Zscaler Internet Access Features

An environment isolated from a network where threats can be safely evaluated.

Tools to test an object to see whether or not it qualifies as malware.

The ability for a system to evaluate objects and automatically submit them to the sandbox.

The ability for a system to evaluate objects within the sandbax and assign a malware probability score.

The ability to assign objects a score based on their probability of being malware.

Administrators can access and organize data related to incidents to produce reports or make data more navigable.

Information on each incident is stored in databases for user reference and analytics.

Produces reports detailing trends and vulnerabilities related to bot management and performance.

Create, design and manage workflows for repetitive tasks

Identify and orchestrate execution of actions needed to restore systems to optimal conditions

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Identify component attributes like servers, hardware, software, and manage relationships across all services

Manage and store data in a database

Create, manage, and track policies and procedures within an organization

Track and manage adherence to policies for any service, product, process, or supplier

Manage and track all disruptions and incidents

Provides network security features to customize network access rules, workflows, and compliance requirements.

Captures logs for all firewall functions, storing information, incidents, and activity for user reference and analysis.

Application-level proxy that applies security mechanisms to connect clients to applications while concealing client network and computers.

Determines the number of connections a firewall is able to track and facilitate securely.

Track the availability time for a designated network or website over a given period of time

Collect and analyze traffic data about website visitors

Track and manage adherence to policies for any service, product, process, or supplier

Control and manage access to company resources

Manage and track all disruptions and incidents

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications

Allows administrative control over network components, mapping, and segmentation.

Provides features to allow scaling for large organizations and user bases.

Extends SDP network access to users regardless of their physical location.

Supports LDAP Protocol to enable access control and governance.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Similifies data identification to increase visibility and management capabilities

Define levels of authorization for access to specific files or systems

Protects data with within and as it leaves your secure or local network.

Analysis for users to examine threat intelligence data specific to their endpoint devices.

Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.

Provides incident alerts for leaks or breaches and provides capabilities to inform administrators of attacks.

Active monitoring of systems, applications, or networks

Monitors traffic and distribute resources and scales infrastructure workloads to match traffic.

Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering.

Enforces security paramaters to prevent unauthorized access.

Detects unauthorized access and use of privileged systems.

Identify and alert about security breaches by third parties

System that monitors network traffic to prevent malicious activity.

Monitors data and compliance requirements. Sends alerts based on violations or misuse.

Monitors networks, applications, and systems to identify misconfigurations and access points that can be easily compromised.

Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Generate insights across IT systems utilizing event metrics, logging, traces, and metadata.

Provides a virtualized network for client network to mask identity, location, and other sensitive information.

Provides malware protection capabilities in addition to traditional firewall barrier technology.

Provides access control tools to categorize and block traffic and match traffic to firewall policies.

Deploys firewall(s) configured in sync to prevent network failure and provide business continuity.

Control or restrict network traffic based on the source and destination of IP addresses, protocols and ports.

Control or restrict access to web content or applications

Allows administrators to set policies for security and governance.

Allows for deep examination into network-connected devices, policies, and protocols.

Supports LDAP Protocol to enable access control and governance.

Authenticates users prior to granting access to networks, applciations, and systems.

Condenses long documents or text into a brief summary.

Use AI to generate content in the form of text, images, videos, etc.

Decrypts and inspects encrypted web traffic to detect and block threats hidden within encrypted connections.

Analyzes web content to filter out malicious code, malware, and inappropriate material.

Blocks access to known malicious or unauthorized websites based on predefined policies.

Inspects and analyzes inbound and outbound web traffic in real-time for threats and compliance.

Blocks ads and trackers to enhance user privacy and reduce exposure to potential threats.

Monitors outgoing web traffic to prevent sensitive data from being leaked or exfiltrated.

Detects and blocks phishing attempts to protect users from fraudulent websites and email links.

Uses signature-based scanning, heuristic analysis, and sandboxing to detect and block malware threats.

Monitors and controls access to cloud applications and services to prevent unauthorized use and data leakage.

Regulates access to web-based applications and services as per organizational policies.

Verifies users' identities and enforces access control policies to ensure only authorized users can access permitted web resources.

Supports the creation of policies based on user roles, groups, or other attributes for more granular control.

Allows organizations to create and enforce custom web usage policies tailored to their specific needs.

Prioritizes and allocates network resources based on predefined policies to optimize performance.

Integrates with other security tools and systems, such as firewalls, SIEMs, and endpoint security solutions.

Provides comprehensive reports and logs of web activity, including sites visited, user activity, security events, and policy violations.

Leverages threat intelligence feeds to stay updated on the latest threats and enhance protection.

Utilizes AI to monitor network traffic, identify anomalies, and block attacks.

Simplifies user authentication across multiple services while maintaining security.

Ensures that users are verified through multiple credentials before access is granted, reducing the risk of compromised accounts.

Grants access based on the user’s role within the organization, adhering to the principle of least privilege.

Integrates with external identity providers to manage user identities across different platforms and services.

Mandatory encryption of data both at rest and in transit protects against unauthorized access.

Continuous monitoring and real-time response capabilities with EDR help detect and mitigate threats on endpoint devices.

Verifies the security status of a device before granting access to network resources, ensuring that only compliant devices can connect.

Divides the network into isolated segments to prevent lateral movement by attackers, ensuring that if one segment is compromised, others remain secure.

Replaces traditional VPNs by enforcing granular, context-aware access to applications based on user identity, device, and other factors.

Detect and prevent unauthorized access or transfer of sensitive data.

Data classification automatically categorizes data based on its sensitivity, allowing for appropriate security measures to be applied

API support ensures that the zero trust platform can integrate seamlessly with other security tools and existing infrastructure

Provides the ability to enforce security policies at the application layer, ensuring that access to specific applications is tightly controlled.

ensures that only authorized users can access critical applications, protecting against unauthorized entry points

UEBA identifies unusual behavior that may indicate a security threat, enabling proactive threat managemen

Provides real-time visibility into all network traffic, user activities, and data flows to detect anomalies

allows for automatic application of security policies based on predefined criteria, reducing the risk of human error and ensuring consistent enforcement

Regulatory compliance assists organizations in adhering to industry-specific regulations, such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), or the California Consumer Privacy Act (CCPA)

This works across different environments, including on-premises, cloud, and hybrid setups, ensuring comprehensive security coverage

This ensures that security policies are consistently applied across all users, devices, and application

Detailed reports that provide insights into security events help organizations maintain compliance and optimize their security posture

Capability to perform complex tasks without constant human input

Improves performance based on feedback and experience

Software program that continuously adjusts its behavior based on observed data

Capability to perform complex tasks without constant human input

Works across multiple software systems or databases

Improves performance based on feedback and experience

Anticipates needs and offers suggestions without prompting

Prevents unauthorized web domains from entering a network and protects against web-based threats.

Provides cloud-based firewall protection.

Enforces zero trust access rules.

Enforces security requirements and secures connections with cloud resources.

Automates common workflows and remediation tasks.

Uses predictive analytics to anticipate emerging threats.

Utilizes AI algorithms to identify anomolies and block access to malicious sites.

Makes informed choices based on available data and objectives.

Capability to perform complex tasks without constant human input.

Works across multiple software systems or databases.

Anticipates needs and offers suggestions without prompting.

Provides specific capability to defend AI assets from adversarial attacks (including prompt injection, data poisoning, model inversion or extraction) without requiring retraining of the underlying model.

Enables automatic inspection of model inputs (prompts) and/or outputs (responses) to prevent unsafe, sensitive or manipulated content.

Monitors the integrity of model weights, dependencies or metadata (for example via SBOM/AIBOM) to detect tampering, drift or unauthorised modification.

Verifies the ability to enforce who or what (users, agents, systems) may access a model or LLM asset.

Detects unusual or harmful runtime behaviour of AI models, agents or workflows (such as unexpected output patterns, excessive permissions use, or unknown agents).

Provides a persistent, searchable audit log of AI‑asset inputs, outputs and interactions (including who/what invoked the model, when, and with what data) for forensics and compliance.

Ensures that the AI‑security platform supports scaling of AI‑asset protection (models, agents, multi‑cloud deployments) and applies governance/compliance frameworks as AI usage grows.

Enables integration of the AI‑security solution with traditional security stacks (SIEM, SOAR, cloud security, application security, identity/access management) to unify visibility and response.

Offers visibility into unmanaged or unauthorized AI/agent use (“shadow AI”) across the organisation and enforces control over such usage (e.g., agent creation, LLM‑based services).

Supports codified, machine‑enforceable security policies targeting AI models/agents (for example, blocking certain categories of prompts, enforcing least‑privilege for model use, enforcing “no external data” rules).

Prevent unauthorized access to personally identifiable information

Discover and connect variety of data sources to the application for analysis

Track visitors'/audience's responses across web pages and other optimized content

Remotely delete data from devices without needing physical access

Analyze potential risks across the organization

Prevent malicious actions by individuals connected to the organization, such as current and past employees, contractors, or associates

Prevents, detects and removes malware

Control system access and/or deliverability for applications and email addresses

Set up connections to third-party platforms to improve business processes

Add a digital mark to show ownership of an image, video, document, etc.

Use AI to generate content in the form of text, images, videos, etc.

Systematic evaluation of the security of a company's overall security system and situation

Application programming interface that allows for integration with other systems/databases

Protects systems from ransomware attacks and mitigates attack risks

Request two or more credentials to prove user's identity before granting access to systems

Data is backed up automatically to prevent data loss

Support multiple types of devices

Track and report regulatory data to either internal management or external stakeholders

Analyze and gain insights into data in real-time

Securely stores data to prevent data loss or breaches

Ability to restore deleted, hidden, or lost data from an email server/system

Track and document all activities across devices, networks, and other systems

Restrict data transfer to and from external storage systems such as USB and disk drives

View and track pertinent metrics to find patterns and gain insights from data

A record of all activities within the system, including user access, changes made, etc.

Isolate suspicious files to prevent harm to computer systems

Plan and implement business continuity measures in case of unforeseen events

The process of discovering content on the web that is same or similar to logos, trademarks or other proprietary content

System alerts about the need to escalate an issue or request

Initiate collection and analysis of known risks

Identify sensitive or personal information collected from users

Notifications that are delivered to users as soon as an event occurs

Notifying as a warning or reminder of a potential or imminent hazard

Grouping log entries based on similar attributes.

Process of copying and storing data in more than one site or node

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Move files across different systems or networks

Compliant with HIPAA, which sets standards for sensitive patient data protection

Filters used to determine different types of malware threats

System alerts about the need to escalate an issue or request

Set & manage permission levels based on user roles and restrict access to only authorized individuals

Tracks and makes accessible data on the health of servers and other network components.

Interact with data visualization elements, such as charts and graphs, to drill down into data

Alter the layout and content of reports

Analyze and gain insights into data in real-time

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Active monitoring of systems, applications, or networks

Notifications that are delivered to users as soon as an event occurs

Track and document all activities across devices, networks, and other systems

Hardware components included as part of the software system

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Define levels of authorization for access to specific files or systems

Receive data and information in real time

Continuously scan servers on a designated network to monitor health and search for any irregularities or failures

Extra layer of security that requires not only a password and username but also something specific to that user

Collection, search, and analysis of access logs and audit logs

View and track pertinent metrics to find patterns and gain insights from data

Manage and support multiple locations

Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access

Track visitors'/audience's responses across web pages and other optimized content

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Application programming interface that allows for integration with other systems/databases

A chronological record of actions or occurrences within a network, software, or process

Discover patch statuses and vulnerabilities

Notifying as a warning or reminder of a potential or imminent hazard

Allow users to access multiple services after entering their login credentials once

Creation and customization of dashboards

Observe and track the demand, usage, progress or quality of a system, product, or user