Solid ZTNA, and the migration is a people project
3.6/5overall, average of the five axes
Deployment effort3
Support quality4
Features vs promises4
Pricing transparency3
Return on investment4
What happened
Replacing VPN with ZTNA was the right call and Zscaler did what it promised technically. What I underestimated was the change management: every application owner wanted proof their app would still work, and the policy model is different enough from firewall rules that the network team needed real training. Six months in, remote access complaints are down and I would do it again with more runway.
Worked well
Global points of presence, latency is genuinely good. Policy model is application-centric rather than network-centric.
Did not
Migration is an organisational project, not a technical one. Troubleshooting a slow app takes a specific skill set. Licensing tiers are confusing.
8 found this helpful