We're finally moving off our old VPN-centric model and looking at a true SASE platform. It's down to Zscaler and Netskope for our ~500 people, spread across 10 countries, with a mix of corp offices and remote folks. Heavy users of SaaS (O365, Salesforce, GitHub) and some on-prem legacy apps.
I've done the vendor deep-dives, but I'm really after day-to-day operational experience. How do they handle the weird edge cases? For example, our dev team uses custom GitLab CI runners in AWS—any gotchas with traffic inspection or performance there? Also, how painful was the client deployment and ongoing policy management? I'm wary of steering into a solution that needs a small army to maintain.
Our main goals: solid security without killing the user experience for SaaS apps, and simplifying our stack. Any migration war stories or things you wish you'd known before picking one?