It serves as a globally distributed solution, differing significantly from MPLS. Unlike traditional firewalls, it seamlessly accommodates cloud services and enables remote work from any location. The product's global distribution across the cloud facilitates internal access with the necessary licenses. Whether connecting from a branch office, on-premises solution, private data system, public data center, or the cloud, the platform ensures consistent and robust security protection throughout the entire infrastructure.

The most valuable feature is its seamless integration capabilities, streamlining the process by eliminating the need for extensive installations. Users can connect to the SaaS solution by simply installing the necessary apps. This includes the flexibility to connect with any firewall or router capable of setting up IPSec, providing users the freedom to choose their preferred hardware. This versatility extends beyond Zscaler-specific applications or devices, making it compatible with a range of SD-WAN solutions, such as Cisco Meraki, Palo Alto, and Juniper.

A suggestion for improvement is the development of their own proprietary SD-WAN device. Currently, the experience can vary when integrating cloud protection with different vendors, such as Palo Alto, Meraki, or Juniper. Having a Zscaler-specific device could streamline this process and provide a more consistent user experience across diverse branches. Additionally, expanding their offerings to include solutions like SIEM, similar to competitors, could enhance their portfolio and cater to clients interested in a broader range of services.

I have been working with it for two years.

It is highly reliable and ensures that users receive optimal performance regardless of their physical location, creating a more seamless and user-friendly experience.

The initial setup was straightforward.

The perception of cloud services being expensive is often a result of the initial migration costs, especially when transitioning from traditional and limited MPLS environments. In the long run, cloud services are not inherently costly. If you're starting fresh and adopting a cloud-first approach from the beginning, the perceived expense is considerably less significant.

It is not economically viable for individual users but is highly recommended for companies with a substantial user base, multiple branches, extensive cloud operations, and remote employees. The solution offers enhanced protection across network, on-premises, and cloud environments, making it valuable for enterprises adapting to the evolving landscape of cloud adoption and seeking comprehensive security and networking benefits. Overall, I would rate it nine out of ten.

We use the product for inbound and outbound DNS scanning.

The platform provides data protection.

The product’s most valuable features are inbound and outbound scanning and API control.

There could be additional ways to define proximity. Additionally, they should provide some exclusion options for specific policies and an ability to control the DLP engine.

We have been using Zscaler Cloud DLP for four to five years.

I rate the product’s stability a nine out of ten.

For the DLP feature, I rate the scalability a seven out of ten.

We used Netskope before. However, we switched to Zscaler as we wanted a cloud-based DLP product. If we compare the two products, Netskope is better, but scaler is a good solution for cloud DLP.

The deployment time depends on specific business requirements. It is easy to deploy a standard functionality. However, it takes time for complex scenarios.

The product has reasonable pricing.

I rate Zscaler Cloud DLP a seven out of ten. I advise others to evaluate and understand their business use cases before purchasing the product.

We use the product to control traffic and for user management purposes.

The product’s most valuable features are data discovery, activity control, and zero trust exchange.

There could be a feature to view the VPN tunnel activities in terms of configuration.

We have been using Zscaler Cloud DLP for a year and a half.

I rate the product’s stability a ten out of ten.

We manage accounts for around 2,000 to 3,000 Zscaler Cloud DLP users. It is a scalable product.

The technical support services are good.

Positive

The initial setup process is easy with a helpful GUI. It takes a second to complete the deployment.

I rate Zscaler Cloud DLP a ten out of ten. It is a good and easy-to-use product with efficient scalability.

We use the product for the process protocol for tunnels to manage network traffic.

They should work on a replica account. There could be alerts and replica files sent to the DLP team during data collection.

We have been using Zscaler Cloud DLP for three years.

I rate the product’s stability an eight out of ten. We encounter high latency for cloud data centers.

The product’s scalability depends on specific requirements. We manage more than 50 Zscaler Cloud DLP accounts for customers. We have created certain rules to cover and manage our sensitive data. I rate the scalability a ten out of ten.

They should assign an L2 engineer to resolve the issue. The L1 engineer takes time to identify and elaborate on the problem.

Our organization has used Symantec, Trend Micro, and McAfee.

The initial setup is easy. It doesn’t take much time and depends on the IP server requirements.

I rate Zscaler Cloud DLP an eight out of ten. I recommend it for customer service companies to protect sensitive data.

I use Zscaler Cloud DLP since my company's clients use Zscaler Cloud Proxy in their environments. I deal with Zscaler Cloud DLP since it meets the requirements of my company's clients and helps to manage data breaches. In general, my company takes care of the configuration part of Zscaler Cloud DLP and provides it to our company's clients as a service.

With Zscaler Cloud DLP, my company benefits from the granular control it provides us. My company provides Zscaler Cloud DLP to our clients as per their requirements, and moreover, we can filter out and deny or allow providing the features related to DLP for a specific user or a location. Basically, Zscaler Cloud DLP provides general control to a person over which files a person wants to allow or deny for a specific user or location. Zscaler Cloud DLP is very easy to configure. With just a few clicks, one can easily take care of the configuration part related to the product.

As of now, no improvements are required in the solution. Though not an improvement from a product perspective, there is no documentation related to Zscaler Cloud DLP on the internet. You won't find anything that can help you with the configuration part and other areas related to the product if you search for proper or exact details of Zscaler Cloud DLP online in very easy language. In short, you can't find any documentation about the product which is exactly arranged in a proper manner. Availability of knowledge related to the product is not there in the public domain.

I have been using Zscaler Cloud DLP for more than three years. My company has a partnership with Zscaler, so we provide solutions from Zscaler to our clients.

Stability-wise, I rate the solution a nine out of ten. I did not have any issues related to the product. For some of the tag-related cases opened with the support team, no proper support was available.

It is a very scalable solution. Scalability-wise, I rate the solution a ten out of ten.

I work in a large organization, so I think more than 1,000 users use Zscaler Cloud DLP.

The solution's technical support is easy for my company to reach out to, and they are also very supportive. I rate the technical support a ten out of ten.

Positive

I have experience with Palo Alto Networks Firewall.

The product's initial setup is easy.

The solution can be deployed in ten to twenty minutes.

The solution is deployed on a private cloud.

Zscaler Cloud DLP offers cutting-edge technology and is easy to configure and use. People should opt for Zscaler Cloud DLP if they have the opportunity.

Considering that there is always some room for improvement, I rate the overall tool a nine out of ten.

Zscaler is a cloud proxy that scans and provides security for traffic to cloud-based applications and resources.

Zscaler is location-independent. Even if you switch to another country, users will have the same security posture. For example, if you are in one country and travel to India tomorrow, you will still have the same security posture as the rest of your team. You will also be able to access all your resources over the Internet as a team, regardless of location. There is no dependency on local firewalls at the site. Everything is in the cloud, so you get security wherever you go.

Zscaler provides several security features, including encryption, URL filtering, application control, and credential theft protection. They are also updating their DLP capabilities.

The reports can be made easier. The solution takes time to fetch reports in the Database section. Otherwise, the reporting module itself is well-designed.

I have been using Zscaler SASE for two and a half years.

Zscaler is very stable. The customers use web services that cause issues over the internet.

Zscaler is highly scalable. Zscaler is a cloud-based service, so it takes care of all the data center and hardware infrastructure. Even if you only have one license, you will still have access to all of Zscaler's security features and performance capabilities. Around 2Lakh users are in Nestle, and all are using Zscaler.

We work with enterprise-level customers.

The customer support is good.

Positive

I have experience with Prisma Access. In terms of scalability and tech support, Zscaler is better. However, Prisma is better in other parameters because they have more experience in the firewall industry and are the leader in firewall technology. We at Nestle are forwarding most of our traffic to Zscaler for scalability. We are using Prisma for some essential functions.

The initial setup is easy. You have to plan very carefully how you are going to use Zscaler. Planning is critical, but implementation is achievable. You need to purchase cloud or host services and synchronize your user database to the rescheduler. Then, you just need to use the application to create a folder application on the system, and you are good to go.

Zscaler deployment time depends on the number of users and the policies to be deployed. A very simple setup can take around two to three weeks, while a very complex setup with multiple components can take months to implement.

We are the service providers of Nestle, which is a user of Zscaler. 

New functionality is always being added to Zscaler's products, but there are some features that we cannot have in the cloud-based platform. For example, Pulse QoS and VPN are still available as standalone products. However, Zscaler offers a variety of products that can meet these needs, such as ZIA, ZPA, and ZDA.

Maintaining Zscaler is easy. It has a well-designed admin portal and policy control. At least 20-30 people are required to manage the Zscaler product with a worldwide presence, depending on the setup. For example, Nestle requires 1-2 people to manage their Zscaler deployment.

I recommend the Zscaler solution. If I get an opportunity to use it in an environment where the users are mostly roaming users and the entire network stack is in the cloud, I will recommend they use Zscaler products. It's a great product.

Overall, I rate the solution a ten out of ten.

There's a different mechanism and modules. For example,  ZIA is primarily for internet access from the user's side. We can forward the traffic using the ZIA client connector agent installed on user machines like laptops and desktops. 

Users can log in using their credentials and even use single sign-on. Once logged in, their traffic is forwarded to the Zscaler cloud. 

Based on the user profile, we can define policies on what type of content they can access, like streaming or specific file types. It provides data protection as well. 

Alternatively, there's another configuration. If we can't install an agent, we can forward traffic using a PAC file URL to Zscaler servers.

With Zscaler, there are various modules like ZIA, private access, and digital exchange. All focus on internet access, but there's a concept where all traffic is forwarded using the Zscaler agent. 

Previously, they used a different portal where traffic from tools like Jira and FortiGate was allowed. The issue was that third-party applications weren't always supported. We had to configure them manually, and often we had to forward traffic to the Zscaler Cloud.

On the improvement side, when we bypass certain internet traffic types, it's currently recommended to have a one-click option, but audio and video aren't always supported. Thus, we need to bypass that kind of traffic. So, it is an area of improvement.

Another issue is with DNS exclusions and internet bypasses. Even if we put some URLs into DNS exclusion, it doesn't always work. So we often have to use a VPN gateway bypass. If they provided functional DNS exclusions and internet bypasses, it'd be much smoother.

I have been using it for the last three years. 

If I had to provide a rating between one to ten, I'd give it a seven out of ten. Some areas need improvement, like classification understanding, general and fingerprinting. Some classifications aren't adequately addressed by the DLP rules they provide.

The customer service and support are very good because we have dedicated team support on that and a dedicated customer success manager also. If the technical team doesn't resolve within the alert timing, I can escalate, and they assign a senior person to the call.

The current era is moving towards having a single agent manage everything. We can set up the SAP. Previously, we were using the proxy solution. This is on-prem and very hectic to manage. And policy synchronization was also a challenge. 

Zscaler is a SaaS-based solution, making it easy for users from any location to connect. It's very easy to use with minimal operational challenges. Not just Zscaler, but other SaaS solutions like NetScope and Palo Alto as well.

As for the DLP, there's a web-based version and a hosted ERP version. I haven't tested the OS DLP capabilities yet, but the web-based version is in line.

There are around 50,000 end users in our organization. In my organization, I'm part of the COE group, Centralope Accelerate, and I'm in charge of projects, implementations, and escalated support issues.

I have three team members under me at a proxy level, and then there are about ten people at level one. They handle basic troubleshooting, and if they can't resolve issues, they escalate to level two or even to me.

When I look back two or three years, I feel it's worth it. The product has been good for our infrastructure and has positively changed our user experience. 

However, in the current scenario, we need to think more strategically and consider integrating other services like private access, DLP, CASB, etc.

It's expensive currently. But when purchasing for a large number of users, there's room to negotiate. It's really up to the procurement team. 

From my experience, it's a pricey product, but with a larger user count, there's flexibility in the pricing.

If your requirements are at an intermediate level and you need to access DMC, then I would recommend this solution. If you require more detailed data classification, you might want to consider Netscope as they provide very granular classification. However, it really depends on the company's needs and requirements.

Overall, I would rate the solution an eight out of ten. 

We use the product to provide secure access to our customer's environment consisting of on-premise and on-cloud applications.

Zscaler Private Access simplifies the process of managing remote access. It doesn't require deploying and configuring physical appliances in various locations, similar to FortiGate.

The product's most valuable features are cloud-based services and secure internet access. We don't have to set up any physical appliances.

There could be more DLP-related features. Additionally, there needs to be flexibility for integrating ISP features.

We have been using Zscaler Private Access for a year as a partner.

It is a stable product with self-maintenance capabilities regarding hardware and software patches and policies.

It is a scalable product.

The technical support services are good and based on SLA.

Positive

The product is easy to integrate. It takes a week to deploy for 1000 users.

Zscaler Private Access provides a limited number of solutions compared to FortiGate and ForcePoint.

I rate the product a nine out of ten.

The primary use cases for the Zscaler include secure channel access for applications, private file service access, and remote connectivity to the active directory. These are the top three essential functionalities provided by Zscaler.

Previously, we utilized HubSpot, which required connecting to our office data center and then reaching other data centers for different applications. Internal private access changed this by allowing us to deploy connectors directly in front of the applications, eliminating the need for a single-site private access connection.

The pricing for Private Access seems to be on the expensive side, and I believe they should consider making it more competitive with other solutions. Specifically, they could improve pricing by offering customizable packages that cater to each customer's specific needs.

Connectivity to voice-over IP (VoIP) solutions, both private and VoIP, is scheduled to be included in the upcoming week.

I have been working with the solution for the past few months.

I would rate the stability a nine out of 10. 

The technical support is good. 

Positive

We chose Zscaler because of its superior functionality, especially in terms of its medium capabilities.

A well planned deployment plan can be executed in fifteen days. 

Identifying private applications and the users accessing them are the two key components. Discovering the private applications associated with Zscaler is one part, while the other involves determining the number of users accessing these applications, which is crucial for deciding Zscaler’s deployment.

I would rate the process of initial setup a five out of 10.

I would advise evaluating the solutions as per the requirements, and would rate it a nine out of ten. 

The main purpose was to use it as a zero-trust solution. Or also to have control over the inbound and outbound traffic coming and going through the end user's device.

It does the job. What it is needed for. I can use it for VPN, I can use it for secure connections, I can use it as a firewall. So the solution does the job.

It has a limitation, if you are creating a rule or something for a web application or something, you could only add five users, not more than that. Five or four users are only included in a rule. If you want to create a rule for more than five or four users, you have to go through other methods, not particularly with the application. Working within the application with this method would be quite easy as compared to listing a URL or a normal IP address.

I have been using this solution for one and a half year. 

It is a stable product.

It is a scalable solution. Around 300 end users are using this solution.

The customer service and support have a good SLA. They return queries on time.  

Positive

I would say go ahead because it has a quite friendly interface. It has a lot of stuff you can do. If you are using the old infrastructure technique, you would love it because you can control most of your endpoints network on the device by a single interface. That is the Zscaler.

Overall, I would rate the solution an eight out of ten.