Using Zscaler™ to Secure
BYOD Access
Many organizations have enacted bring-your-own-device (BYOD) policies asa way to support the unexpected rise in remote work. BYOD gives users aseamless work experience while keeping productivity high, but it also introduces
risk to organizations.
With BYOD, remote users are often connecting over untrusted Wi-Fi networks, which makes visibility into
user activity a must for IT. Since IT does not have the benefit of installing an agent on these devices, such
visibility isn’t possible, and it’s difficult to enforce policies, block threats, and prevent the spread of malware.
Furthermore, IT teams are unable to check for the presence of endpoint security or antivirus software, oreven ensure that operating systems are up to date. And each user may have more than one device, making it
difficult to track user activity with each additional device the user may own.

DeviceUser

Application Access

Posture of the device

Data retrieval

Inherent trust

Unsupported device

Establishing identity of userwith all their devices

Lack of device control

To enable work-from-anywhere, users must have access to apps and data in spite of using unmanaged
devices and unverified networks. As a result, remote users are inherently trusted, which is contrary to thezero trust model.

Enable zero trust access for BYOD
Zscaler Private Access™ (ZPA™) is a cloud-based service that provides users with zero trust access toapplications based on authentication and authorization. Whether your applications are on the public cloud,private cloud, or your data centers, the ZPA Public Service Edge is able to seamlessly connect the users toapplications regardless of where they’re connecting—all with zero trust at the center of it.

USING ZSCALER TO SECURE BYOD ACCESS“With ZPA, users get access to what they need without being hijacked, andthis becomes manageable from a security perspective and a common user
experience regardless of where they are working from.”–Randy Longhenry, Network Engineering Manager, Paychex

Data Center

ZPA Browser Access provides
application access without theneed for an endpoint agent.
Device support is not animpediment due to no
dependency on device type.

App Connectors

APIs for IDP allow for SAML
integration and support SCIM.
Single location via the Client
Connector Portal displays allapps a user is authorized toaccess.
Zscaler Cloud Browser Isolation
prevents data from flowing
down to unsecured devices.

BrokeredConnection

ZPA Public Service Edge
(enforces policy)

ZPA Browser Access

Request a Demo chevron-right

About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient, and secure. The Zscaler
Zero Trust Exchange protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, andapplications in any location. Distributed across more than 150 data centers globally, the SASE-based Zero Trust Exchange is the world’s
largest inline cloud security platform. Learn more at zscaler.com or follow us on Twitter @zscaler.

Zscaler, Inc.

© 2021 Zscaler, Inc. All rights reserved. Zscaler™, Zscaler Internet Access™, ZIA™, Zscaler Private Access™, and ZPA™ are either (i) registeredtrademarks or service marks or (ii) trademarks or service marks of Zscaler, Inc. in the United States and/or other countries. Any other trademarks
are the properties of their respective owners. V.05142021

120 Holger Way
San Jose, CA 95134+1 408.533.0288
www.zscaler.com