What is our primary use case?
Zscaler provides web security on the cloud for any device at any place all the time. If you use local appliances, users are not protected when they are connecting from outside the corporate network (e.g., home office, hotspots, airports, etc.).
We use Zscaler from all our locations, and for our roaming users too. In order to integrate our users to Zscaler, we use Okta (ADFS) for authentication, cloud security connectors for traffic redirection from locations (tunnels to the Zscaler cloud), and the Zscaler app for roaming users.
How has it helped my organization?
One on the main benefits is protection all time from anywhere.
Zscaler excels in security protection and the cloud is always up-to-date. It does not matter if you are a small or big organisation, you will receive the same security quality.
In terms of management and visibility, there is a single panel where you can configure the policies for your entire organisation worldwide and the reporting tools are brilliant.
What is most valuable?
Zscaler provides a lot of features in terms of control (URL filtering, cloud app control, etc.), which can be found in other solutions as well, but in terms of security, it is quite unique. SSL inspection, Advanced Threat Security, and Cloud Sandbox are probably the most valuable.
- SSL inspection is easy to implement and the performance is great (it is the responsibility of Zscaler to provide it).
- Advanced Threat Security protects you from most threats that can bypass the classic anti-malware solution.
- Cloud Sandbox completes the stack of security requirements stopping zero-day malware.
What needs improvement?
Do not expect to pay for the service and start using it, like Gmail. Zscaler requires a proper implementation to be done to make it successful.
For how long have I used the solution?
More than five years.
What do I think about the stability of the solution?
When you have appliances, SSL inspection is always a headache due to poor performance and/or lack of ciphers implemented.
How was the initial setup?
After a proper implementation, the maintenance is very low.
What's my experience with pricing, setup cost, and licensing?
Be aware that you will need to invest some time and money to adapt your environment for Zscaler (traffic redirection, software deployment, authentication, etc).