Solution Brief

Zscaler and Rubrik
Data at rest intelligence combined with data inmotion security to deliver Zero Trust Security© 2023 Zscaler, Inc. All rights reserved.

Enterprises today are experiencing an explosionof business application adoption to boost
productivity. These business applications—combined with public cloud and private data
centers—host a phenomenal volume of yourdata. Your data includes sensitive data stored byyour users in diverse environments like AWS S3,
Azure, GCP, and in approved and unapproved
applications.

© 2023 Zscaler, Inc. All rights reserved.

Solution BriefIntroduction

2

The number one threat of data exfiltration

Zscaler ThreatLabz State of Ransomware reportfrom these environments is no longer limitedshows a 120% increase in double extortion

to physical devices like USB drives, but is now

attacks. Traditional approaches to stop such

expanded to users’ personal cloud storage,

attacks have been inadequate in providing

collaboration, and cloud-based personal email

protection to users.

applications.

Securing organizations from double extortion

Ransomware attacks increasingly threaten

ransomware attacks needs a new solution thatorganizations due to distributed content footprint.

combines focused visibility with fine-grain

Earlier ransomware was limited to encryption

control to prevent data loss and exfiltrations.

of the content to extort money from the victim
organizations. Attackers are now weaponizing
your data with double extortion ransomware
attacks that involve encrypting the critical content
and exfiltrating it out of the organization, thus
making it more complex to recover from suchattacks and maintain business continuity.

The Zscaler-Rubrik Joint Solution
Zscaler and Rubrik have partnered toThese protection measures can ensure

help customers secure sensitive data

sensitive data isn’t accidentally lost orwith the identify, evaluate, and control

maliciously exfiltrated due to a breach.

paradigm, thus preventing exfiltration andunauthorized access.

The security leads can now design
policies to control access and movement

The joint solution enables customers toof sensitive data classified by the Rubrik

gain visibility of sensitive data in the Rubrik

Security Cloud. The compliance team now

security cloud and forward it to Zscaler

will have visibility, control, and reports ofData Protection for Indexed Document

the entire digital estate, thus improving theMatching (IDM). The index is then used tocompliance posture of the organization.

create a document repository that Zscaler
Data Protection can use while evaluating
outbound traffic with the Data Loss
Prevention (DLP) policy.

© 2023 Zscaler, Inc. All rights reserved.

Solution Brief3

How it works
Step 1: Sensitive data discovery
The customer identifies and configures theassets that are needed to be backed up withSaaS

Paas/
DataStorageInternetRubrik Security Cloud. Rubrik Sensitive Data
Discovery then scans backups for sensitive
data aligned with security and compliance3policies.
Step 2: Indexing sensitive data
The data files identified as sensitive are
now recovered to a known Zscaler Indexed
Location in the document server. The servers
will create an index and forward it to Zscaler
Internet Access for further processing.

2Zscaler Index Tool
(EDM & IDM)
Fingerprint document
or IP on-prem

Step 3: Zscaler policy configuration
The index is added to the document registry
maintained by Zscaler Data Protection and canbe used to configure policies regarding themovement of the files.

1Rubrik Backup

Step 4: Traffic evaluation and action

Sensitive file fingerprint

Zscaler Internet Access will assess andevaluate the traffic of the sensitive content,
within and beyond the infrastructure, andenforce policies—including blocking the files

Tax forms
Medical forms
Manufacturing forms
High-value forms
Source code
Trade secrets

from being uploaded to unmanaged online
storage or as an attachment to an email.

Key benefits
Identify Sensitive Data

Inspect traffic for violations

Identify what types ofFind completely or partially

Enforce policies andprevent data loss

sensitive data you have,matching documents whenUse comprehensive

where it lives, and who has

inspecting outbound trafficknowledge of sensitive data

access to it.

with a data protection policy.

to more effectively enforce
data protection policies.

© 2023 Zscaler, Inc. All rights reserved.

Solution Brief4

Summary
Application and infrastructure administrators and security/compliance teams working in tandem candemonstrate a large impact on the security of the organization’s data. Persistent exfiltration threats posedby malicious internal or external users can jeopardize an organization’s reputation and incur heavy penalties
from regulatory aurthorities. A comprehensive data protection program can enhance protection ofsensitive data across the organization with prompt discovery and monitoring.
Together, Rubrik and Zscaler present valuable data security insights to the security and compliance teams
with reliable data protection policies and prevent the loss of critical business data through finely tuned
enforcement methods.

To learn how Zscaler and Rubrik
together can help you better
secure sensitive data across yourorganization, visit our website:www.zscaler.com/partners/rubrik

About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient,and secure. The Zscaler Zero Trust Exchange protects thousands of customers from cyberattacks and data loss
by securely connecting users, devices, and applications in any location. Distributed across more than 150 data
centers globally, the SSE-based Zero Trust Exchange is the world’s largest inline cloud security platform.
Learn more at zscaler.com or follow us on Twitter @zscaler.
+1 408.533.0288

Zscaler, Inc. (HQ) • 120 Holger Way • San Jose, CA 95134© 2023 Zscaler, Inc. All rights reserved. Zscaler™,Zero Trust Exchange™, Zscaler Internet Access™,ZIA™, Zscaler Private Access™, ZPA™ andother trademarks listed at zscaler.com/legal/
trademarks are either (i) registered trademarks orservice marks or (ii) trademarks or service marksof Zscaler, Inc. in the United States and/or othercountries. Any other trademarks are the propertiesof their respective owners.

zscaler.com