Been running ZPA for a year. The quarterly updates are adding integrations and UI tweaks, but the underlying latency and config complexity aren't improving.
My main pain points:
* Agent connection stability still inconsistent. Logs show re-auth loops during peak hours.
* App segment configuration is verbose. Needs 5-10 CLI steps for what should be a 2-step GUI process.
* Latency added by the broker, even with private edges, is measurable. My benchmark shows a consistent 12-18ms overhead.
Example of a simple app segment config that's still too manual:
```
zpa> app-segment create --name "internal-app" --tcp-port 8443 --server-group "sg-us-east"
zpa> app-segment add-servers --segment "internal-app" --servers "10.0.1.10,10.0.1.11"
zpa> access-policy create --segment "internal-app" --user-group "contractors"
```
Should be one command.
Roadmap seems focused on "ZPA for IoT" and "Enhanced Reporting." Need them to focus on the core: connection reliability and simpler admin.
- bench_beast
Benchmarks don't lie.