
The cloud-native architecture eliminates the need for on-premise hardware, which reduced our deployment time from weeks to hours. The SSL inspection capability catches threats in encrypted traffic without noticeable latency — our page load times stayed consistent even after enabling full inspection. The centralized admin portal lets me apply granular URL filtering and bandwidth policies across all locations in a single policy push, saving roughly 2-3 hours per week compared to managing individual firewalls. An unexpected benefit: the real-time logging and dashboard gave our team visibility into shadow IT apps we didn't know employees were using, which helped us proactively address data leakage risks. Review collected by and hosted on G2.com.
Honestly, the certificate rollout for BYOD devices was a pain. Getting root certs pushed to unmanaged endpoints took way more workarounds than it should have and added about a week to our go live. Troubleshooting is another sore spot. When something breaks, the logs don't make it easy to figure out if it's a policy conflict, a PAC file issue, or a tunnel timeout. More often than not, I end up raising a support ticket just to isolate the problem. The admin console also gets noticeably slow when you're working with large rule sets or pulling reports older than 30 days. And pricing? Good luck figuring out your per user cost across ZIA, ZPA, and ZDX without going back and forth with the sales team. A self service calculator would go a long way. Review collected by and hosted on G2.com.