DATA SHEET

Zscaler Cloud IPS

Complete IPS visibility and threat protection
in a cloud-first world

SOLUTION OVERVIEW
IPS is essential, but traditional IPS has become essentially worthless

In today’s world, IPS is essential for good security hygiene. Offered as a stand-alone solution, or incorporated in NGFWs
or UTMs, the technology is more pervasive than ever before. But while most companies have some form of IPS in place,
there’re new questions about its effectiveness. Due to the increase in user mobility and the skyrocketing use of cloud
services, users and apps have been leaving the network—taking with them precious visibility, the lifeblood of IPS. As your
users access applications off the network and often away from VPN, they leave your IPS investment and internet security
running blind.

Today’s IPS solutions are primarily built for server protection,

and that’s an issue, because today’s attacks primarily target
users. While protecting the server still has its place, having
an IPS that can follow the user and provide always-on
inspection of the user connection is fundamental to stopping Apps moved Users have left
today’s intrusions. to the cloud the network

Traditional IPS approaches have difficulty scaling to meet

the inspection demands of today’s organizations. Adding to Loss of
that challenge, a majority of threats now reside in SSL- Network
Visibility
encrypted traffic¹, but there are limits to the amount of SSL
traffic IPS hardware can inspect. As internet traffic and user
demands increase, organizations must constantly balance New York HQ/IOT San Francisco

the need for performance and the amount of traffic they can
Today's IPS solutions are struggling to deliver
inspect. And they must often compromise by inspecting less, the protections they promised

thereby increasing threat exposure and organizational risk.

Move your IPS to a higher level with Zscaler™ Cloud IPS

Zscaler Cloud IPS helps organizations restore complete threat protection in a cloud-first world. By delivering IPS from the
cloud, all users and offices get always-on IPS threat protection and coverage, regardless of connection type or location.
Zscaler Cloud IPS also restores full visibility into user, app, and internet connections, as all traffic on and off network is fully
inspected. Because Zscaler Cloud IPS is delivered as a service from the global Zscaler cloud, you get unlimited capacity
to inspect all your user traffic, even hard-to-inspect SSL traffic.

¹ https://www.zscaler.com/blogs/research/rise-ssl-based-threats-1
 DATA SHEET

Always-on IPS, always-on protection

Most IPS solutions reside in the data center and lack the ability to deliver
visibility and control to off-network traffic. These IPS solutions lose more
visibility and control every day, as mobility and SaaS take users and apps
off the network. In addition, newer connections—such as SD-WAN, 5G,
and direct-to-internet—all encourage organizations to embrace the internet
as their corporate network. All these technological shifts have diminished
the value of traditional IPS and hindered its ability keep users safe.

Zscaler Cloud IPS delivers IPS from the cloud, which allows IPS to
follow the user, regardless of connection type or location. Every time
a user connects to the internet or an app, Zscaler Cloud IPS is there.
It sits between the connection, providing needed IPS threat visibility
that traditional IPS solutions have lost. Organizations can finally restore
their lost visibility and threat protection. MOBILE HQ / IoT BRANCH

Scale IPS and SSL inspection effortlessly

ZSCALER CLOUD IPS BENEFITS
One of the major challenges facing traditional IPS solutions is the ability
• Unlimited capacity: Inspect all user traffic,
to scale traffic inspection—and correctly sizing IPS solutions is a real
and elastically scale to demands without
guessing game. What seems like the right size can quickly become capacity limitations.
insufficient as user demands grow, and that triggers costly hardware • Full SSL inspection: Deliver full SSL inspection
refreshes. Even more challenging is the need for SSL inspection.The to all your traffic. Find more threats where they
growth of SSL traffic is staggering—Google reports that over 80 percent hide without inspection compromises.

of enterprise traffic is now encrypted². But SSL inspection is performance • Fully integrated: Built on the Zscaler security
intensive, which is why most IPS hardware solutions fall far short of stack as a service, you get IPS fully integrated
with firewall, sandbox, DLP, and CASB—
the task. The result is organizations can’t inspect all their SSL traffic,
turn on the services you need now and add
and with a majority of threats now hiding in SSL¹, that’s a serious risk. others as your needs change.
• Transparent updates: Zscaler Cloud IPS
Zscaler Cloud IPS turns the inspection challenge into an effortless
is constantly updated with latest threat
afterthought. Because Zscaler Cloud IPS is delivered from the Zscaler coverage. No more change windows or
Cloud Security Platform, inspection is elastically scaled based upon manual updates.
demand. Every user gets unlimited inspection capacity, so you never • Smarter threat intelligence: Because it
have to guess how much inspection you’ll need going forward. Best processes tens of billions of security requests
of all, SSL inspection is native in the Zscaler cloud, so you have every day, the Zscaler cloud helps you
detect threats faster and produces fewer
the freedom to inspect all your encrypted traffic. No more security
false positives.
compromises, and no more hardware refreshes!

² https://transparencyreport.google.com/https/overview
 DATA SHEET

Full integration for context and correlation

To reduce risk, you need to understand the meaning of your alert data. Key to this task is bringing in full user and application
context from external sources and correlating this data. However, many IPS solutions struggle to deliver. The reason?
The meaningful context and correlation of threat data requires thoughtful integration of all your security systems. With most
solutions, this means “some assembly required,” and, in practice, organizations often find themselves with a full blown science
experiment as they try to get disparate systems to work together.

Zscaler Cloud IPS enables you to have all threat and alert data in one place, with complete user, file, and app context.
Streaming to a SIEM allows further integration into the SOC ecosystem.

With Zscaler Cloud IPS, you get a fully integrated platform from day one, with no assembly required. Built from the ground up
as a full security stack delivered as a service, the Zscaler Cloud Security Platform provides multiple threat technologies that
expertly work together to unify and correlate your threat data. Cloud Firewall, Cloud Sandbox, DLP, CASB, and web and content
filtering are all integrated into a unified multi-tenant cloud service. Turn on the services you need, when you need them, as
demands grow. Because all relevant threat data is in one place, you get full user, file, and app context and the correlation you
need to understand your risk posture. Best of all, integration makes policy configuration a snap. No more jumping around to
multiple consoles to take action on your threat analysis.

TRANSPARENT IPS UPDATES SMARTER THREAT INTELLIGENCE

Maintaining an IPS can strain IT resources. Consistently testing With the Zscaler cloud platform. you get millions of users and
and deploying IPS signatures is time consuming, error prone, thousands of companies around the world—including many in
and often requires restrictive change windows. As a result, the Forbes Global 2000—sharing threat data and intelligence.
many companies fall behind on updates, which increases risk. Zscaler is constantly tracking emerging threats across the
Delivered as a service, Zscaler Cloud IPS is constantly updated cloud and closely collaborating with industry, military, and
transparently with the latest vulnerability coverage. Users will security organizations to keep the cloud updated. As a result,
always get the latest threat protection, and you’ll save time you get smarter threat intelligence designed to stop emerging
and effort. threats quicker and reduce corporate risk.
 DATA SHEET

Zscaler Threat Library

Available as an essential tool across the complete
Zscaler platform, the Zscaler Threat Library allows
administrators and SOC personnel to perform
in-depth analysis of threat detections. Search or
filter for keyword, vulnerability, or attack category
to better understand the threats triggered within
your organization and the risks associated with
those events.

We can help you bring IPS

into the modern era
Zscaler can make your IPS deployment more simple,
smooth, and successful, so you can effortlessly
scale complete threat protection to all your users.
As a completely integrated solution in the Zscaler Internet Access platform, Cloud IPS allows you to easily add more services
to your installation as your security requirements grow. We’d love to show you all the amazing things you can do with Zscaler
platform services, so feel free to request a demo and more get information.

Zscaler purpose- ACCESS CONTROL THREAT PREVENTION DATA PROTECTION

built multi-tenant CLOUD FIREWALL ADVANCED PROTECTION DATA LOSS PREVENTION

cloud security URL FILTERING CLOUD SANDBOX CLOUD APPS (CASB)

platform BANDWIDTH CONTROL

ANTIVIRUS
FILE TYPE CONTROLS
DNS SECURITY
DNS FILTERING
CLOUD IPS

POWERED BY PATENTED TECHNOLOGIES

SSMA™ ByteScan™ PageRisk™ Nanolog™ PolicyNow™

All security engines fire with Each outbound/inbound Risk of each object 50:1 compression, real-time Policies follow the user
each content scan — only byte scanned; native SSL scanning computed inline, dynamically global log consolidation for same on-premises,
microsecond delay off-premises protection

About Zscaler
Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud-first
world. Its flagship services, Zscaler Internet Access™ and Zscaler Private Access™, create fast, secure connections between users
and applications, regardless of device, location, or network. Zscaler services are 100% cloud delivered and offer the simplicity,
enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more
than 185 countries, Zscaler operates a multi-tenant, distributed cloud security platform that protects thousands of customers from
cyberattacks and data loss. Learn more at zscaler.com or follow us on Twitter @zscaler.

Zscaler, Inc.
110 Rose Orchard Way
San Jose, CA 95134
+1 408.533.0288
www.zscaler.com
©2021 Zscaler, Inc. All rights reserved. Zscaler™, SSMA™, ByteScan™, PolicyNow™, Nanolog™, PageRisk™, Zscaler Internet Access™, and Zscaler
Private Access™ are trademarks or registered trademarks of Zscaler, Inc. in the United States and/or other countries. All other trademarks are the
properties of their respective owners. This product may be subject to one or more U.S. or non-U.S. patents listed at www.zscaler.com/patents.