At a Glance

Zscaler™ Private Access AppProtection
ZPA AppProtection Benefits:
Reduced risk of web-based threats
to private applications

Protection against the most prevalentapplication attacks

Visibility over zero-day andknown vulnerabilities

Detect malicious content in your private app

Block the OWASP Top 10 and other known

Get the latest zero-day signatures

traffic so you can manage threats before they

web application security risks such as SQL

from the Zscaler ThreatLabz Research

disrupt your operations.

injection and cross-site scripting.

Team and actively patch against
known CVEs with custom signatures.

Private Apps

Attackers regularly steal credentials, exploit application vulnerabilities, and bypass
security controls to gain access to your network and spread laterally to high-value
targets such as databases, file servers, CRM, and ERP systems. Businesses need

Data Center

IaaS/PaaS

visibility into malicious traffic destined for their internal applications as well as
inline prevention methods to stop attacks that can disrupt their operations.
AC

Zscaler offers powerful application security built into its zero trust network accessACAP

APsolution, Zscaler Private Access (ZPA), to protect internal apps and infrastructure
against the most prevalent cyberattacks. ZPA’s AppProtection service provides

Attack visibility and security
Inline traffic inspection and prevention

high-performance, inline security inspection of the entire application payload
to expose threats. It identifies and blocks known web security risks, such as theOWASP Top 10, and emerging zero-day vulnerabilities that can bypass traditional
network security controls. With Zscaler’s unique zero trust architecture, you get
AppProtection as part of an integrated set of security services that is only available
with advanced ZTNA solutions.

ZscalerPrivate Access
Secure application accessDirect connection, no legacy VPN© 2023 Zscaler, Inc. All rights reserved.

Use Cases
Application attack visibility

OWASP Top 10 defense

Zero-day threat protection

High-risk user monitoring

Expose threats with a high-Block the most common attack

Guard your systems against

Gain crucial visibility into

performance security inspection oftypes including:

exploits of newly discovered

user activities through detailed

vulnerabilities with the latest

diagnostics and dashboards tosignatures written by the Zscaler

detect signs of compromise.

the entire application layer payload.

• SQL injection• Cross-site scripting

ThreatLabz Research Team.

• Environment and port scanners

Solution Capabilities• Powerful built-in application protection identifies potentially malicious• Inline traffic inspection analyzes every HTTP/S transaction between

user traffic destined for private apps and prevents attempts to exploit

users and private apps, providing visibility into the application layer (L7)vulnerabilities or abuse application logic. Admins can tailor protection

not possible with traditional network security controls (L4).

against any threat or vulnerability, or implement business-specific security
policies with our easily customizable rulesets.

ThreatLabz Research Team to protect against the latest security threats.

• OWASP Top 10 prevention provides comprehensive coverage for the mostcommon types of attacks used by cybercriminals—including SQL injection,
cross-site scripting, environment and port scanners, and cookie poisoning.
• Positive security controls reduce your application attack surface byallowing only known good traffic, and enforcing access and inspectionpolicies based on identity and context.

• Zero-day threat defense provides predefined signatures from the Zscaler• Browser session protection identifies high-risk users by examining thenumber of unique fingerprints generated by user browser activity andflagging users with an abnormally high fingerprint count.
• Easy deployment and scalability with one-click activation from theZscaler Private Access console and no new components to install inyour environment.

Visit zscaler.com/zpa to learn more about what Zscaler Private Access can do for you.

Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient, and secure.
The Zscaler Zero Trust Exchange protects thousands of customers from cyberattacks and data loss by securely connecting users,devices, and applications in any location. Distributed across more than 150 data centers globally, the SASE-based Zero Trust
Exchange is the world’s largest inline cloud security platform. Learn more at zscaler.com or follow us on Twitter @zscaler.
+1 408.533.0288

Zscaler, Inc. (HQ) • 120 Holger Way • San Jose, CA 95134© 2023 Zscaler, Inc. All rights reserved. Zscaler™, Zero Trust Exchange™,Zscaler Internet Access™, ZIA™, Zscaler Private Access™, ZPA™ and othertrademarks listed at zscaler.com/legal/trademarks are either (i) registeredtrademarks or service marks or (ii) trademarks or service marks of Zscaler,Inc. in the United States and/or other countries. Any other trademarks are
the properties of their respective owners.

zscaler.com