Partner Brief

Deploying Zero Trustat the Tactical Edge

© 2022 Zscaler, Inc. All rights reserved.

© 2022 Zscaler, Inc. All rights reserved.

Partner Brief

Being connected to the internet 24/7/365 withhigh-speed communication networks is no longer
a luxury—it’s an expectation. We expect tofind the information we need, when we need it,
without interruption. But for our tactical edge—theservice members deployed on the front lines—theenvironment is very different.

2For tactical communicators, the ability to securely
connect to the internet from literally anywhere
can be a matter of life and death; the difference
between a successful mission and one that fails;
or accurate intelligence delivered in time or
too late.

Zscaler and Klas—extending zero trust
to the tactical edge
Zero trust architectures maintain strict access
controls, trusting no one by default—even thosealready inside the network perimeter. Unlike
traditional network security approaches that

In response to these needs, the Department

expose applications to the internet and open theof Defense (DoD) created the concepts of thedoor for lateral movement, the Zscaler Zero Trusttactical cloud edge and tactical compute nodes.

Exchange™:

The tactical cloud edge is typically hosted intheater, such as at a regional hub node or ona vessel close to the warfighter, to bring thecloud physically within reach. In addition, tacticalcompute nodes are easily transported insidesmaller vehicles and provide localized computing• Connects users and devices to apps, notnetworks, to eliminate lateral threat movement• Makes applications and users invisible to theinternet, thus reducing the attack surface• Uses a proxy architecture—not a passthroughand storage that syncs with the tactical cloud

firewall—to provide full content inspection,edge when it is available.

including encrypted traffic, and security

But this begs a question: How do you securecommunication to the open internet and theresources hosted within the tactical cloud without
putting users on the network, exposing thewarfighter to the enemy, or jeopardizing
the mission?
The answer? A zero trust solution at thetactical edge.

Zscaler, deployed andintegrated with Klas
Voyager’s extreme networkedge technology, provides
warfighters the security,mobility, access, and ease
they need in the field.

Klas Voyager
Tactical Data Center(Voyager TDC)

© 2022 Zscaler, Inc. All rights reserved.

Partner Brief3

Technology overview
Zscaler Government Cloud comprises of two

ZIA is a FedRAMP-High “In-Process” secureservices—Zscaler Private Access™ (ZPA™) andinternet and web gateway delivered as a service

Zscaler Internet Access™ (ZIA™).

from the cloud. Think of it as a secure internet

ZPA is the first and only DoD Impact Level 5 (IL5)and FedRAMP-High JAB Authorized zero trustarchitecture solution. The cloud native solution
provides remote access to internal applications
running on the tactical cloud, a tactical computenode (such as Klas Voyager TDC), or a private

on-ramp—all you do is make Zscaler your next
hop to the internet. This allows tactical users
on expeditionary missions to utilize the enemy’s
networks to securely connect back to mission
resources without being exposed tomalicious threats.

data center. With ZPA, applications are neverKlas Government provides rugged, low

exposed externally, making them completely

size, weight, and power (SWaP) deployable

invisible to unauthorized users. The service

communication solutions that enable rapid

enables warfighters to connect to mission

insertion of commercial technology for theapplications via connections brokered in thetactical environment. Deploying Voyager compute

Zscaler Government Cloud (or an on-premises

modules at the edge allows data to be accessedextension) instead of extending the networkand processed on-site, reducing the amount ofto users. ZPA is 100% software-defined, so it

data required to traverse transmission links while

requires no physical appliances.

enabling C2 when those links are degraded or lost.

Klas Government’s MIL-STD 810 and MIL-STD 461 Voyager modules can be the tactical
cloud edge that operates and enables cloud-delivered capabilities both when connected
and during times of contested/denied transport.

InternetBlock the bad, protect the goodIL5

B|C|P|S|DC’sIL2

Zero Trust at the Tactical Edge
Sharing data has never been easier or moresecure, enabled by leveraging “Digital Dynamic
Need to Know.” For mission success, just bringyour app and your users—we do the rest!

Solution brought to you by© 2022 Zscaler, Inc. All rights reserved.

Partner Brief4

Conclusion
Together, Zscaler and Klas provide DoD and military components with secure access to theinternet, internally managed applications, and compute resources. Warfighters and mission
partners can access the information they need and are authorized to access it withoutcompromising the integrity of the underlying architecture’s security itself. Zscaler and Klas
provide a consistent way to manage access and establish expeditionary networks regardless ofwhether teams are CONUS or OCONUS, TDY or deployed, or serving in maritime conditions.

Ready to bring zero trust to the tactical edge?
Request a virtual demo or proof-of-value of this solution
by visiting zscaler.com/federal.

About KLAS Government
Klas Government makes the world’s most powerful technology for the tactical edge. We provide rugged, low size,
weight and power (SWaP) deployable communications solutions to meet the needs of government and militarycommunicators in any operational environment. Klas Government enables customers to communicate more andcarry less by delivering tactical and executive communications systems specifically designed for ultimate flexibility,scalability and portability. Klas Government’s capabilities include product design and configuration, network
management, solutions development, fielding and training.

About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient,and secure. The Zscaler Zero Trust Exchange protects thousands of customers from cyberattacks and data loss
by securely connecting users, devices, and applications in any location. Distributed across more than 150 data
centers globally, the SASE-based Zero Trust Exchange is the world’s largest inline cloud security platform. Learn
more at zscaler.com or follow us on Twitter @zscaler.
+1 408.533.0288

Zscaler, Inc. (HQ) • 120 Holger Way • San Jose, CA 95134© 2022 Zscaler, Inc. All rights reserved. Zscaler™,Zero Trust Exchange™, Zscaler Internet Access™,ZIA™, Zscaler Private Access™, and ZPA™ areeither (i) registered trademarks or service marksor (ii) trademarks or service marks of Zscaler,Inc. in the United States and/or other countries.
Any other trademarks are the properties of theirrespective owners.

zscaler.com