Citrix Gateway (or Citrix NetScaler Gateway) is an access gateway with SSL VPN solution, providing single sign-on (SSO) and authentication for remote end users of network assets.
$995
per month
Zscaler Private Access
Score 7.9 out of 10
N/A
Zscaler Private Access™ (ZPA) gives users secure access to private apps and OT devices while enabling zero trust connectivity for workloads.
N/A
Pricing
Citrix Gateway
Zscaler Private Access
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Citrix Gateway
Zscaler Private Access
Free Trial
No
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
Yes
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
The price for a Citrix Gateway (VPX) perpetual license is $995.00.
You must contact the sales team for subscription license pricing.
The best usage scenario for Citrix Netscaler Gateway is in enterprises with a high volume of telecommuting users or in situations where the user needs to access certain applications from anywhere. In our case as a hospital, we need our doctors to access the medical records of the patients and be able to carry out any required action, with a high level of security and with a certain agility.
Zscaler Private Access works really well in environments setup for FQDNs and where you know what users should/shouldn't be accessing on what ports. You can use Zscaler Private Access to figure out these kinds of features but that doesn't always mean you'll be correct. It also provides a consistent experience for users as they can access their materials anywhere. It also makes the user the last line of defense. If a user's account is compromised then the attacker has access to everything they already did. It doesn't work great in OT environments or Server based environments. Flows have to be initiated from the client and not the server for stuff to behave properly.
allows seamless use of 2-factor authentication for heightened security within the VPN, and lowers risk of an external hack because of it.
it allows for differing levels of security. access can be set specifically through the VPN so 2 users can use the same site and get different results depending on their active directory security policy.
It can grant the ability to launch a single application or an entire VPN envelope
Application Segmentation and Listener Configuration - The way applications are defined and listened for is fundamental to ZPA, but can be a source of frustration, especially when dealing with legacy or non-HTTP protocols
The ZCC is the user's primary gateway, but its control over local system network behavior can sometimes clash with enterprise requirements.
The environment feels more secure, and we are seeing that users are adapting to it fast. The fact that we have tools to assist the users with their day-to-day access helps, as we can hand it off to the helpdesk without any escalations to the Network team. It is a work in progress for our agency, but we are seeing the benefits from the solution.
Support is pretty good and pretty fast to respond. I can't say I can really complain about the support experience I've had with them, as they've resolved issues within a reasonable time-frame. Of course, they could always be faster and better, but I think for what we pay, it's well worth the money.
The only other SSL VPN type product I have used was Citrix Secure Gateway. Netscaler is a MUCH more feature filled product. CSG was a free add on to older versions of Citrix Metaframe and XenApp and was specifically just used for securing Citrix infrastructure. Netscaler excels in securing Citrix but can also be used to secure shared apps of all kinds regardless of how they are published. I did do a test run on 2X's product which did include a secure gateway but then base 2X product was not really comparable to Citrix so did not go too far with it.
Well ZPA is a good solution, however everyone has their own advantage and disadvantages, with ZPA you can deploy ZTNA model, which will help you better control on access, however Palo Alto, Fortinet they are also market leading firewall solution, and you can not deny if they are not providing the same features.
Our data is secure and protected from the outside world which is priceless.
It saves our business money as we can provide our clients with a safe and secure alternative to accessing their data remotely rather than having to take the more expensive route of travelling on-site to gather the data we need.
It gives us the opportunity to host on-site training using gated cloud based environments which enhances our business services. The ability to easily change access information, such as a password, after administering a training course gives us the flexibility we need to provide and subsequently restrict access to our training environments to suit our needs.
Positive: We have now charged users internally for the service
Negative: Dealing with users who also have the Zscaler Client Connector for their company, can cause confusions
Negative: Enabling the Zscaler Internet Access entitlement has been a major headache for us because Zscaler Private Access users can't autheniticate through ZIA on a non corporate device.
