Mandiant Advantage Security Validation vs. Zscaler Private Access

Mandiant Advantage Security Validation, designed by Mandiant company, can automate a testing program to give us authetic and real world data on how our security controls are effectively working / performing. This solution provides trusted evidence on how well our security controls work against threats targeting our organization. This enables security teams to emulate real attack behaviors against security controls authentically throughout the attack lifecycle and the entire security stack.

Incentivized

Zscaler Private Access works really well in environments setup for FQDNs and where you know what users should/shouldn't be accessing on what ports. You can use Zscaler Private Access to figure out these kinds of features but that doesn't always mean you'll be correct. It also provides a consistent experience for users as they can access their materials anywhere. It also makes the user the last line of defense. If a user's account is compromised then the attacker has access to everything they already did. It doesn't work great in OT environments or Server based environments. Flows have to be initiated from the client and not the server for stuff to behave properly.

Incentivized

• Network visibility
• Scaling
• Threat Intel
• Monitoring

Incentivized

• Allows strong cyber security corporate policies
• Very reliable VPN application that operates at 100% efficiency
• Very easy to be configured with friendly user interface

Incentivized

• We had some software confliction issue during install.

Incentivized

• Granularity and Complexity of Policy Enforcement
• Application Segmentation and Listener Configuration - The way applications are defined and listened for is fundamental to ZPA, but can be a source of frustration, especially when dealing with legacy or non-HTTP protocols
• The ZCC is the user's primary gateway, but its control over local system network behavior can sometimes clash with enterprise requirements.

Incentivized

The Mandiant Threat Modeling Security Service evaluates our organization’s security controls and ethically uncovers attacker behaviors to reveal unknown risks and vulnerabilities within existing and proposed network and information systems including software applications, business processes and operational networks. Also, they helps in achieving our compliance objectives for internal and external regulations

Incentivized

The environment feels more secure, and we are seeing that users are adapting to it fast. The fact that we have tools to assist the users with their day-to-day access helps, as we can hand it off to the helpdesk without any escalations to the Network team. It is a work in progress for our agency, but we are seeing the benefits from the solution.

Incentivized

Mandiant is focused on a clear view of the environment, vulnerabilities, and threats. Palo Alto is a great tool for some of this, but was not mature enough at the time of our initial eval. The new version of Palo Alto looks much more robust and capable and we will definitely re-evaluate it before renewal with Mandiant. If you already have Palo in your environment, it's an even more compelling case.

Incentivized

Well ZPA is a good solution, however everyone has their own advantage and disadvantages, with ZPA you can deploy ZTNA model, which will help you better control on access, however Palo Alto, Fortinet they are also market leading firewall solution, and you can not deny if they are not providing the same features.

Incentivized

• Helps achieving compliance objectives
• Increase in stakeholders trust on their personal data security
• Compliance with internal policies and external regulations
• Increase return on investment

Incentivized

• Positive: We have now charged users internally for the service
• Negative: Dealing with users who also have the Zscaler Client Connector for their company, can cause confusions
• Negative: Enabling the Zscaler Internet Access entitlement has been a major headache for us because Zscaler Private Access users can't autheniticate through ZIA on a non corporate device.

Incentivized