SlideShare a Scribd company logo

PLNOG 22 - Sebastian Grabski - Is your network ready for application from the cloud?

•Download as PPTX, PDF•
•
PROIDEA
PROIDEA

This document discusses a company's journey to adopting cloud applications and transforming their network architecture. They initially implemented Office 365 and local internet breakouts at branches. This improved the Office 365 experience but users at headquarters still experienced issues. They deployed Zscaler to eliminate firewall appliances at headquarters locations and consolidated their 80+ network vendors. They then implemented Zscaler apps on mobile devices and split tunneling for internet traffic. This improved the remote user experience. Their goal is now migrating applications to the cloud, simplifying access, and establishing a zero-trust security model for the future.

Related slideshows

The evolution of IT in a cloud world
The evolution of IT in a cloud worldThe evolution of IT in a cloud world
The evolution of IT in a cloud world
 
Outage analysis: BGP Routing Errors Ripple Across the Internet
Outage analysis: BGP Routing Errors Ripple Across the InternetOutage analysis: BGP Routing Errors Ripple Across the Internet
Outage analysis: BGP Routing Errors Ripple Across the Internet
 
Leveraging Operational Data in the Cloud
Leveraging Operational Data in the CloudLeveraging Operational Data in the Cloud
Leveraging Operational Data in the Cloud
 
1 of 11
Customer Case Study Is your network ready for application from the cloud? Sebastian Grabski
2 Securing your cloud transformation „Many companies look at „cloud first” without assessing the network changes this entails. When we started to adopt cloud-delivered applications, we had to understand how our network architecture would be impacted by the cloud . There’s a pretty significant network transformation required” Herve Coureil, Chief Digital Officer, Schneider Electric
3 Securing your cloud transformation Cloud and mobility: enablers, but disrupt networking and security Old World New World It started with cloud app adoption… And that drives Network Transformation… Which disrupts network security DC Cloud + DC + ?Network Security Hub-and-Spoke to DC Direct-to-Cloud
©2018 Zscaler, Inc. All rights reserved.4 Customer environment App App App App App App App App App • Growth by Acquisitions • Complex by Nature • Different Apps per BU • Fragmented Security Controls 5 DataCenters 12 regional Internet Breakouts 2 email systems managed by 3 different teams 80+ WAN providers 3 VPN Solutions A complex Architecture INTERNET & SaaS Castle & Moat Security Internet Breakout
©2018 Zscaler, Inc. All rights reserved.5 IT Strategy to Support Business Cloud First SaaS enables a fast user experience and IT agility Drives network simplicity and cost reduction Internet First Enables and maximizes a productive workforce Mobile First Global Collaboration Delivers a competitive advantage
©2018 Zscaler, Inc. All rights reserved.6 Transformation Journey – Phase 1 – Embrace O365 & Social 2 initiatives – 9 months 1. Implement local Internet breakouts at all branches 2. Embrace Office 365 and SaaS 12 Regional HQs 280+ Branch Locations MPLS WAN Vendor 5 Data Centers Open Internet Internet Users at HQ locations were still having a poor O365 experience… MPLS WAN Vendor SaaS Benefits • Cost savings • Reduction in branch user internet complaints (less pushback) • Avoided the cost and overhead of deploying 280+ security appliances • Simplified IT by migrating Email, SharePoint and File Servers to O365. 2 MPLS WAN Vendor 1 Option 1: Deploy branch firewalls in 280+ locations. Option 2: Implement Zscaler Internet Access (ZIA) Platform. X X
©2018 Zscaler, Inc. All rights reserved.7 Transformation Journey – Phase 2 – Fix HQ Performance + WAN RFP 2 initiatives – 18 months 1. Deploy ZIA at HQ Locations and eliminate FW appliances. 2. Consolidate Network vendors, implement SD-WAN 12 Regional HQs 280+ Branch Locations MPLS WAN Vendor 5 Data Centers Open Internet MPLS WAN Vendor SaaS Benefits • $$$ Savings, 60% WAN cost reduction. • Simplification WAN Landscape, 80 vendors to 3. • Eliminated security appliances in regional HQs • Better Office 365 user experiences at all sites. • Enhanced Security Posture with SSL inspection and SIEM integration MPLS WAN Vendor 1 Delivered a consistent end-user experience to IaaS and SaaS applications at all branch and HQ locations, but the mobile user was still struggling 2
©2018 Zscaler, Inc. All rights reserved.8 Transformation Journey – Phase 3 – Fix Roaming Users 2 initiatives – 6 months 1. Implement ZAPP for all mobile devices & users 2. Deploy VPN Split Tunneling for all Internet traffic, secured by ZIA. Massive Improvement by using SaaS, but still user slowness when using DC Applications Benefits • Reduced risk by providing identical security controls to mobile workers. • Cost Savings – Reduce 70% Internet Bandwidth at the DC’s. • Improved remote user experience for Internet and SaaS VPN Concentrator DC 6k Roaming Users SaaS Internet
©2018 Zscaler, Inc. All rights reserved.9 MPLS WAN Vendor Open Internet SaaS IaaS Transformation Journey – Phase 4 – ….The Road to Nirvana…. 3 initiatives 1. Migrate Apps to IaaS – Consolidate DC’s 2. Seamless End-User Experience - Implement Zscaler Private Access 3. Reference Architecture for a Zero-Trust Model (SDP) 280+ Branch Locations Future-proof app delivery strategy with positive end-user experience. Benefits • Reduced DC Cost and Complexity • Simplified access to all applications • Avoids the cost and complexity of virtual firewalls and load balancers in IaaS • Enhanced security posture – app microsegmentation, reduced inbound attack surface, enablement of zero-trust SDP. 1 Data Center 12 Regional HQs 5 Data Centers
Securing your cloud transformation Thank You
11 Securing your cloud transformation ZPA: Fast and secure access to private apps Best approach for Web and non-Web apps in multi-cloud environments A modern approach: Remote users never brought on the corporate network App access with out network access Native app segmentation microtunnels that connect an authenticated user to an name app Apps are invisible not exposed to the internet Multi-Cloud: Public / Private EmployeesPartners Zscaler AppTraffic Forwarding: Browser Internet Only Branch How it works…. A user requests access to an app 1 Policies determine if the user has access to the app 2 If allowed, the cloud establishes inside out connections to a ZEN 3 3rd Party Auth Security and Policy Enforcement New York London Sydney App Connectors

More Related Content

PLNOG 22 - Sebastian Grabski - Is your network ready for application from the cloud?

  • 1. Customer Case Study Is your network ready for application from the cloud? Sebastian Grabski
  • 2. 2 Securing your cloud transformation „Many companies look at „cloud first” without assessing the network changes this entails. When we started to adopt cloud-delivered applications, we had to understand how our network architecture would be impacted by the cloud . There’s a pretty significant network transformation required” Herve Coureil, Chief Digital Officer, Schneider Electric
  • 3. 3 Securing your cloud transformation Cloud and mobility: enablers, but disrupt networking and security Old World New World It started with cloud app adoption… And that drives Network Transformation… Which disrupts network security DC Cloud + DC + ?Network Security Hub-and-Spoke to DC Direct-to-Cloud
  • 4. ©2018 Zscaler, Inc. All rights reserved.4 Customer environment App App App App App App App App App • Growth by Acquisitions • Complex by Nature • Different Apps per BU • Fragmented Security Controls 5 DataCenters 12 regional Internet Breakouts 2 email systems managed by 3 different teams 80+ WAN providers 3 VPN Solutions A complex Architecture INTERNET & SaaS Castle & Moat Security Internet Breakout
  • 5. ©2018 Zscaler, Inc. All rights reserved.5 IT Strategy to Support Business Cloud First SaaS enables a fast user experience and IT agility Drives network simplicity and cost reduction Internet First Enables and maximizes a productive workforce Mobile First Global Collaboration Delivers a competitive advantage
  • 6. ©2018 Zscaler, Inc. All rights reserved.6 Transformation Journey – Phase 1 – Embrace O365 & Social 2 initiatives – 9 months 1. Implement local Internet breakouts at all branches 2. Embrace Office 365 and SaaS 12 Regional HQs 280+ Branch Locations MPLS WAN Vendor 5 Data Centers Open Internet Internet Users at HQ locations were still having a poor O365 experience… MPLS WAN Vendor SaaS Benefits • Cost savings • Reduction in branch user internet complaints (less pushback) • Avoided the cost and overhead of deploying 280+ security appliances • Simplified IT by migrating Email, SharePoint and File Servers to O365. 2 MPLS WAN Vendor 1 Option 1: Deploy branch firewalls in 280+ locations. Option 2: Implement Zscaler Internet Access (ZIA) Platform. X X
  • 7. ©2018 Zscaler, Inc. All rights reserved.7 Transformation Journey – Phase 2 – Fix HQ Performance + WAN RFP 2 initiatives – 18 months 1. Deploy ZIA at HQ Locations and eliminate FW appliances. 2. Consolidate Network vendors, implement SD-WAN 12 Regional HQs 280+ Branch Locations MPLS WAN Vendor 5 Data Centers Open Internet MPLS WAN Vendor SaaS Benefits • $$$ Savings, 60% WAN cost reduction. • Simplification WAN Landscape, 80 vendors to 3. • Eliminated security appliances in regional HQs • Better Office 365 user experiences at all sites. • Enhanced Security Posture with SSL inspection and SIEM integration MPLS WAN Vendor 1 Delivered a consistent end-user experience to IaaS and SaaS applications at all branch and HQ locations, but the mobile user was still struggling 2
  • 8. ©2018 Zscaler, Inc. All rights reserved.8 Transformation Journey – Phase 3 – Fix Roaming Users 2 initiatives – 6 months 1. Implement ZAPP for all mobile devices & users 2. Deploy VPN Split Tunneling for all Internet traffic, secured by ZIA. Massive Improvement by using SaaS, but still user slowness when using DC Applications Benefits • Reduced risk by providing identical security controls to mobile workers. • Cost Savings – Reduce 70% Internet Bandwidth at the DC’s. • Improved remote user experience for Internet and SaaS VPN Concentrator DC 6k Roaming Users SaaS Internet
  • 9. ©2018 Zscaler, Inc. All rights reserved.9 MPLS WAN Vendor Open Internet SaaS IaaS Transformation Journey – Phase 4 – ….The Road to Nirvana…. 3 initiatives 1. Migrate Apps to IaaS – Consolidate DC’s 2. Seamless End-User Experience - Implement Zscaler Private Access 3. Reference Architecture for a Zero-Trust Model (SDP) 280+ Branch Locations Future-proof app delivery strategy with positive end-user experience. Benefits • Reduced DC Cost and Complexity • Simplified access to all applications • Avoids the cost and complexity of virtual firewalls and load balancers in IaaS • Enhanced security posture – app microsegmentation, reduced inbound attack surface, enablement of zero-trust SDP. 1 Data Center 12 Regional HQs 5 Data Centers
  • 10. Securing your cloud transformation Thank You
  • 11. 11 Securing your cloud transformation ZPA: Fast and secure access to private apps Best approach for Web and non-Web apps in multi-cloud environments A modern approach: Remote users never brought on the corporate network App access with out network access Native app segmentation microtunnels that connect an authenticated user to an name app Apps are invisible not exposed to the internet Multi-Cloud: Public / Private EmployeesPartners Zscaler AppTraffic Forwarding: Browser Internet Only Branch How it works…. A user requests access to an app 1 Policies determine if the user has access to the app 2 If allowed, the cloud establishes inside out connections to a ZEN 3 3rd Party Auth Security and Policy Enforcement New York London Sydney App Connectors

Editor's Notes

  1. Thanks and confirm time