I use Zscaler Cloud DLP to protect sensitive data. It works by checking the content I'm trying to send or use on websites. If it sees any personal data or if someone tries to copy-paste it, it stops them. It can even notice when I use certain commands like "put," making sure my data stays safe. It watches what I'm doing online to keep my data secure.
Zscaler Cloud DLP integrates with Microsoft Defender to improve its abilities. This integration allows Zscaler to access data from Microsoft Defender, helping it track timestamps and offer strong protection for DLP events. This partnership between Zscaler and Microsoft Defender is a valuable addition that boosts DLP measures and enhances data protection.

Zscaler Software [Private Offer Only]
Carahsoft Technology Corp.External reviews
External reviews are not included in the AWS star rating for the product.
Provides a range of security measures to protect network traffic
What is our primary use case?
What is most valuable?
The most valuable aspect of Zscaler Cloud DLP is its automatic DLP feature. Additionally, it also offers firewall capabilities. In terms of its firewall features, it provides a range of security measures to protect network traffic, but specific details about these firewall features would depend on the version and configuration of Zscaler Cloud DLP being used.
What needs improvement?
Zscaler Cloud DLP needs to improve its compatibility with other security tools. Right now, it mainly works well with Microsoft Defender but lacks support for many other antivirus and performance management solutions. Also, it takes a long time to add new features based on customer feedback. This limited compatibility could be a problem for organizations using various antivirus software.
For how long have I used the solution?
I have been using Zscaler Cloud DLP for three years.
What do I think about the stability of the solution?
Zscaler is highly stable because it operates from multiple data centers around the globe. If there is any issue or even a brief downtime in one data center, they swiftly switch to a nearby one to ensure uninterrupted service. So, you won't experience any significant downtime, typically not more than a second or two. Even services like Office 365 have very limited downtime when used with Zscaler.
What do I think about the scalability of the solution?
Zscaler is scalable and depends on the number of user licenses you have. You integrate it with your systems, like Azure Active Directory, and ensure GDPR compliance. More than 5,000 people use Zscaler at my company.
How are customer service and support?
Zscaler provides excellent technical support in India and worldwide. Their support team is quick to respond and readily available to assist with any issues or inquiries.
Which solution did I use previously and why did I switch?
I have previously used Purview DLP. It can inspect files and sensitive information you send in those files. However, it may not detect when you copy-paste sensitive data into a web page's open field. This is a second level of security, a different kind of data protection, which may not catch such actions. But it can still detect sensitive information if you copy-paste it into a communication or document. It is a good product but I prefer Zscaler.
How was the initial setup?
Setting up Zscaler Cloud DLP is relatively straightforward. It can easily classify data, like U.S. Social Security numbers. It provides a data discovery dashboard where you can monitor what data users are trying to share or copy from websites. It checks files and data insights to ensure nothing sensitive is being shared improperly, and it alerts you if there is a problem.
What's my experience with pricing, setup cost, and licensing?
Zscaler's licensing is based on the number of users, and it is flexible. Instead of counting all 5,000 employees, they consider concurrent users, which can be more cost-effective. It might be a bit pricier than some other products, but it's a good solution, and many companies use it.
What other advice do I have?
I would definitely recommend Zscaler Cloud DLP to others. Overall, I would rate the product a nine out of ten.
Helps to maintain data loads but needs to create a feature where it is works in offline mode
What is our primary use case?
We use Zscaler Cloud DLP to maintain data load and for storage reports.
What is most valuable?
The solution is the best for storage.
What needs improvement?
We have issues with the tool's maintenance and networking. It should be able to work in offline mode as well.
For how long have I used the solution?
I have been using the solution for two years.
What do I think about the stability of the solution?
Zscaler Cloud DLP is stable.
What do I think about the scalability of the solution?
The tool is scalable. My company has 250-300 users.
How was the initial setup?
Zscaler Cloud DLP's installation is difficult.
What's my experience with pricing, setup cost, and licensing?
Zscaler Cloud DLP is moderately priced. We pay around 2 million rupees per year.
What other advice do I have?
I rate the solution an eight out of ten.
Good scalability features that ensure enhanced security and confidentiality of critical information
What is our primary use case?
We are currently using Zscaler Cloud DLP internally and it provides us with a robust and highly configurable Data Loss prevention engine, which meets our specific data handling needs.
How has it helped my organization?
We experienced many benefits, including improved visibility and the ability to identify vulnerabilities in existing configurations. Its impressive scalability allows the combination of multiple dictionaries and using them as one engine, resulting in narrower data loss gaps. There are significant enhancements in email and file confidentiality, particularly with integration to MCAS solution, which provides insights into permissions and access control for files stored in OneDrive and SharePoint.
What is most valuable?
The most valuable features are its robustness and high configurability, particularly in relation to existing DLP dictionaries. The ability to choose and utilize specific dictionaries for various purposes, such as credit card checks or monitoring file permissions and transmissions within the corporate network. The platform allows the administrator to monitor who is sharing files and who has access to them, providing a proactive approach to data security.
What needs improvement?
The customers would benefit from more robust documentation and conversations around configurations, as it is slightly complex. Also, there should be an option for acquiring DLP as a standalone product rather than bundling it with packages, as this would provide more flexibility for customers who only need specific features. They should also provide more reviews and guidance on selecting the best-rated engines and dictionaries, as well as facilitating reporting for DLP violations and integrations with other cloud storage solutions.
For how long have I used the solution?
We have been using it for a year now.
What do I think about the stability of the solution?
Zscaler sells internet access, not specifically DLP, so we had to build a point of presence for our location in Kenya due to latency issues.
What do I think about the scalability of the solution?
It offers high scalability capabilities.
How are customer service and support?
We faced some issues regarding the business support from them due to the lack of knowledge and understanding of troubleshooting processes, which may be time-consuming. However, after we submitted the tickets, they did provide their support and eventually, solved our issues.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
We tried a few different solutions, but we opted for Zscaler because we were already using other products from them.
What about the implementation team?
The implementation process was straightforward, with good support and training provided by Zscaler. We found it easy to roll out the cloud connectors and configure policies for DLP. The whole process took about three weeks with the help of three individuals, including myself.
What's my experience with pricing, setup cost, and licensing?
Zscaler DLP solution is expensive, with a fixed pricing structure that is billed annually and monthly. There are no additional costs for licenses.
What other advice do I have?
I would recommend having a clearly defined objective and goal, which would facilitate choosing and implementing the solution effectively. I would rate it nine out of ten.
Which deployment model are you using for this solution?
Allows for strict access control, granting access to specific applications at a URL level rather than at the physical IP level
What is our primary use case?
Most people use Zscaler SASE as a replacement for VPNs. You know, with a VPN, once you establish connectivity to the network, you have unrestricted access. But with Zscaler SASE, you have strict access control. You don't get any access unless you adhere to the policies set in Zscaler.
So, you can control who has access to specific applications at a URL level rather than granting access at the physical IP level. That's what most people appreciate about it. IPs provide access to everything on the machine, whereas Zscaler SASE provides access to specific services within the network.
What is most valuable?
The most valuable feature is its ability to establish connectivity for remote users and remote endpoints. It offers a high level of granularity compared to typical VPNs, which also encapsulate a lot of I/O. By using Zscaler SASE for home access or access in remote areas, it bypasses the issues introduced by ISPs.
Sometimes ISPs block certain protocols or applications, but when everything is encapsulated within the Zscaler Cloud, the ISPs don't get a chance to interfere or block. This is especially helpful when it comes to file sharing. Sometimes ISPs block it, so we can't share files using cloud services remotely. Zscaler SASE gives non on-premise users the ability to securely access and sync with on-premise resources.
What needs improvement?
The area that requires improvement is their support. The current support is lacking.
Other than that, once you have the right people on the phone, the product performs as advertised. However, multiple clients have complained about the support.
For how long have I used the solution?
I have been working with Zscaler SASE for two years.
What do I think about the stability of the solution?
When it comes to stability, it's similar to any outsourced service. There will always be some outages because of the global nature of the network and the involvement of various cloud providers. There are many moving parts. I don't anticipate more frequent outages, but it's important to acknowledge that Zscaler is not flawless.
What do I think about the scalability of the solution?
I haven't encountered any clients who have had problems with scalability or performance issues. There were a couple of outages less than six months ago, but that's to be expected. Every service experiences occasional outages. It's like having allergies; every product at a global scale will have such issues.
How are customer service and support?
I have heard a lot of complaints from my clients about the support. Even VMware's support has declined since it got acquired by Broadcom.
So, we're not receiving the kind of support we used to get, like from Cisco. It's more akin to Microsoft and internal support.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup does take some time to get used to. Zscaler does a good job with its specialized services in setting up and installing the product.
Once you start using the product, any issues that arise are generally handled well. The support is not as terrible as it may seem at first. While there may be instances where one technician transfers the case to another technician, it doesn't mean starting the entire process from scratch.
However, most people are deploying it on AWS or Azure. I have some clients who still prefer on-premises deployment. It depends on their specific requirements.
What's my experience with pricing, setup cost, and licensing?
The pricing is quite high, especially when it comes to the gateway. It costs around $10,000 per gateway per data center, which can be seen as ridiculous. Other cloud-based solutions charge based on the number of clients without the need for a gateway for each data center.
This pricing approach doesn't sit well with my clients anymore. When Zscaler SASE had a monopoly in the market, it could get away with it, but now there are alternatives cutting into its market share.
I would rate Zscaler's pricing model as an eight out of ten, with one being cheap and ten being expensive.
There are other solutions like VMware that also have high costs, but Zscaler SASE stands out because of the expensive gateway for each data center. It's not a cheap implementation.
Every time you set up an Azure data center, you have to spend another $10,000 to $15,000 on a gateway. It adds up quickly. Creating a VPN between data centers might be an alternative, but it introduces a single point of failure. So, that pricing policy alone makes it very expensive.
What other advice do I have?
It's a great product. My advice for those considering using it is to understand the concept of zero access. It's different from just having VPN access. If someone can perform a DNS lookup, they still have access.
People are often stuck in a VPN-centric mindset. It requires a paradigm shift, similar to transitioning from traditional applications to Microsoft applications. Instead of focusing on what services the user needs, it's about restricting access to specific applications regardless of the user. Once you embrace this mindset, it becomes easier to navigate. It's not a major impact, but it does require a change in thinking.
Overall, I would rate this product an eight out of ten, with the exception of pricing and support issues. It is one of the better implementations available, surpassing Cloudflare's capabilities. However, there are still areas for improvement, particularly in terms of pricing and support.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Valuable feature of micro tunnels management, enhancing the overall control and highly scalable solution
What is our primary use case?
We are using it for monitoring the global areas, which Zscaler considers for people who are roaming around the system to have a secure connection to internal applications.
How has it helped my organization?
It has made things easier and more secure while connecting to the client's private applications.
What is most valuable?
The most valuable feature is the manageability of the micro tunnels.
What needs improvement?
There is improvement in enhancing proper manageability, policies, and logs. So, log management could be improved.
Moreover, I'd just like to see an improvement in stability.
For how long have I used the solution?
I have been using this solution for six months. We use the latest version 6.1.
What do I think about the stability of the solution?
I would rate the stability a seven out of ten.
What do I think about the scalability of the solution?
Scalability is good.
How was the initial setup?
The setup is straightforward, but it's a little more technical. Nevertheless, it's pretty straightforward.
What about the implementation team?
We have it deployed on both cloud and on-premises.
What was our ROI?
We have definitely seen an ROI.
What other advice do I have?
Overall, I'll rate it at nine out of ten.
Highly scalable and effective policy implementation
What is our primary use case?
It pretty much covers, like, if you implement it, it's going to cover, like, 80 to 90% of real estate for the organization.
How has it helped my organization?
On DLP terms, Zscaler Cloud DLP ensures that data doesn't go outside of the organization. So on the network level, Zscaler does a pretty good job.
What is most valuable?
The solution doesn't do a very good job of detection, but they definitely do a very good job of implementing the policies.
What needs improvement?
There is room for improvement in detection. From the detection perspective, like, how it detects the violations.
Another area of improvement is implementation through non-client connectors. The solution can be implemented in two ways. One uses the back file; the other one uses client connectors. So the client connector is pretty fast, but when it comes to non-client connectors and procedures, it's kind of delayed and slow. The policies don't reflect very soon. It takes, like, a day and, like, hours to get implemented. But if it's a client connector, it takes, like, two minutes. It's just so good.
In future releases, I would like to see two things. It's not more of a feature but more like an enhancement. So I would like to see an enhancement in their proximity when detecting credit card details and past support details, and PII data.
Another area of improvement is support.
For how long have I used the solution?
I have been using this solution for around nine months. I use the latest version 6.2.
What do I think about the stability of the solution?
I would rate the stability an eight out of ten.
What do I think about the scalability of the solution?
Scalability is pretty good. I would rate the scalability a nine out of ten.
How are customer service and support?
There is room for improvement in support.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial deployment is pretty easy. That's pretty straightforward.
What was our ROI?
We have definitely seen an ROI.
What's my experience with pricing, setup cost, and licensing?
The price is a little bit on the higher side, especially if you are going to add, like, packs or bundles to your subscription. But otherwise, it's pretty decent.
What other advice do I have?
I would suggest to keep your policies simple. Don't complicate them because it depends on your organization and how you set it up. So once you are doing it, just keep it clean and simple.
Overall, I would rate the solution an eight out of ten.
An easy-to-use tool that manages the cloud security architecture
What is our primary use case?
We manage multiple customers using ZIA and ZPA to access internal resources and secure their own web applications. It acts like a VPN access connectivity, and ZIA is used as an internet gateway for users.
What is most valuable?
Sandboxing, DLP, and SSL inspection engine are the most valuable features of Zscaler SASE. Zscaler SASE is an easy-to-use tool that manages the cloud security architecture.
What needs improvement?
Currently, we are using APIs, and we need some enhancement on the script running with the Zscaler SASE cloud API. Also, it would be better if we could integrate with other vendors. We often face performance and latency issues with Zscaler SASE.
For how long have I used the solution?
I have been using Zscaler SASE for the last four years.
What do I think about the stability of the solution?
I rate Zscaler SASE a seven and a half out of ten for stability. We face performance issues if there is any anomaly on the nodes bonded with our architecture from some location. We also face some routing and latency issues on Zscaler SASE that need to be rectified. In addition, there are no dedicated Zscaler nodes in countries like China and Dubai.
What do I think about the scalability of the solution?
I rate Zscaler SASE a six out of ten for scalability.
What about the implementation team?
Zscaler SASE's deployment time depends upon your design, architecture, and infrastructure size. If you have a small network of offices, the deployment will take at least three to four days. But if you have a larger architecture, deployment time will depend upon your planning, staging, and implementation.
What other advice do I have?
With Zscaler SASE, we can manage multiple features in a single platform. We can manage all allocations that we have in our architecture on a single platform. This reduces the operation cost and takes fewer resources to deploy because we have APIs in Zscaler SASE. API would be the simplest way to configure anything across our sites if we have a larger retail architecture.
ZPA is configured on our architecture, but ZIA's traffic goes to the Zscaler-hosted cloud.
Overall, I rate Zscaler SASE an eight out of ten.
An easy to configure solution that eliminates the complexity of VPN configuration
What is our primary use case?
We can use Zscaler Private Access as a recipient for external communication. Zscaler Private Access can help users sitting in our organization domain and trying to access their own internal company sources. The traffic is forwarded to us through the Zscaler Private Access node, which we can have in our own infrastructure, or it can be hosted on the Zscaler private cloud.
We are using Zscaler Private Access to build our own Zscaler private node. Although this node is maintained and managed by Zscaler, it resides in our own data center or domain. So the traffic forwarded from the user system towards any internal resource will go through this private node.
What is most valuable?
Zscaler Private Access is a platform that eliminates the complexity of VPN configuration. Zscaler Private Access is easy to configure and manage and takes less time to configure. We can manage our own application or secure our application and our own internal traffic. We can create a security node in our own infrastructure.
What needs improvement?
We are getting some issues with internet access. Authenticating or onboarding something on Zscaler Private Access manually is a troublesome task. Users report application access or latency issues with Zscaler Private Access.
For how long have I used the solution?
I have been using Zscaler Private Access for the last two and a half years.
What do I think about the stability of the solution?
I rate Zscaler Private Access eight and a half out of ten for stability.
What do I think about the scalability of the solution?
I rate Zscaler Private Access an eight out of ten for scalability.
How was the initial setup?
Zscaler Private Access' initial setup is not as easy as ZIA, but it's okay compared to other platforms.
What other advice do I have?
Zscaler Private Access will ease your task, equal to a VPN. Lots of companies are using their own VPN access.
Overall, I rate Zscaler Private Access an eight out of ten.
Provides increased security with endpoint protection along several features on a single platform
What is our primary use case?
As IT integrators, we are using the solution for application control, URL filtering, sandboxing, and antivirus. We have modules with data leak prevention and cloud browser isolation, device posture checking, related to the access because we are also using it for the ZTNA services, but it's not related to the Secure Web Gateway. We are also using it in ZIA with a firewall as a service.
How has it helped my organization?
I believe Zscaler SASE has given us increased security with endpoint protection. We may not have eliminated 100% of the threats, but we are resistant to threats on the Internet. The solution blocks almost all known vulnerabilities or problems related to phishing actions, so I would say that is the biggest benefit.
What is most valuable?
With SASE, we have a single platform that covers multiple task services with which we need to control access. All the features are equally valuable.
What needs improvement?
The menu for the ZIA portal could be organized a little bit differently. The most-used modules should be at the top of the menus, not somewhere near the bottom, some of them are not organized well in my opinion.
For how long have I used the solution?
I have been working with Zscaler SASE for almost one year.
What do I think about the stability of the solution?
There were a few global issues this year that something was not working correctly, or that sometimes we experienced different behavior with the filtering policies between the points of presence. For example, if there is a user located in Amsterdam, then it was filtering traffic differently than in Frankfurt because they were connected to two different points of presence. The issue was later resolved by technical support.
What do I think about the scalability of the solution?
The solution is scalable.
How are customer service and support?
The quality of customer support depends on the situation, where sometimes the correct actions are taken immediately. So sometimes, I would rate it a ten out of ten.
But sometimes we have to explain the same situation, even referencing old tickets, while the support agent would not even check what was done in the previous tickets, and it takes much longer to solve the case. In such situations, I would rate customer support a four out of ten.
How was the initial setup?
The setup is quite easy. The primary configuration requires some adjustments to the client's needs, but it's quite easy.
The deployment depends on a questionnaire to determine expectations, what should be checked, verified, and what works with the highest SLA. The actual deployment does not require a lot of staff members.
Maintenance for the solution includes keeping the client's connector updated and checking the device posture.
Which other solutions did I evaluate?
I have downloaded reports of Cisco Umbrella, Fortinet FortiGate, FortiProxy, and Zscaler.
What other advice do I have?
I would recommend Zscaler SASE, for sure, and would rate it a nine out of ten.
Which deployment model are you using for this solution?
Highly scalable, useful URL categorization, and easy setup
What is our primary use case?
I work for a service provider for a defense customer. We are using Zscaler Private Access to connect to the Internet. This is how we keep our customers protected with the latest inspection of the URLs.
What is most valuable?
The most valuable feature of Zscaler Private Access is the categorization of the dynamic URLs which keeps the customer's environment protected. The threats and the malware are correctly categorized.
What needs improvement?
Zscaler Private Access's reporting is poor. We should have more insight into the reports regarding what is blocked and allowed.
For how long have I used the solution?
I have been using Zscaler Private Access for approximately four years.
What do I think about the scalability of the solution?
I rate the scalability of Zscaler Private Access a ten out of ten.
How are customer service and support?
I rate the support of Zscaler Private Access a five out of ten.
How would you rate customer service and support?
Neutral
How was the initial setup?
There is a lightweight agent on six laptops and the agent reaches out to the SaaS-based cloud.
The process of deployment takes 15 to 30 days.
I rate the initial setup of Zscaler Private Access an eight out of ten.
What was our ROI?
I rate the ROI from Zscaler Private Access a seven out of ten.
What's my experience with pricing, setup cost, and licensing?
The price is competitive.
I rate the price of Zscaler Private Access five out of ten.
What other advice do I have?
If the reports were improved the customer would have more insight.
I rate Zscaler Private Access nine out of ten.