Forcepoint CASB vs. Zscaler Internet Access

It is appropriate for medium to large-scale enterprises, especially the ones that have remote employees. The live-monitoring feature is extremely useful in this case. However, the implementation and initial processing are headache-inducing so you definitely need a dedicated IT team. Be warned though, that not only is their interface quite complex, their customer service is also extremely unhelpful so you won't be able to implement this or tackle any issues without a skilled team. But if that isn't an issue, this is definitely worth a try!

Incentivized

Zscaler Internet Access is effectively a cloud firewall. It thrives best for traveling users that need a consistent experience as the multiple Service Edges around the world will help reduce the bottleneck and latency of VPNs hosted on firewalls. Also reduces the cost to spin up small locations that wouldn't necessarily need a firewall on site for Zonal traffic (this rings true for any SSE product). However troubleshooting this tool is a bit of a beast as previously mentioned - the logs are pretty minimal and the first reaction after perusing logs is typically to get a pcap file (which used to be a last resort for Network Engineers).

Incentivized

• Integration with Forcepoint DLP.
• Excellent in monitoring shadow IT.
• Cloud Monitoring can be conducted.
• UEBA is excellent.

Incentivized

• Single Pane of Glass Management - Everything is very easy to access and monitor the entire environment from an internet security perspective.
• Install Flexibility - We can and do install Zscaler Internet Access on both our client devices as well as our SD-WAN appliances and servers. This allows us to control internet security even on devices without an agent in our networks.

Incentivized

• Better reports
• Better technical support
• Better integration with other solutions as proxy and onpremise DLP
• Did I say better support?

Incentivized

• User Interface could be a little better
• The activate button when making changes could be better, activate seems somewhat like a misnomer especially to newer admins/engineers to the product, a more accurate word would be publish.
• Blocked action message for the user could be more user friendly

Incentivized

It is working for us and we have yet to really utilize all the capabilities it offers.

Incentivized

The platform is really good but needs a lot of customization and effort. Need to build an AI platform that will help in customizations.

Incentivized

The application is easy to install and configure on all Windows devices. To troubleshoot any internet issue, we can easily collect all the relevant logs from Zscaler and check the exact issue. The only problem is with the uninstall, as a dedicated crew needs to provide the password.

Incentivized

There are often performance issues reported

Incentivized

The expertise is highly lacking in the implementation side.

Incentivized

I cannot give a fair rating for this as I have not had to contact Zscaler support. There was one time we had to contact them because we needed to check if they were having issues on their end. Our ISP was actually the problem but support seemed very friendly.

Incentivized

The interface of both the softwares is complex, but Forcepoint is certainly more complicated. But once you get past that, it is quite smooth and offers a lot of amazing features. It is one of the best options for remote security, although I would love to see more features - like encryption. The one place where it truly lacks is customer service, and since it has such an intricate implementation procedure, this one carries a lot of weight and needs to be improved to make this software even more accessible.

Incentivized

Zscaler Intenet Access outperformed the competition due to its lightning-fast policy delivery and cross-compatibility. It is easy to track employee usage and block unnecessary websites, reducing company internet usage. Zscalar installed on every system increases cloud-based software bandwidth, decreasing user turnaround time and increasing efficiency.

Incentivized

• We are working on strategies to understand what to do with the information that CASB gave to us, it would be good if Forcepoint gives us a few key points but they haven't.

Incentivized

• We just turned off the general VPN this week, post Zscaler rollout of ZPA & ZIA, but it's still the "new" kid on the block, so "everything" is a Zscaler issue.
• The ZIA implementation revealed to us exactly how inadequate our internal policies regarding internet access are. Instead of leveraging the tool to reduce risk factors, we find ourselves adjusting ZIA policies to accommodate user complaints rather than adhering to company policy enforcement.

Incentivized