ContentWatch in Salt Lake City, Utah offers ContentProtect, a web content filtering solution.
N/A
Zscaler Internet Access
Score 8.8 out of 10
N/A
Zscaler Internet Access™ (ZIA) is a secure web gateway (SWG), delivering cloud native cyberthreat protection and zero trust access to the internet and SaaS apps.
If you are looking for something relatively inexpensive to lock down specific computers, it would be a useful tool. If the computers themselves aren't too locked down, implementation and management shouldn't be too difficult.
I feel the product is very good to set up basic standards and go beyond that in many aspects. However, due to being sometimes too simple, it limits the ability to do some other complex changes. Having the ability to do both would be ideal for some, if not all, of the products within Zscaler Internet Access. A simple setup to have it stand-up, and more advanced settings for those more experienced.
Our primary policy is a restricted list, so that does as advertised. We had one location that had blocks based on categories (adult, illegal, etc). We continually had issues with sites getting completely blocked due to unrelated content. For example, Yahoo had a beer ad on the page, alcohol was blocked, so Yahoo became blocked for the period of time that ad was displayed. We had this happen multiple times and eventually switched to a different solution at that location.
I've had issues with their cloud portal not working. I don't have to edit our configuration often, but on numerous occasions, i was unable to get the configuration page to load after login, sometimes for days. The platform just wasn't stable when I needed it to be.
We run many of our remote rooms as frozen (after logoff they reset to the image). This works fine most times, but when content protect needs a configuration change pushed down, someone needs to go 'thaw' the computers, download the updated configuration, and re-'freeze' the computer. It would be nice if that information was just dynamic from the cloud and didn't need to be pulled down.
The categorization used for policies is very limited and not flexible or easily customizable.
ZS CLI support to turn off ZIA and ZDX service specifically on mac.
Better visibility into failed posture devices, including a timeline and the reason the posture failed (This is about the Zscaler mobile portal: Enrolled devices --> Failed posture devices).
While Zscaler Internet Access (ZIA) delivers critical value in cloud security and RBI compliance, I rate renewal likelihood 7/10 due to evolving needs versus platform limitations. Below is my rationale:
Getting started was pretty straightforward. We can tell the product is way more robust than we are using it. It started as a replacement for previous DNS-blocking content filtering, but we're exploring how this will add value with an upcoming DLP redesign and with traffic optimization at some of our remote sites with severe bandwidth limits.
Zscaler's ZIA support is quick and knowledgable. They respond within 1-2 hours of you submitting your ticket. They are very thorough and are typically ready to jump on a live troubleshooting session. Our ZIA platform and how we use is it unique so at times tickets can be open for weeks but we alway get quality support compared to other unrelated product support in our enterprise
At the time ContentProtect was selected, Forcepoint (Websense at the time) didn't have an inexpensive or cloud type product. The same can be said with Cisco, at that time. Recently, we have reevaluated and are going to be transitioning to Forcepoint's mobile client and removing ContentProtect from our environment. The cost is actually now less and we will be able to get both more dynamic control and also give us more detailed reporting on the traffic from clients.
The overall user community and scope of supportability outweighed the others on our short list. Netskope was a close second, but the risk, though small, was greater than that of bringing Zscaler aboard. We were looking for a mature, well-supported, highly functional, and fine-grained solution that met all our user and information security requirements.
It was a relatively inexpensive and simple solution when we needed one relatively quickly, which is a positive. The inexpensive price has kept it in the environment.
The lack of reliable reporting has lead to the need for an alternate monitoring solution in a few cases. Network level reporting was used, which is a separate expense, configuration.
Time has been lost waiting on the portal and then troubleshooting support tickets when sites that shouldn't have been blocked have been blocked. It has resulted in changes for locations that needed dynamic category filtering as opposed to a finite list.
The blocking of sites based on add traffic or sub-sites (rather than just blocking that content like other solutions) has resulted in downtime during classes when those sites were listed in the lesson plan and had previously worked.
I would say it has a very good ROI, as whenever someone can't access something, they submit a ticket to our network engineer, and within minutes, the site is safely added to ZIA with best-practice configurations. After seeing a little of the UI from the Zenith event, it seems very user-friendly to control these policies.
