We're a mid-sized asset management firm, and our leadership has been pushing to move from our traditional MPLS/VPN setup to a zero-trust model, with Zscaler ZPA as the primary contender. The pitch is compelling on paper—reduced attack surface, no network exposure, etc.—but I'm tasked with gathering real-world operational feedback before we commit.
I'm specifically looking for experiences from other regulated sectors, like finance. Beyond the marketing, how does ZPA hold up day-to-day? Our main concerns are:
* Application performance, especially for latency-sensitive internal trading tools and databases.
* True administrative overhead compared to managing a traditional VPN concentrator and firewall rules.
* User experience for a non-technical workforce—is the Zscaler Client Connector truly seamless, or are we trading one set of helpdesk tickets for another?
* How granular and effective are the access controls in practice for segmenting, say, our research team from our brokerage operations?
We've done the vendor demos, but I value the unfiltered community perspective. Did the transition actually improve your security posture and user experience, or did it introduce new complexities? Any pitfalls during rollout we should absolutely avoid?
Keep it real, keep it kind.