Netskope CASB vs. Zscaler Deception

The Netskope CASB solution is well-suited for any company due to the proliferation of SaaS applications. With the agent being installed on endpoints, the product is well suited for remote work environments where a managed corporate network may not be available. The agent allows visibility and controls to be applied to any networks the devices connect to.

Zscaler Deception Technology is well suited for companies that want to provide private access to their internal apps without using a VPN. Zscaler integrates zero trust into their honey tools that is good for detecting lateral movement. With Zscaler you allow only your employees to be able to access internal apps so detecting a bad actor is much easier.

Incentivized

• Monitor SaaS usage.
• Manage gaps in shadow IT.
• Provide basic DLP functionality for SaaS usage.

Incentivized

• Improve risk and compliance program.
• Agent deployment is easy.
• Improve decision making.

Incentivized

• Public IP for user can be from different country then it came from
• Sometimes you can't get anywhere with Netscope ON
• Location is the key for speed so users complain for speed of 'internet'
• Some location blocks Netscope IP ranges

Incentivized

• Cannot use internal DNS
• Much tuning needed
• Access typically limited to internal apps

Incentivized

Ease of deployment and strong security solution.

Wide knowledge base and learning tutorials available for customer as well as partners.

Multiple use case be it only governing, data security or protection against threat can be catered and customized depending on objective organization wants to achieve. Talented pool of TAC team to reach out and resolve the concerns.

Incentivized

There have been some struggles with their infrastructure keeping pace with demand and load. Support can only do so much and has to defer to known problems being escalated.

Incentivized

I find that Netskope CASB provides a larger catalog of SaaS applications and provides additional security controls for each app, allowing granularity to what actions end users can perform on the sites. This goes beyond simple block download/block upload, making it highly effective at enforcing the actions outlined in corporate policies.

Incentivized

• Identify non-sanctioned cloud applications.
• Justify use and expansion of IaaS.
• Track sensitive data flows in and out of Cloud.

Incentivized

• Improved threat detection.
• Lesser false positive alerts.

Incentivized