USE CASE BRIEF

Secure SD-WAN with
CloudGenix and Zscaler
Learn how deploying CloudGenix with Zscaler
provides a platform for digital transformation withconsistent and comprehensive security protection
for every site in the enterprise.
Business Challenges
Today’s businesses face intense ongoing scrutiny from an ever-changing
WAN perimeter, new threat vectors, and continually increasing regulatorycompliance. Addressing these issues is fundamentally at odds with
implementing changes to increase innovation and improve competitive
posture within the marketplace through digital transformation. Using legacy
approaches to building secure wide area networks (WANs) present a series ofchallenges that both limit the ability to remain secure and hinder innovation:

LEGACY WANS USE A
BOTTOMS-UP POLICY MODELLEGACY SECURITY CREATESDEVICE SPRAWL

packet-centric network architectures create agap between the needs of the business andwhat IT implements

requiring a wide array of security devices
deployed in multiple sites adds tremendous
cost and complexity

REACTIVE VS PROACTIVE POSTURE
legacy WANs and security leave businesses
continually reacting rather than proactively
addressing evolving threats and needs

Solution Requirements
Any solution designed to enable businesses to innovate while improving
their security posture and operational efficiency must meet the following
requirements:

ENABLE TOP-DOWN
POLICY MANAGEMENTENSURE CONSISTENTTHREAT PROTECTION

REDUCE HARDWARE AND
OPERATIONAL COMPLEXITY

rather than managing esoteric
networking and security rules, infrastructure should be managed
using business language

provide consistent security protections across all sites for known
and evolving threat types

eliminate the need for device
sprawl at remote locations andreduce management cost

PROVIDE OPTIMAL APPLICATION PERFORMANCEAND SECURITY
apply the right security capabilities to each application whileproviding performance SLAs

CLOUDGENIX|USE CASE BRIEF|SECURITY|Secure SD-WAN
Secure software-defined wide area networks (Secure SD-WAN, or SSD-WAN),
combines the technology from SD-WAN and cloud security into a next-generation WAN architecture that allows businesses to modernize and innovate,while optimizing cost, reducing hardware, and enjoying consistent security
protections for all sites. The secure SD-WAN solution from CloudGenix andZscaler is comprised of two main components that are tightly integrated tosimplify deployment and operations, maximize value, and reduce cost: CloudGenix AppFabric SD-WAN and the Zscaler Cloud Security Platform.

CloudGenix AppFabric
CloudGenix
Controller

AppFabric is a Software-defined

PublicCloud/SaaS

WAN (SD-WAN) solution thatLTE

allows businesses to overlay asecure application-centric fabric ofconnectivity amongst all of their

INTERNET

sites and the cloud. AppFabric allows
business policies to be defined

Softwarefor performance, security, andcompliance, specifying in businesslanguage which applications areimportant for each site, how theyshould be prioritized, and which

RecreationalInternet
PCI/HIPAA/SOXMPLS
Data Center

BranchOffice

FIGURE 1: APPFABRIC ENABLES SECURE APP-CENTRIC CONNECTIVITY AMONGST SITES AND THE CLOUD, ENABLINGCONTROLS FOR PERFORMANCE, SECURITY, AND COMPLIANCE.

WAN links can be used for each application. This provides you with explicit
control over how your WAN is utilized and specific links, enables confident
integration of the cloud, and allows for deployment of broadband Internet
seamlessly at each remote office for increased capacity and lower costs.

Advantages vs Other SD-WAN Solutions
CloudGenix AppFabric is a second-generation SD-WAN solution built on topof an application-centric architecture. Compared to first-generation SD-WAN
solutions that use a packet-centric architecture, CloudGenix AppFabric provides the following advantages:

POLICIES ALIGNED WITH
BUSINESS GOALSBEST POSSIBLE USER
EXPERIENCE

build policies using language thataligns with the business rather
than low-level networking rules
and protocols

policy enforcement based not
only on network conditions, butalso application performanceand health metrics

UNPARALLELED VISIBILITY
into performance and healthmetrics for both the WAN andapplications providing uniquebusiness insights and fasterproblem resolution

HIGHEST LEVELS OF|AGILITY AND AUTOMATION
through DevOps programmability, automate infrastructure andoffload otherwise manual tasks

2

CLOUDGENIX|USE CASE BRIEF|SECURITY|

3

Zscaler Cloud Security Platform
Zscaler provides a comprehensive
cloud security platform for bothinternet access (Zscaler Internet Access™) as well as internal applications
hosted in the data center or public
clouds (Zscaler Private Access™). Witha continually-changing perimeter,
I/T organizations are moving towarda transformative, dynamic security
model that breaks free of traditional
appliance-based solutions that aredependent on deployment within thenetwork. Together, Zscaler InternetAccess and Zscaler Private Access

FIGURE 2: ZSCALER PROVIDES LEADING ACCESS CONTROL, THREAT PREVENTION, AND DATA PROTECTION CAPABILITIESFROM THE CLOUD, THEREBY ALLOWING DYNAMIC SECURITY THAT IS UNCHAINED FROM TRADITIONAL DEPLOYMENT MODELS.

create fast, secure connections between users and applications, regardless of device, location, or network. Zscaler Internet Access provides access policy controls, advanced threat prevention,and data protection technologies for every user, every device in the enterprise,
including secure web gateway with native SSL inspection, next-generation
cloud firewall, cloud sandbox, intrusion prevention, inline cloud access security
broker with data loss prevention, and application control.

Advantages vs Other Cloud and VNF Security Solutions
Zscaler Cloud Security Platform is a revolutionary cloud security platform,born-in the cloud and designed for the cloud, that has a number ofadvantages compared to other security solutions, including:•S implifies Branch IT simplify branch
operations by delivering security as acloud service• Increased visibility and simplified
management delivers real-time visibility andlogs every session—all users, locations, allapps, ports, and protocols—from a single
console•S SL inspection at scale natively intercepts
and inspects SSL/TLS-encrypted traffic at
scale, and seamlessly manages certificates
for all applications•F ast and secure user experience allows
internet and cloud-bound traffic to be routed
locally and securely to deliver a fast userexperience—without expensive hardware•R educes costs and complexity reduces
MPLS backhauling spend, minimizes timeconsuming management of patches andoutage windows, and secures local internet
breakouts without the cost and complexityof traditional or virtual security appliances•B rings the entire security stack close
to the user delivers next gen firewall-asa-service for internet and cloud-boundtraffic on all ports, and provides identicalprotection for users wherever they
connect, no security compromises•C onsistent performance and elastic scale
provides security and access controls
across all ports and protocols and scales
services to handle cloud application trafficwith long-lived connections that canoverwhelm other firewalls

CLOUDGENIX|USE CASE BRIEF|

SECURITY|

4Secure SD-WAN Solution Benefits
Deploying secure SD-WAN from CloudGenix and Zscaler provide businesses with anumber of compelling benefits, including:•C onsistent security for all users and sites
provide a comprehensive security stack
for all users and all sites without requiring
security hardware at each location•L owest total cost of ownership reduce
branch office hardware, WAN costs, andoperational burden while centralizing
security in the cloud• Improve your compliance posture meetcompliance goals by enabling consistent
protection and WAN controls dictating
how applications use the WAN• Integrate any transport at any site takeadvantage of MPLS, broadband Internet,
cellular, or any other WAN transport basedon the price and performance needs of each•A lign WAN policy with business goals
create and deploy WAN policies usingbusiness language rather than esoteric
networking rules and protocols•E mbrace digital transformation reduce
branch costs while increasing capacity
and security to take advantage of video
and other bandwidth-rich immersive
experiences

Better Together: CloudGenix and Zscaler
Compared to other SSD-WAN solutions, secure SD-WAN from CloudGenix and Zscaler
provide a number of advantages compared to alternative solutions, including:• Intelligent tunneling from branch toZscaler CloudGenix employs active/active
tunneling with per-session load-balancing
to ensure WAN link utilization and flow
symmetry•B est possible user experience CloudGenix
enforces policy based on both health andperformance from the network in addition
to the application to uniquely provide thebest user experience•M ost flexible integration options
CloudGenix supports both one-clickdefault-gateway integration to Zscaler
or granular, controlled forwarding on anapplication-by-application basis•B rownout detection and remediation
CloudGenix uniquely measures application
health and performance which allows fordetection and remediation of brownout
conditions•F ull visibility and actionable analytics
CloudGenix provides visibility and analytics
over health and performance of both
WAN links and applications, along withfull visibility into tunneled traffic andapplications

SEE FOR YOURSELFSEE CLOUDGENIX IN ACTION FOR YOURSELF!
VISIT WWW.CLOUDGENIX.COM/TRIAL TO REGISTER FOR A NO-RISK FREE TRIAL TODAY.

ABOUT CLOUDGENIX
CloudGenix provides a software-defined WAN solution with AppFabric technology that enables you to build a global WAN basedon business policies for application performance, compliance, and security, across all sites and users. Unlike router-based solutions,
CloudGenix AppFabric allows you to define top-down global policies based on business intent rather than fragmented bottomsup configuration changes based on technical implementation. With CloudGenix, you can easily integrate heterogeneous WAN
connections for any site, take advantage of cloud and SaaS applications, improve visibility for app performance and SLAs, anddramatically simplify network operations.

ABOUT ZSCALER
Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloudfirst world. Its flagship services, Zscaler Internet Access™ and Zscaler Private Access™, create fast, secure connections between
users and applications, regardless of device, location, or network. Zscaler services are 100% cloud delivered and offer the simplicity,enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in morethan 185 countries, Zscaler operates a multi-tenant, distributed cloud security platform that protects thousands of customers fromcyberattacks and data loss. Learn more at zscaler.com or follow us on Twitter @zscaler.

2665 North First St., #110 San Jose, CA 95134 | 1.844.800.CGNX | info@cloudgenix.com© 2018 Cloudgenix inc. All rights reserved.