Primarily, it was to replace our existing on-premises box infrastructure. That's what it started with. And lately, we've been using it more for secure web gateway purposes.
Zscaler Internet Access (ZIA)
Zscaler, Inc.External reviews
184 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Best security tool
What do you like best about the product?
Zscaler provide a internet security with private access and helps users to be safe It provides overall access security to the system.
What do you dislike about the product?
VPN not works until you login to Zscaler and some time authentication it take time to load. apart from this everything this fine.
What problems is the product solving and how is that benefiting you?
It provide secure remote access to their resources for employees, partners, and contractors.
Security level at 99.9%
What do you like best about the product?
The best thing about Zscaler is its security. It is actually a platform for you to access your internal network wherever you are and on any computer as long as you are connected to the internet. Like in the office, whenever I transfer workstation, I need to login to Zscaler for me to access my login credentials. Imagine without this platform, how can a specific company access their internal network securely? That is how helpful Zscaler is.
What do you dislike about the product?
Each platform or tool has its downside. For me, the only thing I noticed in Zscaler is sometimes, it’s not launching but that is actually depends on your internet speed so I can’t say that it is a Zscaler issue at all. Overall, I can say that Zscaler is very reliable and helpful to every organization and businesses in terms of security
What problems is the product solving and how is that benefiting you?
Zscaler made me feel secure and I have a peace of mind that no one can access my credentials in the office aside from me. Also, aside from security, it also saves our connection as it can also be used to connect to the internet then be connected to the company’s entire internal network.
Seamlessly works in the background
What do you like best about the product?
No constant logins, stays running once activated and handles all internet traffic preventing unwanted sites on network.
What do you dislike about the product?
I do not have anything I really dislike about Zscaler
What problems is the product solving and how is that benefiting you?
Previous systems had been problimatic as they had blocked our proprietry applications and caused issues for our customers.
Used in Large Company Environment for Security
What do you like best about the product?
Seemless integration to current systems in place.
What do you dislike about the product?
The popups that advise that the software is working in the background.
What problems is the product solving and how is that benefiting you?
Provides security while using the internet while blocking sites that are not necessary.
Not really satisfied with its service
What do you like best about the product?
What I like about Zscaler is that it's a safe platform. I haven't had any issues with it in terms of security.
What do you dislike about the product?
It's not easy to use. It doesn't work as a normal VPN.
What problems is the product solving and how is that benefiting you?
I haven't had any problem so far.
I feel working in a safe environment
What do you like best about the product?
Detects, prevents, and mitigates cyber threats, safeguarding systems, data, and user privacy from malicious attacks
What do you dislike about the product?
Can potentially generate false alarms while using in everyday work
What problems is the product solving and how is that benefiting you?
Protects data, prevents breaches, ensures business continuity
Intergral Part of the Business
What do you like best about the product?
Unintrusive and reliable platform, with robust settings for quick updating turnaround
What do you dislike about the product?
Took some time to get running and define what we needed initially
What problems is the product solving and how is that benefiting you?
Help solved the universal security for our fleet of computers
Slow and cumbersome
What do you like best about the product?
From the end user perspective, I don't think there is anything great about Zscaler. It sometimes can completely hinder your ability to do work. If you're an employer looking at this for an option, know that because of Zscaler, your team may not be able to access their work without IT support for long periods of time.
What do you dislike about the product?
The software is incredibly slow to load, particularly for its co-branded versions. When I say slow, it will sometimes take a full minute for the login page to load. It is constantly asking for reauthentication without rhyme or reason. The way that our organization is set up, you cannot reauthenticate without your phone, which is particularly problematic, because what if you do not have your phone? In that case, you are out of luck. This software is fairly archaic.
What problems is the product solving and how is that benefiting you?
For the business, it gives them a level of control on what users are able to access, as well as what networks they join and ensuring they are private.
Best tool for proxy services
What do you like best about the product?
Amazing UI, ease of use, easy to query . You can easily find or query your data. It gives you access to control the internet access in your organisation. Better any other tool available in the market for proxy
What do you dislike about the product?
Nothing as such. It really a good tool. Costumer support can be better. Everything else is so perfect and heading in right direction. No complaints at all till now
What problems is the product solving and how is that benefiting you?
It helping us to keep our environment secure from outside threats as well as insider threats. We can block or allow the traffic which we want. And it really very easy to use
Configuring policies is user-friendly but challenges with stability
What is our primary use case?
How has it helped my organization?
It's primarily meant for perimeter security and the ability to securely access the internet and SaaS applications. So that has definitely helped us get rid of our bulky firewall hardware firewalls, at least for internet access. So that's a cost optimization. And performance. It definitely helps us boost performance.
What is most valuable?
The ease of deployment is the most valuable feature. All it takes is building a few QRE or ITC tunnels and installing agents. It's a piece of cake.
And the policies are very intuitive and easy to configure, with very little possibility of messing things up. I also like the great analytics and good visibility into the traffic that goes out of my organization.
Shadow ID Discovery is also great for finding out what SaaS applications people in my organization are trying to access.
What needs improvement?
One thing that needs to be improved is their presence in China. I'm not sure if that's a Zscaler thing or if it's a problem with all vendors in this space, but it would be nice to have better coverage in China.
This concern is a common one for vendors across the board when dealing with the Chinese market. So, currently, there is the Great Firewall of China. This firewall can significantly impact internet performance for users in China. A better presence in China from Zscaler could mean more breakout points between China and the rest of the world.
This would help to improve internet performance for users in China and make Zscaler a more viable solution for organizations with a presence in China.
For how long have I used the solution?
I started using it in 2015, but then I used it intermittently for the next couple of years. But lately, I've been using it quite a lot. So I've been working with it for about seven years now.
What do I think about the stability of the solution?
Occasionally, I've faced challenges with applications going down, but these incidents don't usually result in disconnections.
If I were to rate its stability on a scale of one to ten, with ten being the most stable, I would place it around a seven, I suppose.
What do I think about the scalability of the solution?
I've never encountered challenges where a client exceeded the bandwidth or processing limits of Zscaler. When you reach your peak, the solution is flexible enough to handle it.
If necessary, you can provision another circuit to increase your Internet bandwidth and set up an additional enforcement point, which is essentially a Zscaler reinforcement point. So, it's highly elastic and scalable.
I would give scalability a perfect ten out of ten rating.
How are customer service and support?
The customer service and support are fairly good.
In terms of their technical capabilities, response times, and issue resolution, we've had positive interactions with their support.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
The primary alternative for Zscaler is Prisma Access. It stands out as the strongest contender. Additionally, there's NetScope in the mix, although it's not a direct comparison. Another player is Blue Coat, or rather Symantec, now Broadcom. They also compete in this space. However, from what I've observed, most clients transitioning from traditional proxy setups tend to gravitate towards either Zscaler or Prisma.
Prisma Access extends beyond mere web security. This puts it in a separate category, making a direct comparison with Zscaler Internet Access somewhat challenging. Prisma offers a broader array of features, including threat profiling, threat intelligence, diverse integrations, endpoint security evaluations, and deep packet inspection. These are areas where Zscaler Internet Access falls short. Zscaler, essentially a cloud proxy, serves a specific purpose.
On the other hand, Palo Alto Networks not only operates as a proxy but also incorporates firewall functionality. It functions as a service, includes VPN replacement capabilities, and encompasses features like antivirus, anti-spyware, and IPS for threat filtering. Palo Alto holds an advantage in these aspects. However, if your primary aim is to replace an on-premises proxy, Zscaler is the way to go. Opting for Prisma Access exclusively for proxy functionalities might prove cost-prohibitive.
How was the initial setup?
I would rate my experience with the initial setup an eight out of ten, where one being difficult and ten being easy to setup.
With regard to complexity, it largely depends on the number of redundancies that you require. For example, if you just have a standby setup with maybe two or three Zscaler enforcement nodes that your tunnels need to terminate on, it's fairly simple.
However, the more redundancy and higher availability requirements that the company has, the more complex it gets. So it can get pretty complicated if you have some crazy requirements with regard to high availability and redundancy.
You just need one person to deploy the solution. One person can mostly do it. A lot of parts as well.
You would require an endpoint specialist; someone who manages the endpoints. Additionally, you might need someone from your SOC to ensure that you're able to ingest all the logs and security alerts that are being dumped into the same solution. Perhaps one or two individuals for testing purposes. The policy installation process is quite straightforward and shouldn't take a lot of time. One person should be sufficient for that.
What about the implementation team?
We deployed the solution ourselves. We have a team of in-house experts who can troubleshoot any issues that may arise. We have also used Zscaler's professional services team on occasion, for example, to help us with sizing and design, or when there are complex requirements from our clients. But for the most part, we're able to handle the ZIA deployment ourselves.
Most standard deployments take around two weeks. For example, I deployed Zscaler Internet Access (ZIA) for my previous organization, with 20,000 users in two weeks. However, I've also seen deployments for 50,000 to 60,000 users that took at least three to four months.
The exact deployment time will vary depending on the size of the deployment, the complexity of the environment, and the specific requirements of the organization.
In a typical deployment process, the first step is to procure licenses. You can either do this yourself, or Zscaler can do it for you. Once the licenses are procured, Zscaler will create a tenant for your organization. This tenant will include the enforcement nodes that will be used to process traffic for your users.
Following this, the installation of Zscaler tunnels transpires, along with the deployment of the Zscaler Client Connector (ZCC) on user machines. Configuration of policies is then carried out, encompassing aspects such as policy definitions and potential additional inspection of HTTPS traffic.
Moreover, ancillary facets are incorporated. These entail the establishment of compatible streaming services and TLS inspection. Integration with the corporate identity provider (IdP) is also a crucial step.
Furthermore, if automation is a consideration, additional automation or orchestration components can be implemented to facilitate automatic policy enforcement. While integration with Extended Detection and Response (XDR) systems is conceivable, this is an aspect I have not personally done. This more or less encapsulates the overall process.
What other advice do I have?
I would suggest knowing the use cases beforehand. Many customers I've seen aren't entirely clear about their specific use cases. They often dive into the product first and then work backward to identify whether Zscaler Internet Access aligns with their needs. Understanding your use cases is essential; it serves as a foundation for determining if Zscaler Internet Access is the right solution. If the required capabilities are already available, or if a few API integrations or lines of code can sustain the existing solution, that's worth considering. This advice isn't exclusive to Zscaler, but I've witnessed clients who become uncertain because they lack the necessary set of use cases that would justify their investment.
Overall, I would rate the solution a seven out of ten for two reasons, namely, the China issue for the improvement section and the pricing is expensive. I am not sure about the exact price, but it is expensive.
showing 121 - 130