Netskope CASB vs. Zscaler Deception

Well suited for an organization that is either architecting their environment for majority SaaS usage, or presently is a cloud-first organization and wants greater insight into their existing cloud placements. It does provide good first-level DLP and will need to be supplemented with a purpose drive DLP control.

Incentivized

Zscaler Deception Technology is well suited for companies that want to provide private access to their internal apps without using a VPN. Zscaler integrates zero trust into their honey tools that is good for detecting lateral movement. With Zscaler you allow only your employees to be able to access internal apps so detecting a bad actor is much easier.

Incentivized

• Policies against integrated SaaS applications.
• Visibility into cloud applications usage and risk.
• Cloud Confidence Index (research into security confidence of providers).

Incentivized

• Zero Trust
• Honeypots/nets etc.
• Fast GUI

Incentivized

• Fine tuning of Web Categories
• UPN and Email attributes mapping should be further simplified as deployment progresses
• Email DLP is at nascent stage, can be further strengthened and matured.

Incentivized

• It should be more cost effective.
• Regular reports.
• Integration support.

Incentivized

Netskope's CASB can be challenging to deploy. If it is being implemented for the first time and staff do not have prior experience with deployments, then professional services should be utilized. Once configured and deployed, the product provides an easy-to-navigate User Interface and can be managed effectively with training.

There have been some struggles with their infrastructure keeping pace with demand and load. Support can only do so much and has to defer to known problems being escalated.

Incentivized

I find that Netskope CASB provides a larger catalog of SaaS applications and provides additional security controls for each app, allowing granularity to what actions end users can perform on the sites. This goes beyond simple block download/block upload, making it highly effective at enforcing the actions outlined in corporate policies.

Incentivized

• We end up troubleshooting many not existing issues thanks to Netskope.

Incentivized

• Improved threat detection.
• Lesser false positive alerts.

Incentivized