WINNER OF THE
NETWORKTRANSFORMATIONAWARDS 2018

ngena Local Secure Internet
Access – Powered by Zscaler
Solution Overview

ngena Local Secure Internet Access – Powered by Zscaler
ngena and Zscaler are combining best-in-class technologies to deliver
secure local Internet access to future-proof Software-Defined WideArea Networking (SD-WAN) enabled enterprise networks.
As enterprises increasingly rely on cloud-based applications, the traditional
approach of backhauling Internet traffic to centralized Internet gateways is
no longer effective – not only from a performance viewpoint, but also froma user-experience and economic perspective. Inherent in the conventional
approach is that Internet and cloud traffic must first reach a centralized
Internet gateway before being routed on to its final destination.
Since Internet and cloud traffic are growing very rapidly, providing centralized Internet access requires increased WAN bandwidth, resulting insignificant, additional network costs. Moreover, latency is detrimental
to the user experience and undermines the value proposition of using
cloud applications.
Introducing SD-WAN makes it possible to diverge from the traditional
enterprise network architectures and benefit from a wealth of new
functionalities – such as best-path and application-aware routing,application optimization and class of services – even on less costly andless reliable Internet access links. The use of Internet access lines alsoenables enterprises to deploy local Internet breakouts, thus overcoming
the limitations of enterprises’ traditionally centralized Internet accessstrategies. By using local Internet breakouts, enterprises can offload
less business-critical network traffic directly at their local premises, andfree up WAN capacities for more mission-critical data traffic. In addition,
they can also route cloud-related traffic directly to the Internet andleverage the high-performance networks deployed by leading cloudservice providers. This will not only lower WAN costs, but also improveuser experience.

Highlights of ngena’s Local Internet
Access – Powered by Zscaler•	Brings together Cisco’s best-in class SD-WAN and
Zscaler’s security technologies to deliver future-proof
enterprise networks•	Provides advanced network security without the needto buy, deploy or maintain security appliances at thelocal branches• Simplifies the delivery of local secure Internet accesses
by automating laborious configuration tasks, thereby
allowing enterprises to focus their efforts and resources
on more business-critical matters.
•	Deploys centrally managed security policies acrossthe entire network, and instantaneously changes andenforces security and access policies – all in a matterof minutes.
•	Allows Internet traffic to be offloaded at the local branch
to reduce network WAN costs and improve customer
experience.

Enterprise VPN(ngena SD-WAN)

ZIA

ZIA

ngena siteZscaler InternetAccess
IPsec tunnel to ZIA

When it comes to the Internet, security is hugely important for enterprises. For this reason, ngena has partnered with Zscaler, one of theworld’s leading providers of cloud-based security, to offer enterprises
the possibility to deploy best-in-class local secure Internet access attheir premises.
ngena’s fully orchestrated service configuration simplifies the setup of
Zscaler’s Internet Access (ZIA) by automating a range of configuration
tasks and enables quick delivery of secure Internet access to cloud
applications from enterprise locations.
This simplification is made possible by ngena’s management platform
which acts as a repository for the enterprise network design and its
associated configuration. Additionally, ngena’s management platform
and orchestration engine allow to deploy and to configure all the CPEs
in an enterprise network fully automated. Combining these functionalities with the capabilities of configuring Zscaler’s Internet Accessenable ngena to set up secure local Internet accesses automatically.
In practice, this means that enterprises no longer have to laboriously
configure and maintain IPsec connections between their branches andZscaler’s Internet Access; in other words, they can focus their efforts
and resources on more business-critical matters.
The following illustration shows how split tunnels are created automatically at a given Internet Public Line (IPL) WAN interface at an enterprise’ssite where local secure Internet access is required. ngena’s platform
automatically sets up primary and secondary tunnels to Zscaler InternetAccess, ensuring high availability on the local Internet breakout side.

About Zscaler
Zscaler™ enables the world’s leading organizations to securelytransform their networks and applications for a mobile and cloudfirst world. Its flagship services, Zscaler Internet Access™ andZscaler Private Access™, create fast, secure connections between
users and applications, regardless of device, location, or network. Zscaler services are 100 percent cloud-delivered and offer
the simplicity, enhanced security and improved user experiencethat traditional appliances are unable to match. Used in morethan 185 countries, Zscaler operates a multi-tenant distributed
cloud security platform, protecting thousands of customers fromcyberattacks and data loss. Learn more at www.zscaler.com.
About ngena
ngena provides enterprises with consistent data connectivity services, integrating the networks of its alliance partners into a single
global Software-Defined Network (SDN). Using state-of-the-art
cloud and virtualization technologies of Cisco-Viptela, ngena offers
end-to-end managed Software-Defined Wide Area Networks asa Service. The combination of this technology with the alliance’s
operating model gives customers access to secure, stable,scalable and easy-to-use global corporate networks, and provides
high-quality local customer care.
ngena is founded on the strong technologies of Cisco, Comarch,
Equinix & Zscaler. The alliance is grown to include several leadingpartners such as A1, Altice with SFR and Portugal Telecom, BritishTelecom, CenturyLink, China Unicom Global, Deutsche Telekom,Expereo, KPN, MTN, Neutrona, PCCW Global, PLDT Enterprise,
Reliance Jio, Retelit, SK Telekom, StarHub, Sunrise, Telia Company,Telus and Viettel.
For more information visit: www.ngena.net

ngena
VPN tunnel
ngena

IPL
ngena

CPE

Zscaler tunnel(backup)

VPN

Zscaler tunnel(primary)

ZscalerInternet AccessInternetFollow us
linkedin.com/company/ngena
bit.ly/ngena_on_youtube
twitter.com/ngenagmbh
xing.com/companies/ngenagmbh
ngena.net
ngena.net/infokit

Contact us
ngena GmbH
Hahnstrasse 4060528 FrankfurtGermany
info@ngena.net
www.ngena.net

Managing Directors
Dr. Marcus Hacke, Bart de Graaff
Head of Supervisory Board
Robert Koffler
Commercial register
Amtsgericht Bonn HRB 20074

November 2019