages to choosing it.

We have been selling Zscaler Cloud DLP for between five and eight years. It's an older product now.

This is a very stable product and we plan to continue providing it to our clients.

As a completely cloud-based application, it is easy to scale. You can simply increase the number of users. We have between 30 and 40 customers who are using it.

The technical support is very prompt and very good.

It is straightforward to deploy. The length of time required for deployment depends on the number of users, but the average is within a week.

As long as you have some guidance or an understanding of the Zscaler platform, that should be enough to complete the initial setup.

Price-wise, it is a costly product and it should be reduced.

It is an auto-renewal subscription service. It is renewed annually.

This is a product that I recommend for anybody who wants a scalable, cloud-based solution.

Overall, this is a very good product. They release new features every year and they are automatically added to the platform. My only complaint is that the price is high.

I would rate this solution a nine out of ten.

I like its ease of use. It has a single pane of glass for the ZIA and ZPA pieces. It is very manageable. 

It is also very easy to deploy for secure access, and it gives half-decent coverage for visibility in terms of what the users use and what data is being proxied through the access gateway.

It has massive room for improvement. The Zscaler product itself is okay, but it doesn't give enough granularity for us as an organization to stipulate rules or processes, especially for data-driven services. For instance, we can stick on SSL inspection, but it's just a click box. It doesn't allow us to go any further into the detail of the SSL inspection. We also can't pull it out without having an additional logging server. It just doesn't give us enough granularity. 

They should give us more control over the interfaces because it is all backend. They weren't very open to discussing their backend architecture with us in terms of their own data centers. They can maybe a little bit more open about what components are there and how the backend infrastructure works alongside Zscaler.

Its licensing can be better. Some of the additional licensing costs are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. 

Their support should also be improved. I initially had a consultant from Zscaler for its deployment, but the support that I had throughout the deployment of the project wasn't the best.

We weren't using any other solution.

It is very easy. There were some constraints trying to deploy the access gateway and the endpoint client to some of our regions due to processes being blocked. They gave a list of processes that need to be allowed through ADM endpoints and our sort of antivirus products so that they're not scanned, and they're allowed through to function. However, I had some issues in following the guide and trying to get them initially deployed and allowed through. The firewall has to be off regardless of whether the port allocations were opened or not, but this could potentially be a regional issue. Other than that, the deployment was very easy.

I went through a subsidiary company of Zscaler. I initially had a consultant from Zscaler themselves, but the support that I had throughout the deployment of the project wasn't the best. They were very much technical sales as opposed to technical consultants. I myself had to work through and resolve a lot of issues that I faced during the deployment and setup.

It has been relatively reasonable for what it does. Some of the additional license costs based on the advanced next-generation firewall functions are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Overall, the cost seems reasonable.

What I would say is that try it, test it, and ensure that it sort of meets the company requirements. We were lucky enough to go through an extensive trial period. Zscaler, unfortunately, only allows a two-week trial regardless of where you are with the setup. They only give you coverage for a very basic setup. You have very limited time for trying anything further or trying the product as if it was in the production environment. Therefore, I would advise scoping out what you want and how you want to achieve it as quickly as possible. After that, you can really hammer home when you go through the initial deployment to ensure that it works and meets all the requirements.

We are now looking at Cisco Umbrella. We are a Cisco house predominantly, and Cisco Umbrella just interlinks with our VPN solution and our overall architecture. We're looking to migrate to a Meraki SD-WAN fabric because it allows us to just use that network overlay underneath the secure access edge and just incorporate it into what we already have.

I would rate Zscaler SASE a seven out of ten.

Increase performance, stability and Secure Remote access for Remote Users. 

Two great features that we really like on the solution are the Internet Access and Private Access. The path solutions available that help protect the customer's internet access and ensuring B2B secure access are great.

The scalability of the solution is great.

The solution offers very good performance.

Due to the fact that it's a multi-tenant hosted environment, it should be noted that other solutions, like Palo Alto, are single-tenant solutions. It's the customer that's hosting it, it's a single tenant. Zscaler hosts a SaaS solution and a multi-tenant, not a single-tenant environment. It would be nice if they offered that as well. This is where probably Zscaler can differentiate itself.

There are latency issues with the solution. They are small, however, they are there when you compare it to other vendors. These things only come up when you're talking to enterprise customers who are really looking at those things. For smaller to mid-sized customers, Zscaler makes more sense. These things make it cheaper and more efficient, as well, for Zscaler. 

I am actually a technical field engineer. I make solutions that help customers with different products. I don't use it personally. I sell it to different customers. 

The scalability of the solution is top of the line. It's one of its great selling features. Users can scale easily if and when they need to.

In terms of how many people use it typically, it depends on the company size. If you're like the last one I worked with, which was an enterprise customer, you can have five, 10, even all 5,000 users that, especially here in COVID times, are working remotely. It depends on the size of the organization and depends on the roles of people who need the secure access. 

An enterprise customer who has 5,000, 10,000 users, for example, will find that most of the users who need secure access to it, depending on the data you're hosting, will be at about 50-60%. They may not be on it one time, but that's where the licensing will be. At least 50-60% of the users, or the workforce in the company. This will only increase due to the COVID times when people are working more remotely.

I personally have never used technical support. However, I also haven't heard any complaints from customers in relation to the level of support they provide. It must be okay if we haven't heard anything.

I also sell Palo Alto as well.

I have been selling Zscaler, however, I only have had hands-on experience in Palo Alto. I don't have answers yet on Zscaler. The last hands-on experience I had on any device was two and a half years ago when I was more involved. I am just technical sales now. 

I haven't deployed the solution yet myself.  I wouldn't be able to comment on the process. I don't know if it's complex or straightforward.

That said, from what I've seen in customers that have deployed it, I've never really heard a bad comment from anyone who is using it.

I'm not a direct customer, so I don't know what the exact cost of the solution is, on average. It would depend on the company's size.

We're a Zscaler partner.

When you implement Zscaler, you're actually utilizing the best of what the technology has to offer. 

I've only heard good things about the solution. I'd rate it eight out of ten.