Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement)

FedRAMP package ID

FR1719759604

Cloud service provider

Zscaler, Inc.

Certification status

FedRAMP Certified

Impact level

High

Certification class

Class D (High)

Authorization path

JAB

Certification type

Rev5

Marketplace phase

Ongoing Certification

Deployment model

Government Community Cloud

Register snapshot

September 3, 2026

Service model

SaaS

Independent assessor

Schellman Compliance, LLC

Certification date

April 29, 2020

Status date

April 29, 2020

FedRAMP Ready date

August 30, 2019

Annual assessment

April 21, 2011

Agency authorizations

23

Recorded reuses

108

Business categories

Cybersecurity & Risk Management, Legal & Policy, Network Management, Virtual Private Network (VPN)

Dependent offerings

10

Milestones on record

3

The marketplace carries Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement) under package FR1719759604 with 21 recorded fields. Its certification date is April 29, 2020, and a FedRAMP Ready date of August 30, 2019. Schellman Compliance, LLC is named as the independent assessor, with an annual assessment date of April 21, 2011. 23 agencies are listed as having authorized it, among them Agency for Healthcare Research and Quality, American Battle Monuments Commission, Bureau of Labor Statistics and 20 more, and the feed records 108 reuses of the package. It is delivered as SaaS on a government community cloud, filed under 4 business categories including Cybersecurity & Risk Management, Legal & Policy, Network Management and 1 more. 10 other offerings on the register are listed as dependent on this one, among them Cyber AI Mission Defense and Email Protection, eGain Suite and Critical Event Management Suite.

• Skyhigh Security Service Edge (SSE) Government Cloud Services (Cloud Access Security Broker (CASB) & Secure Web Gateway (SWG) for Cloud)

  Skyhigh Security

  FedRAMP Certified, High impact, JAB path, Rev5, certified April 29, 2020.

• Google Services (Google Cloud Platform Products and underlying Infrastructure)

  Google

  FedRAMP Certified, High impact, JAB path, Rev5, certified December 4, 2019.

• Federal High Impact Virtualized Environment (FedHIVE)

  Human Resources Technologies, Inc. (HRTec)

  FedRAMP Certified, High impact, JAB path, Rev5, certified December 7, 2020.

• Azure Government (includes Dynamics 365)

  Microsoft

  FedRAMP Certified, High impact, JAB path, Rev5, certified April 29, 2020.

• Netskope NewEdge Government.

  Netskope, Inc.

  FedRAMP Certified, High impact, Agency path, Rev5, certified December 19, 2023.

Zscaler Private Access Gov, part of the Zscaler Zero Trust Exchange, enables fast, secure connections and allows your employees to work from anywhere using the internet as the corporate network. Based on the zero-trust principle of least-privileged access, it provides comprehensive security using context-based identity and policy enforcement. Zero Trust Exchange helps agencies achieve the target goals of the Executive Order 14028 and resulting OMB mandates, CISA guidance and directives. ZPA Gov security products are currently utilized by over 100 federal agencies and federal systems integrators today in Zscaler's US-based FedRAMP Moderate and FedRAMP JAB High approved boundaries in support of the Cybersecurity and Infrastructure Security Agency (CISA) Trusted Internet Connection (TIC) 3.0 use case model for FedRAMP approved Policy Enforcement Point (PEP) capabilities. TIC 3.0 Use Case Examples (Branch Office, Remote Users, and Cloud) Zero-trust VPN alternative: Legacy VPNs fail to deliver the security, visibility, and user experience today's distributed workforce requires. ZPA delivers fast, direct access to private apps by eliminating VPN traffic backhauling which creates latency, resulting in lost productivity. Secure Hybrid Workforce: Users require the ability to move fluidly between their homes, remote locations, branch offices, and headquarters. ZPA enables seamless and secure access to private apps from wherever they need to work, on any device. Local users benefit from an identical experience through an on-prem broker that replicate the policies and controls of the cloud. Third-party Agentless Access: Third-party agencies, contractors, and vendors require secure, direct access to business applications and OT systems from unmanaged devices. ZPA provides secure, direct connectivity from authorized users to named applications without putting third parties on the network. With integrated agentless access, users can access applications from any browser, on any device, without the need to install a client or log into a VPN. VDI alternative: Traditional VDIs are often slow, unresponsive, and introduce significant costs with racks of servers needed in the data center to support remote access needs. ZPA provides secure, direct connectivity to apps over RDP and SSH, enabling a faster, more secure experience for users. With built-in agentless access through the browser employees and third-party users get seamless secure connectivity from any device without complicated desktop provisioning processes. Secure workload-to-workload connectivity: Agencies require fast, secure workload-to-workload connectivity across hybrid and multi-cloud environments. ZPA for Workloads reduces operational complexity and cost by eliminating the need for virtual DMZs and VPN meshes with least-privileged access-based connectivity across clouds. In addition, because workloads are hidden behind ZPA, they are invisible to the internet and impossible to attack. Zscaler will also provide our Zero Trust Exchange services at the FedRAMP Moderate level not only for federal agencies and service integrators, but state, local, education, and critical infrastructure as a fully authorized StateRAMP solution. All Zscaler's FedRAMP platforms are fully managed and supported by US Citizens and meet the ITAR, CJIS, and DFARS requirements and attestations. Zscaler, a Leader in the Gartner Magic Quadrant for Security Service Edge.