Proofpoint Web Security vs. Twingate vs. Zscaler Private Access

I think [Proofpoint Meta (formerly Meta Networks)] is a pretty robust VPN solution that would be good for most [organizations].

Incentivized

The product as well as the admin panel is getting richer. Would love port-level access control as well as some more analytics in the admin panel. From what I hear, the team is actively working on it

Zscaler Private Access works really well in environments setup for FQDNs and where you know what users should/shouldn't be accessing on what ports. You can use Zscaler Private Access to figure out these kinds of features but that doesn't always mean you'll be correct. It also provides a consistent experience for users as they can access their materials anywhere. It also makes the user the last line of defense. If a user's account is compromised then the attacker has access to everything they already did. It doesn't work great in OT environments or Server based environments. Flows have to be initiated from the client and not the server for stuff to behave properly.

Incentivized

• Stable VPN - 99.999 uptime
• Fast connection - have POP all around the world
• Enhanced security - flexible user policy.

Incentivized

• Easy access management for cloud resources, better security than VPN or IP allow lists
• 2FA via Google Login or OKTA
• Easy to onboard external team members (contractors, partners, clients, etc)
• Was easily approved by my partner security teams to use alongside their VPN client with no conflicts.
• Zero-trust security is a must-have feature these days!
• You pay for User, not Client or Resources--easy to roll out to all devices used by your users.
• No more hassle of maintaining IP allow lists for WFH/remote teams

• Allows strong cyber security corporate policies
• Very reliable VPN application that operates at 100% efficiency
• Very easy to be configured with friendly user interface

Incentivized

• Faster SSL vpn would be nice.

Incentivized

• Windows installation had a small glitch, customer support helped quickly resolve the issue

• Granularity and Complexity of Policy Enforcement
• Application Segmentation and Listener Configuration - The way applications are defined and listened for is fundamental to ZPA, but can be a source of frustration, especially when dealing with legacy or non-HTTP protocols
• The ZCC is the user's primary gateway, but its control over local system network behavior can sometimes clash with enterprise requirements.

Incentivized

For the end-user, it is essentially an on-off switch integrated with our Identify Protection Solution

The environment feels more secure, and we are seeing that users are adapting to it fast. The fact that we have tools to assist the users with their day-to-day access helps, as we can hand it off to the helpdesk without any escalations to the Network team. It is a work in progress for our agency, but we are seeing the benefits from the solution.

Incentivized

Support team understood my challenge and was able to influence product direction to expedite support for my features - A+!

Meta was agile and gave us the product we were looking for. the other vendors were lacking a lot of features or had a difficult deployment.

Incentivized

Well ZPA is a good solution, however everyone has their own advantage and disadvantages, with ZPA you can deploy ZTNA model, which will help you better control on access, however Palo Alto, Fortinet they are also market leading firewall solution, and you can not deny if they are not providing the same features.

Incentivized

• Positive - it let the company WFH in a pretty decent manner so no [work] hours were lost.

Incentivized

• The ROI has been immediate especially since we are all working remotely during the COVID-19 situation.

• Positive: We have now charged users internally for the service
• Negative: Dealing with users who also have the Zscaler Client Connector for their company, can cause confusions
• Negative: Enabling the Zscaler Internet Access entitlement has been a major headache for us because Zscaler Private Access users can't autheniticate through ZIA on a non corporate device.

Incentivized