2017-09-06T14:02:00Z
Tim Thomasson - PeerSpot reviewer
Information Security Specialist at a insurance company with 1,001-5,000 employees
  • 8
  • 20

Evaluating CASBs. Looking for community feedback on some vendors.

I work for a medium-sized regional insurance company.  We currently have no CASB solution, and we're evaluating vendors now.  Specifically, we're looking at:

- Microsoft Cloud App Security

- Skyhigh

- Netskope

- Bitglass

- CipherCloud

Does anyone currently use, or has previously used, those products?  I'd love some pros and cons regarding them.

Thank you!

10
PeerSpot user
10 Answers
Andrew S. Baker (ASB) - PeerSpot reviewer
Cybersecurity & IT Operations Professional (VirtualCxO) at BrainWave Consulting Company, LLC
Consultant
2017-11-01T16:34:29Z
Nov 1, 2017

I have only done a peripheral review of CASB vendors in the past few months, but I do agree that the top ones to consider right now are Skyhigh Networks and Netskope.

When looking at a CASB, be sure not only to consider if they offer all the right checkboxes, but take a look under the covers to see how they are handling those checkboxes. Sometimes, integration between the components is severely lacking or disjointed even when they have a high feature list.

Product comparison that may be of interest to you
it_user754782 - PeerSpot reviewer
Reporting Analyst at a energy/utilities company with 10,001+ employees
Real User
2017-10-21T19:22:19Z
Oct 21, 2017

Hi Tim, I'm currently a student and doing research about cyber security market, may I know how do you narrow your list down to these 5 vendors?

ramesh1923 - PeerSpot reviewer
Technical Specialist at Tata Communications
Real User
2017-10-23T05:15:03Z
Oct 23, 2017

Hi, I am working on both Skyhigh and Netskope. The both has their own unique features. List down your requirement and do the POC with the said products.

Skyhigh is efficiently handling both shadow IT and sanctioned IT applications. DLP, threat protection and access controls are the key features of skyhigh.

Netskope is good in access control.

Regards / Ramesh M

it_user645183 - PeerSpot reviewer
Product Marketing Engineer at symantec
Real User
2017-10-04T17:53:36Z
Oct 4, 2017

Hello,

The CASB space is booming right now. Everyone is leveraging the cloud for various reasons and having a CASB in place is paramount to security. What CASB to get is really a matter of your business requirements. What exactly are you trying to do? Do you want to get a handle on all the Shadow IT that your company is currently exposed to and set up a plan for such activity? Do you want to apply DLP policies to safeguard your data? Perhaps GDPR and other regulatory issues are forcing you to get into compliance? There are many reasons for adopting a CASB solution, the best place to start is with an Audit of your current traffic and finding out what Shadow IT is present, any related Shadow Data that needs to be monitored, and come up with a plan on how to handle SaaS apps in the cloud. The best CASB vendors out there will offer the audit service as part of the CASB solution. From there, you can design policy and stipulate what cloud apps to sanction, which ones to block, and how to coach users during any suspect activity. The end goal is to keep your users productive and happy while securing your data in cloud apps.
For an unbiased answer, I would direct you to Gartner and Forrester for reports on CASB. They will detail what the landscape looks like, who the vendors are, what the pillars of a good CASB solution should entail, as well as some features and functionality that are specific to the various CASB vendors. Gartner has a CASB overview document that is very handy and they are currently working on a magic quadrant for the existing vendors. Forrester has released a “ForresterWaveCASB” document that dives into the vendors and who they think are the best based on market presence, features, etc.
Of course, Symantec offers a CASB solution that should be added to your list of vendors for review. Do not look at a CASB vendor without looking at Symantec. Currently, Forrester ranks Symantec as the number 1 CASB vendor in the marketplace. Symantec offers the following:

· Cloud app discovery and analysis

· Data governance and protection

· Threat detection and incident response

· A CASB that integrates with Symantec DLP (the industry’s leading DLP solution)

· Integration with endpoint

· Integration with Secure Web Gateway (Blue Coat proxies are the best in the industry)

· Authentication with Symantec VIP

· Field level tokenization and encryption

· File-level encryption

Consider these questions when looking for a CASB vendor:

· What do yo udo when you need to apply consistent DLP policies to data in the cloud and on premise?

· What are your options for encrypting confidential data

· Can you safeguard against confidential data transfer to unsanctioned cloud apps or personal cloud accounts?

· Can the CASB automatically identify and respond when a user account has been compromised?

· Does the CASB automatically classify confidential data or do you have to build a system from scratch?

it_user216333 - PeerSpot reviewer
Information Security Engineer at a retailer with 10,001+ employees
MSP
2017-10-04T15:45:37Z
Oct 4, 2017

Netskope is really good. MCAS meets the requirements but lacking features, it is cheaper though. Depends on your requirements, netskope has an optional light weight desktop agent which makes monitoring easy.

Do you have any specific requirements?

Vendor
2017-10-03T20:39:46Z
Oct 3, 2017

we use ciphercloud. basically, all of them handles: office, google, & salesforce. now with the GDPR happening in our european offices they're mainly SAP & ciphercloud is the only one approved by SAP.

Find out what your peers are saying about Netskope CASB vs. Skyhigh Security and other solutions. Updated: November 2022.
654,658 professionals have used our research since 2012.
it_user720069 - PeerSpot reviewer
CTO, CISO, Co-Founder with 11-50 employees
Vendor
2017-10-03T14:48:07Z
Oct 3, 2017

At the risk of giving a solution without knowing the situation, some very broadbrush advice would be to look at these vendors in this priority order. That said, given the right environment, any of them could be the best fit. CASB is not a market that is matured with standard architectures and features, so it is advisable to consider the specific requirements before making a decision. Another way to say this is there is not one that is universally superior in most situation.

1. Netskope
2. Skyhigh
3. CipherCloud
4. Bitglass
5. Microsoft Cloud App Security
The ones higher on this list tend to have a greater number of use cases where they do a good job. I don’t feel I can publish pros and cons in this forum.

ramesh1923 - PeerSpot reviewer
Technical Specialist at Tata Communications
Real User
2017-10-03T13:28:05Z
Oct 3, 2017

We have used Skyhigh and its pretty good to handle cloud sanctioned IT applications like Office365, Google APPs and salesforce etc.

Easy to deploy, better application, device and user visibility.

Earl Clark - PeerSpot reviewer
President with 1-10 employees
Real User
2017-10-03T13:18:32Z
Oct 3, 2017

No help on any of these, but thanks for the question. For a holistic approach (because anything less is insufficient), I've begun using Sophos appliances, services, and endpoint protection which all speak with each other and really fortify a network on all fronts. Services take up resources, so be sure to invest in an appliance powerful enough to serve all your endpoints effectively. Hope this helps.

Stuart Berman - PeerSpot reviewer
CTO at a tech company with 11-50 employees
Real User
Top 10
2017-10-03T13:16:23Z
Oct 3, 2017

We have used Skyhigh Networks for three years and very happy with it. Over the years they have added new capabilities. The original service provided an inventory of cloud applications that our internal people accessed as well as statistics and risk ratings and configuration guidance to block access. Over time they added more functions such as "protect" services for cloud applications like Microsoft O365 and Google Apps that provide protection for users regardless of whether they are on our network or anywhere on the Internet.

We see the service as very effective and they have improved capabilities over the years such as improved reporting.

Related Questions
Netanya Carmi - PeerSpot reviewer
Content Manager at PeerSpot (formerly IT Central Station)
Oct 31, 2021
Why?
See 1 answer
Oct 31, 2021
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify and manage cloud applications, protecting your sensitive data from exfiltration. It provides visibility of how all SaaS applications are used in your environment. It makes setting up policies easy, and it has special policies to protect integrated apps. It is difficult to scale up. The infrastructure tends to stall when trying to keep pace with high loads. Although it provides basic protection features like the interpretation of firewall logs, it shows the user access to apps. It shows issues comparing the reports with the firewall logs. Overall, it presents a simple approach to web traffic control. Zscaler, on the other hand, is a complete security stack as a service for the cloud. It is designed to reduce the complexity of traditional secure web gateway approaches. It provides scaled protection to users and entities. We use Zscaler and can say we like it very much. It provides secure internet with full encryption. It is easy to use, and you can easily monitor how your users and entities use SaaS applications. It also controls your bandwidth with a load balancer. So if you are looking for smooth internet access and secure connections across devices, it may be just the solution for you. The integration with MS365 is not the easiest, and it slows email uploading and downloading. However, we heard of other users that integrated Zscaler with Azure and were satisfied. We encountered a few issues, but the vendor solved them. There were some false positives and the setup could be easier. If you have a lot of users on mobile, it may not be the best option. Conclusions Zscaler is a superior solution for businesses of all sizes. Although the setup requires some expertise, it still provides a complete solution that offers good value for money.
Miriam Tover - PeerSpot reviewer
Service Delivery Manager at PeerSpot (formerly IT Central Station)
Sep 7, 2020
Hi, We all know it's really hard to get good pricing and cost information. Please share what you can so you can help your peers.
2 out of 4 answers
RR
Senior Security Engineer at a healthcare company with 10,001+ employees
Aug 5, 2020
Their pricing is extremely fair. They need to make sure they pay attention to how the licensing works. There are many licensing methods. One way is the number of endpoint users you will have. And they license for every single application that you're going to put into the proxy system. They also have a few other types of licensing around CSPM, so there are many components. Bitglass didn't misrepresent their licensing structure in any way, but as a company we didn't really look at what it meant. Fortunately, we feel we got a really good deal with Bitglass and we got everything we need. We didn't have to go back and buy any additional licensing. However, if we had not just blindly gotten the right deal, we might have needed to go back and revisit the licensing structure with our account manager. We really didn't fully understand the way all the licensing worked until after the fact. Do your due diligence and make sure you understand. Don't over-buy your license and don't under-buy.
David Overton - PeerSpot reviewer
Sr. Director of Information Security & Enterprise Architecture at Childrens Home Society of Florida
Aug 26, 2020
There is training involved. If you're going to add more people to it, such as cross train more of your group, there's a cost. Other than that, that's it. We have paid exactly what the invoices have said. We signed a three-year contract and not gone above it. Understand what it is you're paying for with a CASB. Do your homework and understand what your use cases will be, because you will pay based on use case. Always be weary of someone who comes in and just wants to cut prices. If they're going to lose to a competitor and just whacks their price in half just to get the business. If it didn't match your needs based on what the product does in the beginning, you're going to be sorry. Know your use cases and purchase towards your use case. Make sure that you get a strategic business partner when it comes to your vendors.
Related Articles
Janet Staver - PeerSpot reviewer
Tech Blogger
Jun 20, 2022
As more organizations shift to the cloud, securing those cloud environments has become a top priority. With cloud environments, companies are facing challenges, with more regulations, a higher rate of data loss, and an increase in the number of attacks. To handle these challenges, organizations need to gain security and visibility for their software-as-a-service (SaaS), platform-as-a-service ...
Janet Staver - PeerSpot reviewer
Tech Blogger
May 31, 2022
If you are like the majority of other companies, you most likely use cloud environments or multi-cloud implementations. Even though cloud computing has become increasingly popular, it introduces security threats such as contract breaches, compliance problems, and APIs that are not secure or are misconfigured. Because most SaaS applications include large amounts of sensitive data, such as credit...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Mar 18, 2022
Hi community members, Here we go with a new Community Spotlight. We publish it to help YOU catch up on recent contributions by community members. Trending What open-source HCI solution do you recommend? How much time does SSO save? What are the main technical differences between Microsoft Power Automate and Blue Prism? Articles Top HCI in 2022 What is Web Design? The Ultima...
Shibu Babuchandran - PeerSpot reviewer
Regional Manager/ Service Delivery Manager at ASPL INFO Services
Feb 27, 2022
What Is SASE? Secure Access Service Edge, or SASE (pronounced “sassy”), is an emerging cybersecurity concept that Gartner first described in the August 2019 report. SASE is the convergence of wide-area networking or WAN, and network security services like CASB, FWaaS and Zero Trust, into a single, cloud-delivered service model.  According to Gartner, “SASE capabilities are delivered as a s...
Related Articles
Janet Staver - PeerSpot reviewer
Tech Blogger
Jun 20, 2022
What’s the Difference Between CASB, CWPP, CSPM, and CNAPP?
As more organizations shift to the cloud, securing those cloud environments has become a top prio...
Janet Staver - PeerSpot reviewer
Tech Blogger
May 31, 2022
How do I secure my SaaS application?
If you are like the majority of other companies, you most likely use cloud environments or multi-...
Download Free Report
Download our FREE report comparing Netskope CASB and Skyhigh Security based on reviews, features, and more! Updated: November 2022.
DOWNLOAD NOW
654,658 professionals have used our research since 2012.