There's a different mechanism and modules. For example, ZIA is primarily for internet access from the user's side. We can forward the traffic using the ZIA client connector agent installed on user machines like laptops and desktops.

Users can log in using their credentials and even use single sign-on. Once logged in, their traffic is forwarded to the Zscaler cloud.

Based on the user profile, we can define policies on what type of content they can access, like streaming or specific file types. It provides data protection as well.

Alternatively, there's another configuration. If we can't install an agent, we can forward traffic using a PAC file URL to Zscaler servers.

With Zscaler, there are various modules like ZIA, private access, and digital exchange. All focus on internet access, but there's a concept where all traffic is forwarded using the Zscaler agent.

Previously, they used a different portal where traffic from tools like Jira and FortiGate was allowed. The issue was that third-party applications weren't always supported. We had to configure them manually, and often we had to forward traffic to the Zscaler Cloud.

On the improvement side, when we bypass certain internet traffic types, it's currently recommended to have a one-click option, but audio and video aren't always supported. Thus, we need to bypass that kind of traffic. So, it is an area of improvement.

Another issue is with DNS exclusions and internet bypasses. Even if we put some URLs into DNS exclusion, it doesn't always work. So we often have to use a VPN gateway bypass. If they provided functional DNS exclusions and internet bypasses, it'd be much smoother.

I have been using it for the last three years.

If I had to provide a rating between one to ten, I'd give it a seven out of ten. Some areas need improvement, like classification understanding, general and fingerprinting. Some classifications aren't adequately addressed by the DLP rules they provide.

The customer service and support are very good because we have dedicated team support on that and a dedicated customer success manager also. If the technical team doesn't resolve within the alert timing, I can escalate, and they assign a senior person to the call.

The current era is moving towards having a single agent manage everything. We can set up the SAP. Previously, we were using the proxy solution. This is on-prem and very hectic to manage. And policy synchronization was also a challenge.

Zscaler is a SaaS-based solution, making it easy for users from any location to connect. It's very easy to use with minimal operational challenges. Not just Zscaler, but other SaaS solutions like NetScope and Palo Alto as well.

As for the DLP, there's a web-based version and a hosted ERP version. I haven't tested the OS DLP capabilities yet, but the web-based version is in line.

There are around 50,000 end users in our organization. In my organization, I'm part of the COE group, Centralope Accelerate, and I'm in charge of projects, implementations, and escalated support issues.

I have three team members under me at a proxy level, and then there are about ten people at level one. They handle basic troubleshooting, and if they can't resolve issues, they escalate to level two or even to me.

When I look back two or three years, I feel it's worth it. The product has been good for our infrastructure and has positively changed our user experience.

However, in the current scenario, we need to think more strategically and consider integrating other services like private access, DLP, CASB, etc.

It's expensive currently. But when purchasing for a large number of users, there's room to negotiate. It's really up to the procurement team.

From my experience, it's a pricey product, but with a larger user count, there's flexibility in the pricing.

If your requirements are at an intermediate level and you need to access DMC, then I would recommend this solution. If you require more detailed data classification, you might want to consider Netscope as they provide very granular classification. However, it really depends on the company's needs and requirements.

Overall, I would rate the solution an eight out of ten.

We use the product to provide secure access to our customer's environment consisting of on-premise and on-cloud applications.

Zscaler Private Access simplifies the process of managing remote access. It doesn't require deploying and configuring physical appliances in various locations, similar to FortiGate.

The product's most valuable features are cloud-based services and secure internet access. We don't have to set up any physical appliances.

There could be more DLP-related features. Additionally, there needs to be flexibility for integrating ISP features.

We have been using Zscaler Private Access for a year as a partner.

It is a stable product with self-maintenance capabilities regarding hardware and software patches and policies.

It is a scalable product.

The technical support services are good and based on SLA.

The product is easy to integrate. It takes a week to deploy for 1000 users.

Zscaler Private Access provides a limited number of solutions compared to FortiGate and ForcePoint.

I rate the product a nine out of ten.

The primary use cases for the Zscaler include secure channel access for applications, private file service access, and remote connectivity to the active directory. These are the top three essential functionalities provided by Zscaler.

Previously, we utilized HubSpot, which required connecting to our office data center and then reaching other data centers for different applications. Internal private access changed this by allowing us to deploy connectors directly in front of the applications, eliminating the need for a single-site private access connection.

The pricing for Private Access seems to be on the expensive side, and I believe they should consider making it more competitive with other solutions. Specifically, they could improve pricing by offering customizable packages that cater to each customer's specific needs.

Connectivity to voice-over IP (VoIP) solutions, both private and VoIP, is scheduled to be included in the upcoming week.

I have been working with the solution for the past few months.

I would rate the stability a nine out of 10.

The technical support is good.

We chose Zscaler because of its superior functionality, especially in terms of its medium capabilities.

A well planned deployment plan can be executed in fifteen days.

Identifying private applications and the users accessing them are the two key components. Discovering the private applications associated with Zscaler is one part, while the other involves determining the number of users accessing these applications, which is crucial for deciding Zscaler’s deployment.

I would rate the process of initial setup a five out of 10.

I would advise evaluating the solutions as per the requirements, and would rate it a nine out of ten.

The main purpose was to use it as a zero-trust solution. Or also to have control over the inbound and outbound traffic coming and going through the end user's device.

It does the job. What it is needed for. I can use it for VPN, I can use it for secure connections, I can use it as a firewall. So the solution does the job.

It has a limitation, if you are creating a rule or something for a web application or something, you could only add five users, not more than that. Five or four users are only included in a rule. If you want to create a rule for more than five or four users, you have to go through other methods, not particularly with the application. Working within the application with this method would be quite easy as compared to listing a URL or a normal IP address.

I have been using this solution for one and a half year.

It is a stable product.

It is a scalable solution. Around 300 end users are using this solution.

The customer service and support have a good SLA. They return queries on time.

I would say go ahead because it has a quite friendly interface. It has a lot of stuff you can do. If you are using the old infrastructure technique, you would love it because you can control most of your endpoints network on the device by a single interface. That is the Zscaler.

Overall, I would rate the solution an eight out of ten.

I use Zscaler CASB to get the visibility of the cloud application since everything is moving to the cloud these days. We use the solution to get complete visibility of what is happening on my drive and official applications. The solution also helps to restrict information shared with my other partners.

Zscaler CASB's latency and architecture are excellent.

Zscaler CASB needs to improve its applications or connectors. The solution's granularity should be improved because it has limited granular options to control, visible, allow, block, delay, and receive.

I have been using Zscaler CASB for one year.

Zscaler CASB is a stable solution.

Zscaler CASB is a scalable solution because it is a cloud-based solution. Around 30% of the industry people are using Zscaler CASB.

Zscaler CASB's technical support is good. The solution's support team is available, but they don't have much visibility of what is happening and take too much time to resolve it.

Zscaler CASB's initial setup is easy.

As per industry leads, Zscaler CASB is an expensive solution.

Zscaler CASB is deployed on-cloud in our organization.

I would recommend Zscaler CASB to other users. Zscaler CASB has a seamless deployment. The solution needs to improve on the navigation or user experience part.

Overall, I rate Zscaler CASB an eight out of ten.

I use Zscaler Cloud DLP to protect sensitive data. It works by checking the content I'm trying to send or use on websites. If it sees any personal data or if someone tries to copy-paste it, it stops them. It can even notice when I use certain commands like "put," making sure my data stays safe. It watches what I'm doing online to keep my data secure.
Zscaler Cloud DLP integrates with Microsoft Defender to improve its abilities. This integration allows Zscaler to access data from Microsoft Defender, helping it track timestamps and offer strong protection for DLP events. This partnership between Zscaler and Microsoft Defender is a valuable addition that boosts DLP measures and enhances data protection.

The most valuable aspect of Zscaler Cloud DLP is its automatic DLP feature. Additionally, it also offers firewall capabilities. In terms of its firewall features, it provides a range of security measures to protect network traffic, but specific details about these firewall features would depend on the version and configuration of Zscaler Cloud DLP being used.

Zscaler Cloud DLP needs to improve its compatibility with other security tools. Right now, it mainly works well with Microsoft Defender but lacks support for many other antivirus and performance management solutions. Also, it takes a long time to add new features based on customer feedback. This limited compatibility could be a problem for organizations using various antivirus software.

I have been using Zscaler Cloud DLP for three years.

Zscaler is highly stable because it operates from multiple data centers around the globe. If there is any issue or even a brief downtime in one data center, they swiftly switch to a nearby one to ensure uninterrupted service. So, you won't experience any significant downtime, typically not more than a second or two. Even services like Office 365 have very limited downtime when used with Zscaler.

Zscaler is scalable and depends on the number of user licenses you have. You integrate it with your systems, like Azure Active Directory, and ensure GDPR compliance. More than 5,000 people use Zscaler at my company.

Zscaler provides excellent technical support in India and worldwide. Their support team is quick to respond and readily available to assist with any issues or inquiries.

I have previously used Purview DLP. It can inspect files and sensitive information you send in those files. However, it may not detect when you copy-paste sensitive data into a web page's open field. This is a second level of security, a different kind of data protection, which may not catch such actions. But it can still detect sensitive information if you copy-paste it into a communication or document. It is a good product but I prefer Zscaler.

Setting up Zscaler Cloud DLP is relatively straightforward. It can easily classify data, like U.S. Social Security numbers. It provides a data discovery dashboard where you can monitor what data users are trying to share or copy from websites. It checks files and data insights to ensure nothing sensitive is being shared improperly, and it alerts you if there is a problem.

Zscaler's licensing is based on the number of users, and it is flexible. Instead of counting all 5,000 employees, they consider concurrent users, which can be more cost-effective. It might be a bit pricier than some other products, but it's a good solution, and many companies use it.

I would definitely recommend Zscaler Cloud DLP to others. Overall, I would rate the product a nine out of ten.

We use the solution to restrict uploading over public sites. We control the users’ actions through DLP. Only users who have access can upload files. We manage multiple policies.

The policies are very easy to implement. It's very easy to understand. We have the option to assign time limits to the access we provide. For example, we can implement a policy for one year for a particular user. Once it expires, we can disable it.

We have some limitations while checking logs. The product must allow users to check logs for an entire year in the local console. Currently, we can check logs only for the previous three to four months.

Forcepoint provides multiple services separately, but Zscaler does not provide separate DLP. It will be good if Zscaler provides the DLP module separately.

I have been using the solution for the last two years.

I rate the tool’s stability a ten out of ten.

The tool is very scalable. I rate the scalability a ten out of ten. Approximately 5,200 people are using the solution in our organization.

We are also using Forcepoint.

The initial setup is very easy.

The product is a little more expensive than other tools.

We do not face any challenges with the product. If we have any problems, the vendor helps us. The product is everywhere. Everyone is using it. It's very, very flexible. It provides a single solution for multiple modules like DLP, proxy, and firewall. Overall, I rate the tool a ten out of ten.

We use Zscaler Private Access to authenticate our applications, which provides a more secure way to access the Internet from our work environment. We have multiple policies for different types of users. When new users join the company, they authenticate the VPA application to access the Internet. We use SSL bypass policies, tenant restrictions policies, and Microsoft tenant cloud application policies. We also use File Type Control Policy for all categories of files, and our traffic goes to the WAPAC file and the application. We are using services as per the requirements of our clients.

The most valuable features are the File Type Control and SSL bypass policies. We have multiple options, such as very flexible policies and modules in Zscaler. We will define them based on our requirements and the active Internet. We also have geolocation users. For example, a user from Singapore moves to Dubai. When the user tries to access the Internet, Zscaler automatically detects the geolocation and drives our traffic to the other channel. There is no issue here.

When using a Blue Coat, we have some problems. Sometimes, some of our users have some issues, but once we update the agent, the traffic goes to the current geolocation without any problems, and they can access it. Sometimes, we have some URL categories blocked in our environment, but HPE sometimes removes the block. We request that the vendor to remove the block from the correct URL category. They provide a suitable solution based on the findings.

There is some issue while accessing the portal. It takes too long. It will take longer if I am on the URL Cloud App category and switch to other tabs.

I have been using Zscaler Private Access for five years.

If something happens, they have integration and they send notifications. I rate the solution’s stability a ten out of ten.

If I need to switch the policy to another task, the solution takes time. I rate the solution’s scalability a nine out of ten.

Compared to other proxies, such as Glook and IronPort, Zscaler Private Access is very easy to handle.

The initial setup is easy. You need to configure the proxy tool for the network configuration. They can forward multiple services based on the client's requirements. If we need to use the VPA, we need to authenticate. It takes one day to implement the solution, but for smooth running, it takes around a month because of timely revision.

The solution is expensive.

The categorization issue is dependent on the end user. For example, if I am trying to access a categorized URL but need to access it for work, I should be able to request a change to the categorization. Forcepoint can change the categorization itself, or the client team can do it for me. This is enough to change the categorization to meet the requirements. Overall, I rate the solution a ten out of ten.

Zscaler CASB breaks down at times.

I have been working with the solution for six months.

The tool's scalability is good.

The solution is easy to deploy.

The solution has increased prices this year.

I rate the solution a seven out of ten.

We use Zscaler Cloud DLP to maintain data load and for storage reports.

The solution is the best for storage.

We have issues with the tool's maintenance and networking. It should be able to work in offline mode as well.

I have been using the solution for two years.

Zscaler Cloud DLP is stable.

The tool is scalable. My company has 250-300 users.

Zscaler Cloud DLP's installation is difficult.

Zscaler Cloud DLP is moderately priced. We pay around 2 million rupees per year.

I rate the solution an eight out of ten.