Zscaler Private Access Features
Authentication Options (8)
-
Authentication User experience
Process of providing credentials and logging into multiple systems is easy and intuitive for users
-
Supports Required Authentication systems
Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc.
-
Multi-Factor Authentication
Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.
-
Supports Required Authentication Methods/Protocols
Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case
-
Federation/SAML support (idp)
Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials.
-
Federation/SAML support (sp)
Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider.
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Authentication
Verify the identity of users/devices to enable secure access
Access Control Types (5)
-
Endpoint access
Provides ability to control access to PC's, Mobile devices, and other endpoint devices.
-
Local Access
Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network.
-
Remote Access
Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network.
-
Partner Access
Controls access to users that are not company employees that are either within the companies local area network or outside the network
-
Supports BYOD users
Enables users to use their own device to access company applications.
Administration (6)
-
Ease of installation on server
Installation process is easy and flexible.
-
Password Policy Enforcement
Options for resetting and enforcing password policies
-
Administration Console
Provides Administration tools/console that are easy to use and learn for routine maintenance tasks
-
Ease of connecting applications
Easily provisions new systems, platforms or applications using configuration and not customization.
-
Self Service Password Administration
Users can set, change passwords without interaction from IT staff
Single Sign On
Allow users to access multiple services after entering their login credentials once
Platform (7)
-
Multiple Operating system support
Supports Endpoint access control to multiple operating systems
-
Multi-Domain Support
Allows user authentication to be honored by all the hosts in two or more domains
-
Cross Browser support
Support access to browser based applications across required browser types
-
Fail over protection
Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate
-
Reporting
Contains pre-built and custom reporting tools to required to manage business
-
Auditing
Provides mechanism for auditing authentication for trouble shooting purposes.
-
Third Party Web Services support
Can call and pass credentials to third party web services.
Usage (8)
Multi-Device Usage
Enables the use of the VPN on multiple Devices.
Multiple Concurrent Connections
Allows use of the VPN on multiple connections at the same time.
Protocol Choices
Enables the user to choose which protocol to use such as OpenVPN or PPTP.
Unlimited Bandwidth
Provides unlimited bandwidth for the user.
No Log Storage
Does not keep logs of user activity.
Varied Server Locations
Provides servers in many different locations.
Unlimited Server Switches
Enables you to switch between servers an unlimited number of times.
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Miscellaneous (4)
Live Customer Support
Provides live customer support.
Open Source Code
Enables the user to view the code used by the VPN.
Multiple Payment Methods
Allows multiple payment methods such as credit card or cryptocurrency.
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Network Management (4)
-
Network Segmentation
Allows administrative control over network components, mapping, and segmentation.
-
Network Mapping
Allows visual display of networks segmented components and their connected resources.
-
Security Analytics
Utilizes behavioral analysis to improve security procedures and documentation.
-
API/Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Security (4)
-
Security Automation
Allows administrative control over automated security tasks.
-
Application Security
Protects application access and data. Prompts additional authentication for suspicious users.
-
Workload Protection
Protects computing resources across a network. Prompts additional authentication for suspicious users.
-
Data Protection
Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.
Identity Management (3)
-
Adaptive Access Control
Provides a risk-based approcach to determining trust within the network.
-
Identity Scoring
Calculates risk based on user behavior, permissions, and requests.
-
User Monitoring
Monitors users attempting unauthorized access to databases, applicaitons, and othe network components.
Management (4)
Multicloud Management
Allows users to track and control cloud spend across cloud services and providers.
DLP Configuration
Offers data loss prevention tools to protect data from leaving the environments it is allowed to.
Dynamic Scaling
Scale resources automatically, adjusting for usage demands.
Policy Enforcement
Enables administrators to create access policies and applies policy controls throughout request and provisioning processes
Monitoring (3)
Data Center Networking
Provides advanced data center network services to deliver multiple high-speed IP.
Multicloud Visibility
Allows users to track and control activity across cloud services and providers.
Anomaly Detection
Constantly monitors system to detect anomalies in real time.
Protection (4)
Firewall-as-a-Service
Managed, cloud-delivered firewall that protects devices, assets, networks, and other cloud services from web-based threats.
Cloud Application Brokerage
Provides a single access point for users to access multiple cloud applications, services, and products through a central gateway
Web Gateway
Provides a private web gateway for secure internet browsing.
Adaptive Access Control
Provides a risk-based approach to determining trust within the network.
Generative AI (2)
-
AI Text Summarization
Condenses long documents or text into a brief summary.
-
AI Text Generation
Allows users to generate text based on a text prompt.
Components - Secure Access Service Edge (SASE) (5)
Zero Trust Network Access (ZTNA)
Enforces zero trust access rules.
Wide Area Network (WAN)
Integrates wide area network (WAN) capabilities, such as SD-WAN.
Cloud Access Security Broker (CASB)
Enforces security requirements and secures connections with cloud resources.
Secure Web Gateway (SWG)
Prevents unauthorized web domains from entering a network and protects against web-based threats.
Firewall as a Service
Provides cloud-based firewall protection.
Artificial Intelligence - Secure Access Service Edge (SASE) (3)
Predictive Capabilities
Uses predictive analytics to anticipate emerging threats.
Real-Time Threat Detection
Utilizes AI algorithms to identify anomolies and block access to malicious sites.
Automation
Automates common workflows and remediation tasks.
Agentic AI - Secure Access Service Edge (SASE) Platforms (4)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Cross-system Integration
Works across multiple software systems or databases
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Additional Functionality (68)
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
DNS Leak Protection
Prevention of DNS leaks that allows ISPs to track internet movements
Web Inspection
API
Application programming interface that allows for integration with other systems/databases
Uptime Reporting
Track the availability time for a designated network or website over a given period of time
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Multi-Language
Manage and support multiple languages
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Remote Monitoring & Management
Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Remote Access/Control
Access work applications remotely, for when working away from the office and/or traveling
Kill Switch
Immediately stop the process from executing
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Policy Management
Create, manage, and track policies and procedures within an organization
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
VPN Tunneling
Creating an encrypted connection between users' devices and a VPN server
No-log VPN
Do not collect and store any data transmitted through the network
Encryption
Convert data into a code for security
Firewalls
Monitor and control network/web traffic based on predetermined rules, protecting against unauthorized access and threats
Secure Browsing
Allow or block access to specific domains and individual pages
Mobile Alerts
Notifications via mobile devices
Anonymous Browsing
Users can access websites without revealing their IP addresses
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Single Sign On
Allow users to access multiple services after entering their login credentials once
Secure Login
At least a username and password is required to access the system
Anomaly/Malware Detection
Automatically identify and flag unusual behaviors and malicious software
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Rules-Based Workflow
Automates and streamlines business processes by creating a sequence of predefined rules and actions that govern the flow of work
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Ad Blocker
Block or filter online ads
Authentication
Verify the identity of users/devices to enable secure access
Mobile Access
Access software remotely via mobile devices
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
IP Masking
Hiding the end user's IP address and replacing it with a different address
Geo-spoofing
Process of changing the online location or country in order to hide users' real location
Data Storage Management
Manage and store data in a database
Performance Testing
Allows developers to check if their applications/web browsers are running as expected.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Active Directory Integration
Integrates with Active Directory
Multiple User Accounts
Allow multiple users with individual logins and varying permissions to use the same account, software, portal, or service
Data Verification
Process of checking different types of data for accuracy to avoid errors or inconsistencies
Access Management
Control and manage access to company resources
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Secure Data Storage
Securely stores data to prevent data loss or breaches
Data Security
Protect sensitive data for digital privacy
Biometrics
Identify or authenticate a person's identity through biological data such as fingerprints or facial patterns.
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
API
Application programming interface that allows for integration with other systems/databases
Data Synchronization
Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency
Secure Login
At least a username and password is required to access the system
Policy Management
Create, manage, and track policies and procedures within an organization
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Real-Time Data
Receive data and information in real time
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Self Service Portal
Online portal through which end users can access the system, manage tasks, or obtain information
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Employee Onboarding
Process of familiarizing new employees with the company, their position, and responsibilities
Activity Tracking
Track and document all activities across devices, networks, and other systems
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Credential Management
Manage usernames, account numbers, passwords, biometric data, public access keys, and other documentation
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Workflow Management
Create, design and manage workflows for repetitive tasks
Top-Rated Alternatives


