PARTNER SOLUTION BRIEF

Zscaler and Viptela
SD-WAN™

SOLUTION OVERVIEW
Zscaler and Viptela combine Zscaler’s best-in-class Cloud Security Platform with Viptela
SD-WAN solution to simplify how traffic is routed from the branch and make it easy toestablish and secure local Internet breakouts. Together, they enable faster, secure, policy
based access to the internet and business-critical cloud applications from branch andremote office locations.
As more applications move to the cloud, the old approach of backhaulingtraffic over MPLS to a centralized Internet gateway via a hub-andspoke architecture is no longer relevant. It is expensive and introduces
unnecessary latency that negatively impacts user experience. To support
a cloud transition and deliver a fast user experience, enterprise networkarchitects are re-evaluating the design of their WAN architectures to findways to route Internet traffic locally, and to take advantage of inexpensive
broadband Internet services, often turning to Software-Defined Wide Area
Networking (SD-WAN).
Viptela provides an elegantly and simply architected SD-WAN solution
to Fortune 500 and Global 2000 enterprise companies today. The ViptelaFabric is an industry-leading platform that delivers secure end-to-end
network virtualization. Enterprises can use the Fabric to build large-scale
SD-WAN networks with zero touch bring-up, full integration of routing,security, centralized policy, and orchestration. The result is a network thatis easy to manage and more cost efficient to operationalize, empowering
enterprises to deliver on their business objectives.
However, connecting all branch locations directly to the Internet introduces
significant security risks, which are particularly challenging to manage withlimited IT resources. Together, Zscaler and Viptela minimize exposure tothese risks by enabling customers to securely route all their Internet-boundtraffic directly to the Zscaler Cloud Security Platform (Zscaler InternetAccess, Zscaler Cloud Firewall, or Zscaler Guest Wi-Fi Protection).

HIGHLIGHTS• Viptela SD-WAN simplifies connecting
branches to the Internet by leveraging
multiple network connection types(broadband, LTE, and MPLS) to
optimize application traffic routing andperformance, reduce WAN transport costs
and network operational expenses• Viptela routes Internet traffic locally toZscaler directly from Viptela vEdge Routers,
to enable a fast and secure user experience• Zscaler delivers the entire security stack as
a cloud-based service that eliminates theneed to buy, deploy, and manage security
appliances in all your branch locations• Zscaler ensures identical protection forusers wherever they connect - with policies
that follow the user

• Zscaler enables organizations to define andimmediately enforce security and accesspolicies across all locations from a single
console, and together with Viptela allow
rapid deployment of new security services
in minutes, with just a few clicks

Zscaler delivers the entire security stack as a cloud service to secure Internet traffic and deliver a fast user experience — withoutbackhauling and without deploying stacks of security appliances at each location. By routing Internet-bound traffic to Zscaler,customers can immediately begin inspecting all traffic — all ports and protocols, including SSL. Organizations can define
and immediately enforce access and security policies across all locations from a single console. There is no compromisingon security, with policies following the users to provide identical protection no matter where they connect to and from. And,Zscaler cloud services scale elastically so you can deploy new services in just a few clicks.

OPEN INTERNET

SAAS

CLOUD

ZSCALER AND VIPTELA• Secure local Internet breakouts• Enables a fast user experience• Delivers the entire security
stack as a cloud-based
service – without appliancesInternet traﬀic
Broadband, 4G/LTE

Internet traﬀic
Broadband• Software-defined policies to send
select traﬀic to Zscaler Cloud

BRANCH SD-WAN
vEdge Router

MPLS/Internet

SD-WAN Overlay

DATA CENTER SD-WAN
vEdge Router

MOBILE EMPLOYEES BRANCH

Zscaler and Viptela make it easy for enterprises
to migrate from a hub-and-spoke to an Internetonly branch architecture by enabling secure
local Internet breakouts. With Viptela SD-WAN,
network administrators determine what traffic
to route to Zscaler. Typically, all branch Internet
traffic is forwarded to Zscaler, routing traffic
from Viptela vEdge Routers to the Zscaler Cloud
Security Service using GRE or IPSec tunnels.
Zscaler secures all traffic in the cloud, without
security appliances. The combined Zscaler
and Viptela solution delivers a secure, highperformance SD-WAN solution that securely
connects branches to the Internet with a fast
user experience.

HQAbout Zscaler
Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobileand cloud-first world. Its flagship services, Zscaler Internet Access™ and Zscaler Private Access™, create fast, secureconnections between users and applications, regardless of device, location, or network. Zscaler services are 100% clouddelivered and offer the simplicity, enhanced security, and improved user experience that traditional appliances or hybrid
solutions are unable to match. Used in more than 185 countries, Zscaler operates a multi-tenant, distributed cloudsecurity platform that protects thousands of customers from cyberattacks and data loss. Learn more at zscaler.com orfollow us on Twitter @zscaler.

About Viptela
Viptela provides Software-Defined Wide Area Network (SD-WAN) technology that virtualizes WAN infrastructure. The
platform allows global companies to build carrier agnostic, policy-controlled and cost-effective WANs. Viptela has been
deployed at thousands of sites by more than 25 Fortune 500 enterprises; and major carriers including Verizon and Singtel
are using Viptela to deliver managed SD-WAN services. The company has been named a Next Billion Dollar Startup byForbes, 2016 Red Herring Global 100 Company and CRN Tech Innovator. Viptela is backed by Redline Capital, Northgate
Capital and Sequoia Capital. For more information, visit: viptela.com or follow us on Twitter @viptela.

CONTACT US

FOLLOW US

Zscaler, Inc.
110 Rose Orchard Way
San Jose, CA 95134, USA+1 408.533.0288+1 866.902.7811

facebook.com/zscaler

www.zscaler.com

blog.zscaler.com

linkedin.com/company/zscaler
twitter.com/zscaler
youtube.com/zscaler© 2017 Zscaler, Inc. All rights reserved. Zscaler™, SHIFT™, Direct-to-Cloud™, ZPA™, ByteScan™, Pagerisk™, Nanolog™,PolicyNow™, and The Internet is the new network™ are trademarks or registered trademarks of Zscaler, Inc. in theUnited States and/or other countries. All other trademarks are the property of their respective owners. This productmay be subject to one or more U.S. or non-U.S. patents listed at www.zscaler.com/patents