Cisco ScanSafe Web Security SaaS [EOL] vs Zscaler Internet Access comparison

Why PeerSpot?

Cisco and Zscaler are both solutions in the Secure Web Gateways (SWG) category. Additionally, 100% of Cisco users are willing to recommend the solution, compared to 98% of Zscaler users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cisco ScanSafe Web Security SaaS [EOL] and Zscaler Internet Access based on real PeerSpot user reviews.

Find out what your peers are saying about Cisco, Fortinet, Zscaler and others in Secure Web Gateways (SWG).

To learn more, read our detailed Secure Web Gateways (SWG) Report (Updated: October 2026).

Buyer's Guide

Secure Web Gateways (SWG)

October 2026

Download the complete report

Helped 921,523 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

Enrique-Diaz Jolly

Principal Consulting Engineer, Founder, Own at Jolly Security Inc

Super stable with huge capacity but is retired so is no longer supported

The solution is scalable and has a huge capacity. You may experience delays if you are sending requests outside of websites because the proxy has to download and provide content. Speed is dependent on many factors including the combination of networks, tasks, locations, and networking services. Things have become a bit more complicated than with classic website models where the server contained content so there was a straight connection. Now there are distribution networks and other services that are all configured to work differently in various directions. At the end of the day, URLs are still URLs so their categorization remains the same.

Read full review

VikasTiwari

Senior Network Engineer at Anthology

Cloud security has transformed remote access and now supports zero trust for all users

The best features Zscaler Internet Access offers are Secure Web Gateway, URL filtering, SSL inspections, and policy-based access control. I find myself relying on Secure Web Gateway, URL filtering, SSL inspection, and policy-based access control the most because these are the main and top-most features I use regularly. Zscaler Internet Access has all of these types of features for securing all internet access and web inspections, allowing me to control all traffic through these features. Zscaler Internet Access features include a Secure Web Gateway for URL filtering, file type control, and inline SSL inspections. The second feature is a cloud firewall with Layer 3 to Layer 7 filtering control and stateful inspections. No hardware inspection or hardware firewall is required. I can also perform segmentations by users, location, and application. There is a cloud CASB solution available as well. Additionally, there is an advanced threat protection feature with signature-based behavioral detections, inline IPS, and zero-day threat protections. The cloud sandboxing solution scans unknown files and provides machine learning-based verdicts to prevent zero-day malware delivery in my environment. There is also a DNS security feature that provides DNS tunneling detections, malicious domain controls, and faster threat containment at the DNS layer. The data protection feature includes inline DLP and CASB-style cloud app control, data sovereignty enforcement, and browser isolation, which executes risky sites in isolated cloud browsers and prevents endpoint compromises. Zscaler Internet Access has positively impacted my organization by reducing the dependency on on-premises hardware and improving security posture, enabling faster user onboarding, and providing better performance for remote users. It has resulted in a drop in security incidents related to web threats and improved visibility into user activity. An area for improvement includes fine-grained troubleshooting tools, better policy simulations, and optimizations around initial configuration complexity.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"The iboss solution gives me the ability to scan the traffic through all the ports, through all the 131,000 PCP and UDP ports, and with this ability, we have the granularity also for consults over social media and applications on mobile, and this is an advantage that the customers are looking for right now."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"The single-pane-of-glass console is one of the useful features of iboss because it provides a centralized view of security activities, web traffic, user access, and potential threats."

"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."

"Overall, the major benefit from Browser Isolation is improved security without compromising employee productivity."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

More iboss pros

"The solution is super stable because it is made up of a bunch of mega proxies."

"It is an easy solution to implement, the web security is great, the filtering of different URLs has been very helpful, it also acts as a firewall which is quite helpful in terms of security, we've used it for content scanning and filtration in the data center, since this is on the cloud the cost has gone down, it's got good features and is easily manageable, and Cisco is rather well-known and robust."

"The cyber security features they offer are most trusted."

"It is valuable to be able to block whole categories or groups at one time."

"The web security is great."

"The policies are very intuitive and easy to configure, with very little possibility of messing things up."

"Stability-wise, I rate the solution a nine and a half out of ten...The setup phase was easy."

"For our needs, the cloud-native proxy architecture is a very good solution. We are moving away from on-prem appliances and moving more toward cloud-based solutions. Zscaler is a good fit for our strategy. This architecture helps with cyber threats because we inspect most of the traffic and we can see that a lot of threats are stopped directly in the secure web gateway."

"I would recommend Zscaler Internet Access due to its ease of use and deployment, with a user-friendly interface."

"What I like most about Zscaler Web Security is that we can have our users protected from internet threats and viruses even when they're not connected to our network."

"After a proper implementation, the maintenance is very low."

"Having a centralized firewall that protects the whole topography is quite awesome when you also have users that are not on the plan because it actually improves visibility of those users."

"Tech support is good."

More Zscaler Internet Access pros

Cons

"Its pricing could be better."

"The reporting feature needs improvement."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."

"File integrity monitoring would be very advantageous as an additional feature."

"I have heard they are doing DDoS filtering, but I am not certain if they are implementing it correctly."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"iboss can be improved because the integration could be better; you need to import all the sites that you access today, and there are a few problems whenever you import thousands of websites, making the integration process messy for the users."

More iboss cons

"Cisco has good technical support although sometimes our clients would like it to be better in some areas."

"Setup is not that difficult, but it really requires proper technical training."

"The licensing could be better. They are an expensive product."

"The solution is not supported because it is legacy and almost out of market."

"It needs better integration with other applications. It takes a fair amount of regular activity to apply the by-passes because it is very strict in its restrictions and frequently you have to go in and open things up to allow the workforce to work."

"An improvement would be if they could provide an out-of-the-box experience, like 20 to 30 features all ready to go. In comparison, LogRhythm offers out-of-the-box features. With Zscaler Internet Access, there is firewall IPS, multiple security services, filtering, DLP, and CASB browser isolation. These are things that all users are going to be using. However, when an administrator or architect would start building this, I would definitely need to engage professional services to help clients do it."

"Zscaler Internet Access needs to integrate more ISPs. It is good to have more than three ISPs."

"In every cloud service in the world, you have multiple upstream internet providers to create diversity so that if one of your providers fails, your network just continues. In South Africa, there is only one upstream provider, and that's not right. That that's a problem."

"Zscaler Internet Access's troubleshooting is very limited, and their textbook logs need to be more informative."

"The solution is expensive. They recently revised the pricing and packaging. Some of our existing customers have been asking for alternate solutions for a lower price."

"One thing that they could improve is the ability to import rules from other platforms."

"Zscaler should continue to make the user interface better. They should also improve the backup network and continue to expand it so that it can handle larger numbers of customers."

More Zscaler Internet Access cons

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is expensive compared to one of its competitors."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

Information not available

"We pay around 6,500 INR per user per year, which is very expensive. I would rate Zscaler's pricing one out of five."

"Zscaler is an expensive solution, but it's worth the price. Their services are unmatched by competitors. Some may come with half the features that Zscaler can offer and be much cheaper. However, they do not have the global coverage that Zscaler has, and they will not provide the same low latencies and the same speeds that Zscaler can."

"Zscaler is transparent about its pricing model."

"ZIA follows a subscription model pricing and charges you based on the number of users. I would say its price is good."

"The price is competitive. It's not cheap and it's not expensive."

"Our monthly fee is around R3000."

"Because it's a cloud solution, we pay on a yearly basis. It is affordable and includes tech support and all features."

"The pricing is an issue. It is expensive compared to other firewalls on the market."

More Zscaler Internet Access pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

921,523 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

No data available

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	8
Large Enterprise	16

No data available

By reviewers
Company Size	Count
Small Business	17
Midsize Enterprise	9
Large Enterprise	39

Questions from the Community

What needs improvement with iboss?

iboss could be improved by making the dashboard more user-friendly, providing more detailed real-time alerts, and imp...

See all answers

What is your primary use case for iboss?

iboss is primarily used for cloud security, helping to protect users when they access websites and cloud applications...

See all answers

What is your experience regarding pricing and costs for iboss?

The pricing and licensing for iboss were reasonable for the security features. The setup costs were manageable, thoug...

See all answers

Ask a question

Earn 20 points

Which is the better security solution - Cisco Umbrella or Zscaler?

Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zs...

See all answers

Which is better, Zscaler internet access or Netsckope CASB?

We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify ...

See all answers

What is your experience regarding pricing and costs for Zscaler Internet Access?

We have not purchased Zscaler Internet Access through the AWS Marketplace; the licensing process was handled separate...

See all answers

Comparisons

Prisma Access by Palo Alto Networks vs iboss

Compared 10% of the time

Netskope vs iboss

Compared 8% of the time

Fortinet FortiGate vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

Zscaler Zero Trust Exchange Platform vs iboss

Compared 4% of the time

More iboss Competitors

Forcepoint Secure Web Gateway vs Cisco ScanSafe Web Security SaaS [EOL]

Compared 22% of the time

Cisco Umbrella vs Cisco ScanSafe Web Security SaaS [EOL]

Compared 16% of the time

Infoblox Advanced DNS Protection vs Cisco ScanSafe Web Security SaaS [EOL]

Compared 7% of the time

Symantec Secure Web Gateway vs Cisco ScanSafe Web Security SaaS [EOL]

Compared 7% of the time

Infoblox BloxOne Threat Defense vs Cisco ScanSafe Web Security SaaS [EOL]

Compared 7% of the time

More Cisco ScanSafe Web Security SaaS [EOL] Competitors

Cisco Umbrella vs Zscaler Internet Access

Compared 30% of the time

Prisma Access by Palo Alto Networks vs Zscaler Internet Access

Compared 5% of the time

Netskope vs Zscaler Internet Access

Compared 4% of the time

Fortinet FortiGate vs Zscaler Internet Access

Compared 4% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Zscaler Internet Access

Compared 2% of the time

More Zscaler Internet Access Competitors

Product Reports

Buyer's Guide

iboss

October 2026

Download iboss product report

Buyer's Guide

Secure Web Gateways (SWG)

October 2026

Cisco ScanSafe Web Security SaaS [EOL] report

Download Cisco ScanSafe Web Security SaaS [EOL] product report

Buyer's Guide

Zscaler Internet Access

October 2026

Download Zscaler Internet Access product report

Also Known As

iBoss Cloud Platform

ScanSafe Web Security SaaS

ZIA

Overview

iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.

Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.

The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.

What are the most important features of Iboss?

- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.

- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.

- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.

- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.

- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.

What benefits should users consider in reviews?

- Complete visibility over AI, data, and applications from one platform instead of separate point tools.

- Encrypted traffic is inspected by default so data decisions use content and context together.

- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.

- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.

- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.

Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.

iboss

Cisco ScanSafe is a cloud hosted web filtering service which enables you to create, enforce and monitor Web usage policies. Layering real time rule-based filters with up-to-date and accurate categorization database, Web Filtering enforces your organization's acceptable usage policy, protecting you from the legal liabilities of inappropriate content, reducing bandwidth congestion and improving employee productivity.

Cisco

Zscaler Internet Access provides internet security through cloud-native architecture, ensuring threat protection and traffic management without relying on traditional VPNs and firewalls.

It enhances security by offering features such as CASB and DLP. With its cloud-native proxy architecture, it facilitates seamless security with reduced latency and high availability. Organizations value the scalability and centralized policy management, integrating seamlessly with existing systems for remote work. It ensures secure traffic management by delivering advanced threat protection and support for applications through SSL inspection and sandboxing. Enhanced measures for DLP, better integration with tools like MFA, and optimized reporting are areas for growth.

What are the key features?

Website Filtering: Controls access to harmful sites to protect users.
SSL Inspection: Shields against threats bypassing traditional defenses.
Cloud Sandbox: Provides advanced threat protection through testing.
CASB: Offers cloud application visibility and security enforcement.

What benefits should users seek?

Scalability: Easily adjusts to growing requirements without manual intervention.
Centralized Management: Simplifies policy implementation across locations.
Seamless Integration: Reduces need for traditional VPNs by integrating with remote infrastructure.

Many industries leverage Zscaler Internet Access for securing internet traffic and safeguarding against threats like malware and DDoS attacks. It is integral as a secure web gateway to fulfill data loss prevention, bandwidth control, and filtering needs, allowing remote users robust access and protection globally. Companies employ it alongside existing tools for proper security and policy enforcement.

Zscaler

Sample Customers

Trusted by global enterprises and government agencies.

Arup Group, Gobierno de Castilla-La Mancha, K&L Gates, New South Wales Rural Fire Service, Transplace

Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group

Buyer's Guide

Secure Web Gateways (SWG)

October 2026

Download Free Report

Find out what your peers are saying about Cisco, Fortinet, Zscaler and others in Secure Web Gateways (SWG). Updated: October 2026.

DOWNLOAD NOW

921,523 professionals have used our research since 2012.

See our list of best Secure Web Gateways (SWG) vendors and best Internet Security vendors.

We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.