Zscaler Internet Access™ (ZIA) is a secure web gateway (SWG), delivering cloud native cyberthreat protection and zero trust access to the internet and SaaS apps.
N/A
Zscaler Private Access
Score 9.3 out of 10
N/A
Zscaler Private Access™ (ZPA) gives users secure access to private apps and OT devices while enabling zero trust connectivity for workloads.
ZCC being one implementation with Zscaler Internet Access and ZPA being on the same app, that made the decision easier, also with the partnership that Zscaler brought to the table.
We keep using the other products, but for network traffic Zscaler Internet Access tends to be the best solution, although for Infoblox we are using their DNS solution, and for CrowdStrike, we are focusing on other items more related to EDR than network.
The overall user community and scope of supportability outweighed the others on our short list. Netskope was a close second, but the risk, though small, was greater than that of bringing Zscaler aboard. We were looking for a mature, well-supported, highly functional, and …
Compared to Netskope, Zscaler Private Access offers a mature Zero Trust architecture with strong integration across the broader Zscaler platform. We selected Zscaler Private Access because of its seamless user experience, simplified application access without traditional VPNs, …
The robust feature set provided in ZPA and its completely invisible internet footprint sold us. The fact that breaking into a broker provides the attacker absolutely no ability to access the data stream is incredible.
It has been pretty great in our deployment; the ability to send specific messages to users, or to isolate with a banner, has given us more control without blunt "this was blocked for this reason" landing pages. We have a lot of YouTube use, and it's difficult to police the legitimate use from personal use. Because of this, the quotas have been an effective way to achieve traffic goals without getting in users' way.
The tool is, for the most part, very intuitive. Most of our issues so far (working through them with our Resident Engineer) are the one-off applications. We are working on some exemptions to make them functional. Besides that, the team loves the tool and how it can provide better security than our previous tool.
Connecting users remotely with a secure connection. I am a service desk agent who works with end users, and if there is an issue due to ZPA, it's most likely due to configuration. A really good service.
Logging, I believe, works well as I troubleshoot end users and can gather extra details for my network admin. IP.zscaler.com, and the debug logs are nice. Additionally, I like how it shows the App policy assigned to the user's machine ECT.
ZS CLI support to turn off ZIA and ZDX service specifically on mac.
Better visibility into failed posture devices, including a timeline and the reason the posture failed (This is about the Zscaler mobile portal: Enrolled devices --> Failed posture devices).
Needs an interface for Support Desk/Help Desk to more easily understand that the problem is a lack of an FQDN or access is not allowed due to policy, not because of a technical shortcoming in ZPA.
Documentation of the BC solution is not well-detailed.
While Zscaler Internet Access (ZIA) delivers critical value in cloud security and RBI compliance, I rate renewal likelihood 7/10 due to evolving needs versus platform limitations. Below is my rationale:
The product is as expected. ZIA has been integrated and utilized as intended. Any modifications to rules in ZCC have been straightforward to implement. Although it has not been done yet, the segmentation for specific users is highly anticipated. The product received a 9, as no product is wholly perfect, but it has been great to use.
I have had no problems instructing new members of our management team in how to configure, test, and validate user access to internal applications granted in Zscaler Private Access. it is an easy flow to follow and a logical set of data connections
Zscaler's ZIA support is quick and knowledgable. They respond within 1-2 hours of you submitting your ticket. They are very thorough and are typically ready to jump on a live troubleshooting session. Our ZIA platform and how we use is it unique so at times tickets can be open for weeks but we alway get quality support compared to other unrelated product support in our enterprise
We keep using the other products, but for network traffic Zscaler Internet Access tends to be the best solution, although for Infoblox we are using their DNS solution, and for CrowdStrike, we are focusing on other items more related to EDR than network.
ZPA is where the bulk of zero-trust access is found. While the functionality for ZIA is excellent, the policy we implement for internet access is more focused on threat prevention and not narrowly scoped access.
I would say it has a very good ROI, as whenever someone can't access something, they submit a ticket to our network engineer, and within minutes, the site is safely added to ZIA with best-practice configurations. After seeing a little of the UI from the Zenith event, it seems very user-friendly to control these policies.
We used to get anywhere from 30 to 50 tickets surrounding our previous VPN solution every month. We now average 3-5 tickets regarding remote connectivity, and of those, only 1 or 2 are actual issues with ZPA.
Using ZPA Access Policies, we can now block endpoints that have outdated security software from ever connecting to our environment. This was simply not possible with our previous solution.
Some of our employee base skews older and had a harder time understanding the change from VPN to Zscaler.
There is significantly less downtime with ZPA when compared to other VPN solutions.
