Zscaler Enterprise Web Security
Web Security Cloud For Large And Medium Enterprise

Overview:

The world of IT security is changing radically. Traditional threats such as viruses, spyware, and botnets are becoming more sophisticated. Web 2.0 is opening a whole new source of attack vectors. Companies are faced with having to defend themselves against this onslaught, while also having to find ways to reduce IT cost, boost productivity, and simplify their networks.

Companies around the world are turning to the Zscaler Web Security Cloud to simplify their increasingly complex web security needs. They are throwing away entire racks of expensive appliances and difficult to manage software. Traditional appliance and software vendors are now reinventing and restructuring their entire businesses around this major paradigm shift.

Customers, on the other hand, are excited about the power of the Zscaler Web Security Cloud. It is solving some of the most complex security problems facing large enterprises. Companies can now secure their remote offices with no onsite hardware, view worldwide web activity through a single reporting portal, and apply corporate policy to every employee, regardless of whether they are accessing the Internet from headquarters, a coffee shop, or a foreign country. No hardware, no software, no latency. Simply a safe web experience for all your employees on any device and anywhere in the world; It is that simple.

Benefits

Security

• Eight fully integrated security modules
• Granular Web 2.0 controls – keep the good, block the bad
• Traditional and dynamic real-time URL filtering

Global Cloud Footprint

• Largest web security cloud in the world – customers in 140 countries
• Four 9s availability – local, regional, and multi-continent redundancy
• No measurable latency

Cost Savings

• No appliances, no software, no desktop clients
• No upfront costs, pay as you go
• No buying excess capacity – cloud scales as you need capacity

Simplicity

• Eliminates complex point solutions
• Global policy manager – single policy follows user across the world
• Pointing traffic to the cloud is quick and simple

Compliance & Real-Time Reporting

• View any transaction, by any user, from any location within ten seconds
• Comprehensice Data Loss Prevention (DLP) across ALL devices

Only From Zscaler

Traditional security vendors will tell you that they have embraced the cloud, but look deeper. Building and running a cloud is complicated. Zscaler is the largest company in the world focused solely on cloud security. Our R &D centers span three continents, our cloud operates at four 9s availability, and our cloud specific patents stand at 30 and growing. Join the companies from 140 countries, who have thrown away their hardware and software, and moved to the Zscaler Web Security Cloud. Security made simple!

In the Cloud:

World's Largest Cloud Footprint

Who'S On The Cloud Today?

Millions of users across 140 countries utilize the Zscaler Web Security Cloud every day. Companies from every sector including financial services, manufacturing, retail, government, education, as well as multi-billion dollar conglomerates have moved all their employees to the Zscaler Web Security Cloud.

Zscaler Cloud Overview

Cloud Infrastructure

40+ Data Centers – The cloud is deployed across over 40 data centers around the world, providing quick and easy access for employees in the office as well as when they travel to coffee shops, remote offices or foreign countries.

High Reliability & Availability –The cloud offers carrier grade, four 9s (99.99%) availability. Each Zscaler Enforcement Node (ZEN) across our 40 data centers is N-way redundant. Traffic from any ZEN can fail over to any other ZEN across the world, ensuring high availability despite any regional failures such as natural disasters.

Ultra-Low Latency – Our 40+ data centers around the world allow your traffic to get to us quickly. Once you are there, our 10Gbps proxies, backed by their 30 patents, ensure your traffic is processed quickly. The net result is the cloud introduces less than 10 milliseconds of latency to any Internet transaction – from any city in the world.

Privacy & Security – Our multi-tenant architecture was built from the ground up to ensure the highest levels of privacy and security. From Fortune 10 companies, to the most demanding government agencies in the world, our cloud has been tested and certified to be ultra-secure. The cloud is compliant with the most demanding data privacy regulations globally. Our data centers are located in facilities around the world with 24/7 monitoring and physical security with redundant power, cooling, and multiple internet uplinks. The ZENs do not store any transaction data to ensure highest level of privacy and security.

Security Services In The Cloud

Anti-Virus & Anti-Spyware – The cloud is constantly kept up to date with the latest signatures and dynamic counter measures to protect against a comprehensive array of spyware and viruses. Companies no longer need to push signatures to datacenter hardware or end user desktops. It is all done in the cloud.

Advanced Threat Protection – Our security engineers at our Research Center work 24x7 to identify and block next generation threats such as malicious active content, botnets, cross site scripting (XSS), phishing, and a new generation of hostile threats thriving in a Web 2.0 world.

Web Access Control – Older or unpatched browsers create large security holes in enterprise environments. The Cloud validates that browsers are fully up to date before employees are allowed to access the Internet. Zscaler provides 'Vulnerability Shielding' to protect old browsers against attacks and warns users when they use a vulnerable browser or plugin.

Management Services In The Cloud

URL Filtering – A combination of powerful classification engines and our classification teams, based on five continents, categorize millions of URLs. However, traditional URL filtering is not enough. Additionally, Dynamic Content Classification (DCC) technology analyzes pages as they are accessed, providing a second layer of real-time URL protection.

Web 2.0 Controls – Blocking all Web 2.0 sites is not practical. Companies need to keep the good, but filter out the malicious content that rapidly spreads in the Web 2.0 world. The Cloud's high performance scanning engines monitor thousands of sites. As malicious content is identified, it is immediately blocked across the entire cloud.

Bandwidth Control – Video consumes 20 times as much bandwidth as traditional data. The Cloud gives companies the power to control who consumes, how much bandwidth, at what time of day, from which location – boosting productivity and lowering cost.

Data Loss Prevention (DLP) Services In The Cloud

DLP Dictionaries – Zscaler provides dictionaries that can detect three forms of data:Well defined numbers (Credit Cards, SSN, Canadian SIN) where a full checksum is performed to minimize false positives;Document detection(financial statements, medical statements, source code) are artificaI intelligence engines that detect these forms of documents; Custom Phrases where an administrator can define any important phrases to be detected in documents and conversations that leave the organization.

DLP Engines – Dictionaries are combined to form engines for detecting and blocking transactions to enforce PCI or HIPAA compliance. In addition, administrators can define their own engines that combine multiple dictionaries to detect and block leakage of intellectual property.

Applications – Zscaler scans all data leaving your organization over any web application. The engines scan all microsoft document formats, PDFs, or compressed archives. Rules can be set at the granularity of users, locations, and specific web applications like social networks, webmail, or instant message.

Unified Policy And Reporting Services In The Cloud

Administrators have a single console to create a comprehensive web policy across security, internet access management, and data loss prevention. They manage their own policy, and changes are reflected across the entire cloud instantly.

Zscaler is unique in its ability to provide the IT administrator instantaneous access to any transaction data. Through hundreds of summary views and interactive drilldown capabilities, the administrator can quickly isolate anomalies or recover detailed transaction logs for event forensics.

Features:

 

	Web Filtering Suite	Web Security Suite	Web Standard Suite	Web Advanced Suite	Web Premium Suite
Cloud Platform
Access to any of Zscaler's cloud based data centers globally	Yes	Yes	Yes	Yes	Yes
High Availability - 99.99%	Yes	Yes	Yes	Yes	Yes
Near-Zero proxy latency - less than 1 millisecond	Yes	Yes	Yes	Yes	Yes
Fully cloud based - no onsite hardware or software	Yes	Yes	Yes	Yes	Yes
Protect users at HQ, remote offices, on laptops, phones	Yes	Yes	Yes	Yes	Yes
Full Active Directory and LDAP Integration	Yes	Yes	Yes	Yes	Yes
Full SSL inspection	Yes	Yes	Yes	Yes	Yes
Reporting
Real-time reporting - any transaction anywhere in seconds	Yes	Yes	Yes	Yes	Yes
2 yrs summary + 6 mo transaction logs (extensible to 7 yrs)	Yes	Yes	Yes	Yes	Yes
URL Filtering
Filter across 6 classes, 30 super-categories, 90 categories	Yes	Yes	Yes	Yes	Yes
Flexibility to override predefined URL classification	Yes	Yes	Yes	Yes	Yes
Dynamic content classification for unknown URLs	Yes	Yes	Yes	Yes	Yes
Granular policy by users, groups, locations, time and quota	Yes	Yes	Yes	Yes	Yes
Advanced Threats Protection
Block malicious code, spyware, viruses from infected sites		Yes		Yes	Yes
Real-time feeds of phishing, botnets, other malicious sites		Yes		Yes	Yes
PageRisk to stop botnets, XSS, malicious active content		Yes		Yes	Yes
Block Anonymizer, ToR, P2P, Skype, Gtalk and Gizmo		Yes		Yes	Yes
Inline Anti-Virus & Anti-Spyware
Signature based anti-malware protection for any file size			Yes	Yes	Yes
Full inbound/outbound file inspection with near-zero latency			Yes	Yes	Yes
True file type control by users, groups and destinations			Yes	Yes	Yes
Web 2.0 Control
Granular Web 2.0 control (i.e. allow viewing/block uploads)				Yes	Yes
Streaming Media - Youtube, Hulu, Google Video, etc.				Yes	Yes
Social Networking & Blogs - Facebook, Twitter, Orkut, etc.				Yes	Yes
Webmail - Gmail, Yahoo mail, Hotmail, etc.				Yes	Yes
Web based IM - Facebook chat, Google chat, Yahoo IM, etc.				Yes	Yes
Bandwidth Management
Protect bandwidth for web apps by location or time of day					Yes
Limit bandwidth consumed by non-productive web traffic					Yes
Web Access Control
Ensure outdated versions of browsers are forced to upgrade					Yes
Ensure known browser vulnerabilities are patched					Yes
Data Loss Prevention
Inline scanning of all web traffic leaving the organization					Yes
Log or block transactions with confidential data					Yes
Inspect Office, Adobe and multi layered zip files					Yes
Customized phrase dictionary with fuzzy matching					Yes
Predefined engines and dictionaries (HIPAA, PCI, credit cards)					Yes

Documentation:

Download the Zscaler Enterprise Web Security Datasheet  (PDF).