For IT Managers and security leads mid-rollout or post-rollout on Zscaler ZIA/ZPA who need an outside check that the policy actually matches intent — not just a vendor dashboard summary.
The Problem
Zscaler policies configured during initial rollout often drift from intent: over-broad bypass rules, inconsistent ZPA app segmentation, logging gaps that show up only during an incident, and no one who’s reviewed the full policy set end-to-end since go-live.
Methodology
Policy export (ZIA and/or ZPA) → automated review of bypass rules, SSL inspection exceptions, and ZPA app segment scope → licensing tier and seat utilization check → logging/SIEM destination and retention review → gap analysis against your original rollout intent.
What’s Included
- ZIA and/or ZPA policy export and automated analysis
- Bypass rule, SSL exception, and app segmentation review
- Risk-tagged remediation recommendations
- Hands-on remediation and rollout support (Standard and Premium tiers)
Deliverables
- Annotated policy audit flagging over-broad bypass rules, inspection exceptions, and segmentation gaps — findings grouped by policy area then by risk rating
- Each finding scored on a Likelihood × Impact matrix, not just labeled “High risk” with no reasoning shown
- A remediation spreadsheet at policy-level granularity: finding, recommendation, owner, priority, target date, status
- A 2–3 page executive summary in plain language, with a before/after risk-reduction projection
Before We Start
You’ll get a short pre-engagement questionnaire covering your ZIA/ZPA licensing tier and seat count, rollout completion status, any known problem areas, and your SIEM/logging destination — this keeps the kickoff call focused instead of spent on discovery.
Engagement Phases
1. Audit
Policy export and automated analysis (2–3 days)
2. Remediation Plan
Risk tagging and remediation spreadsheet (3–5 days)
3. Implementation Support
Standard and Premium tiers only — scoped after findings are reviewed together
Pricing
| Tier | Scope | Price |
|---|---|---|
| Basic — audit only | Single ZIA/ZPA policy set, one location. Findings and remediation list, no hands-on implementation. | ₹95,000 / Intl $1,000 |
| Standard | Combined ZIA + ZPA, multi-location. Audit plus hands-on remediation support. | ₹2,40,000 / Intl $2,500 |
| Premium | Enterprise multi-site rollout. Audit plus full implementation support. | Get a Quote |
Not sure where your Zscaler policy actually stands? Start with the free Zero Trust Readiness Checklist.
Get your ZIA/ZPA policy reviewed by someone who reads the actual rule set, not a vendor dashboard summary.