Zscaler Private Access Features

Process of providing credentials and logging into multiple systems is easy and intuitive for users

Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.

Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case

Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials.

Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider.

Provides ability to control access to PC's, Mobile devices, and other endpoint devices.

Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network.

Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network.

Controls access to users that are not company employees that are either within the companies local area network or outside the network

Enables users to use their own device to access company applications.

Installation process is easy and flexible.

Options for resetting and enforcing password policies

Provides Administration tools/console that are easy to use and learn for routine maintenance tasks

Easily provisions new systems, platforms or applications using configuration and not customization.

Users can set, change passwords without interaction from IT staff

Supports Endpoint access control to multiple operating systems

Allows user authentication to be honored by all the hosts in two or more domains

Support access to browser based applications across required browser types

Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate

Contains pre-built and custom reporting tools to required to manage business

Provides mechanism for auditing authentication for trouble shooting purposes.

Can call and pass credentials to third party web services.

Enables the use of the VPN on multiple Devices.

Allows use of the VPN on multiple connections at the same time.

Enables the user to choose which protocol to use such as OpenVPN or PPTP.

Provides unlimited bandwidth for the user.

Does not keep logs of user activity.

Provides servers in many different locations.

Enables you to switch between servers an unlimited number of times.

Provides live customer support.

Enables the user to view the code used by the VPN.

Allows multiple payment methods such as credit card or cryptocurrency.

Allows administrative control over network components, mapping, and segmentation.

Allows visual display of networks segmented components and their connected resources.

Utilizes behavioral analysis to improve security procedures and documentation.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Allows administrative control over automated security tasks.

Protects application access and data. Prompts additional authentication for suspicious users.

Protects computing resources across a network. Prompts additional authentication for suspicious users.

Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.

Provides a risk-based approcach to determining trust within the network.

Calculates risk based on user behavior, permissions, and requests.

Monitors users attempting unauthorized access to databases, applicaitons, and othe network components.

Allows users to track and control cloud spend across cloud services and providers.

Offers data loss prevention tools to protect data from leaving the environments it is allowed to.

Scale resources automatically, adjusting for usage demands.

Enables administrators to create access policies and applies policy controls throughout request and provisioning processes

Provides advanced data center network services to deliver multiple high-speed IP.

Allows users to track and control activity across cloud services and providers.

Constantly monitors system to detect anomalies in real time.

Managed, cloud-delivered firewall that protects devices, assets, networks, and other cloud services from web-based threats.

Provides a single access point for users to access multiple cloud applications, services, and products through a central gateway

Provides a private web gateway for secure internet browsing.

Provides a risk-based approach to determining trust within the network.

Condenses long documents or text into a brief summary.

Allows users to generate text based on a text prompt.

Enforces zero trust access rules.

Integrates wide area network (WAN) capabilities, such as SD-WAN.

Enforces security requirements and secures connections with cloud resources.

Prevents unauthorized web domains from entering a network and protects against web-based threats.

Provides cloud-based firewall protection.

Uses predictive analytics to anticipate emerging threats.

Utilizes AI algorithms to identify anomolies and block access to malicious sites.

Automates common workflows and remediation tasks.

Capability to perform complex tasks without constant human input

Works across multiple software systems or databases

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives