ALD Automotive's rapid growth in 39 countries has led to an exponential increase in IT infrastructure complexity. In order to provide cost effective and high performance access when needed, a mix of local and central Internet connectivity has been established rather than backhauling all traffic to a central site. With the evolution of the Web, content has become more dynamic and threats more sophisticated. Secure hacks are encrypted and require SSL inspection. ALD Automotive was looking for a full complete security solution.

With an increasingly mobile global workforce, ensuring security and applying uniform policy across all users and devices was a critical need. Historically, the company was using two on-premise solutions (Websense and a Squid Linux service) both of which were nearing the end of their contract periods. The company wanted to establish and enforce a global policy for internet access, provide secure access to the internet for all employees and ensure uniform coverage for the growing number of remote users, and mobile devices

With thousands of employees at eight different locations, Booth Newspapers struggled to find a comprehensive solution to secure and manage Internet traffic for all of its employees. Booth was interested in adding Web 2.0 control and additional Anti-Virus measures, requiring three times as many point products and three times as much maintenance overhead in the future.

Takeda Pharmaceutical Company, the oldest pharmaceutical firm in the world, faced a significant challenge following its merger with Shire PLC. The merger resulted in a 'quite-disjointed' network architecture that needed to be integrated and secured. The company's IT team, led by CISO Mike Towers, was tasked with managing systems for a global workforce of over 70,000 employees spread across 110 countries. The company had begun rolling out Zscaler Internet Access (ZIA) in late 2018 to secure employee internet egress via the cloud and provide a consistent user experience. However, the merger accelerated Takeda's migration to the cloud, pushing the company to move towards a Zero Trust, user-to-destination model as quickly as possible. The challenge was to provide secure employee connectivity for every type of worker via local internet breakouts, while maintaining a consistent policy across all locations.

Jefferson Health, a rapidly expanding multi-state non-profit health system, was faced with the challenge of supporting its rapid institutional growth, a cloud-first strategy, and M&A activity in the highly regulated healthcare industry. As one of the fastest-growing health systems in the U.S., Jefferson Health began adopting a cloud-first strategy to facilitate achieving its patient care and business goals. This transition necessitated the modernization of its cybersecurity posture approach. To support its growth while retaining its patient care excellence, Jefferson Health took a highly quantitative approach to managing risk. This analytical process led the healthcare system to accelerate its cloud-first, multi-cloud, adoption, including Amazon AWS, requiring the security operations team to swiftly deploy zero trust cloud security services. It was also critical to ensure cybersecurity posture was maintained while supporting organizational agility for embarking on new development and strategic ventures.

Genpact, a global professional services firm, made a strategic decision to streamline its IT infrastructure and fully embrace a multi-cloud strategy. This involved moving the entire application stack to the cloud, including Office 365, Salesforce, SAP Concur, ERP, and other software-as-a-service (SaaS) platforms. The organization was also consolidating data centers, aiming to reduce the number to single digits. However, the transition was not without challenges. Certain products like Microsoft Active Directory were not cloud-ready, nor were some of Genpact’s partners. Additionally, the transformation demanded a cultural shift within the organization. Genpact’s internal teams were initially hesitant, citing potential loss of control and visibility. They were concerned about securing 75+ different locations across 25 countries, with anywhere from 500 to 5,000 users per office. Another significant issue was managing increased network complexity due to rapid growth and launching new locations.

Coca-Cola Consolidated, the largest bottler of Coca-Cola products in the United States, faced a significant challenge during the COVID-19 pandemic. The company, which serves over 66 million consumers and operates in more than 110 locations across 14 states, had to ensure the safety of its over 17,000 employees by encouraging them to work from home. This shift presented a communications challenge for the company, which heavily relies on Microsoft Teams and other latency-sensitive applications for internal communications. Traditional VPN connections often reported latency, which could affect Office 365 productivity. The IT team had to remove as many variables as possible to provide remote workers with a safe and predictable user experience, one that is comparable to or better than at the office—especially for Office 365 because the Company is so heavily dependent on this suite.

Fraser and Neave, Limited (F&N), a leading Asia Pacific Consumer Group, faced significant challenges in managing its IT infrastructure across multiple global offices. The central IT team was small and struggled to manage appliances across these offices. The company also lacked the ability to control its increasingly mobile workforce, which included employees working remotely on laptops and mobile devices. The use of appliance-based centralized solutions was limited, and the growing adoption of cloud applications necessitated better control over web access across all locations and users, irrespective of their location. Additionally, the company faced network bottlenecks due to backhauling traffic to the central office, which was a waste of network bandwidth.

The company, a global leader in media and entertainment, was facing a significant challenge in migrating from traditional broadcast technologies to IP-based services. The shift was necessary to keep up with the evolving industry trends and to ensure efficient data movement within the company. However, their existing solution, a multi-vendor proxy access, was not meeting their needs. It was causing frequent outages and operational issues, and the IT department had no visibility into threats or performance issues. The company was also exposed to upper-level application threats due to the lack of deep inspection. The challenge was to find a secure, high-performance solution that could effectively move content without negatively impacting performance.

AkzoNobel, a Dutch multinational and global market leader in decorative paints, performance coatings, and specialty chemicals, was facing a significant challenge with its IT infrastructure. The company operates with a highly centralized IT infrastructure used by hundreds of locations in 80 countries worldwide. The growing adoption of cloud-based solutions was contributing to increased Internet traffic and consequent congestion of its WAN infrastructure. A hub-and-spoke architecture forced all traffic to be backhauled to a single regional Internet gateway each for EMEA, the Americas, and APAC. This setup faced serious capacity constraints and could not rationally support the expanding need for Internet bandwidth for cloud-based applications, as well as a pending Office 365 implementation. AkzoNobel’s IT organization began to study a new hybrid network model that would increase the number of Internet “breakouts” and improve performance in accessing the web, while guaranteeing a safe internet experience. Since AkzoNobel did not want to implement and manage additional network hardware, adding security appliances was not a solution.

MAN Energy Solutions, a leading provider of largebore diesel engines and turbomachinery, was facing challenges due to rapid technological changes, particularly in the field of IoT. With engines and systems of all sizes deployed globally, many of which were in motion, the company was struggling to keep up with the pace of change. Additionally, the company's large and distributed global workforce was increasingly mobile, requiring mobile access to web apps and custom business applications. The traditional approaches to network and app security were proving inadequate for the modern cloud deployments that enabled global scale and access. The company was seeking a solution that would make these applications dark to the internet, with authenticated access only between trusted users and trusted applications. The improved speed and agility gained in cloud deployment was being offset by a poor user experience associated with accessing apps through legacy corporate VPN solutions, with increasing appliance, software, and MPLS networking costs. Furthermore, there was a desire to gain security advantages associated with making the apps invisible on the internet.

Guild Mortgage, a residential real estate mortgage company, experienced exponential growth since its inception in 1960. With over 250 branch and satellite offices in 27 states and banking relationships in 48 states, the company's workforce grew from 400 to over 4,000 employees. This rapid expansion necessitated a robust security strategy to support the growing business needs. Three years ago, a security team was formed to identify vulnerabilities and build a mitigation strategy. While some security technologies were in place for in-office workers, the team found that users were not as protected when working remotely. The team aimed to implement a state-of-the-art security program that could support the evolving business needs driven by their aggressive growth strategy. They needed a cloud-based solution that could provide SSL decryption and inspection, an intrusion prevention system (IPS), and data loss prevention (DLP) to enable users to work from anywhere.

National Oilwell Varco (NOV), a Fortune 500 company supplying technical equipment and services to the global oil-and-gas industry, faced a significant challenge when the entire company had to move to remote access. With operations in over 600 locations and a large computing workforce of 25,000 employees, 70% of whom are mobile with laptops, the shift was not straightforward. The company's fortunes are tied to fluctuating global commodities markets, and after oil prices plummeted in the mid-2010s, the IT team was tasked with doing more with less. They needed to reduce the burden of legacy technical debt, lower historically high costs, add more capabilities, and improve security for their worldwide organization. The company began its transformation in 2016 with a shift to the cloud, away from what CIO Alex Philips describes as 'security appliance hell.'

AutoNation, America’s largest auto retailer, faced significant challenges in securing Internet-connected computer systems and IoT devices across its 360 locations. The company needed centralized controls for managing Internet security policies, monitoring and responding to threats, and ensuring reliable Internet access for employees. The challenge was to apply consistent and robust security across all retail and corporate locations. Each location’s network includes an Internet point of presence and a direct connection to AutoNation’s data center. The company also had to accommodate the slightly different connectivity requirements of the more than 30 car manufacturers it supports, especially concerning Internet-connected vehicle diagnostic systems. Routing all Internet traffic through the company’s data center was too inefficient and costly, and deploying Unified Threat Management (UTM) devices to each store was also unfavorable due to the increased cost of hardware, implementation, and maintenance.

Carlsberg, a global brewer headquartered in Copenhagen, Denmark, was facing a significant challenge in modernizing its IT infrastructure. The company had been operating a traditional centralized network that was not set up to accommodate the needs of today’s businesses and users. The network consisted of a hub-and-spoke architecture, MPLS with central internet breakouts, and centralized security controls. This resulted in a poor user experience, slow connectivity, and lack of visibility into threats and traffic sources. To support its strategic initiative 'Sail ’22', Carlsberg needed to undertake a complete system overhaul, including modernizing the IT infrastructure, embracing Office 365 and moving legacy applications to the cloud, taking control of operational costs, and strengthening security.

National Australia Bank (NAB), one of Australia’s “Big Four” financial institutions, faced a significant challenge in balancing the convenience of online transactions with the need for personal, direct engagement for larger transactions. The bank was also grappling with the strict data-privacy requirements, low risk tolerance, and regulatory constraints typical of the financial services industry. In the mid-2010s, NAB recognized the potential value of migrating to the cloud, particularly for strengthening its security posture. However, the transition was not without its challenges. In early 2020, the COVID-19 pandemic hit, leading to a surge in customer call volumes and necessitating a shift to remote work for the safety of NAB's employees. This sudden change posed a practical challenge, as not all of NAB's employees were equipped to work remotely.

SICK AG, a global leader in sensors, systems, and services for industrial automation technology, was facing a challenge in modernizing its IT security and driving digitization. The company, which has a significant international presence with over 50 subsidiaries and approximately 10,000 employees, was heavily reliant on sensor intelligence for Industry 4.0 processes. However, the existing four internet gateways in Europe, Asia, and North America were a limiting factor for a cloud-first infrastructure. The company needed a solution that would allow secure internet breakouts at each location and facilitate the exchange of data recorded by sensors via the cloud. In 2015, SICK decided to stop using its existing security hardware and sought a cloud-based solution to drive digitization and modernize its IT security.

Stolt-Nielsen Limited, a global leader in the transportation and storage of specialty chemicals and other bulk liquids, was facing challenges in maintaining a quality user experience for its offices and remote users due to its traditional WAN with MPLS connections. The company found this system to be inefficient and inconsistent with its overall cloud strategy. The MPLS contracts were expensive, had long-term commitments, and made new locations difficult to deploy. The company’s on-premises gateway security solution lacked the flexibility to handle cloud and SaaS traffic, had limited security monitoring functionality, and provided no protection for local breakouts, remote employees, or road warriors. Moreover, the company funneled traffic to a data center in Europe for egress to the internet, causing latency issues for locations in other parts of the world. This resulted in a poor user experience and growing frustration among employees in many locations across the Americas and the AsiaPacific region.

Swisscom, a major telecommunications provider in Switzerland, had been providing free internet access to 7000 Swiss schools, 100,000 teachers, and 1 million students for over a decade. However, they faced the challenge of managing a large volume of data while ensuring the highest security standards. They needed a centrally managed solution for the educational network that could handle the large data volume and reduce administrative and cost efforts. The solution also needed to be able to filter web content to ensure that students were only accessing age-appropriate content, and protect the educational network from malware and advanced threats.

General Electric (GE), a global powerhouse that generates a third of the world's energy, manages 90 percent of the electrical grids with its software, and powers two-thirds of all commercial aircraft with its engines, was facing a significant challenge. With 425,000 active users across 4,000 locations in more than 180 countries, GE processes approximately 3.5 billion transactions daily. However, the company's network had become increasingly complex and costly to maintain. Usage demands were mounting, data and applications were moving to the cloud, and the company was struggling to keep pace with 50,000 cybersecurity attacks every day. The need for a more efficient, secure, and cost-effective network solution was evident.

Falkirk Council, a unitary authority in Scotland, was faced with the challenge of rapidly transitioning its cybersecurity to a zero trust, cloud-centric approach in support of work-from-anywhere (WFA) model due to the COVID-19 pandemic. The council, responsible for a wide range of services for its 160,000 residents, had to modernize its existing cybersecurity solutions to accommodate the sudden shift to remote work and learning. The existing IT systems were strained under the load of the increased demand, and the council was looking for an effective way to use taxpayer funds to enhance its systems. Falkirk Council had already conducted a proof-of-concept (POC) with the Zscaler Zero Trust Exchange platform as part of a larger initiative for transitioning to a hybrid cloud and on-premises IT environment.

Kubota Australia, a provider of agriculture, construction, and power equipment, was facing a significant challenge in expanding its warehouse network. The company was experiencing growing demand and needed to provide more parts to more customers promptly. However, the requirement for internet connectivity in the warehouses to allow RF scanners to communicate with the ERP system was proving to be a hindrance. The need for a dedicated wireless network and the logistics of working with potentially different internet service providers at each warehouse location was slowing down the process of making new warehouses operational. The company was seeking a solution to this problem that would allow it to maintain a competitive edge while keeping operational costs low.

ALD Automotive, a service company providing vehicle leasing and fleet management, faced a significant challenge due to its rapid growth across 39 countries. This expansion led to an exponential increase in IT infrastructure complexity. The company had established a mix of local and central Internet connectivity, which required the provisioning of multiple disparate security point products at each site with different policies. This fragmentation made it difficult to obtain an aggregate view of the organization's security state. The proliferation of Web applications further complicated management. Broad policies to deny access were no longer sufficient as Web applications of all types were being used for business, requiring more granular policies that varied across countries. With the evolution of the Web, content became more dynamic and threats more sophisticated, necessitating SSL inspection. ALD Automotive was in need of a comprehensive security solution.

HDFC, India's largest home mortgage company, was facing a significant challenge with its legacy web security solution. The existing system was ineffective, only providing protection against known threats and requiring extensive maintenance for antivirus signatures. The system was not only difficult to maintain, but also costly, requiring significant investments in terms of time, manpower, and technology. The legacy solution scanned web traffic from all branches through a central gateway located at their head office, which was not cost-effective due to the need to backhaul traffic from all locations to a central point. Furthermore, the system was not effectively scanning advanced web-borne threats and those arising from increasing usage of Web 2.0 applications.

Barry Callebaut, a leading global supplier of high-quality chocolate and cocoa products, faced a significant challenge in integrating 12 international locations with 1600 employees into the company network and providing secure Internet access within a six-month timeframe. This was due to a major acquisition of the cocoa production business of Delfi Cocoa in 2013. The company, with over 85 connected sites worldwide, was also dealing with growing concerns about malware threats and cyber risks at the management level. These concerns were compounded by employee complaints about bandwidth congestion for corporate applications. This situation prompted the company to seek new tools that would enable the IT organization to gain insight into bandwidth consumption and control the usage of non-business-related applications in the social media age. The company needed guaranteed bandwidth for corporate applications and the ability to block unwanted traffic causing congestion.

The National Transportation Safety Board (NTSB) was facing significant challenges with its legacy network infrastructure. The agency, which is responsible for conducting independent accident investigations, advocating safety improvements, and deciding pilots’ and mariners’ certification appeals, has a highly mobile workforce that conducts investigations throughout the U.S. in varied environments. However, the requirement to route all traffic through a legacy Trusted Internet Connection (TIC) was not designed to handle an increasingly mobile workforce. This resulted in latency and connection issues, creating a poor user experience and negatively impacting NTSB’s mission. Additionally, the traditional model of routing remote connections through a VPN client, to the agency data center, through a stack of on-premise security devices, and back out through the TIC, where it traversed another stack of security appliances to its destination, was frustrating for remote users and complicated security.

DB Schenker, a global logistics and freight-forwarding company, faced a significant challenge when the coronavirus outbreak began. The company had to quickly enable the majority of its 76,000+ workforce to work remotely, ensuring their safety while maintaining business continuity. The company's operations span over 80 countries and 1400+ locations, making the task even more complex. The immediate concern was how to facilitate remote access for its employees, particularly those affected by the outbreak in China. The company's existing IT infrastructure and legacy network architecture were not equipped to handle such a massive shift to remote work.

Fairfax County, located in Northern Virginia, is the most populous county in the Commonwealth of Virginia with over 1.1 million citizens and more than 12,000 government employees. The county oversees a wide range of services including elections, tax collection, public education, social services, law enforcement, fire and rescue, transportation, and parks and recreation. With the rise in cyberattacks, especially those targeting the government sector, Fairfax County recognized the need to reimagine its security strategy. The county had hundreds of applications in the data center and in Azure that needed to be protected. The county wanted to reduce its network attack surface and decrease the risk of breaches by protecting east-west traffic inside the data center. The next generation firewalls (NGFWs) it was using to protect its data were becoming suboptimal, with hundreds of applications resulting in thousands of policies and creating unnecessary complexity. With a small, centralized IT team, Fairfax County needed to minimize complexity with a zero trust solution that was easy and seamless to deploy, monitor, and manage.

In 2015, Nuffield Health, a UK-based healthcare organization, was preparing to undertake several projects aimed at improving productivity, efficiency, and patient services, while enhancing user experience across its corporate office, hospitals, and gyms. These projects included a migration to Microsoft Office 365 and the introduction of TrakCare, a new electronic health record application. However, the success of these projects was heavily dependent on the performance of Nuffield Health's network, which needed to secure sensitive patient and personal data flowing in and out of its facilities. At the time, Nuffield Health had only one MPLS network link running at 30 MB at each of its sites, which was insufficient for the upcoming projects and the required resiliency. Furthermore, 60% of its traffic was already destined for the internet rather than its data centers, a percentage that would increase significantly once Office 365 was deployed. The team realized that it needed more bandwidth and more resiliency in its network, and it needed to consider the cost and latency resulting from backhauling all that traffic through the data center. It also had to determine the best way to secure all that internet-bound traffic.

Fareportal, a leading travel agency based in North America, transitioned from a traditional paper-based booking system to an online platform. With this digital transformation, the company faced an increased emphasis on security due to the handling of personally identifiable information. The challenge was to ensure the security of customer data and reduce fraud while maintaining the productivity of the employees. Internet access was a critical tool for Fareportal’s agents, which required the creation of unique policies for various groups in the contact center and throughout the organization. The company needed a solution that could handle the complexity of their internet access and meet their operational needs without straining their team.