Video

If the lightweight VM isn't listening for inbound connectivity, how is traffic going to get from the User -> Cloud -> VM / App?

Adding AI to Zscaler zero trust makes sense as you're already seeing the packets, so why not analyze them. This is another solid step forward

So impressed!

Awesome! Cybersecurity is a huge secular growth trend to profit from in your portfolio!

Yay zscaler!

I really dont understand the /32 and how this connects. If the host needs to get somewhere, and it is not seen as the same segment, then it needs to look at its routing table, will arp for the next hop and send the traffic. In this case, the zscaler is not on the same segment, so how does this work? What does it arp for? how does it send the packet there through the OSI stack? It still needs some kind of reachability. My only guess is that there is some proxying or tunneling of the traffic and the /32 is not really a /32, but isolated through some mechanism from talking to anything but the zscaler device. Would be nice to not have to guess, and actually, you know, have it explained, would take less than a minute. Also since someone else was nitpicking, I might as well do it too. If you are going to draw networking symbols, drawing a core with a traditional router picture, that implies L3, that firewall hanging off is all but useless

Appreciate the humour brought to a dry subject 🙂

I don't understand this solution, isn't Microsoft defender for cloud and M365 already providing posture score. And what does Zscalar actually provide cloud based control for segmentation?

interest on this solution. Can provide detail implementation guide for reference?

Wow amazing

Could you give us more information on load balancing? What if you have multiple server for one application. How does Zscaler do the load balancing?

So it appears to be a router on a stick, but still sharing the same broadcast domain? There aren't really details here but I'm trying to understand how you are truly isolating the clients on a same VLAN from each other, it can't just be at a layer 3 level, you blocking ARP's etc? They running clients? Just changing a host to a /32 would certainly contain that host but what about misconfiguration or bad actors also attached to that VLAN?

1:58 "Firewalls do a really good job of...what? Like that...north to south segmentation, but the east to west story has been a little bit trickier." After he just drew out the typical datacenter architecture (with users and OT in it? What kind of datacenter is this?) and placed a firewall segmenting the (2) VLANs in his example (by assigning the FW with a VLAN interface for each segment)...which would 100% instinctively do east west inspection. How is that tricky? How about this as the intro: "Zscaler does a really good job of...what? Like that...northbound inspection, but there hasn't really been an east to west story for us." I think that would be a more accurate statement. Another accurate statement @4:46..."I'm not a network guy". Truth. Maybe Airgap will help you be better networking guys/gals over there at Zscaler. Up until now, the network has always been pretty irrelevant for Zscaler (marketing).

A few comments: 1. You did not provide any real details here. You imply that the ZScaler Airgap ‘client’ locks down each individual host, and the Airgap box (physical or virtual) manages the policy to lock down each host. But you didn’t provide enough details here. 2. Unlike NSX, which applies policy to the virtual NIC shim that is not part of the VM, Airgap looks to be installed on the hosts. So, what would stop a bad actor from disabling or removing Airgap from that host? 3. Nitpick. You started out by drawing the Core of what you said was a Data Center, and the first thing you drew was a User VLAN. Generally, user VLANs are out in the campus, or branch locations, and NOT in the Data Center. So, does the Airgap solution ONLY apply to Data Centers (as a replacement for functionality provided by NSX or similar), or is it also something that could/would be deployed on a campus or branch network as well? 4. If this IS a solution for Data Center, Campus and Branch/Remote Office networks, does each location need a LOCAL ZScaler Airgap “policy box” to manage policy? Or would a smaller number of distributed or centralized “policy boxes” be deployed to manage policy for remote networks? And if the “policy boxes” are remote, what happens to policy enforcement and application if the Airgap-equipped hosts lose communication with the “policy boxes”?

I had a genuine laugh more than once, this guy should make more videos like this! Also I think the camera was slightly out of focus, the lines were not sharp. Neverthless, great video 😄

J😢😢😢

Thank you sharing about microsegmentation.

😇 P R O M O S M

실적 좋은데

This is great but you guys need a media/marketing team asap. Investors won’t buy what they can’t generally understand. Talking about myself here.

Nice

so, when you gonna introduce IPv6?

Hello sir, I am a fresh graduate who is currently doing a research project on zero trust across multicloud ERPs. If you aa someone who is well experienced in the field would be generous enough to please help in my google survey to understand current and future market trends in it, it would be life saving. Please please respond back. Consider it as a request from a younger version of you.

Can Zscaler ZPA/ZIA access policies be based on IOT device types that were detected by ML not only seeing the IOT device types and their network patterns in a Report? For example allowing specific camera models to talk only to the camera vendor's cloud server through ZIA or allowing internal access to the cameras using ZPA to specific specific AD user or AD groups ?

I was hoping this video would show competitive info. Maybe a battle card that would distinguish setting you apart from products like Prisma Access from Palo Alto Networks and other competitors. If you want to be set apart then consider being more specific about how you do that exactly in comparison.

☠️😂 Poor Bruce 😔

Wow!

❤

i love you😝

Great Video! Tooker didn't give you enough credit lol!

Great video on generative Ai. I really learned a lot about how to safely embrace the future of Ai.

🎉🎉🎉

Brian, thanks for this video, Super Helpful and much easier than reading a White Paper or a Slide Deck!!

Thanks for the info! And are you the guy that’s from Pebcak podcast?!?!

You're like a super sharp and physically imposing Mr. Rogers in the Zero Trust neighborhood. I love it.

So maybe rudimentary question - when you say VM is that essentially just a server running on the site that needs provisioned to run the Zscaler software?

I have a doubt in zscaler If am in office network do I need to connect ZIA/ZPA? If am in public network, I can resolve my application urls with private ip, If am in public network, Can I connect both ZPA & ZIA in same time ? so that I can connect private applications and I can connect public networks securely.

Next generation and ever lasting technology. Great people.

My cousin, love you for uplifting the generation. Love you Kavi.

Curious if app control (with current capabilities) could get Salesforce instances onboarded?

Brilliant..

well done

Do I need to prepare my network (VNet and Subnet level in Azure) to bring this segmentation into action? Looks like I can apply it without having to create a ton of /28 subnets.

great presentation

This is fantastic! Simplicity from a mile high with some deep cool technology at the root.

Great demo Dhawal! ZDX provides such a granular look into user workflows, that enables the Network/Application teams to be more precise in ticket resolution.

Question: SSL inspection - does that mean you can read encrypted SLL by breaking the tunnel into 2?

Great description. Summed up very well.

sounds like elevator speech and there is no zscaler university option either like all other vendors provide. good job

Do you provide training on Zscaler