Cisco Firepower 2100 Series vs. Zscaler Internet Access

The Cisco [Firepower] 2100 [Series] is an easy sell for anyone looking. You already know Cisco excels in the security department, but now that firepower lives right on the box and inline with the rest of the firewall data flow you can save yourself a lot of time and headaches. Unless you cant quite afford Cisco's 2100 line, there's not much reason to go with the competition.

Incentivized

It's best suited for a distributed remote workforce, securing internet access for users from anywhere. Suitable for highly regulated industries, such as banking and Healthcare. Not a good fit for an organisation where most of its legacy is in an on-premises environment. Bandwidth-intensive industries like media/entertainment firms.

Incentivized

• For us, to power the whole system does scaling quite a bit. So we can definitely have a lot of room to grow if needed. The device can support a lot of way more than we need right now, but in the future, if we need more it seems to be a big pro of that. Also the support of Cisco, knowing that it's backed by Cisco definitely is good. You guys are the largest players in the market

Incentivized

• Single Pane of Glass Management - Everything is very easy to access and monitor the entire environment from an internet security perspective.
• Install Flexibility - We can and do install Zscaler Internet Access on both our client devices as well as our SD-WAN appliances and servers. This allows us to control internet security even on devices without an agent in our networks.

Incentivized

• Cisco patches bugs quickly but patches are slow to install and reboot
• Smart licensing is getting better but still can be troublesome
• Some weird visual interface glitches that require clicking the same options a few extra times

Incentivized

• The logs feel kind of lack luster
• When issues are arising with SSL Inspection, logs show everything working despite end user experience
• Could use some kind of global find functionality or something that would allow you to search the entire configuration for matching URLs and the like

Incentivized

While Zscaler Internet Access (ZIA) delivers critical value in cloud security and RBI compliance, I rate renewal likelihood 7/10 due to evolving needs versus platform limitations. Below is my rationale:

Key Gaps:

1. Advanced Threat Costs:

ZIA’s add-ons (e.g., Advanced DLP, Sandboxing) incur 35%+ cost premiums – straining budgets as transaction volumes (UPI/iMobile) grow 50% YoY.

2. API Banking Scalability:

ZIA’s API rate limits throttle real-time policy sync during UPI peaks (10K+ TPS), forcing workarounds for finacle integrations.

3. RBI Future-Proofing:

Limited native support for upcoming digital rupee (CBDC) security rules requires custom development, increasing compliance overhead.

Incentivized

The application is easy to install and configure on all Windows devices. To troubleshoot any internet issue, we can easily collect all the relevant logs from Zscaler and check the exact issue. The only problem is with the uninstall, as a dedicated crew needs to provide the password.

Incentivized

There are often performance issues reported

Incentivized

Zscaler's ZIA support is quick and knowledgable. They respond within 1-2 hours of you submitting your ticket. They are very thorough and are typically ready to jump on a live troubleshooting session. Our ZIA platform and how we use is it unique so at times tickets can be open for weeks but we alway get quality support compared to other unrelated product support in our enterprise

Incentivized

Zscaler Intenet Access outperformed the competition due to its lightning-fast policy delivery and cross-compatibility. It is easy to track employee usage and block unnecessary websites, reducing company internet usage. Zscalar installed on every system increases cloud-based software bandwidth, decreasing user turnaround time and increasing efficiency.

Incentivized

• It's keeping threats out like a firewall should. Definitely cost wise it is at a higher cost center than other alternatives. Especially when it comes to licensing. Cisco is generally the higher, for perhaps, definitely for good reason, right? I mean, definitely positive impact as far as working as it should that's at cost.

Incentivized

• Has allowed us to remove other products that were suboptimal
• Saved us money overall by stacking it with other Zscaler products
• Created a more secure work environment for our users through intelligent internet policies that are not needlessly restrictive while still maintaining security best practices

Incentivized