Zscaler Cloud Firewall brings next-gen firewall controls and advanced security to all users in all locations — for all ports and protocols. Zscaler enables fast and secure local internet breakouts and, because it’s 100 percent in the cloud, there’s no hardware to buy, deploy, or manage.

With Zscaler Cloud Firewall, you get security and access controls without the cost, complexity, and performance limitations of next-generation firewall appliances. Your protection follows users wherever they go to provide identical protection and access control.  Part of the Zscaler Cloud Security platform, Zscaler Cloud Firewall provides a range of benefits that can only be delivered through a global, purpose-built security cloud.

Enables secure local internet breakouts

• Routes internet traffic locally and provides direct-to-cloud connections for a fast user experience
• Delivers security and access controls for all ports and protocols, without any appliances to deploy or manage

Delivers identical protection everywhere

• Brings the entire security stack close to the user for identical protection wherever users connect
• Enables granular firewall policies based upon user, location, and application

Reduces costs and complexity

• Reduces MPLS backhauling costs
• Eliminates costly and time-consuming patch management, coordination of outage windows, and policy management

Scales services elastically

• Unlimited capacity to handle cloud application traffic requiring long-lived connections
• Natively intercepts and inspects SSL/TLS traffic—at scale—to detect malware hidden in encrypted traffic

Improves security and controls

• Delivers full, dynamic inspection of HTTP/HTTPS traffic traversing non-standard ports
• Fully proxies all DNS traffic to protect against vulnerabilities such as DNS tunnels for data exfiltration
• Delivers always-on IPS threat protection and coverage, regardless of connection type or location

Enables real-time visibility and control

• Logs every session in detail across all users, locations, applications, ports, and protocols
• Delivers near-real–time visibility and policy enforcement from a single console

Zscaler Cloud Sandbox uses advanced behavioral analysis techniques to find and block zero-day threats. Delivered as a service from the Zscaler global security cloud, Zscaler Cloud Sandbox provides a higher level of threat protection than any other solution.

With Zscaler, you can sandbox any suspicious or unknown file without backhauling traffic to the data center. Since Zscaler Cloud Sandbox is implemented from the cloud, it protects all of your users, regardless of their locations. This means that remote office workers and mobile users get the same level of protection as the users at your headquarters, without costly MPLS links or cumbersome VPN connections. Zscaler Cloud Sandbox is architected to provide inline protection to block threats before they enter your network. Malicious files are instantly blocked, quarantined, or flagged based on your defined policies.

Unlike appliances, which work in isolation, Zscaler Cloud Sandbox is fully integrated into the Zscaler Cloud Security Platform to deliver maximum threat visibility and multilevel protection. Because Zscaler is delivered as a service, there is no hardware deploy and manage, and no software to update.

The processing power of Zscaler Cloud Sandbox lets us inspect all suspicious and unknown files with efficiency. Data is correlated across multiple security engines to identify and block sophisticated threats that go undetected by traditional appliances. By performing this in-depth level of sandbox pre-processing, we streamline the detection of suspicious files and improve the user experience. And because SSL inspection is native to the cloud security platform, the tactic of hiding attacks behind encryption fails as well. Malicious files are instantly blocked, quarantined, or flagged based on your defined policy, which can be easily scaled across all users.

Zscaler Cloud Sandbox uses cloud intelligence gained from more than 60 billion transactions processed every day at peak periods and more than 120,000 unique security updates. Once a threat is identified anywhere in the Zscaler cloud, it is immediately blocked for all customers. By default, the Zscaler security cloud sandboxes all executables and libraries to improve the protection to all customers. Zscaler also incorporates over 40 partner threat feeds to make sure the latest threat intelligence is applied across the cloud, which minimizes the number of files that need to be sandboxed.

Zscaler Cloud Sandbox provides:

Integrated platform service

• Pre-filters all known threats using threat feeds from 40+ security partners
• Offers native SSL inspection to close security gaps
• Provides APT protection — for both inbound and outbound traffic
• Delivers rich forensics — including intelligence on users, locations, origins, and evasive tactics

Inline inspection of all suspicious and unknown files

• Fully analyzes executables, libraries, Office documents, archives, and web and mobile content
• Enforces patient-zero quarantines
• Enables manual file submission via a sandbox scanning portal

Uniform policies across all users and locations

• Defines global policies from a single console
• Enforces policy changes immediately across all users, regardless of location

Benefits:

Simply Scalable. Break free from costly gateway-based architectures. Scale protection across all users and all locations with ease from the cloud.

Better Protection. Deliver a fully integrated sandbox solution that can inspect all traffic, including SSL, without performance limitations.

Cost-Effective. Minimize IT procurement and administration costs with protection that easily grows with your needs.

Cloud Intelligence. Empower your sandbox with the power and visibility of the world’s largest security cloud.