Zscaler’s Advantages Over Blue Coat - CBRonline

Transcription

WHITE PAPERZscaler’s Advantages Over Blue CoatSuperior architecture, performance, functionality, and valueAre you a Blue Coat customer wondering if there’s a better web security solution outthere? Or are you perhaps evaluating Blue Coat to replace your existing web securityinfrastructure? In either case, we suggest you add Zscaler to your shortlist, because whencompared to Blue Coat, Zscaler’s advantages are compelling.ZSCALER IS NAMED A LEADER FOR SECURE WEB GATEWAYS (SWGs).Recognized as one of the fastest-growing vendors in the web security market, Zscaler’s advantages over BlueCoat are both numerous and compelling, and can best be summarized through the following four CE& SCALABILITY04SUPERIORFUNCTIONALITYSUPERIORVALUEThe purpose of this paper is to explore each of these four themes by comparing Blue Coat’s web securityofferings to corresponding Zscaler capabilities. And when you’re finished reading it, we’re convinced you’llwant to take a much closer look at Zscaler.SUPERIOR BY DESIGNWorld’s largest pure-cloud security platformZscaler’s award-winning web security solutions have been 100 percent cloud-based since the company’sinception in 2008. Today, Zscaler boasts the world’s largest cloud-based security infrastructure built from theground up with innovations derived from more than 60 patents. Zscaler’s security cloud processes over 20billion transactions per day with near-zero latency to secure over 15 million users in 180 countries, with noon-premises hardware or software required.

ZSCALER’S ADVANTAGES OVER BLUE COAT WHITE PAPERWhen it comes to web security, why is a bigger cloud better? It’s because Zscaler’s Security Cloud Platformsees more threats in a day than most web security services see in a year. Also, a larger cloud-based securityinfrastructure yields superior reliability and faster performance for a mobile workforce.No agents requiredUnlike Blue Coat and other web security vendors that offer a cloud-based secure web gateway, Zscalerrequires no software agents on end-user computing devices—PCs, laptops, tablets, smart phones—unless thedevice is not connected to Active Directory or other LDAP-compliant directory. In this case, Zscaler offers theoptional Zscaler App, which simplifies the process of configuring proxy settings within popular web browsers.By all but eliminating the need for software agents, organizations can much more easily support aheterogeneous computing environment without IT having to become experts on every potential clientcomputing platform in use.No backhaulingBlue Coat ProxySG customers often pay tens of thousandsof dollars—in some cases, millions of dollars—each year tobackhaul traffic from branch offices to a central SWG appliance(or cluster of appliances) at headquarters. These organizationseffectively pay for their Internet traffic twice—once at eachbranch office location and again at headquarters when theybackhaul it. With Zscaler, there is no need to backhaul traffic.You simply point your traffic to the Zscaler cloud, and all ofyour users are instantly secure—regardless of where they’rebased or from what device they’re connecting.Internet andCloud ApplicationsSECUREGATEWAYNO POLICY ORPROTECTIONMPLSWANVPNBACKHAULMOBILE EMPLOYEEHQREMOTE OFFICESUNPARALLELED PERFORMANCE AND SCALABILITYA cloud-based web security solution could have every possible feature under the sun. But if it can’t scale withyour growing enterprise, then what’s the point? This section contrasts the performance and scalability ofZscaler’s security coud with Blue Coat’s Web Security Service.Built for performanceZscaler’s platform is comprised of more than 100 data centers spread out around the world. The Blue Coatcloud has far fewer—less than half as many. Traffic generated by Zscaler customers is intelligently routed tothe nearest cloud-based point of presence, and combines ultra-fast processing with patented compressiontechnology to delivery the industry’s most advanced security with near-zero latency. Since Zscaler neverimpacts the user’s web browsing experience, you need not worry about your users attempting to bypass yoursecurity measures to improve performance.Many former Blue Coat ProxySG customers that have made the switch to Zscaler have reported noticeableimprovements in web browsing performance. Some of their users have actually thanked IT for increasing theirbandwidth to the Internet!

ZSCALER’S ADVANTAGES OVER BLUE COAT WHITE PAPEREnterprise-class scalabilityWhen it comes to web security scalability, thereis Zscaler and then there is “everyone else.”Honestly, there isn’t even a close second. Knowingthe limits of Blue Coat’s Web Security Service,the average Blue Coat sales representative willposition their cloud offering as appropriate forsmaller organizations and branch offices of largerorganizations. Few (if any) enterprises havedeployed Blue Coat as a pure cloud solution andthere’s a good reason for this. Blue Coat is in thebusiness of selling appliances. If you buy enough ofthem, Blue Coat may even offer up its cloud serviceas a very low-cost add on.Zscaler boasts more than 5,000 enterprise cloudsecurity customers in over 180 countries.To view sample Zscaler customers and readtheir success stories by market and region—including United Airlines, Humana, Kelly Services,NBC, Société Générale, Tyco, Verizon, VMware,Volkswagen, and the U.K. National Health Services(with over 1.6 million users!)—connect to ourwebsite at www.zscaler.com/customers.Zscaler is backed by real SLAsUnless there are real consequences for failing tomeet a service level agreement (SLA), an SLA ismerely a “best-effort intention.” Zscaler offersdocumented SLAs for both availability and latencywith stated financial penalties (such as nextmonth’s service credit) in the event that Zscalerfails to meet its obligations. Blue Coat, on the otherhand, will tell you they offer an SLA on availability(not latency), but no predetermined penalties existin the event that Blue Coat’s Web Security Servicefalls short of its SLA obligation.BROADER FUNCTIONALITYZscaler’s Cloud Security Platform offers several keyfunctional advantages over Blue Coat’s ProxySGand Web Security Service offerings. Here are a fewof the more significant advantages.Blue Coat lacks a cloud-basedsandbox. Customers that havemigrated to a complete Blue Coatcloud-based SWG (no on-premisesSWGs) are unable to use networksandboxing technology to detectthreats and targeted attacks.– Gartner Magic Quadrant for Secure WebGateway 2015Real-time reporting and analyticsBlue Coat’s Reporter is a stand-alone softwareproduct that provides dashboard and reportingfunctionality. Blue Coat depicts its dashboardas a “real-time” solution, but the fact is that theReporter software periodically aggregates log datafrom ProxySG, ProxyAV, and other componentsinto a relational database. Data viewed withindashboards and reports is only as recent as the lastdata imported.Zscaler, on the other hand, offers true real-timereporting and dashboard analytics, enablingusers to interact with data instantly. Zscaler’spatented Nanolog technology is an entirely newkind of web logging, reporting, and analyticsapplication built from the ground up to addresstoday’s Big Data challenges. A non-relationaldata store optimized for logging and reporting,Nanolog is purpose-built with 65:1 compression toallow IT organizations to quickly analyze massivelog histories such as web page downloads, webmails, and attachments sent, posts publishedon social networking sites, or instant messagingtranscripts—all in just seconds. This uniquecapability brings together massive logs fromvarious locations to a central logging server for easyreporting and analysis, while sophisticated indexingtechnology fetches detailed historical information.

ZSCALER’S ADVANTAGES OVER BLUE COAT WHITE PAPERSAML-based single sign-on (SSO)To support single sign-on beyond a company’s intranet,organizations are turning to SAML-based SSO solutions.Zscaler integrates with four leading SAML-based SSOvendors—including Okta, OneLogin, Ping Identity,and RSA—to allow its users to safely and seamlesslyauthenticate to the Zscaler Cloud Security Platform. Thisintegration also enables Zscaler to link users to securityevents, rather than IP addresses alone.Support for third-party MDM solutionsCorporations often use Mobile Device Management (MDM) solutions to deploy and provision corporateapplications and data on mobile devices, such as smartphones and tablets. However, MDMs are not designedto be security solutions, as they do not address the risks of advanced threats like phishing and spyware, nordo they protect from malicious apps. Zscaler complements leading MDM solutions by extending the benefitsof the Zscaler Cloud Security Platform to mobile devices—without the need to initiate a VPN connection firstfrom the mobile device to a physical appliance located back at the office.Blue Coat’s Mobile Device Security Service extends the capabilities of its ProxySG appliances to mobiledevices, but such devices must first initiate a VPN connection and connect back to a ProxySG appliance. Thismakes for a “clumsy” mobile security solution, resulting in decreased browsing performance and unhappymobile users.EXCEPTIONAL VALUEBuilt-in malware protectionOne caution about Blue Coat is a lack of on-boxmalware protection. Blue Coat customers mustacquire a separate appliance—at an additionalcost—called ProxyAV. Traffic then flows throughboth the ProxySG and ProxyAV appliances beforereaching its destination, thus adding latency.Zscaler is different because it incorporatesanti-malware protection in its platform at noadditional charge and adds no latency formalware inspection due to its one-pass deeppacket inspection (DPI) architecture.Mobile-based appsCloud-based appsSocial mediaCLOUD SERVICESBuilt-in SSL inspectionThe use of SSL within advanced threats is steadilyon the rise—not only from the initial point of attackbut also to exfiltrate data from a compromisedsystem. Blue Coat’s answer? “Buy another box!”HOMEMOBILEEMPLOYEEHQREMOTEOFFICES

ZSCALER’S ADVANTAGES OVER BLUE COAT WHITE PAPERBlue Coat has acquired dedicated SSL Inspectorappliances from Netronome. But such additions,yet again, increase the cost of a Blue Coat SWGsolution. Zscaler, on the other hand, provides SSLdecryption in the cloud, making its solution muchmore seamless and cost-effective.Built-in bandwidth controlFor SWG customers that also want to controlbandwidth allocations assigned to applications bytime and location, what is Blue Coat’s answer? Youguessed it: “Buy another box!” Blue Coat ProxySGcustomers must purchase separate PacketShaperappliances to facilitate bandwidth-control policies.Of course, this is not the case with Zscaler, as itoffers advanced bandwidth control capabilitiesbuilt right into its unified platform.complex—more hardware, more rack space, moreelectricity, and more labor—and adds latency, aspackets must pass through multiple appliancesin sequence. Zscaler customers, on the otherhand, gain all of these capabilities seamlessly andeffortlessly—and at no additional charge and withnegligible packet latency—as part of their Zscalersubscription. And because Zscaler is 100 percentcloud-based, customers can expand and contract“on demand,” saving valuable time and money—not to mention a few headaches.CONCLUSIONBuilt-in DLP protectionToday’s cyberthreats are more sophisticatedthan ever. Barely a day passes without news ofa major attack. With so many advanced threatsout there, how can you afford to select a hybridor in-the-box web security solution over the onlypure-cloud solution?Blue Coat does not offer basic data loss prevention(DLP) protection. Instead, they partner with a vendorcalled Code Green for customers requiring DLPcapabilities. In contrast, Zscaler affords its customerswith the basic DLP protection needed to preventcredit card numbers, Social Security numbers, andother forms of sensitive structured data from leavingyour network without proper authorization.If you haven’t considered Zscaler, we hope thispaper has convinced you to take a closer look.We are confident, having read this paper, you willunderstand how Zscaler’s superior architecture,performance, scalability, functionality, and valueare causing Blue Coat customers and prospects tolook to the cloud for a far superior and more costeffective web security solution.A unified, seamless solutionLearn moreIf Blue Coat ProxySG customers want malwareprotection, SSL inspection, and bandwidth control,they must buy three additional boxes. And if theywant basic DLP protection, they must purchase anentirely separate solution from another vendor.This approach is considerably more expensive andContact a Zscaler sales representative or channelpartner today to schedule an evaluation.CONTACT USFOLLOW USZscaler, Inc.110 Rose Orchard WaySan Jose, CA 95134, USA 1 408.533.0288 1 om/zscaleryoutube.com/zscalerZscaler and the Zscaler logo are trademarks of Zscaler, Inc.in the United States. All other trademarks, trade names or service marksused or mentioned herein belong to their respective owners.

the limits of Blue Coat’s Web Security Service, . Real-time reporting and analytics Blue Coat’s Reporter is a stand-alo