Zscaler logo

Zscaler Zero Trust Exchange

Zscaler · Cloud and Network Security

Secure internet and application access for every user, delivered from the cloud.

Request a consultationCompare products
Draft summary. This page summarises what the vendor's product family is generally known for. Each claim is pending confirmation against vendor documentation.

Overview

Zscaler sits between users and the internet or applications. Users connect to the nearest Zscaler data centre, where traffic is inspected and access is granted per application, based on identity and context. Applications are not exposed to the internet.

Its products cover secure internet and web access, private application access that replaces VPN, data protection and monitoring of the user experience.

Primary capability
Zero trust access and secure web gateway delivered as a cloud service
Deployment models
SaaSPending vendor confirmation
Agent-basedPending vendor confirmation
Management effort
ModeratePending vendor confirmation

Customer challenges and business value

  • VPN gives too much access

    Once connected, a user can often reach far more of the network than their job requires.

  • Internet traffic bypasses the data centre

    Cloud apps used from home or branches skip the corporate firewall.

  • Attackers move laterally

    On a flat network, one compromised device can reach many systems.

What this helps you achieve

  • Per-application access in place of network-wide VPN
  • Consistent protection wherever users work
  • Applications hidden from the internet

Key capabilities

  • Secure internet and web access (secure web gateway)Pending vendor confirmation
  • Zero trust private application access to replace VPNPending vendor confirmation
  • Cloud-delivered inspection of encrypted trafficPending vendor confirmation
  • Data protection and cloud app controlPending vendor confirmation
  • User experience monitoringPending vendor confirmation

Technical architecture and deployment

Where the product sits in a typical security architecture, and what it connects to.

Data sources

  • Users and devices
  • Internet and SaaS
  • Private applications

This product

Zscaler Zero Trust Exchange

Outputs and actions

  • Access decisions
  • Inspected traffic
  • Logs to SIEM
Generic placement for this category. Actual data sources and integrations depend on the product and your environment.

Integration ecosystem

Categories of systems this type of product commonly connects to. Specific connectors and versions are confirmed with the vendor.

  • Identity providers and single sign-onPending vendor confirmation
  • Endpoint security and device posture toolsPending vendor confirmation
  • SIEM and SOAR platformsPending vendor confirmation
  • SD-WAN and branch networkingPending vendor confirmation

Common use cases

  • Replacing VPN with per-application access
  • Securing web access for remote and branch users
  • Protecting data leaving through cloud apps
  • Reducing lateral movement after a compromise

Frequently asked questions

Does Zscaler replace our firewall?

It replaces many perimeter functions for user and internet traffic, but data centre and internal firewalling needs are reviewed separately.

Where does the information on this page come from?

This page is a draft summary of what the vendor's product family is generally known for. Capabilities, deployment models and integrations are marked as pending until they are checked against vendor documentation. Ask us for a confirmed scope for your environment.

Cato Networks logo

Cato SASE Cloud

Cato Networks · Cloud and network

Unified SD-WAN and cloud-delivered network security (SASE)

Talk to an expert about Zscaler Zero Trust Exchange

Share your environment and requirements. We will confirm product details with the vendor and help you decide.

Request a consultation