Intelligent CISO Issue 05 | Page 49

T Troye is offering an innovative security solution for the modern data centre by combining the benefits of Citrix SD-WAN and Zscaler Cloud Security. The company has launched a holistic solution combining both world-class solutions to provide cost effective and highly available WAN, securing branch Internet traffic, enabling compliance with corporate content and access policies. Complete with Internet user activity monitoring, the bandwidth control feature protects key applications and limits recreational applications by location or time of day which is managed globally from a single management console. With the Zscaler security solution being cloud-based, users no longer need to add additional security appliances to the network. KURT GOODALL, TROYE TECHNICAL DIRECTOR Troye Technical Director Kurt Goodall says the ideal solution to enforce security without adding cost, complexity or latency is to route all branch Internet traffic from the Citrix NetScaler SD-WAN appliance to the Zscaler Cloud Security Platform. The Zscaler Cloud Security Platform acts as a series of security check posts in more than 100 data centres around the world. By simply redirecting Internet traffic to Zscaler, users can instantly secure stores, branches and remote locations. “Zscaler connects users and the Internet, inspecting every byte of traffic, even if it is encrypted or compressed,” he said. “But customers still grapple with expensive Multiprotocol Label Switching (MPLS) links to backhaul branch traffic to the corporate data centre in order to filter traffic through security appliances, to detect malware and enforce policies.” Kurt Goodall, Troye Technical Director www.intelligentciso.com | Issue 05 An alternative to backhauling is to add security appliances at the branch. However, the cost and complexity increase as users install multiple appliances to maintain consistent policies across the sites. With a FEATURE large number of branch offices, cost management becomes impractical. “Such backhauling over private MPLS links is expensive, results in significant latency and creates poor user experience at the branch site. Thus the demand for direct Internet breakout capabilities has become prevalent,” he explains. The NetScaler SD-WAN device simply forwards the Internet and cloud application traffic to the Zscaler Cloud Security Platform. The combined solution gives IT teams peace of mind knowing that they are protecting data, applications and users in remote and branch offices. And it gives them the tools they need to prioritise business-related Internet traffic over recreational traffic. Citrix’s NetScaler SD-WAN enables a scalable, reliable and cloud-ready software defined WAN with packet-level, real-time path selection, firewalling, routing and application analytics whether accessing SaaS applications, virtualised The demand for direct Internet breakout capabilities has become prevalent. desktops or traditional data centres. It ensures an always-on, high-quality experience and a simpler, more agile branch network. As the need for bandwidth increases in branch offices, enterprises have had tough choices, with each option presenting trade-offs in performance, cost and security. SD- WAN is simplifying the choice, with significant cost savings and the kind of performance users will appreciate. “Zscaler puts the enterprise security stack in the cloud, arming each branch 49