Zscaler Zero Trust Cloud Reviews & Product Details

. True Microsegmentation (No Network Exposure)

Direct Application Access: Unlike traditional VPNs that place users directly on the internal network, Zscaler connects authorized users directly to specific applications without giving network access.

Prevention of Lateral Movement: If a user device or credential is compromised, attackers cannot scan the network or move laterally to infect other assets.

2. Elimination of Traffic Backhauling

Direct-to-Cloud Connection: Remote and branch traffic routes straight to the nearest Zscaler cloud node rather than hairpinning back through a central corporate data center or VPN hub.

Improved User Experience: This significantly reduces latency for cloud applications (like Microsoft 365, Salesforce, and SaaS tools), leading to faster performance for remote workforces.

3. Scalable SSL/TLS Traffic Inspection

Complete Visibility: A huge percentage of enterprise web traffic is encrypted, making it a primary hiding spot for malware. Zscaler inspects SSL/TLS traffic at scale without performance degradation, eliminating the hardware bottlenecks common with traditional on-premise firewalls.

4. Consolidated Cloud Security (SSE / SASE Architecture)

All-in-One Security Stack: It unifies Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA), and Data Loss Prevention (DLP) into a single cloud-native platform (ZIA and ZPA).

Simplified Operations: Administrators manage policies, visibility, and threat intelligence from a central console rather than managing disparate point products. Review collected by and hosted on G2.com.

1. Network Performance and Throughput Drops

Reduced Speeds: Because Zscaler routes traffic through its cloud for deep packet inspection and SSL decryption, users frequently report a 10% to 20% drop in raw download/upload speeds. In poorly optimized setups, upload speeds can suffer even more drastically.

Throughput vs. Latency: Zscaler optimizes for low latency rather than high throughput. While it is great for loading a SaaS web page securely, transferring massive files or running high-bandwidth applications can feel sluggish compared to a direct, unfiltered internet connection.

2. Friction for Software Developers

SSL/Certificate Issues: Zscaler inspects encrypted traffic by acting as a "man-in-the-middle" (MITM), replacing original website certificates with its own root CA. While web browsers easily accept this if the corporate IT team pushes the certificate via Group Policy, command-line developer tools (like Docker, npm, Python pip, Git, and AWS CLI) do not use the Windows/Mac system certificate store by default.

The Result: Developers constantly face SSL Certificate Verify Failed errors and have to manually inject the Zscaler certificate into their individual toolchains, or beg IT to whitelist their domains.

3. Client Connector (Agent) Conflicts and Quirks

Clashing with Other VPNs: If an organization is running Zscaler Client Connector (ZCC) alongside a legacy VPN (like Cisco AnyConnect or Palo Alto GlobalProtect) during a migration, the agents often fight for control of network routes, causing dropped connections.

Local Network Blindness: Because Zscaler captures and tunnels DNS and web traffic, standard network troubleshooting tools (like Ping or Traceroute) often behave strangely or fail entirely, making it difficult for IT to diagnose basic local network issues.

4. Administrative Complexity and UI

Fragmented Portals: Zscaler has historically maintained separate management portals for ZIA (Internet Access), ZPA (Private Access), and ZDX (Digital Experience). Administrators often complain that the UI feels dated and that managing holistic policies requires jumping between different screens and rule sets.

Steep Learning Curve: It is not a "plug-and-play" solution. Organizations without a highly mature network team often misconfigure MTU limits, UDP settings, or bypass rules, which leads to immediate user complaints.

5. Premium Pricing and Customer Support

High Cost: Zscaler is often significantly more expensive than traditional firewall-based VPNs or some SSE competitors.

Support Bottlenecks: Many enterprise administrators note that Tier 1 customer support can be slow to resolve complex routing issues, especially if the problem involves integrating Zscaler with a competitor's product or a niche cloud environment. Review collected by and hosted on G2.com.

What I like best about Zscaler Zero Trust Cloud is its ability to deliver secure, seamless access to applications and data from anywhere without relying on traditional VPN infrastructure. The platform's Zero Trust architecture has significantly reduced our attack surface while providing a better user experience, as users can connect directly to the applications they need with minimal latency.

The cloud-native design makes deployment and management straightforward, and the centralized policy engine provides excellent visibility and control across users, devices, and applications. I also appreciate how well it integrates with identity providers and security ecosystems, helping streamline security operations and enforce consistent access policies.

Another major advantage is the platform's intelligence and analytics capabilities, which provide actionable insights into user activity, application usage, and potential security risks. This has helped improve security posture while reducing operational complexity. From a business perspective, supporting hybrid and remote work securely at scale has delivered significant value and a strong return on investment by reducing dependence on legacy network infrastructure and simplifying ongoing management. Review collected by and hosted on G2.com.

One area where Zscaler Zero Trust Cloud could improve is the complexity of the initial deployment and policy configuration process, particularly for organizations migrating from traditional network security architectures. Because the platform offers a wide range of granular controls and security policies, it can take time for administrators to fully understand and optimize configurations.

From a UI and management perspective, some troubleshooting workflows could be more intuitive, especially when diagnosing connectivity or policy-related issues across multiple applications and user groups. While the platform provides extensive visibility and analytics, identifying the root cause of an issue can sometimes require additional expertise and familiarity with the environment.

Organizations should also plan for a learning curve during onboarding, as both administrators and end users may need time to adapt to the Zero Trust model. More guided implementation resources, simplified policy recommendations, and enhanced AI-driven insights for troubleshooting could further streamline adoption and operational efficiency. That said, these challenges are largely outweighed by the platform's security capabilities, scalability, and long-term value. Review collected by and hosted on G2.com.

Since it´s a Cloud solution it can reach out to all org resources and can effectively asses and protect. It´s now centralized and it can managed by some little administrators than can keep security as a core. Review collected by and hosted on G2.com.

Zscaler has resources overload derived from it´s granullar form of data and packet analysis, also can deal with IT culture issues since many companies can have legacy technologies that could not compatible and can cause remediation implementations than can compromise company operations Review collected by and hosted on G2.com.

What I like most about Zscaler Zero Trust Cloud is that it allows for secure and granular access without exposing the entire network or relying on a VPN. Continuous validation of identity, device, and context enhances protection. I find it valuable because trust is not granted solely upon login. Each access can be evaluated based on identity, device security status, location, and risk level. Review collected by and hosted on G2.com.

I find the complexity of the administrative portal and the problem diagnosis process cumbersome. When there are multiple policies, identity integrations, and connectors, identifying the exact cause of a blockage may require reviewing numerous logs. Review collected by and hosted on G2.com.

I like that Zscaler Zero Trust Cloud provides centralized security and access control without making the setup overly complicated for users. The policies are easy to manage from the cloud, and it gives us good visibility into internet traffic and application access. I really appreciate the consistent protection it offers, whether users are working from the office or remotely. The day-to-day IT management is much easier because we can manage security policies from one central console and apply the same rules consistently across users and locations. Since everything is cloud-based, making policy changes and checking activity is quicker and more convenient for the IT team, which saves time and improves overall security. Review collected by and hosted on G2.com.

Overall, Zscaler works well for us, but there is a bit of a learning curve when setting up and troubleshooting more advanced policies. Sometimes it takes time to identify exactly which policy or configuration is causing an access issue. The reporting and troubleshooting tools could also be made more straightforward for day-to-day IT teams. Better step-by-step guidance and simpler troubleshooting would make the platform even easier to manage. Review collected by and hosted on G2.com.

The best about Zscalar is providing secure access to applications without users having to connect via a traditional VPN. It checks security by tracing all connections and keeps the user experience smooth. Its cloud native deployment model is also amazing which allows users to easily scale it and provides visibility of network traffic that helps identifying and reacting to potential threats much faster. Review collected by and hosted on G2.com.

So far, In haven't come across any significant downsides. The platform has been reliable, and my overall experience has been very positive. Review collected by and hosted on G2.com.

Zscaler plays a major role in our company since we have mostly everything. ZIA is useful in blocking everything including web attacks and ransome wares. ZPA replaces our old Global Protect wherein you don't have to manually authenticate as Zscaler do it for you. Using this gives us confidence and protection but at the same time stability for connectivity. Review collected by and hosted on G2.com.

It is complex to setup and is high costing. Setup alone needs payment. Performance varies due to SSL Inspection. Lots of things are getting blocked because of this and sometimes it is hard to pin point which causes the blocking. One thing I noticed is that their support is a hit or miss. Sometimes you're gonna get a technician who knows their thing and won't leave you be, sometimes there's a technician that will just keep rescheduling another meeting just to get logs and that's it. I can also identify that by using Zscaler ZPA, the connectivity you have will be reduced in half. Review collected by and hosted on G2.com.

Unlike legacy VPNs that grant broad network access once authenticated, Zscaler connects users directly to individual applications. This prevents lateral movement by hackers; even if a user's device is compromised, the attacker cannot scan or move across the corporate network. Review collected by and hosted on G2.com.

Transitioning an enterprise from a traditional "castle-and-moat" network to a strict zero-trust model requires a massive architectural shift. Navigating the initial policy configuration and mapping out granular access rules can be highly complex for network administrators. Review collected by and hosted on G2.com.

What I like most about Zscaler Zero Trust Cloud is its ease of use and excellent reliability. It's simple for users, while also consistently providing secure and dependable access. Review collected by and hosted on G2.com.

The reporting and troubleshooting of issues could be a little bit more intuitive, especially when diagnosing complex connectivity issues which are time sensitive for end users. Review collected by and hosted on G2.com.

It improves security by enforcing zero-trust access instead of broad network access. It can replace or reduce dependence on VPNs, and it works well for remote or hybrid users. It also provides cloud-based management and helps protect apps and data without exposing internal networks. Overall, it can simplify security operations by combining features like access control, inspection, and isolation. Review collected by and hosted on G2.com.

It can feel too restrictive at times, blocking sites that users need. I’ve also seen reports of slowdowns or lag with web apps and email. Troubleshooting can be difficult because the issue could come from the user’s device, the network, or Zscaler settings. The cost is very high for SMB customers and mid-size organisations. And if the service has an outage, it can affect access since so much traffic depends on it. Review collected by and hosted on G2.com.