Licensing
      Back to home
      1. SecureDynamics Knowledge Base
      2. Licensing

      Zscaler 2025 Packaging Overview

      Summarizing how Zscaler is packaging their products in 2025.


      Choosing Your Base Package

      Before selecting individual security solutions, customers must first choose one of the following foundational packages:

      Zscaler Essentials (ZS-ESS-PLATFORM)

      A streamlined version providing core security capabilities, including:
      • - Secure Web Gateway (SWG) – Cloud-delivered web security with URL filtering and policy enforcement.
      • - Cloud Firewall – Layer 3-7 firewall capabilities with integrated policy management.
      • - DNS Security – Protects against malicious DNS requests and prevents command-and-control traffic.
      • - Standard Cloud Access Security Broker (CASB) – Visibility and control over sanctioned SaaS applications.
      • - Inline DLP (Basic) – Protects against accidental data loss over web and SaaS applications.
      • - ZTNA for Private Applications (Basic) – Limited access to private applications with identity-based policies.
      • - Threat Prevention (Basic) – Includes anti-malware and phishing protection.
      • - Digital Experience Monitoring (Basic) – Provides limited insights into user and application experience.

      More details: [Zscaler Essentials SKU](https://cm360.securedynamics.net/kb/zscaler-essentials-platform-sku-zs-ess-platform)

      Zscaler Platform (ZS-PLATFORM)

      A comprehensive package with full Zero Trust Exchange capabilities, including everything in Essentials, plus:
      • - Advanced Threat Protection – Includes sandboxing and AI-driven threat intelligence.
      • - Advanced Cloud Firewall – Enhanced inspection and security for direct-to-cloud traffic.
      • - Advanced CASB – Full visibility and policy enforcement for unsanctioned applications.
      • - Advanced DLP – Includes Exact Data Match (EDM) and Optical Character Recognition (OCR) scanning.
      • - Zero Trust Private Access (ZPA) – Full VPN replacement with microsegmentation and adaptive access policies.
      • - Risk-Based Policy Engine – Implements dynamic access and security policies based on risk scores.
      • - Full Digital Experience Monitoring (ZDX) – AI-powered insights into user experience across SaaS, cloud, and private applications.
      • - Cyber Threat Protection (CTP) – Includes advanced browser isolation and AI-driven malware prevention.

      More details: [Zscaler Platform SKU](https://cm360.securedynamics.net/kb/zscaler-sku-zs-platform)

      Once a base package is selected, customers can add on specific security, risk management, and performance modules tailored to their needs.

      Data Protection

      Zscaler’s data protection solutions ensure security across email, endpoints, SaaS applications, and encryption strategies.
      • - Email DLP – Prevents sensitive data leakage through corporate email channels.
      • - Endpoint DLP – Extends data loss prevention to endpoints for comprehensive protection.
      • - SaaS Security Advanced – Enhances visibility and control over SaaS applications.
      • - Classification & Encryption Advanced – Automates data classification and encryption for compliance and security.

      Cyber Threat Protection

      Zscaler’s threat protection capabilities provide proactive security against malware, ransomware, and other cyber threats.

      • - Sandbox Advanced – Deep file inspection and behavior-based malware detection.
      • - Firewall Advanced – Full cloud-based firewall with enhanced security and granular controls.
      • - Cyber Browser Isolation Advanced – Protects against web-based threats by isolating browsing sessions.

      Risk Management

      Comprehensive risk management solutions for attack surface reduction, deception technology, and vulnerability remediation.
      • - Deception Advanced – Deploys decoy assets to detect lateral movement and insider threats.
      • - Risk360 Advanced – Provides risk quantification and actionable insights to mitigate security risks.
      • - Unified Vulnerability Management – Identifies and remediates vulnerabilities across the organization.

      Private Access

      Zscaler Private Access (ZPA) enables zero-trust secure access to private applications without relying on traditional VPNs.
      • - Segmentation – Implements microsegmentation to minimize lateral movement in the network.
      • - App Protection – Adds advanced security controls to protect private applications from threats.

      Workload Protection

      Security for cloud-based workloads, enabling zero-trust enforcement for applications and data.
      • - ZT for Workloads Advanced – Provides secure access and threat protection for cloud workloads.
      • - ZT for Workloads Advanced Plus – Adds deeper security and analytics for enterprise workloads.

      Zero Trust SD-WAN

      Cloud-delivered SD-WAN solutions with built-in security and zero-trust enforcement.
      • - ZT SD-WAN Advanced – Secure, policy-based routing with integrated threat prevention.
      • - ZT SD-WAN Advanced Plus – Enhanced analytics and performance optimization for critical applications.

      Digital Experience

      End-to-end visibility into user experience and application performance for optimal productivity.

      • - ZDX Advanced – Monitors and troubleshoots digital experience issues in real time.
      • - ZDX Advanced Plus – Provides deep analytics and AI-driven insights for performance optimization.

      Standalone Solutions

      Additional standalone products that enhance the Zscaler security ecosystem.
      • - Private Hardware – Dedicated Zscaler hardware for specific deployment requirements.
      • - China Premium – Optimized connectivity and security for operations in China.
      • - Privileged Remote Access Advanced – Secure zero-trust access for privileged users and third-party vendors.
      • - Biz Insights Advanced – Business analytics and insights for security and performance optimization.

      Comprehensive Platform Support

      Zscaler’s Zero Trust Exchange supports all platforms and seamlessly integrates with existing infrastructure, ensuring security and performance across any organization. Whether as a standalone solution or a fully integrated security suite, Zscaler provides the flexibility to adapt to enterprise needs.

      For more details on Zscaler’s FY25 packaging and licensing options, SecureDynamics can help Zscaler VARs and customers navigate the best solutions tailored to their security needs.