Listing Thumbnail

    Zscaler Internet Access (ZIA)

     Info
    Deployed on AWS
    Vendor Insights
    Zscaler Internet Access (ZIA) helps secure your internet and SaaS connections by delivering a complete secure stack as a service from the cloud. By moving security to a globally distributed cloud, Zscaler brings the Internet gateway closer to the user for a faster more secure experience.

    Overview

    Play video

    Zscaler Internet Access delivers a security stack as a service from the cloud, eliminating the cost and complexity of traditional gateway appliance approaches. By moving security to a globally distributed cloud, Zscaler brings the Internet gateway closer to the user for a faster experience. Organizations can easily scale protection, better than appliances, to all offices or users regardless of location. By delivering user security directly from the cloud, customers can minimize costly backhauling of traffic over MPLS links and reduce the costs associated with deploying, managing and operating on premises security appliances.

    As part of the industry's most complete SSE platform, Zscaler Internet Access provides all the security services you need to protect your organization from advanced threats and data loss. Zscaler best in class cloud-native capabilities such as Sandbox, Firewall, DLP

    Zscaler Internet Access is available on AWS Marketplace in Professional, Business, and Transformation Editions, for 12, 24, or 36 months contract terms.

    For additional information on ZIA options and features, please contact Zscaler using one of the links on this page.

    Highlights

    • FULL INLINE CONTENT INSPECTION Finally inspect ALL your traffic, with no compromises. Our patented ByteScan™ engine inspects each outbound and inbound byte, even including hard-to-inspect SSL traffic, with only microsecond delay.
    • CLOUD EFFECT Get millions of users working for you. Any threat detected anywhere in our cloud is immediately blocked for all customers. Zscaler also delivers more than 175,000 unique security updates to the cloud every day.
    • REAL-TIME THREAT CORRELATION Dynamically compute the risk of every web page object or the web page itself using content and domain analysis.

    Details

    Delivery method

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Vendor Insights

     Info
    Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
    Security credentials achieved
    (4)

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Zscaler Internet Access (ZIA)

     Info
    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    12-month contract (1)

     Info
    Dimension
    Description
    Cost/12 months
    ZIA_TFORM_ED_50
    ZIA Transformation Edition
    $11,000.00

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    Vendor support

    Zscaler global support is available around the clock, with dedicated customer support engineers providing personalized assistance to ensure that customers are getting the most value from our products. Our support engineers have significant experience in networking and security, working closely with operations, sales, and engineering teams to ensure rapid response and resolution.

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Network Infrastructure, Infrastructure as Code
    Top
    10
    In Device Connectivity

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    21 reviews
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Content Inspection
    Patented ByteScan engine performs inline content inspection for all traffic, including SSL traffic with minimal latency
    Threat Detection
    Real-time threat correlation using dynamic risk computation for web page objects and domains
    Cloud Security Update
    Delivers over 175,000 unique security updates daily with immediate threat blocking across global cloud infrastructure
    Distributed Cloud Architecture
    Globally distributed cloud-native security platform that eliminates traditional gateway appliance approaches
    Advanced Threat Protection
    Comprehensive security services including Sandbox, Firewall, and Data Loss Prevention (DLP) capabilities
    Network Protocol
    "Programmable networking software built on the WireGuard protocol for secure connectivity"
    Identity-Based Access Control
    "Network access control based on user identity, groups, services, and subnet ranges"
    Connection Management
    "Automatic network connection migration and direct device connections without manual port forwarding configuration"
    Infrastructure Compatibility
    "Cloud and hardware-agnostic overlay network deployment across multiple operating systems and platforms"
    DNS Resolution
    "Automatic hostname resolution with MagicDNS for simplified device and resource access without IP address management"
    Zero Trust Network Access
    Enforces least-privilege access based on user identity with continuous checks on device security, location, and identity
    Network Routing
    Supports application domain-based routing that efficiently routes traffic across private networks with overlapping IP address ranges
    Global Network Infrastructure
    Delivers connectivity through 30+ worldwide points of presence using full-mesh topology over high-speed internet access
    Threat Protection
    Includes built-in IDS/IPS that automatically filters and blocks malicious traffic with multi-pronged content detection and customizable DNS filtering
    Device Posture Control
    Implements device posture policies ensuring each device adheres to predefined security rules and access criteria

    Security credentials

     Info
    Validated by AWS Marketplace
    FedRAMP
    GDPR
    HIPAA
    ISO/IEC 27001
    PCI DSS
    SOC 2 Type 2
    -
    -
    -
    No security profile
    No security profile

    Contract

     Info
    Standard contract
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4
    3 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    67%
    33%
    0%
    0%
    3 AWS reviews
    |
    138 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    Mohan Janarthanan

    User access management and threat prevention are enhanced with user-friendly controls

    Reviewed on Aug 26, 2025
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Zscaler Internet Access  is preventing our endpoints such as laptops and movable endpoints which are all malware threats. Our organization uses Zscaler Internet Access  for securing these critical asset resources.

    I use it for securing our roaming users, to restrict web browsing to only the allowed URLs that need to be accessed on corporate laptops. Apart from that, it restricts access to any other URLs. It is very useful and has CASB  security features where we can provide application controls for restricting downloads, uploads, and other functionalities within Zscaler Internet Access.

    What is most valuable?

    The best features Zscaler Internet Access offers include application control, tenant segregation, and PoP center regions which have low availability zones. The internet access is very successful and bandwidth speed is excellent. It also has application-based control, URL-based control, and SSL inspection capabilities, which are very useful. Additionally, the in-depth CASB  segregation is very beneficial to us.

    One unique feature I found helpful is the tenant level restrictions, which we use to only access our organization's tenant level mail IDs, drives, and specific tenant level access while restricting public access.

    Zscaler Internet Access has positively impacted our organization as we have noticed substantial outputs and income. It has improved our security environment control and endpoint protection. It prevents numerous web attacks through its AI/ML incorporated capability which identifies malware, threats, and viruses. It has a toggle button to enable features entirely at the tenant level for all users onboarded into Zscaler Internet Access, resulting in much better outcomes.

    What needs improvement?

    Improvement in Zscaler Internet Access has not presented huge challenges. The issues we face are minimal and manageable.

    Zscaler Internet Access has introduced AI control for tools such as ChatGPT, providing options to restrict to text-only input without file or image uploads through CASB  restriction controls. This provides users with safe search capabilities for AI tools. The segregation of AI and ML applications into a single cloud app control is very useful.

    The admin console needs improvement as it loads slowly and sometimes takes two to five minutes to open. Improving admin console accessibility would be beneficial.

    For how long have I used the solution?

    I have been using Zscaler Internet Access for the past three and a half years.

    What do I think about the stability of the solution?

    Zscaler Internet Access is stable.

    Which solution did I use previously and why did I switch?

    Before implementing Zscaler Internet Access, we tested multiple solutions through POC evaluations. After our assessment, Zscaler Internet Access performed significantly better and was more suitable for our environment. We chose Zscaler Internet Access, and it has been working smoothly.

    What other advice do I have?

    My advice for others considering Zscaler Internet Access is to understand the console behavior, policy implementation, and settings before onboarding users. Once suitable organizational policies are implemented, then scaling up to 1000 or 2000 users becomes manageable. Understanding policies and use case conditions that meet your environment requirements is crucial before implementation. Implementing policies after onboarding hundreds of users can create complicated situations. I recommend exploring with one or two machines, implementing entire policies, and then onboarding additional devices. I rate Zscaler Internet Access 9 out of 10.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    reviewer2223654

    Achieving peace of mind through robust security with opportunities for customization

    Reviewed on Aug 15, 2025
    Review provided by PeerSpot

    What is our primary use case?

    I am using Zscaler Internet Access  to protect all assets and our users' laptops both on-prem and remotely.

    How has it helped my organization?

    Provides peace of mind protecting devices and users from malicious Internet threats.

    What is most valuable?

    The strong features of Zscaler Internet Access  that I appreciate include security, performance, and the extensibility of the logs.

    The ease of client updates is one of the benefits.

    I have utilized Zscaler Internet Access's SSL Inspection feature. It has helped in threat prevention by giving the opportunity to delve inside our data to see exactly what is going on, what a request is, and what's happening.

    The beneficial impact Zscaler Internet Access brought to my organization includes peace of mind, especially during the COVID period, enabling people to work from home without overloading VPN infrastructure while still being protected.

    What needs improvement?

    I would really like to see the elimination of these confusing PAC files for how Zscaler Internet Access could be improved.

    In future updates, I would like to see some of the features bundled into the existing product set, perhaps more AI features and a refreshed interface, and lower pricing also matters.

    For how long have I used the solution?

    I have been using Zscaler Internet Access for three years.

    Which solution did I use previously and why did I switch?

    Yes, lacked functionality.

    How was the initial setup?

    My implementation strategy during those three months involved testing and comparatively testing against other vendors.

    Three people were involved in the process of deployment from my side.

    What about the implementation team?

    An architect and two engineers were part of the deployment team.

    Which other solutions did I evaluate?

    I focused on Zscaler Internet Access because they stood out from their competition in terms of performance and scalability.

    They beat off their competition with the fidelity of logs.

    What other advice do I have?

    When asked about Zscaler Internet Access's application control for managing access to applications, we combine it with our existing CASB  and can control access to applications effectively.

    We augment Zscaler Internet Access's Data Loss Prevention with Purview .

    As an architect, I am actively pursuing completing a Zero Trust Architecture implementation, and Zscaler Internet Access definitely provides the right tools to move to that architecture.

    To measure the effectiveness of Zscaler Internet Access's Advanced Persistent Threat Protection, I look at the lack of our users being infected, breached, controlled, or going to malicious links.

    On a scale of one to ten, I rate Zscaler Internet Access an eight out of ten.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    reviewer1285383

    Solution stability supports security and integration well

    Reviewed on Aug 07, 2025
    Review provided by PeerSpot

    What is our primary use case?

    The solution is used for security purposes especially. Any solution in the organization has its purpose.

    What is most valuable?

    We have been reselling this solution for more than five years now.

    Zscaler Internet Access  integrates effectively, especially with the high-level IP services. However, there are some challenges with new software development on the SD-WAN part and sometimes with routing of data. Issues appear sometimes with upgrades, but that's really an exception; it's not happening frequently.

    What needs improvement?

    Regarding scalability, it's a challenge for Zscaler Internet Access  at this moment, so I rate it a seven.

    For how long have I used the solution?

    For us, it's recent, but we are also a distributor and reseller, having been using and working with this product for more than five years now.

    What do I think about the stability of the solution?

    It's very stable; however, due to the success, they are slightly behind with resources. This includes following up on new opportunities and finding the right resources to be available for customers' questions when sold.

    Zscaler Internet Access is quite expensive, but it delivers. Sometimes, depending on the customer and the service and why it's used, it's acceptable.

    The deployment process for Zscaler Internet Access is quite straightforward. I think the success of Zscaler has had an impact on their resources.

    How are customer service and support?

    The quality of technical support depends on which department you're reaching out to at Zscaler Internet Access.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    We are providing installation and deployment for our customers with Zscaler Internet Access.

    The installation may take a couple of weeks, but it depends on the customer. The experience I have until now is a couple of weeks.

    What about the implementation team?

    The implementation is done together with the project managers of Zscaler Internet Access.

    From our side, the whole process mostly involves the project manager that is dealing with the deployment.

    What was our ROI?

    I think as long as Zscaler Internet Access is stable, it can have some financial benefits. Until now, we can confirm that for a few customers I am working with.

    What other advice do I have?

    Zscaler Internet Access is quite expensive, but it delivers. Sometimes, depending on the customer and the service and why it's used, it's acceptable. We get more and more reactions about the price going up, sometimes too much or too little.

    For the stability of Zscaler Internet Access, I would recommend it, but for the price, I think it's too expensive. Most customers that use it have the money and want the whole package, a managed service. However, I think it should be less expensive because we're losing customers to the competition.

    On a scale of one to ten, I rate this solution an eight.

    Which deployment model are you using for this solution?

    On-premises

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    reviewer1613577

    Extensive experience highlights diverse use cases and strong reliability

    Reviewed on Aug 04, 2025
    Review provided by PeerSpot

    What is our primary use case?

    Use cases for Zscaler Internet Access  match with business requirements from clients, typically involving navigation. It depends on the company, but navigation encompasses different scenarios based on the client.

    For example, in my current client, there are around five main use cases involving navigation from internal staff, external people outside the organization when service is being provided, remote sites, and IoT infrastructure. This involves providing navigation for schools, hospitals, policy, and internal staff.

    There are multiple use cases, and each client has their own requirements. Server navigation and data centers have different use cases when connected directly to the client's network versus when users work from home. When third parties connect to the client's infrastructure, it creates another use case. These use cases also depend on the SD-WAN component and how the flows move from the sites to the SSE and beyond.

    What is most valuable?

    The most valuable features of Zscaler Internet Access  include its capacity to scale. In my last project, this proved quite challenging. The security implementation capabilities and the ability to integrate public IPs related to clients allow traffic to present on the internet as a client rather than as Zscaler.

    The capacity to have a hybrid solution in cloud and on-premises, along with connectivity with third parties such as CNFs (connect network facilities) including Equinix, digital reality, and similar data centers for interconnecting customers, is very valuable.

    The facility to interoperate with SSEs is quite challenging when adapting the flows and maintaining the same security mechanisms from on-premises to cloud environments. The connectivity is particularly important because SASE  solutions often face challenges in their connection methods.

    For how long have I used the solution?

    I have experience with these solutions from previous interactions.

    What do I think about the stability of the solution?

    I would evaluate the stability of Zscaler Internet Access at 8-9. There are minimal downtimes reported, and they maintain redundancy with two nodes in different regions, which is quite effective.

    What do I think about the scalability of the solution?

    The scalability of Zscaler Internet Access rates at 7-8 in the majority of cases. However, I am currently working with a client that requires very high internet throughput, which has been challenging. They require hundred's megabits per second, and this bandwidth requirement has posed problems for Zscaler and other vendors.

    How are customer service and support?

    The technical support and customer service of Zscaler Internet Access merits a rating of 7-8.

    How would you rate customer service and support?

    Positive

    Which other solutions did I evaluate?

    Zscaler Internet Access is one of the best solutions currently available. Other vendors offers a good solution with many years of market experience, covering legacy infrastructure effectively. They are fully cloud-based but maintain the background that enables service provision in more legacy environments.

    Only small or medium-sized companies with simple use cases can move directly to the cloud. Many solutions have been created as cloud-native, but implementation requires evaluation of the transition from existing infrastructure to the new environment. Zscaler handles this transition aspect very effectively.

    What other advice do I have?

    Zscaler Internet Access encompasses internet connectivity and Zscaler ZTNA  network access. Regarding pricing, compared to competitors, all solutions initially appear expensive. However, through negotiation and positioning, the final prices with discounts can vary significantly. Zscaler demonstrates effective negotiation skills and positions their pricing appropriately. Some competitors maintain higher prices, but my last experience with Zscaler's pricing was satisfactory.

    On a scale from 1 to 10, where one is the worst and 10 is the best, I rate Zscaler Internet Access at 8.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Harsh S.

    Zscaler in focus: Security at scale or complexity at cost

    Reviewed on Jul 31, 2025
    Review provided by G2
    What do you like best about the product?
    Best thing about zcaler which i like is the ease of use and no specific need of deploying or managing appliances which makes it suitable for an organization with any type of workforce, it being remote, offsite or in office. It is also a full stack of internet security offering an ecosystem advantage
    What do you dislike about the product?
    Worst thing about zcaler as a user is that whenever we switch from work from home to in office or change networks anytime, it takes a long time to reconnect or it simply does'nt connect to network, because of which multiple diagnostic steps has to be taken.
    What problems is the product solving and how is that benefiting you?
    1. Secure internet access which keeps our data safe and prevent from connecting to unsafe networks
    2. Different layer of security at different work environments. ex work from home, in office, off site etc
    3. Ease of use as a user not in cybersecurity, the diagnostic steps although lenghty are easy to fix ourselves with some minor fixes rather than dependening on the it team
    View all reviews