Overcoming the Challenges of Architecting for the Cloud

1. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION1 ©2018 Zscaler, Inc. All rights reserved. Overcoming the Challenges of Architecting for the Cloud 5 key requirements for securely routing branch traffic direct-to-cloud Steve House – Vice President, Product Management shouse@zscaler.com

2. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION2 To ask a question • Type your questions into the chat box in the Webex panel or email us at communications@zscaler.com • We’ll try to get to all questions during the Q&A session. If we do not get to your question, we’ll make sure to follow up afterwards • At the end of the webcast – please let us know how we did! ©2018 Zscaler, Inc. All rights reserved. Ask your question here…

4. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION4 Source: Riverbed, SkyHigh Networks, Right-Scale, Cisco CLOUD TRANSFORMATION IS HAPPENING 79% of workloads now run in the cloud 80% of Employees Use Shadow Cloud Applications 98% of IT decision makers say next-gen networks are required 320% Increase in O365 Enterprise Adoption

5. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION5 FW / IPS Internet Gateway URL Filter Antivirus DLP SSL Sandbox Global LB DDoS Ext. FW/IPS RAS (VPN) Internal FW Internal LB Internet gateways Secure access to the Internet VPN gateways Remote access to DC apps CORPORATE NETWORK Internet & VPN Gateway Internet Gateway: Security perimeter to protect the corporate network Circa 1987 – 1994 – 1999 – 2000 – 2004

6. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION6 HQ Branch Branch Branch Branch Branch Branch BranchBranch Home, Coffee Shop Airport, Hotel SaaS Open Internet IaaS Cloud and mobility break network security Network Security is becoming irrelevant “GE will run 70 percent of its workload in the cloud by 2020” Jim Fowler, CIO “The Internet will be our new corporate network by 2020” Frederik Janssen, Head of Infrastructure “Office 365 was built to be accessed via direct Internet connection” EMEAAPJ

7. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION7 HQ EMEA Branch APJ Branch Branch Branch Branch Branch BranchBranch But what is the best architecture for Cloud Security? Direct to Internet Security connect users to apps NEW SECURITY MODEL SaaS Open Internet IaaS Home, Coffee Shop Airport, Hotel OLD SECURITY MODEL Hub-and-Spoke MPLS / VPN OLD NETWORK MODEL Secure the Corporate Network

8. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION8 Is your cloud build from the ground up to scale? Zscaler built from scratch a highly scalable and ultra-fast multitenant cloud security architecture THE ZSCALER CLOUD • Disparate redundant control, logging, and enforcement policies • Multiple appliances, multiple hops — slow user experience • Expensive and complex to scale and manage • Integrated control, logging, and enforcement • Single pass architecture — performance SLA and security efficacy • Infinitely scalable — cost effective Would you build a power plant with home generators? HOME POWER GENERATORS POWER PLANT NY USER A (policy follows) USA EU USER A Private London Sydney ENFORCE LOG CONTROL Sandbox DLP LB Full AV SSL Proxy IPS NGFW DNS Increased latencyX X X Inefficiency Impaired performance The Cloud is a true multi-tenant platform1

9. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION9 The Cloud is where your Users are Zscaler Local DNS Architecture San Jose User > San Jose DNS > San Jose O365 Shortest path, fewer hops = faster user experience Latency: 12ms Common Centralized DNS Architecture San Jose user > LA > Denver > Austin > Atlanta O365 Lots of hops increases: slower user experience Latency: 52ms Los Angeles RTT=22 ms Austin RTT=48 ms Atlanta RTT=52 ms Denver RTT=36 ms San Jose RTT=12 ms Local DNS Centralized DNS O365 Connection O365 Connection 2

10. 10 Denver Toronto New York Paris London Amsterdam Brussels Stockholm Moscow Mumbai Singapore SydneyCape Town Madrid Riyadh Johannesburg San Francisco Atlanta Dallas Frankfurt Sao Paulo Lagos Kuala Lumpur Tel Aviv Washington DC Chicago Los Angeles Copenhagen Melbourne Milan Hong Kong Taipei Zurich Chennai Tianjin Tokyo Doha Dubai Abu Dhabi Miami Jeddah Al Khobar Warsaw Seattle Oslo Shanghai 45B+ Requests processed/day 100M+ Threats blocked/day 100 data centers across 6 continents Internet Peering across 150 Vendors O365 Peering Data Center Zscaler delivers a fast secure connection to all Offices and Users regardless of location The Cloud is where your users are2

11. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION11 Direct to Internet Block the bad, protect the good Data Center APPSMPLS HQMOBILE BRANCHIOT Your security stack as a service Data Loss Prevention Cloud Apps (CASB) File Type Controls Data Protection Cloud Firewall URL Filtering Bandwidth Control DNS Filtering Access Control Adv. Protection Cloud Sandbox Anti-Virus DNS Security Threat PreventionReal-time policy engine Polices follow the user Changes are immediately enforced, worldwide Business analytics Global visibility into apps and threats blocked Identify botnet infected machines for remediation Real-time policy and analytics SaaS Open Internet The Cloud delivers the full security stack3

12. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION12 The Cloud uses a Proxy Architecture for Security4 Look at it Sniff it X-Ray it Open it Inspect it Repackage it Firewalls Proxies Vs. What can your security do? Compromises security for speed. Has problems inspecting full content and SSL No security compromises. Mandatory for full content and SSL inspection

13. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION13 Zscaler’s Proxy Architecture built for Performance SECURE ALL PORTS & PROTOCOLS MULTIPLE PROPRIETARY INSPECTION METHODS ADVANCED THREAT PROTECTION Behavioral Analysis Sandbox Dynamic Content Classification Page Risk Index Anti-Malware XSS Protection CVE Protection URL Filtering Proxy (SSL) Block Lists File Type Control DNS Filtering Cloud FW (NGFW) Browser Control 45 Billion Requests per Day Full Inline and SSL inspection 4 60+ INDUSTRY THREAT FEEDS Threat sharing partnerships, commercial deals, open source, private working groups. FULL INLINE CONTENT INSPECTION All bytes, all ports, all protocols, including SSL – no compromises. REAL-TIME THREAT CORRELATION Dynamically computes the risk of every page object using content and domain analysis. CLOUD INTELLIGENCE 125M+ threats blocked daily. Once detected, immediately blocked for all users. 120K+ unique security updates a day.

14. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION14 The Cloud provides visibility and management Can you tell the auditor which cloud apps you are using? MEDIA AND FILE SHARING Is YouTube hogging Internet bandwidth? How big are logs for 10K users? 30M trans/day, 60GB logs/day Often sit at many locations/GWs Power of Zscaler NanoLog All logs for all users, all locations at your console within a minute – interactive analysis and and drill-down Good reporting and actionable info starts with good logs Can you prioritize Office 365 over streaming? BUSINESS APPS WEBMAIL Do you allow access to Russian webmail? DEVELOPMENT Is your intellectual property stored on GitHub? 5

15. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION15 The Cloud provides visibility and management Can you answer the question “Have We been Compromised?” THREATS BLOCKED 13.5 M 1092.0 K 270.3 K 47.7 K 45.6 K 33.8 K 5.2 K 383 Malicious Content Botnet Spyware or Adware Phishing Browser Exploit Cross-site Scripting Unauthorized Communication Peer-to-Peer BOTNET TRAFFIC BY LOCATION 313.5 K 273.9 K 203.2 K 115.8 K 76.2 K Beijing Sau Paulo San Francisco Tokyo France Zscaler applied immediate value during the proof-of-concept when we identified botnet infected machines. We’ve easily seen a 60% drop in malware related tickets after rolling out Zscaler. — Seth McCallister, Head of Global Information Security, Beam Suntory BOTNETC&CUSER BOTNET INFECTED MACHINES 5

16. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION16 Zscaler: Five keys to securely routing branch traffic direct-to-cloud 1 The Cloud is a true multi-tenant platform Built for performance and speed and is elastically scalable The Cloud is where your Users are Supports today’s mobility by delivering fast connections no matter the location 2 The Cloud uses a proxy architecture Delivers uncompromising security across all content and SSL 4 The Cloud delivers the full security stack Provides identical protection across all locations, the branch and corporate HQ 3 The Cloud provides visibility and management Simplifies security administration and speeds threat response 5

17. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION17 Zscaler: The Market Leader in Cloud Security Enterprise Customers 2,800 CUSTOMERS Over 200 of the Fortune Global 2000 Global Partners 100 Data centers 45B Daily requests 185 Countries served Cloud Scale The Pioneer in Cloud Security Mature Global Cloud Operations Conglomerates 3 of the top 3 Oil and gas operations 3 of the top 4 Beverage 5 of the top 7 Apparel and accessories 2 of the top 4 Specialized chemicals 2 of the top 3 Food retail 6 of the top 12

18. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION18 Zscaler and SD-WAN eBook zscaler.com/SD-WAN Enabling the internet- only Branch with Zscaler Cloud Firewall Watch the Webcast Learn more about Branch Transformation Secure Remote Access to AWS Your Users Will Love DNS Security, is it enough? Thank You! Questions and Next Steps Steve House Vice President, Product Management shouse@zscaler.com Other Webcasts zscaler.com > resources > webcasts and live demos Tuesday, Feb 27th, 2018 Americas - 10:00 am PST Tuesday, Feb 6th, 2018 Americas - 10:00 am PST

19. 19 June 25 – 27, 2018 | The Cosmopolitan, Las Vegas EXPERIENCE the first annual conference for Zscaler customers, partners, and prospects DISCOVER the latest innovations and insights on the secure, cloud-first enterprise REGISTER at zenithlive.zscaler.com to join us

Overcoming the Challenges of Architecting for the Cloud

Overcoming the Challenges of Architecting for the Cloud

Recomendados

Más contenido relacionado

Was ist angesagt?

Was ist angesagt?(20)

Similar a Overcoming the Challenges of Architecting for the Cloud

Similar a Overcoming the Challenges of Architecting for the Cloud(20)

Más de Zscaler

Más de Zscaler(9)

Último

Último(20)

Overcoming the Challenges of Architecting for the Cloud