The cloud and mobility are creating a megashift for Digital Business and IT Transformation

1. Presentation title here—edit on Slide Master
©2018 Zscaler, Inc. All rights reserved. Zscaler™, SHIFT™, Direct-to-Cloud™ and ZPA™ are trademarks or registered trademarks of Zscaler, Inc.
in the United States and/or other countries. All other trademarks are the property of their respective owners.
Rethinking Cybersecurity for the
Digital Transformation Era
Dan Shelton – Director, Product
Management

2. ©2018 Zscaler, Inc. All rights reserved.
What is Changing?
The cloud and mobility are creating a megashift for Digital Business
and IT Transformation
Disrupting 30 years of networking and security architectures
Users have moved
off the corporate network and are
connecting from everywhere
Applications have moved
out of the data center and
into the cloud

3. ©2018 Zscaler, Inc. All rights reserved.
Challenge – The Traditional Hub & Spoke Network
Backhaul Traffic to a Central Datacenter for Security Services
The Castle & Moat Security Architecture

4. ©2018 Zscaler, Inc. All rights reserved.
Challenge – Applications Moved to the Cloud & Users Left the Network
SaaS Open Internet Private CloudPublic Cloud

5. ©2018 Zscaler, Inc. All rights reserved.
Challenge – Internet Gateways in the Data Centers
Aggregation
Firewall Load Balancers
& VPNs
Web Filter
Sandbox
Flow Management
Edge Next-
Gen Firewall
DLP
SSL
DC
11
9
8
7
6
5
4
3
2
1
12
10
13
14
16
17
18
19
20
21
22 2324
25
26
27
28
https://
15
Content Inspection
Internet
Apps moved to a modern platform.
Access is still using 30-year old technology.

6. ©2018 Zscaler, Inc. All rights reserved.
Global LB
DDoS
Ext. FW / IPSInternal LB
Internal FW
RAS (VPN)
Internet
Challenge – Remote Access Gateways in the Data Centers
Site-to-site VPN
Apps moved to a modern platform. Access is still using 30-year old technology.
How do you access internal
apps on Azure or AWS?

7. ©2018 Zscaler, Inc. All rights reserved.
Zscaler enables secure transformation to the cloud
Internet and VPN Gateway
Ext. FW / IPS
URL Filtering
Antivirus
DLP
SSL
Sandbox
Global LB
DDoS
Ext FW/IPS
RAS (VPN)
Internal FW
Internal LB
SaaSOpen Internet
External
APPS
Data CenterIaaS
Internal
Internal (cloud or data center)
Connect a user to an authorized
private app (not network)
Fast and secure policy-based access to apps and services over the Internet
Any device, any location, on-net or off-net
External (open Internet or SaaS)
Nothing bad comes in,
nothing good leaks out
Zscaler
Internet Access
Zscaler
Private Access
HQMOBILE
BRANCHIOT

8. ©2018 Zscaler, Inc. All rights reserved.
The Complex Infrastructure of a Large Global Organization
Open internet
MPLS
MPLS MPLS
MPLS
• 9 Data Centers
• 8 internet egress points
managed by 6 different teams
• 8 email systems managed by 6
different teams
900 locations across
22 countries
10,000 Users
3,000 Remote Users on
5 VPN solutions
17 MPLS providers with
various configurations
Complex | Poor User Experience | Difficult to Manage | Unreliable
Lack of Visibility | Significant CAPEX and OPEX
Fail-Over
EMEA DC
Fail-Over
NA DC

9. ©2018 Zscaler, Inc. All rights reserved.
Cloud Transformation Journey – Phase 1
Four initiatives
1. WAN vendor consolidation
2. Remove branch MPLS and use
IPSEC to MPLS (SDWAN)
3. Embrace Office 365 and phase-
out local email servers
4. Local internet breakouts with
appliances
30 Country &
Regional HQs
870 Branch
Locations
MPLS
WAN Vendor
9 Data Centers
Open Internet
IPSEC-to-MPLS architecture
(No MPLS at braches)
Branch office users complaining their internet experience was poor.
MPLS
WAN Vendor
SaaS
Benefits
• Eliminated branch MPLS costs
• Better internet experience at
country and regional HQs
• Simplified IT by standardizing
email/SharePoint and
reducing MPLS vendors from
17 to 1
1
4
MPLS
WAN Vendor
2
3

10. ©2018 Zscaler, Inc. All rights reserved.
Cloud Transformation Journey – Phase 2
One initiative
1. Implement local internet
breakouts in all branches
30 Country &
Regional HQs
870 Branch
Locations
9 Data Centers
MPLS
WAN Vendor
Open Internet
Option 1: Deploy branch
firewalls in 870 locations.
Option 2: Implement Zscaler
Cloud Security Platform.
XX
Office 365 required more than just traditional proxy ports.
Visibility provided by Zscaler led to Internet policy discussions.
SaaS
Benefits
• Reduction in branch user internet
complaints (less pushback)
• Avoided the cost and overhead of
deploying 870 security appliances
• 60% reduction in Data Center
bandwidth requirements

11. ©2018 Zscaler, Inc. All rights reserved.
Cloud Transformation Journey – Phase 3
Three initiatives
1. Reduce security appliance
requirements at country /
regional HQs and data centers
2. Implement Zscaler Cloud Firewall
and Bandwidth Control for O365
3. Protect mobile users
30 Country &
Regional HQs
870 Branch
Locations
9 Data Centers
MPLS
WAN Vendor
Open Internet
Delivered a consistent end-user experience to IaaS and SaaS applications at all branch and HQ locations,
but the mobile user was still struggling
SaaS
Benefits
• Eliminated security appliances in
country & regional HQs
• Better Office 365 user
experiences in all locations
• Reduced risk by providing
identical security controls to
mobile workers

12. ©2018 Zscaler, Inc. All rights reserved.
9 Data Centers
MPLS
WAN Vendor
Open Internet
SaaS IaaS
5 Data Centers
Cloud Transformation Journey – Phase 4
Three initiatives
1. Migrate apps to IaaS – re-
platform critical apps to be
browser accessible
2. Consolidate data centers
3. Deploy virtual NGFWs and load
balancers to eliminate traffic
tromboning
30 Country &
Regional HQs
870 Branch
Locations
VM
Virtual NGFWs and load balancers were expensive, didn’t scale, and micro-segmentation challenges.
User confusion on when to use VPN and when they could use a browser.
Benefits
• Reduced data center costs
• Provided users better access re-
platformed apps (No VPN)

13. ©2018 Zscaler, Inc. All rights reserved.
MPLS
WAN Vendor
Open Internet
SaaS
5 Data Centers
IaaS
VM
Cloud Transformation Journey – Phase 5
Two initiatives
1. Seamless End-User Experience -
Implement Zscaler Private Access
2. Zero-Trust Network Model
30 Country &
Regional HQs
870 Branch
Locations
Future-proof app delivery strategy with positive end-user experience.
Benefits
• Simplified access to all
applications
• Eliminated the cost and
complexity of virtual firewalls
and load balancers in IaaS
• Enhanced security posture – app
microsegmentation, reduced
inbound attack surface,
enablement of zero-trust
network model

14. ©2018 Zscaler, Inc. All rights reserved.
Transformation Journey – Summary
Cost Savings
$9.66M OPEX Per Year
Cost Avoidance
$2.7M in appliance sprawl
Network transformation – Removal of MPLS at 870 locations and deployment of 30 local breakouts with appliances
Network transformation – ZIA deployed to support local internet breakouts in 870 branch offices around the world
Global collaboration tools – Successfully deployed Office 365
Data center transformation – Moved apps to Azure/AWS and consolidated data centers
Application access transformation –Eliminated VPN, zero-trust network model, positive end-user experience
1
2
3
4
5
Benefits
Simple and agile IT environment
Consistent end-user experience
Reduced business risk

15. ©2018 Zscaler, Inc. All rights reserved.
Every enterprise needs network and application transformation
HQ/IOT
MOBILE BRANCH
Secure Internet Edge
HQ
APJEMEA
BUSINESS VALUE
Better user experience
Reduced Business Risk
Business Agility
Lower TCO
Hub and Spoke to Direct to Cloud
NETWORK TRANSFORMATION
Securely connect the right user and device to the right app and service in the digital transformation era
Data Center to Cloud (SaaS/IaaS)
APPLICATION TRANSFORMATION

16. ©2018 Zscaler, Inc. All rights reserved.
Global Partners
100
Data centers
45B
Daily requests
185
Countries served
Unparalleled Cloud Scale Enterprise Customers
2,800 CUSTOMERS
Over 200 of the Fortune Global 2000
Conglomerates
3 of the top 3
Oil and gas operations
3 of the top 4
Beverage
5 of the top 7
Specialized chemicals
2 of the top 3
Food retail
6 of the top 12
Apparel and accessories
2 of the top 4
Largest Cloud Security Platform in the World
Mature Global Cloud Operations
Zscaler: The market leader in cloud security

17. ©2018 Zscaler, Inc. All rights reserved.
©2018 Zscaler, Inc. All rights reserved. Zscaler™, SHIFT™, Direct-to-Cloud™ and ZPA™ are trademarks or registered trademarks of Zscaler, Inc.
in the United States and/or other countries. All other trademarks are the property of their respective owners.

18. ©2018 Zscaler, Inc. All rights reserved.
Direct to Internet
Block the bad, protect the good
The best approach for SD-WAN and Office 365
Zscaler Internet Access – Fast, Secure Access to the Internet and SaaS
Data Center
APPSMPLS
HQMOBILE
BRANCHIOT
Your security stack as a service
Data Loss Prevention
Cloud Apps (CASB)
File Type Controls
Data Protection
Cloud Firewall
URL Filtering
Bandwidth Control
DNS Filtering
Access Control
Adv. Protection
Cloud Sandbox
Anti-Virus
DNS Security
Threat PreventionReal-time policy engine
Polices follow the user
Changes are immediately enforced, worldwide
Business analytics
Global visibility into apps and threats blocked
Identify botnet infected machines for remediation
Real-time policy and analytics

19. ©2018 Zscaler, Inc. All rights reserved.
Zscaler Private Access
Secure and fast access policy-based access to private apps on Azure, AWS or your DC
Z-APP
2
Datacenter
User
1
POLICY (Brokers)
ID Provider
Windows, Mac, iOS, Android - On-net or off-net
Public Cloud
Connect a named user to a named app, not a network; Direct path to cloud apps without hairpinning through DC. No VPN needed
ZPA replaces the entire inbound gateway/DMZ. Not just a VPN replacement
Reduced cost, complexity, better security and user experience
ZPA: Innovative Design
Cloud-based policy engine – who can
access what apps
1
Z-APP – Request access to app2
Z-Connector – sits in front of apps. Starts
inside out connection
3
Zscaler cloud brokers a secure connection
between the Z-connector and Z-app
Private Apps
Web, TCP, UDP
Z-CONNECTOR
3
3
1. User never on your network
2. Apps are invisible (safe)
3. App segmentation without
network segmentation
4. Use Internet as a secure
network without VPN
Why ZPA is Revolutionary