SOLUTION BRIEF

Zscaler for Office 365 ™

Delivering a faster user experience and rapid deployment

To measure the success of your Office 365 implementation, there’s really only one metric
that matters: user satisfaction.
As enterprises rely more and more on cloud applications to run their businesses, they face challenges imposed by
traditional hub-and-spoke architectures. When Microsoft Exchange servers and Office applications were on-premises,
you had to backhaul traffic from remote sites and mobile users to the data center. It was the only way to provide
connectivity. But now that these services have moved to the cloud in the form of Office 365, backhauling all of your traffic
to your data centers can create the kind of latency that can quickly lead to frustrated users and delayed deployments.

Microsoft guidance on Office 365 connectivity – Ignite, Sept 2016

MICROSOFT RECOMMENDED

Hub-and-Spoke Architecture
Direct Internet Connection
Express Route
Hub-and-Spoke Architecture
Centralized Proxy
Optimal method for Only recommended for a
performance and cost small number of use cases
Caution should be taken and
centralized proxies avoided

ZSCALER IS AT WORK ON OFFICE 365

Today, the Zscaler Cloud Security Platform processes over 1.2 petabytes of Office 365 traffic every month for over 700
customers around the world. And these numbers are growing rapidly.

With our customers, we’ve seen an average increase in network utilization of 40 percent, and that’s because each user
is now generating between 12 and 20 persistent connections. This increase can easily overwhelm firewalls and increase
your transport budget. This is why Microsoft now recommends performing NGFW capacity assessments, WAN latency
assessments and advised against using Skype for business when deploying Office 365 on a hub and spoke architecture.
ZSCALER FOR OFFICE 365 SOLUTION BRIEF

DIRECT INTERNET CONNECTIVITY FOR OFFICE 365 – DIRECT INTERNET

CONNECTION USING APPLIANCES
Office 365 was built to be accessed securely and reliably
via a direct Internet connection and Microsoft has invested
in a CDN to deliver a fast experience. Deploying appliances
at each branch is better for the user experience, but it is
expensive to buy, deploy and maintain.
Microsoft CDN

Challenges with appliances

• Requires constant firewall updates and missing an IP

or URL update will cause connectivity issues
• Requires appliance capacity assessments to ensure they
can handle the high number of long lived connections.
• Requires security tradeoffs in branches with only UTMs
Paris London
or firewalls for security DC Apps

• Requires local DNS

New York HQ/IOT Sans Francisco

DIRECT INTERNET ACCESS WITH ZSCALER – THE CLOUD WAY. DELIVERING THE
BEST USER EXPERIENCE AND FAST TO DEPLOY
As the world’s largest cloud security platform, Zscaler
makes Office 365 deployment easy. It provides your
users with a fast Office 365 and Internet experience via
local Internet breakouts, while maintaining the highest
Microsoft CDN
level of security for Internet traffic.

Simply point your Internet and Office 365 traffic to the Peering with MSFT

closest Zscaler data center (there are more than 100

around the world). There is no hardware to deploy 100 DCs around
the world
and manage and since traffic is routed locally, you can
reduce your MPLS spend.

Zscaler’s Cloud Firewall, which is application- and

user-aware, scales elastically to support the massive
number of persistent Office 365 connections. Unlike
Paris London
with appliances, making firewall changes is simple. All
you need to do is log in to the admin portal and, within
seconds, your changes are enforced worldwide. In New York Sans Francisco

compliance with Microsoft, Zscaler does not inspect

Office 365 traffic, but does inspect all other Internet
traffic to keep your users safe and protect your data.

©2017 Zscaler, Inc. All rights reserved.

ZSCALER FOR OFFICE 365 SOLUTION BRIEF

Zscaler simplifies administration, improves control, and increases visibility

Keeping up with Microsoft’s continuous IP and URL changes

can be daunting, and missing an update will adversely impact Enable Office 365
the user experience. Zscaler simplifies administration by
making Office 365 as easy as a checkbox.

Prioritize Office 365 for a better user experience

Sophisticated bandwidth management controls allow you to guarantee bandwidth for Office 365 traffic during periods of
contention — like when users are watching YouTube, football, or cricket. Zscaler gracefully slows the connection – before
the last mile – without discarding packets, so a user gets an uninterrupted experience. The steam is simply downgraded
when contention occurs. These controls can also be applied to large file downloads (such as OS updates) that can
degrade Office 365 performance.

Zscaler peers with Microsoft Office 365 in major data centers

Zscaler’s Cloud Security Platform spans 100 data centers and peers with Microsoft around the world to deliver connection
times between the user and Office 365 applications in less than 10 milliseconds. Microsoft recommends 50 milliseconds
in the U.S. and 100 milliseconds elsewhere. With fast connections to Microsoft Office 365, scalable cloud access control
services, TCP optimizations and network path optimizations allows for 40% faster user experience.

ZSCALER PEERS SCALABLE CLOUD OPTIMIZED NETWORK PATH

WITH OFFICE 365 ACCESS CONTROLS TCP STACK OPTIMIZATION

Peering in most major Cloud platform Faster negotiated Fast and local DNS
exchanges with 1-2 ms services scale to handle rates and window connects users locally
round trip time the high number of scaling allows for to Microsoft's CDN,
long-lived connections faster file downloads eliminating network
hop latency
Cloud Firewall
Bandwidth Control

Microsoft video on understanding network connectivity to optimize your performance with Office 365

To quantify the Zscaler performance difference,

Catchpoint performed a series of download speed
tests in Atlanta, Miami, Washington DC, Chicago,
Frankfurt, Hong Kong, London and Chennai. An
average of the performance tests showed Zscaler
delivers 40% faster performance than going direct.

©2017 Zscaler, Inc. All rights reserved.

ZSCALER FOR OFFICE 365 SOLUTION BRIEF

WHY ZSCALER FOR OFFICE 365?

Proven deployment model with over 700 customers Impressive value

Best user experience • Reduced MPLS spend

• No forklift upgrades
• Fast path to Office 365 via local Internet breakouts
• Simplified management
• Guaranteed bandwidth for Office 365
• Peering with Microsoft in major data centers Real-time visibility
• Faster file downloads with TCP optimizations • Immediate visibility into all Internet and
Rapid deployment Office 365 traffic for all users in all locations

• One-click configuration
• No hardware or software to deploy
• No infrastructure upgrades required

ZSCALER, THE SIMPLE SOLUTION FOR LARGE, COMPLEX ORGANIZATIONS

One Zscaler customer, a Fortune 500 leader with locations in 32 countries, was an early adopter of Office 365, but had
difficulties with its first two deployment attempts. With Zscaler, the company successfully enabled local breakouts, giving
users the performance they needed — all with protection from the Zscaler Cloud Security Platform. And remote workers
use Zscaler to access Office 365 without having to use a VPN to connect to the data center.

40% of bandwidth is reserved for During these times, YouTube is capped

Office 365 during periods of contention. at 20%.

Before Zscaler, YouTube accounted for the customer’s largest consumption of bandwidth. With Zscaler’s easy-to-use bandwidth controls, the company was able to reserve 40 percent
of its bandwidth specifically for Office 365, while capping YouTube, as shown in this bandwidth report.

©2017 Zscaler, Inc. All rights reserved.

ZSCALER FOR OFFICE 365 SOLUTION BRIEF

CUSTOMER CHALLENGE: ZSCALER SOLUTION:

• Branch firewalls, with 600+ rules, were too • Local breakouts — backhaul only DC-bound traffic
complex to manage • Simplified management
• Limited visibility of traffic and sessions • No infrastructure to buy, no vendor EOL to manage
• Backhauling traffic over MPLS was too costly • Zscaler Cloud Firewall for more ports than 80/443
• DC firewall overloaded with SSL sessions • Bandwidth throttling policies ensure that O365
works well

When you’re ready to deploy Office 365, look to Zscaler. With more than 700 customers running Office 365 through the
Zscaler Cloud Security Platform, Zscaler can help you deliver a great user experience while reducing your MPLS spend
and avoiding forklift upgrades to your firewalls.

Learn how Zscaler can help you make a good thing even better
Zscaler can make your Office 365 deployment more simple, smooth, and successful, so you can have users taking
advantage of Office 365 more quickly. If you already use the award-winning Zscaler Cloud Security Platform, you may be
one click away from activating Zscaler for Office 365. Otherwise, contact Zscaler to request a demo and more information.

ZSCALER PURPOSE-BUILT MULTI-TENANT CLOUD SECURITY PLATFORM

ACCESS CONTROL THREAT PREVENTION DATA PROTECTION

CLOUD FIREWALL ADVANCED PROTECTION DATA LOSS PREVENTION

URL FILTERING CLOUD SANDBOX CLOUD APPS (CASB)

BANDWIDTH CONTROL ANTI-VIRUS FILE TYPE CONTROLS

DNS FILTERING DNS SECURITY

POWERED BY PATENTED TECHNOLOGIES

SSMA™ ByteScan™ PageRisk™ NanoLog™ PolicyNow™

All security engines fire with Each outbound/inbound Risk of each object 50:1 compression, Policies follow the user
each content scan – only byte scanned, native SSL computed inline, real-time global log for Same on-premise,
microsecond delay scanning dynamically consolidation off-premise protection

©2017 Zscaler, Inc. All rights reserved.

CONTACT US FOLLOW US
Zscaler, Inc. facebook.com/zscaler
110 Rose Orchard Way linkedin.com/company/zscaler
San Jose, CA 95134, USA
Zscaler™, SHIFT™, Direct-to-Cloud™ and ZPA™ are trademarks or registered trademarks of Zscaler, Inc. in
+1 408.533.0288 twitter.com/zscaler
the United States and/or other countries. All other trademarks are the property of their respective owners.
+1 866.902.7811 youtube.com/zscaler This product may be subject to one or more U.S. or non-U.S. patents listed at www.zscaler.com/patents
www.zscaler.com blog.zscaler.com ©2017 Zscaler, Inc. All rights reserved. Z3272-170208