Skyhigh Security Service Edge (SSE)

Skyhigh Security  serves as a proxy to block requests that are going to the internet, and we are also using it as ZTNA . In our daily operations, we use Skyhigh Security  as a proxy to block requests which are not supposed to happen, and to migrate ourselves from VPN, we are using the ZTNA  technology which is being provided by Skyhigh. Trellix and Skyhigh are the same company.

The best features that Skyhigh Security offers include private access, also called ZTNA, and we can use both on-premises Swig and hybrid Swig or we can pass it to cloud where the categorization will happen. This is a better feature than the competitors.

Skyhigh Security's ZTNA feature has helped our organization as we have migrated a few of the applications which are dependent on VPN to ZTNA, and that was the main use case which helped us eliminate VPN.

Skyhigh Security has positively impacted our organization as we have moved away from VPN, which saved us a ton of money that was being given to the VPN provider, and since Skyhigh Security is an in-house solution, we are using our own product.

Skyhigh Security is a very good product, and if there is room for improvement, they can add more features and some additional POPs.

Regarding Skyhigh Security's AI capabilities, I think its governance and security are commendable as we are moving towards the AI generation, and Skyhigh has its own DLP  which is helping users not upload sensitive documents to the AI chatbot, making that a main good feature.

I have been working in my current field for the past four years.

Skyhigh Security is stable.

The scalability metrics for Skyhigh Security would be around 80 percent.

Regarding the customer support for Skyhigh Security, we do not work with customer support; we work with the engineering team and bypass the support, which is the point of an internal product.

We were using Skyhigh Security from the beginning and did not previously use a different solution.

Since Skyhigh Security is an internal solution, we do not need to pay anything for our own product, and Trellix and Skyhigh are sister companies.

We have seen a return on investment as we were able to eliminate the VPN dependency, which is the main return of investment.

After switching, cost savings would be in the millions since we were having many VPN edge routers, and there were many VPN tunnels utilized on the cloud, and after moving to ZTNA, we were able to cut the cost. That was the main use case.

We do not need to evaluate other options since this is an internal solution and we are providing what we are giving to the customer.

I find the interview is good and state that nothing needs to be changed. I gave this review a rating of 10.

I do not use Skyhigh Security  firsthand, but M.Tech Philippines distributes Skyhigh Security  as one of the authorized distributors. My main use case for Skyhigh Security in my role as a distributor is to position SWG in the market. We have noticed that companies in the Philippines are not yet ready for the full SSE suite. As a startup, we are positioning SWG because the Philippines is not yet ready for the whole SSE suite unless it is mandated by the bank.

One specific example of how we have positioned SWG with a client is that M.Tech used to be a distributor of Broadcom or Blue Coat in the Philippines, and we lost the distributorship, which was transferred to Wesco. One of the strategies we are using is to approach those customers who are Broadcom or Blue Coat users and replace it with SWG. We are offering a competitive swap campaign or displacement campaign, and we are offering high incentives for those partners who will position and replace Broadcom and Blue Coat.

Skyhigh Security has positively impacted my organization because we have acquired new customers in Skyhigh Security for M.Tech Philippines. For example, we have BPOs or call center companies that are using Skyhigh Security, and that is the direction of their headquarters, especially in the US. We are leveraging that market if they have an approach or advice from their HQ that they should use Skyhigh Security also in the Philippines. We are looking for those customers as well. That is one of our advantages because most of the time, those customers do not have purchasing power, so they are relying heavily on what their headquarters is using.

We do not need to conduct a lot of proofs of concept or extensive effort because they will replicate the setup in the Philippines. A faster procurement cycle has been achieved because we do not need to conduct a lot of proofs of value or proofs of concept, since they already know the solution. Their advice is to use it and implement it in the Philippines. They have already managed it, implemented it, and can deploy it without needing our support. It is easier for us to sell to those kinds of markets.

One specific example of how we have positioned SWG with a client is that M.Tech used to be a distributor of Broadcom or Blue Coat in the Philippines, and we lost the distributorship, which was transferred to Wesco. One of the strategies we are using is to approach those customers who are Broadcom or Blue Coat users and replace it with SWG. We are offering a competitive swap campaign or displacement campaign, and we are offering high incentives for those partners who will position and replace Broadcom and Blue Coat.

Regarding features from a technical perspective, we have integration capabilities because we already have a lot of McAfee or FireEye  customers. We are leveraging Trellix database, data, and Trellix customers, and it is easy for us to integrate with Trellix because we can use the same ePO. As part of the DLP  requirements, Skyhigh Security has a lot of disadvantages in the Philippines. That is what we are hearing from the market, so we are slowly losing market share.

From my perspective as a distributor and based on feedback from my clients, Skyhigh Security has a bit of a disadvantage in the Philippines. First, Skyhigh Security is not offering the full SASE  suite, so we are just focused on SSE. We do not have SD-WAN unlike the competitors in the Philippines. Second, Skyhigh Security does not have a local representative in the Philippines. Knowing the Philippine market, it is easy for competitors to penetrate the market if they have a good relationship directly with the customer, and that is what we are lacking in the Philippines. Third, since the acquisition of STG, we need to do a lot of awareness activities, and we need to do a lot of brand awareness compared to our competitors in the Philippines like NetSkope and Zscaler. That is actually the disadvantage, as we are not seeing a lot of advantages of Skyhigh Security in the Philippines, but more on the challenges that we are experiencing as a distributor.

To improve Skyhigh Security, they need to have a local representative in the Philippines. For us to penetrate the Philippine market, it should be a local Filipino native that can speak in our local dialect, Tagalog. That is one of the advantages that Skyhigh Security can offer. Second, we need to do a lot of demand generation and lead generation activities wherein we need to invest in a lot of marketing development funds for us to do brand awareness and join collaborative activities with other vendors. Third, as a distributor, we have to work together and leverage the existing databases of our customers. We have to do a lot of integration and collaboration with other cybersecurity vendors for us to bring Skyhigh Security into the picture. Those are the things that we need to improve.

I chose a seven because, from the business perspective, SWG is cheaper compared to our competing brands. However, those three points are what we need to improve: local representative, marketing development funds, and integration. That is why I put seven in my score.

We are not using Skyhigh Security in our organization, but in general, it is deployed as a professional service, usually based on the customers' needs, typically in a hybrid or private cloud environment.

From my perspective as a distributor and based on my clients' feedback, Skyhigh Security is not stable. I have mentioned earlier the three inputs that we need to improve in the Philippines. Right now, I do not see that it will be stable, and there is no focus in the Philippines.

I do not have feedback from the clients regarding Skyhigh Security's scalability, but as we understand the solution, I think it is very scalable. If I were to score it, I would give it an eight.

Customer support for Skyhigh Security, based on my clients' experience or my own interactions as a distributor, is managed by Trellix, which we do not prefer. What we are doing as a distributor is offering level one support. We are not relying heavily on the vendor when it comes to support because it is not great. They have to improve it.

We have not previously used a different solution in our organization or for our clients because we are distributing it. We are a distributor, so we are not using Skyhigh Security.

I have not seen a return on investment because we are not using it directly.

Regarding pricing, the licensing and pricing for Skyhigh Security, especially for SWG, is cheap. It is very cost-effective, especially knowing the Philippine market. They are also offering the licenses via à la carte, which is very affordable as well.

Before choosing Skyhigh Security to distribute, my company evaluated other options like NetSkope, iboss , and Zscaler.

I always believe that Skyhigh Security works hand-in-hand with Trellix. What we are doing in our approach is to deliver the whole use case from an end-to-end approach, and from on-premises to cloud. We can tie the story together with Trellix since they are from the same mother company, which is STG. It is easy for us to look for opportunities and to penetrate the market if we are using Trellix to integrate the solution.

Regarding Skyhigh Security's AI capabilities, I think the governance and security are not ready in the Philippines. We are seeing in the market that a lot of customers are still using legacy applications and legacy appliances. They are not ready for the cloud, and they still need to host their data on-premises. I think the AI capability cannot be maximized in the Philippines right now. No feedback has been received from partners regarding Skyhigh Security's AI capabilities. We are just seeing that it is not ready. The market in the Philippines is so late and delayed that we are not yet ready for this kind of technology and capabilities.

If others are looking into using Skyhigh Security, I would advise them to talk to us as a distributor. I find this interview great, and you just need to evaluate and reassess if you are talking to the customer, a distributor, or a partner. My overall rating for Skyhigh Security is a seven.

In my day-to-day work, I use Skyhigh Security  to manage two specific people in my team, one being a vendor and the other a full-time employee. I have a different policy for contractors and full-time employees. Using Skyhigh Security, it is easy to implement those policies based on the user, user type, group type, or the device they are using, and the location of the user.

Overall, I personally use Skyhigh Security for Shadow IT discovery, which is very useful. Being able to see which unsanctioned apps employees are accessing helps me prioritize policy decisions, so that secure web gateway and CASB  perform reliably for policy enforcement and filtering. Additionally, integration with my existing infrastructure was smoother than expected.

When I mention flexibility in applying policy, it works for me because I have a device provided by the company, but I can take that device to my personal infrastructure, such as personal hotspots or Wi-Fi. Accordingly, those policies should be implemented where I am right now. It is flexible regarding where your device is and which user is using that device. Accordingly, the policy will be applied.

Skyhigh Security has positively impacted my organization by easing my day-to-day job in managing policies and users. If there is an outrage in terms of a policy change, who changed it, or why a certain website is not working, it is very easy to troubleshoot because I have those reporting systems.

Troubleshooting has become easier with Skyhigh Security. For example, if a certain website is not working, I can easily see where it is failing. During the initial handshake, TCP handshake, or DNS, I can identify if the issue is due to a certificate or a policy. If I discuss the policy, I can determine which policy it is—web filter, application filter, or DLP  policy.

Regarding Skyhigh Security's AI capabilities, my experience shows it is still in a booming state or still scaling up, so it still needs improvement.

Concerning Skyhigh Security's AI capabilities, I find its accuracy and reliability of output to be something I hardly use. I rely more on manual processes because I know where to look and what to look for.

My main use case for Skyhigh Security  is blocking malicious websites, blocking non-DLP acceptable websites, preventing data sharing, enforcing DLP , preventing access to unpleasant websites, and preventing people from using YouTube, advertisement applications, or LinkedIn. We mainly use it to make the work environment dedicated to work without giving employees entertainment that is not allowed.

In my opinion, the best feature Skyhigh Security  offers is its ability to perform deep TLS interception to take action based on that analysis. Deep TLS inspection is a very valuable technology to have with your device.

Skyhigh Security has positively impacted my organization by providing more compliance and more regulatory adherence.

It would be beneficial to have an API for Skyhigh Security. We also experienced some troubleshooting issues when we were troubleshooting our rules, which was not pleasant to manage.

Skyhigh Security can be improved as it lacks debugging capabilities. The main issue is that if we have a website that is blocking Skyhigh Security's proxy, for example a bank website, we will not be able to tell until someone calls us. They do not know enough about our technology because they do not need to be technical experts. Some people are in sales, and some people use their computers for only basic tasks and do not understand that they are being blocked by us or do not know who to contact. We are unable to determine that a banking website is blocking Skyhigh Security through our proxy because the bank is not accepting Skyhigh Security's proxy. Another issue is the lack of API. There is no API available. We tried to contact support about this, and they said there would be an API at the end of quarter one, maybe quarter two, but I am not sure what happened. They did not get back to us.

I chose a rating of eight for Skyhigh Security because of the issues I mentioned, including the lack of API, the lack of troubleshooting and debugging for websites that are blocking us or the end users because of the proxy, and we have to perform a proxy bypass to allow access. Additionally, it does not allow HTTP/3 interception, which is an issue.

I have been using Skyhigh Security for around six months or more. I am Ahmed, a security information specialist at Nornet, and I have been working there for three years, starting last August.

Skyhigh Security is not stable.

Skyhigh Security's scalability is affected by the fact that you make rules that become less maintainable over time because it is like documentation, and it is difficult to document the patches. This is the most frustrating part of everything in technology, as documentation and patching issues are always challenging.

The customer support for Skyhigh Security is great. They are helpful and responsive.

I did not previously use a different solution. We did not have a comparable solution in the past, though we may have had Zscaler or similar offerings, but nothing comparable to Skyhigh Security so far.

I have not seen a return on investment from Skyhigh Security yet. I do not have numbers for this, but it is a sound investment idea. We should develop metrics to measure this.

Before choosing Skyhigh Security, we evaluated some other options but decided to stick with Skyhigh Security. We are also aware of Trellix, but we chose to remain with Skyhigh Security.

Regarding Skyhigh Security's AI capabilities, I have not tried them. I did not hear about Skyhigh Security's AI capabilities, and I only used Skyhigh Security without AI. This is the first time I have heard that Skyhigh Security has AI capabilities.

Skyhigh Security is deployed throughout our organization. According to our engineer, it should be on-premises, and it is deployed on-premises.

My advice to others considering Skyhigh Security is that it has more capabilities than you might initially think. You should make sure to explore everything before you start using it so you can understand all the areas where you can utilize Skyhigh Security, as you might find many other useful options for deployment. An important consideration is to ensure that Skyhigh Security will not negatively affect the daily work of your engineers and employees. You should plan for a smooth implementation of Skyhigh Security because it might block access to resources that it was not intended to restrict.

I have rated Skyhigh Security with a score of eight out of ten.