Zscaler Private Access is a highly configurable method for providing tunnels without having to access a corporate network. It provides a transparent VPN functionality without soaking up too much bandwidth. The client automatically recognizes captive portals and allows access to authenticate to local networks without impairing tunnel construction. There are some websites that detect network changes and require the client to be suspended to work properly, but user profiles can be configured to allow this. Review collected by and hosted on G2.com.

Zscaler generally runs in the background and is relatively invisible, until you reach a website that is sensitive to the network change or VPN state and refuses to allow you to authenticate. On enterprise deployments, the client has to be authenticated by each user (it doesn't accept single-sign-on credentials) which creates another speed bump each time a user needs some external resource. It's decent when most of the traffic is within the corporate network, but some functional groups (like research or communications) which have a lot of traffic outside the corporate network will have considerable frustration. Some of these issues can be addressed through configuration and implementation of policy. Review collected by and hosted on G2.com.