The Zscaler value proposition whiteboard

[Music] hi I'm Scott from Z scaler I have the privilege and opportunity of working with many large enterprises across Asia Pacific in Japan when meeting with IT network and security executives and discussing cloud transformation I often hear two consistent themes one I'm concerned about mobility how can I allow my users to access sensitive information and data applications when they're outside of my network and ensure my security policies are enforced and - how can I embrace more cloud how can I embrace more SAS or how can I take my existing applications that sit on Prem and move them to platforms like AWS and Microsoft Azure over the next few minutes allow me to whiteboard for you the Z scalar cloud security platform and how security transformation can actually open up opportunities in both Network and application transformation the old world networks were built using a hub-and-spoke architecture where branches were connected to a regional head office through MPLS or VPN the regional hubs served as a castle as it hosted core applications like Microsoft Exchange CRM or ERP we then built a stack of security technology that provided a secure mode or perimeter for users to access the Internet the outbound gateway would typically include antivirus products firewall IPS SSL decryption and advanced threat protection and when users were outside the network and needed access to applications or the internet they would use VPN to route through the inbound gateway this gateway consisted of DDoS VPN and two types of load balancers global server load balancers and internal load balancers this design made sense when users sat within the network and applications were hosted at a global or regional hub but today applications are moving from traditional on-premise models to cloud-based consumption models these cloud services can be segmented into software as a service infrastructure as a service and a hosted or private data center many organizations have already started their cloud journey and moved CRM to SF DC or moved applications to AWS or Microsoft Azure in other cases core applications like ERP may still reside on a private data center now let's come back to one of the use cases I raised earlier and the concern around mobility as remote users wanting to access a cloud application I'm routed back through a regional security hub only to go back to the Internet to access SF d c-- or o365 this creates latency and a poor user experience and often users will revolt and go direct to the internet via a local Wi-Fi this also adds a security risk from a loss of visibility as users struggle to find the best possible user experience Klout can offer many business benefits that help to reduce costs improve security and simplify architecture now let's consider the same use case of a remote worker accessing every email every document and presentation via a slow VPN connection what impact could this have on productivity wouldn't it be better if a user could access the application or data directly from any access point the Z scalar security platform offers two key services to address these issues and challenges first is Z scale the internet access or CIA and the second is the scale of private access or ZP a our network of 150 data centers across the planet has effectively taken your network perimeter and built a perimeter around the internet Z scaler internet access or Z ie can replace the expensive clunky security stack and delivered as a cloud-based service with full control and policy enforcement and reporting for all users no matter where they are and what device they are up this opens the opportunity to directly connect branch officers to the Internet using local break outs this optimizes the performance of services such as a 365 and accelerates the adoption of new technologies such as SD web your users and branches are now connecting to the Z scalar cloud and all of your security policies and enforcement checks will be applied to that traffic before it hits the internet this direct to Internet architecture can offer significant cost savings by balancing internal MPLS traffic with direct to Internet breakouts via local broadband connections this next-gen architecture allows users to have direct internet access from any location and from any device they are on it improves the user experience and reduces the complexity of having to route traffic back through their inbound stack only to route back out to the Internet to access applications z scalar private access is an inbound remote access solution which eliminates the need for much of the inbound stack and enables organizations to explore a zero trust network architecture with ZP a users get access to only the applications they are authorized these could be hosted either on-premise or in a public or private cloud the way we deliver this is through a connector which sits on the server hosting the particular application either on-premise or in the cloud the connector creates an outbound connection from the application to the Z scalar data center this is important as it means a public IP address is no longer advertised for users to access the application it is effectively Gondar this also eliminates requirements for DDoS and global server load balances this is unlike traditional VPNs the user is already authenticated to the Z scalar cloud and is able to directly access the applications for which they have been authorized this typically comes from an IDP source such as a DFS so we've effectively made this link in the Z scalar cloud so the user connects to their authorized applications without needing to know where those applications are located either in the data center or in the cloud this not only creates a whole host of benefits for the user experience but also from a security standpoint these applications have effectively gone dark by providing only an outbound connection a one-way connection to the Z scalar cloud I trust this short presentation has helped to illuminate how both CI a and z PA not only enhance security but also open networks for direct to Internet breakouts and assist with much broader application transformation over 3,000 enterprises have entrusted their security to Z scalar including GE Siemens and Nestle if you'd like to know more then please take a moment to request a call from one of our consultants we look forward to speaking with you soon

Channel: Scott Robertson

Views: 6,112

Rating: 5 out of 5

Keywords:

Id: GBeA2OBd1ms

Length: 6min 46sec (406 seconds)

Published: Tue Jan 28 2020