Blocking threats at scale and improving cybersecurity posture without increasing headcount
Johnson Controls International (JCI) produces fire, HVAC, and security equipment and services that create healthy, safe, sustainable buildings worldwide. In its push for continual innovation, the American (Irish-domiciled) multinational conglomerate created OpenBlue, a cloud-based platform offering more than 20 digital services to its customers.
Deployed secure, remote WFA access to first 25,000 users in two weeks
Improves performance and user satisfaction for remote users compared to VPNs
Frees up security operations to focus on optimization, automation, and integration
Dramatically expands visibility, agility, and flexibility globally
Provides at-a-glance risk assessment with Executive Insights app
Thanks to the Zscaler team for your technology and, even more important, for your outstanding customer support. You make me feel like JCI is your number one priority at all times.
Accelerating cloud transformation to secure health and safetyRead the Blog
Blog by Peter Daly, Director of Network Services – Global Infrastructure at Johnson Controls
Since the first days of 2020, the year has been extraordinary on many fronts—for the global community, for my company Johnson Controls, and even for myself, both professionally and personally.
Globally: The COVID-19 pandemic has overwhelmed medical systems and continues to stretch the capacities needed to help treat patients. In a worldwide effort to contain the spread of the virus, governments have put unprecedented lockdowns in place to enforce social distancing and mandate people—where possible—to work from home.
Johnson Controls: As the world’s largest supplier of building products, technologies, and services, Johnson Controls is on the frontlines in the battle against COVID-19. Johnson Controls is equipping field hospitals in hotspots, such as Wuhan and New York City, with critical HVAC systems, and continues to deliver life-safety services that are vital to the uninterrupted operations of critical infrastructure. This infrastructure includes hospitals, supermarkets, food processors, pharmacies, data centers, government offices and military facilities, and police and fire stations, among others. While many of our 105,000 employees are in the field or working in manufacturing plants across our 2,000 locations in almost every country, every Johnson Controls staff member whose job can be carried out remotely is working from home.
Professionally: For more than 130 years, Johnson Controls has been making buildings smarter and transforming the environments where people live, work, learn, and play. In today’s world, we rely on a modern IT infrastructure to continue to support the mission of our company and to innovate. Therefore, my team has been on a journey to transform our network. We have been a Zscaler customer using Zscaler Internet Access (ZIA) and we were planning to add Zscaler Private Access (ZPA) in 2021. However, COVID-19 accelerated this transition dramatically, and we rolled out ZPA to 25,000 users in two weeks. The speed of this process is something I have never experienced in my professional life.
As we were monitoring the spread of the pandemic, we knew we had to prepare for lockdowns in Europe and the U.S. Our pre-existing VPN platform supported 10,000 users which got us through the initial increase in remote work across Asia, but we knew we would be challenged in supporting the ever-increasing rate of global work-from-home mandates.
One of the benefits of Zscaler is that I can monitor the risk of my organization from almost anywhere. The Executive Insights app has almost become my personal security blanket.
We decided to reach out to our existing hardware vendors as well as Zscaler to explore our options. With lead times in certain regions of up to six weeks for VPN hardware to be shipped, the strain on the global supply chain, and the fact that support organizations aren’t allowing staff to travel to help with deployment in data centers, the option to expand our existing remote access platform would have put our company, our customers, and the global community at risk. To enable the mission-critical work that Johnson Controls is providing to fight this pandemic, we decided to accelerate our plans to move to cloud technology.
Within days of reaching out to Zscaler, we had completed a successful proof-of-value for a subset of users and then started a phased rollout of ZPA to 25,000 users. Starting with users who had an immediate need to work remotely, such as finance and engineering departments, we created a day-by-day communications plan to inform users that Z App, a lightweight endpoint agent from Zscaler, had been installed on their devices. This would enable them to easily access internal applications through ZPA. We were able to stay ahead of new shelter-in-place announcements and work-from-home mandates, and we have been able to keep our business running smoothly throughout.
Zscaler enabled security for all sites and users regardless of their location.
As advised by Zscaler, we rolled out ZPA to equal numbers of users each day to effectively monitor and rapidly respond to our immediate need for remote access. We created a tiger team of Johnson Controls engineers and Zscaler engineers who worked together on daily calls for a week. On these calls, we walked through all configurations for applications, access, and DNS until we got to a stable position.
Due to the rapid deployment ability of the Zscaler product, it literally took only days to deploy ZPA across the globe in locations far and wide such as Singapore, Milwaukee, Frankfurt, and Mexico, and then move our users off of our existing platform and onto ZPA. Our experience proves that cloud technology can be fluid and deliver as quickly as you need it, especially with the right focus, tools, and partnerships.
The transition has been pretty much flawless. Our latency reports show that we have improved significantly. The feedback from our user community has been excellent because “stuff just works,” with heavy users of private applications noticing performance improvements compared to our traditional VPN system. Instead of creating full-blown tunnels and putting everyone on the network, it’s now just an application sending data to the user, which alleviates the impact on our network bandwidth.
In addition, we are already seeing the operational benefits of having one single pane of glass and being able to control access from one platform instead of managing different hardware across all our global locations.
One important driver of our network transformation has been the visibility aspect. Using ZIA and ZPA allows us to have immediate visibility into what is happening on our network, including which applications are accessed and by whom, at a level of detail that we didn’t have before.
On a personal level: I believe that this crisis will change how the entire organization—and maybe even the world—will be working in the future. Having this experience and witnessing that we are able to keep our business running without everyone being in a physical office might initiate a change in thinking about where people will be carrying out their work as we continue on our cloud transformation journey.
I remain hopeful that once we get through this crisis, which we will, we can recognize and embrace the silver linings that this global pandemic has revealed.
What I love about the Zscaler suite of products [is that] it works without the end user having to know. Zscaler works behind the scenes to keep my employees safe.