Zscaler Branch Connector

Name: Zscaler Branch Connector
Brand: Zscaler
Rating: 4 (4 reviews)

Zscaler empowers enterprises to modernize security, streamline operations and help transform business through its innovative approach to cybersecurity

Est 2007|Valuation $24.2B|Raised $2.3B

LinkedIn 533K|Website|Web traffic 2.9M|FTEs 8,700|HQ San Jose, CA

MarketsSecurity Service Edge (SSE)Enterprise Networking

01Competitive Landscape

Narrative analysis: where alternatives excel

Cato Networks - Cato is frequently chosen for operational simplicity and a single-cloud operational model where the vendor manages backbone and services, which can reduce variability compared with internet underlays. Palo Alto Prisma Access - Selected by customers that already standardize on Palo Alto Networks for integrated security controls; community discussions note concerns about pricing complexity. Best-of-breed SD-WAN + Zscaler - A common architecture is to retain an established SD-WAN edge for advanced WAN features and use Zscaler for SSE. This approach can better address advanced WAN optimization, voice QoS, and complex routing needs than relying solely on Branch Connector.

Adoption trends / market context

Zscaler continues to invest in branch segmentation and Zero Trust Branch positioning, including acquisition activity to extend segmentation into IT/OT environments.

	Zscaler Branch Connector	Cato Networks (Sockets + SASE Cloud)	Palo Alto Prisma Access / Prisma SASE
Starting Price	Quote-based; packages sized by throughput/endpoints	Quote-based; third-party estimates vary	Quote-based; multiple licensing options; often bundled
Well-suited for	Organizations standardized on Zscaler services needing agentless branch/OT/IoT connectivity to ZIA/ZPA	Organizations seeking a single-vendor network+security solution with a private backbone	Organizations standardized on Palo Alto security stack and seeking integrated SASE capabilities
Key Strength	Integration with Zscaler's ZTNA/SSE controls; zero-touch provisioning for appliances; application-centric access posture	Unified platform and private backbone that can reduce variability from public internet underlays	Integration with Palo Alto security tooling and established PAN feature set
Key Weakness	Perceived SD-WAN feature depth limitations vs incumbents; may not replace on-site firewalls for public-facing services	Does not provide the same native Zscaler SSE feature set; pricing and packaging are quote-based	Licensing complexity and pricing variability; support/operations concerns reported by some customers

01Competitive Landscape

Narrative analysis: where alternatives excel

Cato Networks

Cato is frequently chosen for operational simplicity and a single-cloud operational model where the vendor manages backbone and services, which can reduce variability compared with internet underlays.

Palo Alto Prisma Access

Selected by customers that already standardize on Palo Alto Networks for integrated security controls; community discussions note concerns about pricing complexity.

Best-of-breed SD-WAN + Zscaler

A common architecture is to retain an established SD-WAN edge for advanced WAN features and use Zscaler for SSE. This approach can better address advanced WAN optimization, voice QoS, and complex routing needs than relying solely on Branch Connector.

Adoption trends / market context

Zscaler continues to invest in branch segmentation and Zero Trust Branch positioning, including acquisition activity to extend segmentation into IT/OT environments.

	Zscaler Branch Connector	Cato Networks (Sockets + SASE Cloud)	Palo Alto Prisma Access / Prisma SASE
Starting Price	Quote-based; packages sized by throughput/endpoints	Quote-based; third-party estimates vary	Quote-based; multiple licensing options; often bundled
Well-suited for	Organizations standardized on Zscaler services needing agentless branch/OT/IoT connectivity to ZIA/ZPA	Organizations seeking a single-vendor network+security solution with a private backbone	Organizations standardized on Palo Alto security stack and seeking integrated SASE capabilities
Key Strength	Integration with Zscaler's ZTNA/SSE controls; zero-touch provisioning for appliances; application-centric access posture	Unified platform and private backbone that can reduce variability from public internet underlays	Integration with Palo Alto security tooling and established PAN feature set
Key Weakness	Perceived SD-WAN feature depth limitations vs incumbents; may not replace on-site firewalls for public-facing services	Does not provide the same native Zscaler SSE feature set; pricing and packaging are quote-based	Licensing complexity and pricing variability; support/operations concerns reported by some customers