CARGOBR vs. Cisco CloudLock vs. Zscaler Internet Access

Cisco CloudLock is there to shield the most sensitive business database and activities, for instance, the [customer's] credit cards, the code keys, the login details, among others. More so, Cisco CloudLock protects and monitors some information in various software or systems, like that of G-suit, making the entire system reliable and convenient. Finally, Cisco CloudLock determines the response of the activity be conducted to control some of the activities that [put] a company in threat.

Incentivized

It has been pretty great in our deployment; the ability to send specific messages to users, or to isolate with a banner, has given us more control without blunt "this was blocked for this reason" landing pages. We have a lot of YouTube use, and it's difficult to police the legitimate use from personal use. Because of this, the quotas have been an effective way to achieve traffic goals without getting in users' way.

Incentivized

• Data Loss Prevention - files accessed from outside of the organization can be audited or blocked based on content, file type, and regex
• Policy Management - policy options are sophisticated and give great control over the actions to be taken and when the policy should be triggered
• Behavioral Analysis - cloudlock is usually the first place we learn about suspicious activity in our SaaS applications, such as login attempts from outside the country

Incentivized

• Provides a secure VPN connection point for endpoint connectivity.
• Provides the VPN connectivity in a fast and reliable connection state.
• Very dependable, once connected the connection stays up and there's no fuss.
• Very good at letting you know when you are not authenticated.
• Very easy to authenticate and regain access when your session times out.

Incentivized

• The security event notifications don't come as quickly as I would like

Incentivized

• ZS CLI support to turn off ZIA and ZDX service specifically on mac.
• Better visibility into failed posture devices, including a timeline and the reason the posture failed (This is about the Zscaler mobile portal: Enrolled devices --> Failed posture devices).

Incentivized

While Zscaler Internet Access (ZIA) delivers critical value in cloud security and RBI compliance, I rate renewal likelihood 7/10 due to evolving needs versus platform limitations. Below is my rationale:

Key Gaps:

1. Advanced Threat Costs:

ZIA’s add-ons (e.g., Advanced DLP, Sandboxing) incur 35%+ cost premiums – straining budgets as transaction volumes (UPI/iMobile) grow 50% YoY.

2. API Banking Scalability:

ZIA’s API rate limits throttle real-time policy sync during UPI peaks (10K+ TPS), forcing workarounds for finacle integrations.

3. RBI Future-Proofing:

Limited native support for upcoming digital rupee (CBDC) security rules requires custom development, increasing compliance overhead.

Incentivized

The product is as expected. ZIA has been integrated and utilized as intended. Any modifications to rules in ZCC have been straightforward to implement. Although it has not been done yet, the segmentation for specific users is highly anticipated. The product received a 9, as no product is wholly perfect, but it has been great to use.

Incentivized

There are often performance issues reported

Incentivized

They are very quick to respond and go the extra mile to help address our issues. That said, we've only needed them at the early stages of implementation for support help and occasionally when we want to do a full re-scan of our site. They are very flexible in working with us on the timing of such scans.

Incentivized

Zscaler's ZIA support is quick and knowledgable. They respond within 1-2 hours of you submitting your ticket. They are very thorough and are typically ready to jump on a live troubleshooting session. Our ZIA platform and how we use is it unique so at times tickets can be open for weeks but we alway get quality support compared to other unrelated product support in our enterprise

Incentivized

good the engineer give excellent support and eplanation

Incentivized

We have not used other cloud security products. While choosing a product a large factor was the current and future integrations with other Cisco security stack products. While this product is not the most affordable, the security provided to the organization and client data is well worth the investment. We use SecureX to integrate and perform automated responses.

Incentivized

We keep using the other products, but for network traffic Zscaler Internet Access tends to be the best solution, although for Infoblox we are using their DNS solution, and for CrowdStrike, we are focusing on other items more related to EDR than network.

Incentivized

• It has very positive impact.
• Less monitoring spend.
• Very cost effective.

Incentivized

• I would say it has a very good ROI, as whenever someone can't access something, they submit a ticket to our network engineer, and within minutes, the site is safely added to ZIA with best-practice configurations. After seeing a little of the UI from the Zenith event, it seems very user-friendly to control these policies.

Incentivized