Zscaler Internet Access Features

An environment isolated from a network where threats can be safely evaluated.

Tools to test an object to see whether or not it qualifies as malware.

The ability for a system to evaluate objects and automatically submit them to the sandbox.

The ability for a system to evaluate objects within the sandbax and assign a malware probability score.

The ability to assign objects a score based on their probability of being malware.

Administrators can access and organize data related to incidents to produce reports or make data more navigable.

Information on each incident is stored in databases for user reference and analytics.

Produces reports detailing trends and vulnerabilities related to bot management and performance.

Provides network security features to customize network access rules, workflows, and compliance requirements.

Captures logs for all firewall functions, storing information, incidents, and activity for user reference and analysis.

Application-level proxy that applies security mechanisms to connect clients to applications while concealing client network and computers.

Determines the number of connections a firewall is able to track and facilitate securely.

Allows administrative control over network components, mapping, and segmentation.

Provides features to allow scaling for large organizations and user bases.

Extends SDP network access to users regardless of their physical location.

Supports LDAP Protocol to enable access control and governance.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Similifies data identification to increase visibility and management capabilities

Protects data with within and as it leaves your secure or local network.

Analysis for users to examine threat intelligence data specific to their endpoint devices.

Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.

Provides incident alerts for leaks or breaches and provides capabilities to inform administrators of attacks.

Monitors traffic and distribute resources and scales infrastructure workloads to match traffic.

Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering.

Enforces security paramaters to prevent unauthorized access.

Detects unauthorized access and use of privileged systems.

Monitors data and compliance requirements. Sends alerts based on violations or misuse.

Monitors networks, applications, and systems to identify misconfigurations and access points that can be easily compromised.

Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Generate insights across IT systems utilizing event metrics, logging, traces, and metadata.

Provides a virtualized network for client network to mask identity, location, and other sensitive information.

Provides malware protection capabilities in addition to traditional firewall barrier technology.

Provides access control tools to categorize and block traffic and match traffic to firewall policies.

Deploys firewall(s) configured in sync to prevent network failure and provide business continuity.

Allows administrators to set policies for security and governance.

Allows for deep examination into network-connected devices, policies, and protocols.

Supports LDAP Protocol to enable access control and governance.

Authenticates users prior to granting access to networks, applciations, and systems.

Condenses long documents or text into a brief summary.

Decrypts and inspects encrypted web traffic to detect and block threats hidden within encrypted connections.

Analyzes web content to filter out malicious code, malware, and inappropriate material.

Blocks access to known malicious or unauthorized websites based on predefined policies.

Inspects and analyzes inbound and outbound web traffic in real-time for threats and compliance.

Blocks ads and trackers to enhance user privacy and reduce exposure to potential threats.

Monitors outgoing web traffic to prevent sensitive data from being leaked or exfiltrated.

Detects and blocks phishing attempts to protect users from fraudulent websites and email links.

Uses signature-based scanning, heuristic analysis, and sandboxing to detect and block malware threats.

Monitors and controls access to cloud applications and services to prevent unauthorized use and data leakage.

Regulates access to web-based applications and services as per organizational policies.

Verifies users' identities and enforces access control policies to ensure only authorized users can access permitted web resources.

Supports the creation of policies based on user roles, groups, or other attributes for more granular control.

Allows organizations to create and enforce custom web usage policies tailored to their specific needs.

Prioritizes and allocates network resources based on predefined policies to optimize performance.

Integrates with other security tools and systems, such as firewalls, SIEMs, and endpoint security solutions.

Provides comprehensive reports and logs of web activity, including sites visited, user activity, security events, and policy violations.

Leverages threat intelligence feeds to stay updated on the latest threats and enhance protection.

Utilizes AI to monitor network traffic, identify anomalies, and block attacks.

Simplifies user authentication across multiple services while maintaining security.

Ensures that users are verified through multiple credentials before access is granted, reducing the risk of compromised accounts.

Grants access based on the user’s role within the organization, adhering to the principle of least privilege.

Integrates with external identity providers to manage user identities across different platforms and services.

Mandatory encryption of data both at rest and in transit protects against unauthorized access.

Continuous monitoring and real-time response capabilities with EDR help detect and mitigate threats on endpoint devices.

Verifies the security status of a device before granting access to network resources, ensuring that only compliant devices can connect.

Divides the network into isolated segments to prevent lateral movement by attackers, ensuring that if one segment is compromised, others remain secure.

Replaces traditional VPNs by enforcing granular, context-aware access to applications based on user identity, device, and other factors.

Detect and prevent unauthorized access or transfer of sensitive data.

Data classification automatically categorizes data based on its sensitivity, allowing for appropriate security measures to be applied

API support ensures that the zero trust platform can integrate seamlessly with other security tools and existing infrastructure

Provides the ability to enforce security policies at the application layer, ensuring that access to specific applications is tightly controlled.

ensures that only authorized users can access critical applications, protecting against unauthorized entry points

UEBA identifies unusual behavior that may indicate a security threat, enabling proactive threat managemen

Provides real-time visibility into all network traffic, user activities, and data flows to detect anomalies

allows for automatic application of security policies based on predefined criteria, reducing the risk of human error and ensuring consistent enforcement

Regulatory compliance assists organizations in adhering to industry-specific regulations, such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), or the California Consumer Privacy Act (CCPA)

This works across different environments, including on-premises, cloud, and hybrid setups, ensuring comprehensive security coverage

This ensures that security policies are consistently applied across all users, devices, and application

Detailed reports that provide insights into security events help organizations maintain compliance and optimize their security posture

Capability to perform complex tasks without constant human input

Improves performance based on feedback and experience

Capability to perform complex tasks without constant human input

Works across multiple software systems or databases

Improves performance based on feedback and experience

Anticipates needs and offers suggestions without prompting

Prevents unauthorized web domains from entering a network and protects against web-based threats.

Provides cloud-based firewall protection.

Enforces zero trust access rules.

Enforces security requirements and secures connections with cloud resources.

Automates common workflows and remediation tasks.

Uses predictive analytics to anticipate emerging threats.

Utilizes AI algorithms to identify anomolies and block access to malicious sites.

Makes informed choices based on available data and objectives.

Capability to perform complex tasks without constant human input.

Works across multiple software systems or databases.

Anticipates needs and offers suggestions without prompting.

Provides specific capability to defend AI assets from adversarial attacks (including prompt injection, data poisoning, model inversion or extraction) without requiring retraining of the underlying model.

Enables automatic inspection of model inputs (prompts) and/or outputs (responses) to prevent unsafe, sensitive or manipulated content.

Monitors the integrity of model weights, dependencies or metadata (for example via SBOM/AIBOM) to detect tampering, drift or unauthorised modification.

Verifies the ability to enforce who or what (users, agents, systems) may access a model or LLM asset.

Detects unusual or harmful runtime behaviour of AI models, agents or workflows (such as unexpected output patterns, excessive permissions use, or unknown agents).

Provides a persistent, searchable audit log of AI‑asset inputs, outputs and interactions (including who/what invoked the model, when, and with what data) for forensics and compliance.

Ensures that the AI‑security platform supports scaling of AI‑asset protection (models, agents, multi‑cloud deployments) and applies governance/compliance frameworks as AI usage grows.

Enables integration of the AI‑security solution with traditional security stacks (SIEM, SOAR, cloud security, application security, identity/access management) to unify visibility and response.

Offers visibility into unmanaged or unauthorized AI/agent use (“shadow AI”) across the organisation and enforces control over such usage (e.g., agent creation, LLM‑based services).

Supports codified, machine‑enforceable security policies targeting AI models/agents (for example, blocking certain categories of prompts, enforcing least‑privilege for model use, enforcing “no external data” rules).