1. Web Traffic Offload of MPLS Networks
Jeff Bird, RSM
Zscaler

2. Top multinational enterprise network & telecoms priorities
“Which of the following initiatives are likely to be your firm's top telecom adoption priorities over the next 12 months?”
2013 GEN5:
Base: 954 Telecoms decision-makers at firms with 1,000 or more employees who are responsible for multicountry or global network and telecoms technology decisions (“critical priority” and “high priority” responses); Source: Forrsights Networks And Telecommunications Survey, Q1 2013

3. Business globalization drives need for a highly available and reliable international site-to-site network
Workforces are both increasingly distributed, and mobile.
Globalizing business operations demands a highly reliable and resilient corporate network.
Globalization resets business, customer and employee expectations about speed of responsiveness and decisions, and for team collaboration.
The more internationally distributed a firm’s operations, the bigger the challenge to deliver consistent apps performance.
Security becomes a big issue around Web Apps

4. MPLS interest is driven mostly by perceptions of “value for spend”
Reasons for using MPLS - ranked
Need more QoS network capacity
Need high network reliability, and predictability
Want to improve user experience with collaboration and productivity apps
Need to upgrade network to support new enterprise communications apps
Want a simplified WAN infrastructure
Want to improve access to internally hosted, and off-premises hosted and cloud applications
Want data traffic routing control including QoS
Need a modern and future-proof network
Need to integrate disparate networks globally

5. The Age of Mobility (it’s about the Web apps!)
Customer and employee expectations of more , easy to use, mobile apps will change how business is done
Drivers
IT Challenges
Workplace virtualization
Collaboration (internal, external)
Consumerization (bring-your-own devices, apps)
Manage growing complexity (endpoint, network, information security)
Cost management – licenses, IT support
Direct technology purchases (BYO-T) risk bypass of IT standards

6. Virtualization success rides on getting your Cloud strategy right
Most firms are keen to consolidate data centers
A majority will adopt hybrid cloud – own DC + virtual private cloud &/or public cloud (e.g., Office 365, Salesforce, Dropbox, gMail)
Many will migrate UC&C app to SaaS models
All virtualizing firms are beefing up network security
Most firms will shift network and security management towards 3rd party services to help move forward faster and better …
Common thread here is more Web traffic…

7. Is MPLS Dead or Have These Reports Been Greatly Exaggerated?
©2013 Zscaler, Inc. All rights reserved.

8. Why? The Cloud Goes (Went) Enterprise!
Regional Gateway
Cloud Services
Business Critical
Sales from the road on iPAD
Applications HQ
DLP
Office from everywhere
Users
APT/0Day
Marketing user groups
Home or Hotel
Personal or business Use
Training videos from iPhone
Regional Office
On-the-go
Corporate storage
Where is your Corporate Perimeter?

9. 3 Trends Transforming Network & Security
Business Users go Mobile
Users work from home or on-the-go
Users who BYOD
50%
90%
Cloud Apps go Mainstream
Cloud-based applications used by an enterprise 50
Social goes Enterprise
employees use Facebook at work
75%
— Impact —
Mobile, Cloud & Social: Driving business beyond the corporate network (often without policy & protection)
This has broken the traditional trusted “hub & spoke” network.
Users are often outside the corporate network accessing cloud-based services.
80% of my MLPS traffic used to be for applications at my HQ and 20% was Internet bound. Now it’s just the opposite.” – CIO, Fortune 50 company “

10. Traditional MPLS Networking – Hub & Spoke
NEW YORK
SEATTLE
MPLS PROVIDER
Contact a MPLS Service Provider & Architect 1
Provision a T3 (45 Mbps) per site to provide connectivity to the MPLS network 2 T3
Provision a 1 Gbps Ethernet circuit to provide the “hub” datacenter connectivity to the MPLS network 3
1 GB
HQ: SAN JOSE
For Internet Access also provision a 1 Gbps Dedicated Internet Line at the “hub” datacenter 4
ATLANTA
DATACENTER
1 GB
INTERNET

11. Is This The Best Way to Provide Internet Access?
MPLS PROVIDER T3
NEW YORK
SEATTLE T3
By volume often 70%+ of MPLS backhauled traffic is Internet bound or Web Traffic port 80 & 443
MPLS Bandwidth is more expensive than commodity Direct Internet Access
$$$$$$$ T3
HQ: SAN JOSE T3
1 GB
ATLANTA
DATACENTER
1 GB
INTERNET

12. “Direct 2 Net” Split Tunnel Path to Insecurity?
MPLS PROVIDER
Layers of appliances (FW, IPS, AV, DLP, NGFW, BA) are deployed at the “hub” datacenter to secure Internet access! T3 T3
NEW YORK
SEATTLE
Branch router security (UTM) is one approach to secure local Internet access… T3
HQ: SAN JOSE T3
1 GB
… but keeping policy consistent and providing per user policy and reporting/visibility is a nightmare
ATLANTA
DATACENTER
1 GB
Easy way out is to still backhaul…
So is MPLS Dead?
INTERNET

13. The Web Traffic Offload Approach with Zscaler
INTERNET
ISP
ISP
Purchase inexpensive local Internet access at the branches (often faster/lower latency!) and save $$ 1
MPLS PROVIDER T1 T1
SEATTLE
NEW YORK
Reduce the size of the MPLS links to a T1 (1.5Mbps) instead of a T3 Link (45 Mbps) and save $$ 2
Reduce the size of the Internet access at the datacenter. Simplify Network & Security and save $$ 3 T1
HQ: SAN JOSE T1
1100 MB
Offload your Web traffic to the Zscaler Cloud for security processing! 4
ATLANTA
ISP
DATACENTER
ISP
100 MB
INTERNET

14. What Does Typical Security Look Like Today?
Mobile & Distributed Workforce
Regional
Office
Home
or Hotspot HQ
On-the-go
Cloud Services
Social Media
Cloud Apps
Mobile Apps
Proxy Server
APT/Bot Gateway
Application Awaerness
URL Web-Filter
Antivirus-Filter
WAN/SSL Accleration
Load Balancer
DLP
SSL/IPSec VPN
Botnet
Exploits
In a more simplistic picture – the best way to think of Zscaler, is as a global check-post sitting between your employees and the Cloud. In a more technical term some of you might view Zscaler as a Massively scalable and fast Proxy available anytime, globally from any device.

15. What Does Zscaler Do? Global check post Enforces business policy
Mobile & Distributed Workforce
Regional
Office
Home
or Hotspot HQ
On-the-go
Block the bad, protect the good
Global check post
Enforces business policy
NO HARDWARE | NO SOFTWARE
Cloud Services
Social Media
Cloud Apps
Mobile Apps
Botnet
Exploits
In a more simplistic picture – the best way to think of Zscaler, is as a global check-post sitting between your employees and the Cloud. In a more technical term some of you might view Zscaler as a Massively scalable and fast Proxy available anytime, globally from any device.

16. Can It Scale?
The name Zscaler stands for the Zenith of Scalability
Every day Zscaler processes more than 12 billion transactions through our cloud from 4,500 customers in 183 countries
Our cloud operates in 110+ datacenters across 12 world class service providers
400M Tweets Per Day
5B Searches Per Day
4.7B Likes Per Day
<
12B Transactions Per Day
* October 2013 Statistics
©2013 Zscaler, Inc. All rights reserved.

17. Zscaler’s 110 Datacenters – 4000 Customers
Los Angeles
Mexico City
Chicago I, II
Toronto
New York
Washington DC I, II
Atlanta I, II
Miami
Sao Paulo
Johannesburg
Oslo
Frankfurt I, II
Gdansk
Stockholm
Moscow
Mumbai
Singapore
Sydney
Hong Kong
Tokyo
Madrid
Taipei
Dubai
Kuwait City
Cape Town
San Francisco
Sunnyvale
Santiago
Amman
Dallas I, II
Denver
Paris
London
Bern
Chennai
Riyadh
Cairo
Lima
Kuala Lumpur
Amsterdam
We have talked much about the global nature of the Zscaler Direct to Cloud Network. It is worth while to share the extent to which we have deployed infrastructure to offer you comparable access – and in many cases better access – than you would receive using your current method of accessing the Cloud and Internet.
October 2013
Active Data Centers
©2013 Zscaler, Inc. All rights reserved.

18. Zscaler: Leader & the Most Visionary
Secure Web Gateway Magic Quadrant “
…the fastest-growing vendor…
…earned the strongest score in Completeness of Vision…
…cloud has the largest global footprint…
…Zscaler is a very good candidate for most enterprises …
Before closing today’s presentation, I would like to point to some important validation that speaks highly to the consideration you should make in the coming months and years. We are very proud of the recognition Gartner has given us as a leading innovator. We are also thrilled that they recognized – through the customer success we just shared – that the Zscaler Direct to Cloud Network is creating a new category and leading the way to facilitate business securely in a world that is becoming more and more Cloud, social and Mobile.
It is no accident that many of these customers have seen the compelling benefit and value in deploying Zscaler. We would like the opportunity to further explore how we can be of benefit to your company. ”
©2013 Zscaler, Inc. All rights reserved.

19. Thank You! Next Steps Register for a Free Trial
Register for a Personalized Demo
Register for a Webinar/Live Demo
©2013 Zscaler, Inc. All rights reserved.

20. Q & A