SOLUTION BRIEF

Zscaler for Google G Suite
TMDeliver a fast and secure user experience therecommended way

Adopting Google G Suite? The only metric that matters is user satisfaction.
As a critical business platform, Google G Suite can provide tremendous productivity advantages, but only
if IT departments can deliver the best possible user experience. The challenge is that most networks
today are not architected properly to deliver the performance and security needed for cloud and mobility.
Traditional networks were designed with the data center in mind. Backhauling branch office traffic andmobile users to applications located in the data center made perfect sense. But with SaaS platforms,
such as Google G Suite, these apps have now moved to the cloud, and are no longer in your data centeror behind your gateway security appliances. In addition, your users are increasingly mobile and off
network and no longer behind your security controls. So while your users and apps are off network, why
do you continue to backhaul these connections through costly networking infrastructure and latencyinducing security appliances? All this quickly leads to a terrible user experience and frustrated users.
For the best user experience, Google recommends direct internet1

Google Recommended
Direct internet connection

Hub-and-spoke networkwith centralized proxy

Optimal method for bestuser experience

Not recommended as traffic
overwhelms gateway appliances

Zscaler delivers an optimal G Suite customer experience
Today, the Zscaler Cloud Security Platform processes petabytes of application traffic every month for morethan 700 customers around the world, and growing. With our G Suite customers, we’ve seen an averageincrease in network utilization of 40 percent, and that’s because each user is now generating between 12and 20 persistent connections. This increase can easily overwhelm firewalls and increase your transportbudget. This is why Google now recommends performing NGFW capacity assessments, WAN latency
assessments, and focusing on on the user experience. Together, Google G Suite and Zscaler can deliver an
optimal user experience while organizations realize the operational and cost benefits of G Suite.

1

Google Network best practices for large deployments

SOLUTION BRIEF

The problem with direct internet and appliances for G Suite
For best performance, G Suite was built to be accessed securelyand reliably via a direct internet connection. However bypassing
your gateway means bypassing your security. Deploying security
appliances at each branch may seem like an option that can
improve the user experience, but it is expensive to buy, deploy
and maintain.

SaaS

Open internet

Challenges with using appliances for direct internet

Gateway• Requires appliance capacity assessments to ensure they
can handle the high number of long-lived connections.
• Requires security compromises when budget limits branches
to just UTMs or firewalls for security.

Data Center• Hardware limits the ability to scale as user demandand traffic grows.
• Requires local DNS connectivity for fastest performance
New YorkHQLondon

Hub-and-spoke network withappliances and direct internet

Delivering the best G Suite user experience with Zscaler
As a pioneer in cloud security, the Zscaler Cloud Platformmakes deployment of Google G Suite easy. It provides yourusers with a fast G Suite and internet experience via local
internet breakouts, while maintaining the highest level ofsecurity for open internet traffic.
Simply point your internet and G Suite traffic to the closestZscaler data center (there are more than 150 around the world).
There is no hardware to deploy and manage and since traffic isrouted locally, you can reduce your MPLS spend.
Zscaler’s Cloud Firewall, which is application- and user-aware
can easily scale to support the massive number of persistent
G Suite connections. Unlike with appliances, making firewallchanges is simple. All you need to do is log in to the admin portal
and, within seconds, your changes are enforced worldwide. PerGoogle recommendations, Zscaler can be configured to notinspect G Suite traffic, but does inspect all other internet traffic
to keep your users safe and your data protected.

© 2021 Zscaler, Inc. All rights reserved.

SaaSOpen internetInternt
ExhangePeering

New YorkHQLondon

Zscaler for Google G Suite
Direct internet for a fast andsecure user experienceSOLUTION BRIEF

Controlling and securing your direct internet connetion with ZscalerWith G Suite voice and video apps, such as Talk and Hangouts, Google recommends routing more thanjust web traffic directly over the internet. By using Zscaler Cloud Firewall, you easily route all required
traffic directly to the internet and still provide next-generation firewall capabilities. Zscaler Cloud
Firewall enables full access control across all ports and protocols for all outbound and inbound usertraffic. Developed as a security stack as a service, the Zscaler Cloud Platform also enables complete
content and threat inspection on your open internet traffic. With multiple security technologies, such as
sandboxing, CASB, DLP and URL filtering, you can restore security back to your direct internet connection
for all your users open internet traffic.

Optimize G Suite connectivity with Zscaler and Google peering
The Zscaler Cloud Security Platform spans more than 150 data centers and peers with Google aroundthe world to deliver connection times that are lighting fast with minimal latency and full elastic scalability.
With the Zscaler Cloud Platform, DNS resolution will always be fast and local, no matter the user location.

Zscaler peeringwith G Suite

Scalable cloudaccess controls

Network path
optimization

Peering in most major internet
exchanges with 1-2 ms roundtrip time.

Cloud platform can automaticallyscale to handle the high numberof long-lived connections.
Never run out of user capacity.

Local DNS always delivers a fast
user connection no matter theconnection location.

Prioritize G Suite bandwidth with Zscaler Bandwidth Control
Zscaler provides sophisticated bandwidth management controls, which allow you to guarantee bandwidth for
G Suite traffic during periods of contention — as when users are watching recreational, non-critical traffic, such as
YouTube. Zscaler gracefully slows the connection – before the last mile – without discarding packets, so a user getsan uninterrupted experience. The stream is simply downgraded when contention occurs. These controls can also beapplied to large file downloads (such as OS updates) that can often degrade the G Suite video or voice experience.

Why Zscaler for Google G Suite?
Proven deployment model

Impressive value

Best user experience• Reduced MPLS spend• Fast path to Google G Suite via local• No appliance upgrades neededinternet breakouts• Guarantee bandwidth for G Suite• Peering with Google in major data centers
Rapid deployment• No hardware or software to deploy• No infrastructure upgrades required• Easily configured to bypass traffic inspection© 2021 Zscaler, Inc. All rights reserved.

• Simplified management
Real-time visibility• Immediate visibility into all internet
and G Suite traffic for all users inall locations

SOLUTION BRIEF

Learn how Zscaler can help you make a good thing even better
Zscaler can make your G Suite deployment more simple, smooth, and successful, with no applianceupgrades needed. If you already use the award-winning Zscaler Cloud Security Platform, you can easily
configure Google G Suite use for your installation. Otherwise, contact Zscaler to request a demo andmore information.

Zscaler Internet Access
Used as the foundation for Google G Suite direct internet connections, Zscaler Internet
Access delivers the full security stack as a service from the cloud. By integrating security
services within a multi-tenant, scalable cloud platform, enterprises can eliminate the cost,complexity and performance challenges of traditional centralized gateway approaches.

ACCESS CONTROLTHREAT PREVENTIONDATA PROTECTION

CLOUD FIREWALLADVANCED PROTECTIONDATA LOSS PREVENTIONURL FILTERING

CLOUD SANDBOXCLOUD APPS (CASB)BANDWIDTH CONTROLANTIVIRUS

FILE TYPE CONTROLSDNS FILTERINGDNS SECURITY

Zscaler Multi-Tenant Cloud Security PlatformZscaler Internet Access delivers your security stack as a service from the cloud,eliminating the cost and complexity of traditional secure web gateway approaches.

About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile,
efficient, resilient, and secure. The Zscaler Zero Trust Exchange protects thousands of customers fromcyberattacks and data loss by securely connecting users, devices, and applications in any location.
Distributed across more than 150 data centers globally, the SASE-based Zero Trust Exchange is the world’s
largest inline cloud security platform. Learn more at zscaler.com or follow us on Twitter @zscaler.

Zscaler, Inc.

©2021 Zscaler, Inc. All rights reserved. Zscaler™and Zero Trust Exchange™are either (i) registered trademarks orservice marks or (ii) trademarks or service marks of Zscaler, Inc. in the United States and/or other countries. Anyother trademarks are the properties of their respective owners.

120 Holger Way
San Jose, CA 95134+1 408.533.0288
www.zscaler.com
