View
223
Download
2
Category
Tags:
Preview:
Citation preview
Web Traffic Offload of MPLS Networks
Jeff Bird, RSMZscaler 1-23-14
© 2013 Forrester Research, Inc. Reproduction Prohibited 2
Use some/more third-party managed telecom/communications services
Adopt/expand use of 'as-a-service' delivery of telecommunications services using shared infrastructure
Move some/more applications to the cloud
Migrate our networks to an all-IP environment
Enhance enterprise network bandwidth capacity
49%
51%
71%
73%
80%
Top multinational enterprise network & telecoms priorities
“Which of the following initiatives are likely to be your firm's top telecom adoption priorities over the next 12 months?”
Base: 954 Telecoms decision-makers at firms with 1,000 or more employees who are responsible for multicountry or global network and telecoms technology decisions (“critical priority” and “high priority” responses); Source: Forrsights
Networks And Telecommunications Survey, Q1 2013
© 2013 Forrester Research, Inc. Reproduction Prohibited 3
Workforces are both increasingly distributed, and mobile.
Globalizing business operations demands a highly reliable and resilient corporate network.
Globalization resets business, customer and employee expectations about speed of responsiveness and decisions, and for team collaboration.
The more internationally distributed a firm’s operations, the bigger the challenge to deliver consistent apps performance.
Security becomes a big issue around Web Apps
Business globalization drives need for a highly available and reliable international site-to-site network
© 2013 Forrester Research, Inc. Reproduction Prohibited 4
MPLS interest is driven mostly by perceptions of “value for spend”
Reasons for using MPLS - ranked
• Need more QoS network capacity
• Need high network reliability, and predictability
• Want to improve user experience with collaboration and productivity apps
• Need to upgrade network to support new enterprise communications apps
• Want a simplified WAN infrastructure
• Want to improve access to internally hosted, and off-premises hosted and cloud applications
• Want data traffic routing control including QoS
• Need a modern and future-proof network
• Need to integrate disparate networks globally
© 2013 Forrester Research, Inc. Reproduction Prohibited 5
The Age of Mobility (it’s about the Web apps!)
Drivers
Workplace virtualization
Collaboration (internal, external)
Consumerization (bring-your-own devices, apps)
IT Challenges
Manage growing complexity (endpoint, network, information security)
Cost management – licenses, IT support
Direct technology purchases (BYO-T) risk bypass of IT standards
Customer and employee expectations of more , easy to use, mobile apps will change how business is done
© 2013 Forrester Research, Inc. Reproduction Prohibited 6
Virtualization success rides on getting your Cloud strategy right
Most firms are keen to consolidate data centers
A majority will adopt hybrid cloud – own DC + virtual private cloud &/or public cloud (e.g., Office 365, Salesforce, Dropbox, gMail)
Many will migrate UC&C app to SaaS models
All virtualizing firms are beefing up network security
Most firms will shift network and security management towards 3rd party services to help move forward faster and better …
Common thread here is more Web traffic…
©2013 Zscaler, Inc. All rights reserved.7
Is MPLS Dead or Have These Reports Been Greatly Exaggerated?
Why? The Cloud Goes (Went) Enterprise!
On-the-go
Home or Hotel
Regional Office
Regional Gateway
Sales from the road on iPAD
Office from everywhere
Marketing user groups
Training videos from iPhone
Corporate storage
Cloud ServicesBusiness Critical
HQ
APT/0Day
DLP
Users
Applications
Personal or business Use
Where is your Corporate Perimeter?
— Impact —
3 Trends Transforming Network & Security
Business Users go Mobile
Users work from home or on-the-go
Users who BYOD50%
90%
Mobile, Cloud & Social: Driving business beyond the corporate network (often without policy & protection)
This has broken the traditional trusted “hub & spoke” network.Users are often outside the corporate network accessing cloud-based services.
80% of my MLPS traffic used to be for applications at my HQ and 20% was Internet bound. Now it’s just the opposite.” – CIO, Fortune 50 company
“
Cloud Apps go Mainstream
Cloud-based applications used by an enterprise
50
Social goes Enterprise
employees use Facebook at work
75%
1 GB
Traditional MPLS Networking – Hub & Spoke
NEW YORK
HQ: SAN JOSE
SEATTLE
ATLANTA
DATACENTER
INTERNET
For Internet Access also provision a 1 Gbps Dedicated Internet Line at the “hub” datacenter
4
Provision a T3 (45 Mbps) per site to provide connectivity to the MPLS network
2
T3T3
T3T3
Provision a 1 Gbps Ethernet circuit to provide the “hub” datacenter connectivity to the MPLS network
3
1 GB
MPLS PROVIDER
Contact a MPLS Service Provider & Architect1
Is This The Best Way to Provide Internet Access?
NEW YORK
HQ: SAN JOSE
SEATTLE
ATLANTA
DATACENTER
INTERNET 1 G
B
MPLS PROVIDERT3T3
T3T3
1 GB
By volume often 70%+ of MPLS backhauled traffic is
Internet bound or Web Traffic port 80 & 443
MPLS Bandwidth is more expensive than commodity
Direct Internet Access$$$$$$$
1 GB
“Direct 2 Net” Split Tunnel Path to Insecurity?
NEW YORK
HQ: SAN JOSE
SEATTLE
ATLANTA
DATACENTER
INTERNET
T3T3
T3T3
1 GB
MPLS PROVIDERLayers of appliances (FW, IPS, AV, DLP, NGFW, BA) are deployed at the “hub” datacenter to secure
Internet access!
Branch router security (UTM) is one approach to secure local
Internet access…
… but keeping policy consistent and providing per user policy and reporting/visibility is a nightmare
Easy way out is to still backhaul…So is MPLS Dead?
The Web Traffic Offload Approach with Zscaler
NEW YORK
HQ: SAN JOSE
SEATTLE
ATLANTA
DATACENTER
INTERNET
Reduce the size of the MPLS links to a T1 (1.5Mbps) instead of a T3 Link (45 Mbps) and save $$
2
T1T1
T1T1
Reduce the size of the Internet access at the datacenter. Simplify Network & Security and save $$
3
1100 MB
MPLS PROVIDER
Purchase inexpensive local Internet access at the branches (often faster/lower latency!) and save $$
1
INTERNET
ISP
ISP
ISPISP
100 MB
Offload your Web traffic to the Zscaler Cloud for security processing!
4
What Does Typical Security Look Like Today?
Mobile & Distributed Workforce
Regional Office
Home or Hotspot
HQ
On-the-go
Cloud Services
Social Media
Cloud Apps
Mobile Apps
Botnet
Exploits
Proxy Server
APT/Bot Gateway
Application Awaerness
URL Web-Filter
Antivirus-Filter
WAN/SSL Accleration
Load Balancer
DLP
SSL/IPSec VPN
What Does Zscaler Do?
Block the bad, protect the good
Global check post Enforces business policy
NO HARDWARE | NO SOFTWARE
Mobile & Distributed Workforce
Regional Office
Home or Hotspot
HQ
On-the-go
Cloud Services
Social Media
Cloud Apps
Mobile Apps
Botnet
Exploits
Can It Scale?
©2013 Zscaler, Inc. All rights reserved.16
The name Zscaler stands for the Zenith of Scalability
Every day Zscaler processes more than 12 billion transactions through our cloud from 4,500 customers in 183 countries
Our cloud operates in 110+ datacenters across 12 world class service providers
400M Tweets Per Day
5B Searches Per Day
4.7B Likes Per Day < 12B Transactions Per Day
* October 2013 Statistics
Zscaler’s 110 Datacenters – 4000 Customers
Active Data Centers
October 2013
Amsterdam
Los Angeles
Mexico City
Chicago I, IIToronto
New YorkWashington DC I, II
Atlanta I, IIMiami
Sao PauloJohannesburg
Oslo
Frankfurt I, IIGdansk
StockholmMoscow
Mumbai
Singapore
Sydney
Hong Kong
TokyoMadrid
TaipeiDubaiKuwait City
Cape Town
San FranciscoSunnyvale
Santiago
AmmanDallas I, II
DenverParis
LondonBern
Chennai
RiyadhCairo
Lima
Kuala Lumpur
©2013 Zscaler, Inc. All rights reserved.17
Zscaler: Leader & the Most Visionary
Secure Web Gateway Magic Quadrant
…the fastest-growing vendor…
…earned the strongest score in Completeness of Vision…
…cloud has the largest global footprint…
…Zscaler is a very good candidate for most enterprises …
“
”
©2013 Zscaler, Inc. All rights reserved.18
Thank You! Next Steps
Register for a Free Trial http://www.zscaler.com/freeevalution.php
Register for a Personalized Demohttp://www.zscaler.com/onlinedemo.php
Register for a Webinar/Live Demo http://www.zscaler.com/webinars.php
©2013 Zscaler, Inc. All rights reserved.19
20
Q & A
Recommended