Check Point Harmony SASE, based on Perimeter 81 which was acquired by Check Point in late 2023, is designed to simplify secure network, cloud and application access for the modern and distributed workforce.
$10
per month per user
Zscaler Private Access
Score7.9 out of 10
N/A
Zscaler Private Access™ (ZPA) gives users secure access to private apps and OT devices while enabling zero trust connectivity for workloads.
N/A
Pricing
Harmony SASE
Zscaler Private Access
Editions & Modules
Essentials
$10
per month per user
Premium
$15
per month per user
Premium Plus
$20
per month per user
Enterprise
Custom
No answers on this topic
Offerings
Pricing Offerings
Harmony SASE
Zscaler Private Access
Free Trial
No
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
Yes
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
+$50 per month per gateway. Discounts available for annual pricing.
—
More Pricing Information
Features
Harmony SASE
Zscaler Private Access
Identity Management
Comparison of Identity Management features of Check Point Harmony SASE and Zscaler Private Access
Feature
Check Point Harmony SASE
10.0
1 Ratings
12% above category average
Zscaler Private Access
-
Ratings
Multi-Factor Authentication
10.01 Ratings
00 Ratings
Zero Trust Security
Comparison of Zero Trust Security features of Check Point Harmony SASE and Zscaler Private Access
Feature
Check Point Harmony SASE
9.8
1 Ratings
5% above category average
Zscaler Private Access
10.0
1 Ratings
7% above category average
Continuous Verification
10.01 Ratings
10.01 Ratings
Secure Web Gateways
10.01 Ratings
10.01 Ratings
Segmentation Leveraging
9.01 Ratings
00 Ratings
Admin Access Control
10.01 Ratings
00 Ratings
Network Flow Control
00 Ratings
10.01 Ratings
Network Data Encryption
00 Ratings
10.01 Ratings
Network Topology Mapping
00 Ratings
10.01 Ratings
Threat Intelligence
Comparison of Threat Intelligence features of Check Point Harmony SASE and Zscaler Private Access
I'd suggest that Perimeter81 is recommended when you want something that is easy to administrate, with little maintenance, unlike a VPN/secure network that you host and manage internally. We've had incidents when there has been downtime at Perimeter81, which has effectively locked us out of some of our secure services (anything locked down via IP). They have made improvements to their infrastructure and it seems to have improved in recent months, but this is something to keep in mind for critical connections
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Zscaler Private Access works really well in environments setup for FQDNs and where you know what users should/shouldn't be accessing on what ports. You can use Zscaler Private Access to figure out these kinds of features but that doesn't always mean you'll be correct. It also provides a consistent experience for users as they can access their materials anywhere. It also makes the user the last line of defense. If a user's account is compromised then the attacker has access to everything they already did. It doesn't work great in OT environments or Server based environments. Flows have to be initiated from the client and not the server for stuff to behave properly.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Application Segmentation and Listener Configuration - The way applications are defined and listened for is fundamental to ZPA, but can be a source of frustration, especially when dealing with legacy or non-HTTP protocols
The ZCC is the user's primary gateway, but its control over local system network behavior can sometimes clash with enterprise requirements.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
The environment feels more secure, and we are seeing that users are adapting to it fast. The fact that we have tools to assist the users with their day-to-day access helps, as we can hand it off to the helpdesk without any escalations to the Network team. It is a work in progress for our agency, but we are seeing the benefits from the solution.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
In the beginning, it was a bit rough getting it to work and getting any kind of quality support from customer service. But recently they really improved their service and customer service. I believe they raise 100M in new funding which provides them the resources to make a better product with better tools and a better help desk.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Well ZPA is a good solution, however everyone has their own advantage and disadvantages, with ZPA you can deploy ZTNA model, which will help you better control on access, however Palo Alto, Fortinet they are also market leading firewall solution, and you can not deny if they are not providing the same features.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Positive: We have now charged users internally for the service
Negative: Dealing with users who also have the Zscaler Client Connector for their company, can cause confusions
Negative: Enabling the Zscaler Internet Access entitlement has been a major headache for us because Zscaler Private Access users can't autheniticate through ZIA on a non corporate device.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
