Even if you could afford next-gen firewalls for every branch, would they really protect your users?

Next-generation firewalls deliver application awareness that is vital for protecting the data center. But what about the branch or remote office? What is needed there is real-time inspection of Internet requests and replies, including SSL inspection. Not only are packet filtering/stateful firewalls prohibitively expensive when deployed at each location, they are not designed to handle SSL inspection at the required performance level, requiring additional separate hardware or firewalls with more capacity.

Zscaler Cloud Firewall delivers the security that your distributed enterprise, retail outlets, or branch deployment really needs, without any hardware, software, or ongoing maintenance. Because Zscaler Cloud Firewall is part of our global cloud-based security platform, all you need to do is create a VPN or GRE tunnel from your gateway to the Zscaler cloud. Native SSL inspection is built into our platform, not as a “bolt-on” solution like those offered by appliance vendors. And configuration changes can be made instantly—no need for a maintenance window.

Zscaler features more than just control of ports and protocols, with deep packet inspection and heuristics for application identification and control, including:

• Mobile and cloud applications like Microsoft Office 365 that change IP addresses frequently
• P2P apps like Skype, Bit Torrent, or Tor
• Port-evasive apps and anonymizers like Ultrasurf