PARTNER BRIEF

Zscaler and VMware
SD-WAN
Performance and Security
without Complexity

Together Zscaler and VMware SD-WAN deliver an integrated secure SD-WAN
solution that optimizes performance for cloud applications while providing
assured security, scalability, and flexibility to meet the needs of today’s enterprises.
As cloud-delivered applications become commonplace and adispersed workforce becomes the new normal, backhaulingtraffic over MPLS to a centralized data center via a hub-andspoke architecture is as inefficient as it is irrelevant. This
traditional approach introduces unnecessary complexity andlatency that negatively impacts application performance anduser experience. To support a cloud transition and deliver thedesired user experience, enterprise network architects arereevaluating the design of their WAN architectures to routeinternet traffic locally and taking advantage of inexpensive
but omnipresent broadband internet services, often turning toSoftware-Defined Wide Area Networking (SD-WAN).

Key Highlights:
Optimal Performance• Provides security as a cloud-service
without impacting performance• Enhances quality of experience with realtime monitoring and link optimization• Delivers desired performance withpolicy-based categorization andprioritization for more than 3,000applications
Assured Security

The cloud-delivered VMware SD-WAN™ is transport agnostic
and enables direct access to cloud applications for branchusers through a distributed network of highly available VMware
SD-WAN gateways and branch VMware SD-WAN Edges. TheVMware SD-WAN orchestrator acts as a brain for the networkand provides a single pane of glass view for monitoring andmanagement. With Dynamic Multi-Path Optimization (DMPO)
and identification of more than 3,000 applications, VMware
SD-WAN can optimize traffic steering and route traffic to the beston-ramp access to cloud services, assuring performance basedon business intent.

• Delivers the entire security stack as
a service at scale, including native
SSL inspection

While cloud-delivered applications offer a myriad of benefits,connecting branches and users directly to SaaS and cloud
applications introduces significant security and user-experiencerisks. These risks are particularly challenging to manage withlimited IT resources, and require organizations to rethink theirapproach to securing their offices, users, and data.

• Zero touch provisioning enables
simultaneous deployment of new
branches and security services, in justa few clicks• Policies follow the user, to provide
identical protection for users wherever
they connect• Eliminates the need to buy, deploy, andmanage security appliances in all yourbranch locations
Simplicity and Scale• Reduces cost and complexity of traditional
network and security architectures• Simplifies management with centralized
configuration and monitoring

PARTNER BRIEF

To address these security challenges, Zscaler delivers comprehensive security as a cloud service
and enables inspection of all traffic at scale—all ports and protocols, including native SSL inspection,
URL filtering, full proxy content inspection and access control, advanced firewall, intrusion
prevention, advanced threat prevention, sandboxing, CASB, and DLP. It ensures identical protection
for all users, on any device, with policies that follow the user wherever they connect. Because it’sa fully cloud-delivered service, Zscaler completely eliminates the need to buy, deploy, and manage
security appliances in all your branch locations, and aligns security with the benefits your networktransformation is intended to deliver.

Secure SD-WAN by Zscaler and VMware
To successfully embrace cloud applications and support employees working from anywhere,
VMware SD-WAN and Zscaler work together to enable secure and optimized local internet breakouts.
This seamless integration reduces complexity and aligns business and security policies withapplication needs and business objectives. The combined solution delivers the best application
performance, user experience, and assured security with:• Direct-to-cloud connectivity to eliminate backhauling and reduce latency• Cloud-delivered security, so all users in all locations get identical protection—including native SSL
inspection, access controls, advanced threat protection, and data loss prevention• Flexible deployment options to simplify branch IT operations while enabling scalability andcentralized policy and WAN management• Automatic, zero-touch provisioning to enable rapid deployment of branches and security services,
ensuring security and performance from day one• Secures local internet breakouts• Enables a fast and secure user experience• Delivers the entire security stack as a
cloud-based service–without appliances• Link monitoring, remediation, packet
steering over multiple links• Identification and prioritization ofmission critical applications• Polices to send select traffic toZscaler cloudVMware SD-WAN
Cloud Gateways

Users

SD-WAN Overlay
Private/MPLS

VMwareSD-WAN Edge

InternetBroadband

3G/4g LTE

Data Center
VMwareSD-WAN Edge

FIGURE 1:
VMware SD-WAN andZscaler delivering
Secure SD-WAN

PARTNER BRIEF

The combined Zscaler and VMware SD-WAN solution enables organizations to easily migrate from a
hub-and-spoke architecture to an optimized direct-to-cloud architecture with full-stack security. Withthe VMware SD-WAN orchestrator, network administrators determine what traffic to steer to Zscaler.
Based on the application requirements, admins have the option to steer traffic directly to Zscaler
Cloud Security Service from VMware SD-WAN Edge or VMware SD-WAN gateways. Both routes areautomatically provisioned with IPsec tunnels.
Zscaler secures all traffic in the cloud, without needing to deploy on-prem security appliances at user
branch locations. This approach not only reduces CAPEX expenses for multiple branch locations,
it also simplifies IT operations and eliminates IT-intensive equipment maintenance, upgrades, andavoids misconfiguration. The highly available and distributed VMware SD-WAN gateways offer theadded benefit of real-time monitoring, packet steering, and remediation on the link between usersites and these gateways, which then hand off the traffic to either Zscaler tenant locations or cloudservice locations.
The joint VMware SD-WAN and Zscaler integration simplifies branch IT and enables organizations
to easily scale and deploy access and security policies across many locations from a single console
in a matter of a few clicks. Together, Zscaler and VMware SD-WAN help organizations simplify
IT operations, eliminate unnecessary backhauling, and minimize security risks while optimizing
application connectivity and performance at scale.

For more information on the Zscaler and VMware alliance, go to:zscaler.com/vmware
For more information on the Zscaler and VMware SD-WAN solution, go to:zscaler.com/solutions/partners/vmware-sd-wan

About Zscaler
Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud-firstworld. Its flagship services, Zscaler Internet Access™ and Zscaler Private Access™, create fast, secure connections between users andapplications, regardless of device, location, or network. Zscaler services are 100% cloud delivered and offer the simplicity, enhanced
security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more than 185
countries, Zscaler operates a multitenant, distributed cloud security platform that protects thousands of customers from cyberattacks
and data loss. Learn more at zscaler.com or follow us on Twitter @zscaler.
About VMware
VMware SD-WAN, simplifies branch WAN networking by automating deployment and improving performance over private, broadband
internet and LTE links for today’s increasingly distributed enterprises. VMware SD-WAN includes a choice of public, private, or hybrid
cloud network for enterprise-grade connection to cloud and enterprise applications; branch office enterprise appliances and optional
data center appliances; software-defined control and automation; and virtual services delivery.
For more information, visit www.vmware.com.

Zscaler, Inc.

©2021 Zscaler, Inc. All rights reserved. Zscaler ™, Zscaler Internet Access ™, ZIA ™, Zscaler Private Access ™, and ZPA ™ are either (i) registeredtrademarks or service marks or (ii) trademarks or service marks of Zscaler, Inc. in the United States and/or other countries. Any other trademarks
are the properties of their respective owners. V.021721

120 Holger Way
San Jose, CA 95134+1 408.533.0288
www.zscaler.com