BeyondTrust Privileged Remote Access vs. Zscaler Private Access

BeyondTrust Privileged Remote Access is well suited to grand monitored privileged access to resources. It works in a proxy mode so end-users don't have direct access to servers. This can help prevent attacks on servers from users' machines since all the traffic to the servers goes through the Privileged Remote Access server which performs auth according to the policies. In cases where direct access to the servers/service from the end-user's machine is required, it is a little bit complicated to set up that kind of connection using protocol tunneling.

Zscaler Private Access works really well in environments setup for FQDNs and where you know what users should/shouldn't be accessing on what ports. You can use Zscaler Private Access to figure out these kinds of features but that doesn't always mean you'll be correct. It also provides a consistent experience for users as they can access their materials anywhere. It also makes the user the last line of defense. If a user's account is compromised then the attacker has access to everything they already did. It doesn't work great in OT environments or Server based environments. Flows have to be initiated from the client and not the server for stuff to behave properly.

Incentivized

• It's comprehensive, intelligent and easy to use.
• It has lots of features i.e. it allows special commands to be used whereas the other programs don't allow them.
• This tool is effective in allowing you to access all your applications through a single sign-on page.
• Actively manage the ongoing operational use of network devices, hardware, and application access via Secure App.
• Bomgar Privileged Access deploys on-premises via a hardened physical or virtual appliance, or through the Bomgar Secure Cloud.

Incentivized

• Allows strong cyber security corporate policies
• Very reliable VPN application that operates at 100% efficiency
• Very easy to be configured with friendly user interface

Incentivized

• One way to use it is by using a machine as an access proxy, this machine being Linux, has limitations such as copy and paste and does not allow access to more than one web access.
• Improve the desktop application view.

Incentivized

• Granularity and Complexity of Policy Enforcement
• Application Segmentation and Listener Configuration - The way applications are defined and listened for is fundamental to ZPA, but can be a source of frustration, especially when dealing with legacy or non-HTTP protocols
• The ZCC is the user's primary gateway, but its control over local system network behavior can sometimes clash with enterprise requirements.

Incentivized

This review was originally written partially in Portuguese and those parts have been translated into English using a third-party translation tool. While we strive for accuracy, some nuances or meanings may not be perfectly captured.

Incentivized

It accomplishes all of our remote access needs, our users require little to no training when being setup for remote access for the first time.

Incentivized

The environment feels more secure, and we are seeing that users are adapting to it fast. The fact that we have tools to assist the users with their day-to-day access helps, as we can hand it off to the helpdesk without any escalations to the Network team. It is a work in progress for our agency, but we are seeing the benefits from the solution.

Incentivized

The main factor is the ease of implementation and also its use in everyday life.

Incentivized

Well ZPA is a good solution, however everyone has their own advantage and disadvantages, with ZPA you can deploy ZTNA model, which will help you better control on access, however Palo Alto, Fortinet they are also market leading firewall solution, and you can not deny if they are not providing the same features.

Incentivized

• Improve security by improving the management of external remote access
• Help us meet Remote Access Compliance Requirements by creating audit trails, session forensics, and giving access monitoring and reporting data
• Simplify employee access and workflows by giving employees the exact amount of privileged access to systems and applications they need, without hindering productivity or overwhelming the service desk

• Positive: We have now charged users internally for the service
• Negative: Dealing with users who also have the Zscaler Client Connector for their company, can cause confusions
• Negative: Enabling the Zscaler Internet Access entitlement has been a major headache for us because Zscaler Private Access users can't autheniticate through ZIA on a non corporate device.

Incentivized