Zscaler Data Security

We use DLP for inline web, and some CASB - we had DLP but when we switched to Zscaler proxy we had to switch to Zscaler Data Protection

it works, but the GUI can get much better

Web DLP, starting to deploy endpoint and email

Less well suited as a full stack DLP replacement today, but nearly there.

Inline

Policies are easy to manage and can be used across the different modules

The dictionaries don't always work.

Scanning zip files are really reliable.
The DLP dictionaries could use some work.

INVISTA uses Zscaler Data Protection to grant access to specific applications where our critical data is housed. The business case is around ensuring that our intellectual property is protected in all forms and in all applications.

Zscaler Data protection / Zscaler private access is great for remote worker scenarios where people will be running from, untrusted networks. Data protection is also very valuable for applications where we want to limit by identity those individuals that should even have access to the application.

We utilize this for DLP and to manage our data security posture. It provides a unified, single-pane DLP experience across our organization, making DLP policy management convenient. The tool is potent and offers many features. The future direction is also auspicious, as Zscaler moves away from legacy regex-based detection to leveraging large language models (LLMs) for more accurate, context-based detections.

For a large company with lots of data it is a fantastic solution and much needed. This is probably not suited for very small organizations as it might be overkill. Organizations with lots of sensitive data such as PII, federal agencies or health care will greatly benefit from this product.

I use Zscaler to protect indexed and categorized apps through multiple protection channels—in-line, CASB, and Endpoint. I also utilize ZWA work workflow automation for DLP alerts.

Data protection is well-suited when the client is already utilizing ZIA and has CASB solutions set up, and is a more greenfield environment. It is challenging when coming from legacy DLP products with auditing requirements in place.

We partner with Zscaler Zia to authenticate, secure, and protect guest BYOD on the corporate guest network. They are a fantastic partner for us, and their partnership is invaluable.

Whenever data needs to be protected.

DLP, Endpoint ....

Email DLP still lacks SMTP mail DLP. Good broad raining DLP.

we use both the inline/web DLP and the endpoint DLP solutions. Our primary used case is to protect data classification tag protection.

Very well integrated across Zscaler Internet Access(ZIA) and other Zscaler platforms