We have site-to-site VPNs, FortiClient for remote access, a hybrid on-premises and Microsoft 365 environment, and a few internal applications. We're looking at Zscaler for private access, web filtering, application control, and AI access security.
How has deployment gone, and what would you test before committing? I'm also interested in alternatives.
Private access can feel much more seamless than a traditional VPN for users. An App Connector sits inside your network, and traffic reaches it through Zscaler's cloud rather than through the old VPN path.
That doesn't mean every VPN use case disappears automatically. Test your internal apps, file servers, and printer shares separately, including name resolution and overlapping IP subnets. Some deployments still need a VPN for things that don't fit the new access model.
Plan for the rollout to be a project, not just an agent install. Configuration can be complicated, and the management interface has been spread across several screens. Paid onboarding may be worth considering if your team is new to it.
Get the help desk involved during the pilot and track incidents by application and user group. Some connection problems can be disruptive enough that users want the agent disabled. You need a clear process for troubleshooting and exceptions rather than letting that become the default fix.
a9!regbank_205:
Include developers and other power users in that pilot. Their connection patterns may look quite different from the standard office workload.
The feedback on day-to-day use is mixed. Some deployments report a smooth, mostly hands-off experience, while others have run into connection problems or never fully retired their VPNs. I'd judge it against your own apps and support workload, not just a demo.
Look closely at the contract as well as the technical fit. One concern raised was a substantial price increase at renewal, so ask for renewal terms and pricing in writing. If a hands-on proof of concept matters to you, confirm that it's available before investing too much time.
For alternatives, Microsoft Global Secure Access is worth evaluating alongside your existing Microsoft 365 setup. It offers private access and internet access capabilities with Microsoft integration. Netskope is another option to compare.
Check each one against your actual requirements and current pricing. Don't assume that a good private access pilot also proves the web filtering, application control, or AI access features will meet your needs.
Answers are reviewed before publication.
29p!rivet_603:
Also check split tunneling and port conflicts with other connectivity tools. Those are easy to miss if the pilot only covers ordinary web apps.