Zscaler Cloud IPS review

Zscaler Cloud IPS is listed as a Firewall Advanced add-on for customers using either the Essentials Platform or Zscaler Platform. The published pricing information says it provides Cloud IPS for non-web protocols; it does not explain the inspection methods, supported protocols, or technical limits. Zscaler’s homepage describes the broader Zero Trust Exchange platform, not Cloud IPS in detail, so its platform claims should not be mistaken for a product-specific feature list.

At the platform level, Zscaler says it connects users, data, workloads, and AI, and limits each entity to resources it is authorized to access. It also describes security as inline on connections and says its tools help security operations teams stop threats at machine speed. Those descriptions give a sense of the wider platform, but they do not establish what Cloud IPS detects, how policies are configured, or what is included in a Cloud IPS deployment. Ask Zscaler to define that scope in the quote.

The clearest advantage is that Cloud IPS sits within a broader security platform rather than being presented as a standalone tool. For organizations already considering Zscaler, that may make it worth evaluating alongside the rest of the platform. The homepage describes the Zero Trust Exchange as connecting entities only to resources they are authorized to reach, and says the platform protects users, data, workloads, and AI.

Zscaler also describes its security as inline on connections, with threat response intended to help security operations teams stop threats at machine speed. Those are platform-level claims, not published Cloud IPS performance figures. The specific Cloud IPS scope identified in the published pricing information is protection for non-web protocols through Firewall Advanced.

• Cloud IPS is available through Firewall Advanced on both listed platform bundles.
• The broader platform includes user, data, and AI security capabilities, according to Zscaler’s homepage.
• The Zero Trust Exchange model may suit organizations looking to manage access and security through one platform.

We would treat these as reasons to request a scoped proposal, not proof that Cloud IPS meets a particular detection or throughput requirement. Zscaler does not publish those details in the published material.

Price and capacity are the main unknowns. The published pricing information lists no monthly or annual prices for Essentials Platform, Zscaler Platform, or Firewall Advanced; all require a custom quote. Seat and usage limits are not published, and the price and usage limits for the Firewall Advanced add-on are also not published. Overage costs are not published either. No free plan is listed, and the published information does not state whether a free trial is available.

The product detail is thin, too. Zscaler’s homepage does not explain Cloud IPS specifically, and the published material gives no inspection limits, protocol list, or technical caps. Get those details, plus the add-on price and renewal terms, in writing before comparing it with a standalone IPS or another bundle.

There is also an adjacent operational concern, not a Cloud IPS limitation: in one Reddit thread, administrators discussing Zscaler cloud egress IPs said ranges can change and that allowing all Zscaler IPs may admit traffic from other Zscaler customers. That discussion concerns app access and egress allowlisting, so it should not be read as evidence about Cloud IPS detection.

Zscaler does not publish Cloud IPS prices. The pricing information available to us is low-confidence and lists both Essentials Platform and Zscaler Platform as custom-quote plans, with monthly and annual prices, seat limits and usage limits not published. That means there is no reliable public figure for the jump between the two tiers, or enough information to compare their Cloud IPS allowances.

Cloud IPS is listed as available through Firewall Advanced, an add-on module that provides Cloud IPS for non-web protocols. Its price and usage limits are also not published. Overage costs are not published, either. The available pricing record lists no free plan; trial availability is not stated.

Before signing, ask Zscaler to itemize the platform tier, Firewall Advanced, included protocols and usage, overage rates, and billing cadence. Get the Cloud IPS scope and renewal terms in writing. Without those details, a quote is the only dependable way to establish your total cost.

The available product information does not spell out migration steps, implementation effort, data-export options or exit procedures. It describes Zscaler’s broader Zero Trust Exchange platform, but does not provide Cloud IPS-specific deployment or configuration details. We also have no Reddit reports in the published material to identify common reasons customers leave, so we cannot present those as established user complaints.

Before switching in, ask Zscaler what configuration must be migrated, how Cloud IPS will cover your required non-web protocols, and what support is included during rollout. Before switching out, confirm which policies, logs and other data can be exported, in what format, and for how long after termination. These points are not published in the information available here.

Treat portability and transition work as open questions in the quote process. If you already use Zscaler, confirm whether Firewall Advanced changes your contract or usage terms. If you are leaving, agree on export access and a cutover plan before ending service.