Uploaded byZscaler
Migration to microsoft_azure_with_zscaler
The document discusses Zscaler Private Access (ZPA) as a solution for streamlined and secure application migration to Microsoft Azure, emphasizing its ability to facilitate user access without traditional VPN constraints. It outlines the challenges of legacy systems in cloud adoption and highlights the benefits of ZPA, including enhanced speed, security, and reduced network complexity. Overall, ZPA aims to enable organizations to achieve a cloud-first strategy seamlessly and securely.
More Related Content
Similar to Migration to microsoft_azure_with_zscaler
![Computer Networks 01[1 using all terms].pptx](https://cdn.slidesharecdn.com/ss_thumbnails/computernetworks011-251214040533-327dd9f8-thumbnail.jpg?width=640&height=640&fit=bounds)
Migration to microsoft_azure_with_zscaler
- 1. ©2018 Zscaler, Inc.All rights reserved. Accelerate the Migration to Microsoft Azure with Zscaler Private Access Sean Dastouri Senior Cloud Architect, Microsoft Azure Lisa Lorenzin Director, Emerging Technology Solutions, Zscaler
- 2. ©2018 Zscaler, Inc.All rights reserved.
- 3. ©2018 Zscaler, Inc.All rights reserved. Tons of Azure platform innovation
- 4. ©2018 Zscaler, Inc.All rights reserved. Azure migration journey
- 5. ©2018 Zscaler, Inc.All rights reserved. Breaking down the Azure migration journey
- 6. ©2018 Zscaler, Inc.All rights reserved. Assess your applications, data, and infrastructure
- 7. ©2018 Zscaler, Inc.All rights reserved. Azure Migrate (now generally available) https://aka.ms/azuremigrate
- 8. ©2018 Zscaler, Inc.All rights reserved. Assessment guidance: Using Azure tools with third party tools
- 9. ©2018 Zscaler, Inc.All rights reserved. The Azure migration journey
- 10. ©2018 Zscaler, Inc.All rights reserved. Migration strategies: Rehost application (i.e., lift & shift)
- 11. ©2018 Zscaler, Inc.All rights reserved. Confidently lift & shift Windows Server to Azure
- 12. ©2018 Zscaler, Inc.All rights reserved. Confidently lift & shift SQL Server applications to Azure
- 13. ©2018 Zscaler, Inc.All rights reserved. Azure Database Services for MySQL and PostgreSQL
- 14. ©2018 Zscaler, Inc.All rights reserved. The Azure migration journey
- 15. ©2018 Zscaler, Inc.All rights reserved. Migration strategies: Refactor application (i.e., repackaging)
- 16. ©2018 Zscaler, Inc.All rights reserved. Migration strategies: Rearchitect application
- 17. ©2018 Zscaler, Inc.All rights reserved. Azure container technologies https://aka.ms/azuredevebook https://aka.ms/modernizeappeboo k https://aka.ms/microservicesebook
- 18. ©2018 Zscaler, Inc.All rights reserved. The Azure migration journey
- 19. ©2018 Zscaler, Inc.All rights reserved. Migration strategies: Rebuild application
- 20. ©2018 Zscaler, Inc.All rights reserved. Build new apps using Azure Functions (serverless)
- 21. ©2018 Zscaler, Inc.All rights reserved. Serverless application platform components in Azure
- 22. ©2018 Zscaler, Inc.All rights reserved. Azure Cosmos DB transforms how you build new cloud applications Table API
- 23. ©2018 Zscaler, Inc.All rights reserved. The Azure migration journey
- 24. ©2018 Zscaler, Inc.All rights reserved. : Stay secure, well managed, and cost-efficient after your move Optimize
- 25. ©2018 Zscaler, Inc.All rights reserved.©2018 Zscaler, Inc. All rights reserved. The IT world has evolved… but app access hasn’t
- 26. ©2018 Zscaler, Inc.All rights reserved. Network and application transformation Applications are moving to the cloud Connections are following the path of least resistance Users are leaving the corporate network Headquarters Hub and Spoke Architecture ? ??
- 27. ©2018 Zscaler, Inc.All rights reserved. Internal apps on public cloud providers Internal apps in data center Site-to-site VPN Inbound Gateway DDoS Global LB FW / IPS RAS (VPN) Internal FW Internal LB VPN BOSTON VPN MADRID Legacy remote access impedes cloud and mobility Risk is introduced by placing users on network Complexity of ACLs and firewalls makes remote access difficult to manage Users become frustrated with VPN Months spent on just getting infrastructure set up
- 28. ©2018 Zscaler, Inc.All rights reserved. HQ EMEA Branch APJ Branch Branch Branch Branch Branch BranchBranch Home, Coffee Shop Airport, Hotel SaaS Open Internet IaaS Cloud and mobility break network security The Internet is Your New Corporate NetworkHow do you secure a network you don’t control? “GE will run 70 percent of its workload in the cloud by 2020” Jim Fowler, CIO “The Internet will be our new corporate network by 2020” Frederik Janssen, Head of Infrastructure “Office 365 was built to be accessed via direct Internet connection”
- 29. ©2018 Zscaler, Inc.All rights reserved. Common Challenges of Cloud Adoption 1. Legacy technology lacks ability to provide cloud-like user experience 2. Takes months to implement, slowing app migration efforts 3. Requires additional appliances to be purchased and deployed 4. Setting up site-to-site VPN for traffic to traverse 5. Connecting employees to cloud means access to the network
- 30. ©2018 Zscaler, Inc.All rights reserved. How mobile users feel with current experience
- 31. ©2018 Zscaler, Inc.All rights reserved. Zscaler Private Access Secure Access to Internal Applications on Azure
- 32. ©2018 Zscaler, Inc.All rights reserved. Zscaler enables secure IT transformation to the cloud Internet and VPN Gateway Ext. FW / IPS URL Filtering Antivirus DLP SSL Sandbox Global LB DDoS Ext FW/IPS RAS (VPN) Internal FW Internal LB SaaSOpen Internet External APPS Data CenterIaaS Internal Internal (cloud or data center) Connect a user to an authorized private app (not network) Fast and secure policy-based access to apps and services over the Internet Any device, any location, on-net or off-net External (open Internet or SaaS) Nothing bad comes in, nothing good leaks out Zscaler Internet Access Zscaler Private Access HQMOBILE BRANCHIOT
- 33. ©2018 Zscaler, Inc.All rights reserved. Zscaler Private Access – fast, secure access to internal apps Z-APP 2 Innovative design Z-Brokers – secure user to app connection Cloud Policy engine - define user app access rights 1 Z-APP – request access to app Okta – single sign-on authentication 2 Z-Connectors – sits in front of apps - outbound-only connection 3 Zscaler cloud brokers a secure connection between the Z-Connector and Z-App Z-CONNECTORS 3 3 1. Users are never on your network 2. Apps are invisible – never exposed to the Internet 3. App segmentation without network segmentation 4. Use Internet as a secure network without remote access VPN Built for zero-trust access to internal applications 1 Z-Brokers Private cloud / on-premise data center
- 34. ©2018 Zscaler, Inc.All rights reserved. Enterprise benefits CostExperience Security Simple • Direct access to apps in Azure • No need for VPN • Cloud-like experience • Users never on network • No lateral movement • Visibility into user activity • Simple implementation • Access from any device • Less network complexity • No appliances • Less inbound service spend • Optimize bandwidth use USE CASES Cloud Migration RAS / VPN Replacement Secure Partner Access M&A and Divestitures
- 35. ©2018 Zscaler, Inc.All rights reserved. Azure and ZPA are strategically aligned “Zscaler helps to simplify the enterprise journey to Microsoft Azure for both public and hybrid environments…Zscaler Private Access gives users the choice and the benefit of secure connectivity...” Yousef Khalidi, Corporate Vice President, Azure Networking, Microsoft
- 36. ©2018 Zscaler, Inc.All rights reserved.
- 37. ©2018 Zscaler, Inc.All rights reserved. • Fast and secure access • Direct-to-cloud experience • Enable a cloud-first strategy • Accelerated Azure adoption • Local breakouts • Simple to implement Benefits of ZPA and Azure together
- 38. ©2018 Zscaler, Inc.All rights reserved. Azure Active Directory Marketplace ZPA and Azure – available on Marketplace
- 39. ©2018 Zscaler, Inc.All rights reserved. Step 1: Configure User Auth 20 MINUTES 5 Minutes Add ZPA as a new Service Provider (SP) within Azure AD 5 Minutes Assign ZPA to test users within AD, select SAML attributes to send 5 Minutes Import IdP’s metadata into ZPA admin console 5 Minutes Test user authentication and SAML attributes 1 2 3 4 5 Minutes Configure connector provisioning keys via ZPA Setup Wizard 5 Minutes Deploy ZPA Connector package from Azure Marketplace 10 Minutes Configure Connector networking and network security policies 5 Minutes Verify and test Connector health, access to DNS, routing to internal apps 1 2 3 4 10 Minutes Configure Z-App rraffic forwarding policy and app profile 5 Minutes Download and deploy Z- App on user devices 1 2 25 MINUTES Step 2: Deploy Connector Step 3: Install Zscaler App 15 MINUTES ZPA in Azure deploys quickly and easily
- 40. ©2018 Zscaler, Inc.All rights reserved. Cloud-based security The access users want, with the security you need 1. Secure access to apps in datacenter & Azure 2. Authorized access to specific apps 3. Fast and seamless experience 4. Optimized bandwidth use HQON-THE-GO BRANCHES Secure remote access to internal apps in hybrid environments
- 41. ©2018 Zscaler, Inc.All rights reserved. Enabling App Transformation with ZPA MAN was undertaking a massive cloud adoption but needed a better way to provide remote access to internal applications. Benefits of ZPA • Faster, better experience for end users • Reduced attack surface, remote users not on-net • Granular application access control, globally • Easily manage app access across AVNs • Increased performance of resources • Increased visibility into apps & activity
- 42. ©2018 Zscaler, Inc.All rights reserved. Thank you Get hands-on with Zscaler Private Access at www.zscaler.com/zpa-interactive Experience Users Want. Security You Need.
Editor's Notes
- #3 Confluence of migration triggers/catalysts [including outsourced datacenter contract expirations, integrating acquisitions, urgent capacity needs, software and hardware refresh, end of support, security threats (e.g., Spectre), compliance (e.g., GDPR), Need to deliver applications faster]
- #4 We’ve delivered lots of innovation recently, both in the Azure platform and migration tools/services Data heavy – balance better between workload types. Put future stuff as well.
- #5 Technical (e.g., Networking) | Process (e.g., DevOps) | People (e.g., cloud 101 skills)
- #6 Replace – consider for completeness. [Azure Migrate discovers for O365?] Let’s talk about the various paths along your migration journey. It all starts with discovering your on-prem applications, data, and infrastructure, assessing them for migration readiness and determine the mix of tactics that you will use during the move – ranging from simple lift and shift to various levels of modernization during migration (i.e., refactor, rearchitect, rebuild). And then once in Azure, how do you keep your workloads optimized continuously (e.g., security, monitoring, backups, opex spends). Note: In some cases you might just retire the workload or replace it with a SaaS solution – we won’t cover those aspects in detail here
- #7 Limit to 3 terms?
- #8 Timing precision? Hit ISV assessment tools upfront in the deck. Using both in combination.
- #9 What’s Microsoft’s guidance on how to pick Microsoft tools and ISV tools? Not vs. it is AND Our goal is to help deliver customer requirements and get to Azure consumption ASAP vs. worry over what tool was used. That said, we see a few situations where MSFT tools may be appropriate: Kick the tires Customer likes the convenience and comfort of using MSFT Azure tools Some capabilities like ASR are sufficiently mature – they even integrate with ISV tools like Cloudamize, TCOLogic etc. ISV tools when Broader requirement set – e.g., physical, Hyper-V End to end integration
- #11 Azure services Compute: VM, VM Scale Sets
- #12 Azure RIs can save customers up to 67% on Windows Server workloads compared to 3 year AWS Standard RIs
- #13 Check # savings Azure SQL Database is the intelligent, fully-managed relational cloud database service that provides the broadest SQL Server engine compatibility, so you can migrate your SQL Server databases without changing your apps. Accelerate app development and make maintenance easy and productive using the SQL tools you love to use. Take advantage of built-in intelligence that learns app patterns and adapts to maximize performance, reliability, and data protection. As a fully-managed service, Microsoft operates SQL Server for you and ensures availability and performance. Features that come with SQL Database include, but are not limited to: provisioning and resizing (w/ Azure Portal experience), built-in auto HA (99.99%), automatic backup, point-in-time-restore (database-level), and active geo-replication. Because Microsoft assumes much of the daily maintenance, administration and infrastructure costs, your IT organization can quickly realize cost and operational benefits that you may not have otherwise experienced with your on-premises or hosted solution. In fact, a study by IDC found that organizations who modernized their databases from SQL Server to SQL Database realized up to a 406% ROI over five years.1 In addition to the benefits of a fully-managed service, SQL Database also provides key benefits in some specific areas: It has built-in intelligence that helps you dramatically reduce the costs of running and managing databases and maximizes both the performance and security of your application. SQL Database provides breakthrough productivity and performance to meet the demands of today’s apps. Each database is isolated from each other and portable, each with its own service tier with a guaranteed performance level. SQL Database provides different performance levels for different needs, and enables databases to be pooled to maximize the use of resources and save money. You can adjust performance with minimal downtime to your app. Dynamic scalability enables your database to transparently respond to rapidly changing resource requirements and enables you to only pay for the resources that you need when you need them. In-memory technologies provide real-time business insight with up to 30x improved throughput and latency and up to 100x faster queries and reports. It will provide the ability to seamlessly lift and shift your SQL Server data to the cloud to a managed instance with a full SQL Server programming surface area that removes the need to re-architect your apps, saving you time and resources. SQL Database combines the operational and financial benefits of a managed service with a financially-backed SLA and business continuity tools to protect the lifeblood of your business, your data. SQL Database also offers a Azure Hybrid Benefit for SQL Server that maximizes the investments you’ve made in on-premises licensing by providing discounted rates in the cloud. We’ll talk about that more momentarily. 1The Business Value of Microsoft Azure SQL Database Services, IDC, March 2015
- #14 Azure Database for MySQL provides fully managed enterprise ready community MySQL database as a service for service for app development and deployment. Being community MySQL allows you to easily lift and shift to the cloud and use languages and frameworks for your choice. On top of that you get built-in high availability and capability to scale in seconds, helping you easily adjust to changes in customer demands. Additionally, you benefit from the unparalleled security and compliance, including Azure IP advantage, as well as Azure’s industry leading reach with more datacenters than any other cloud provider. All this with a flexible pricing model so you can choose resources for your workload with no hidden cost. Languages and Frameworks of your choice Being based on the community-editions of MySQL, PostgreSQL and MariaDB mean you can use the existing development languages frameworks and tools you already use for your apps. In addition, Azure Database Services are deeply integrated with Azure Web Apps to provide a streamlined provisioning and management experience for common frameworks (like WordPress, Drupal, Joomla) and languages (PHP, Node.js, Ruby) to provide a best-in-class PaaS experience. Scale in Seconds with built-in HA Azure Database Services are built upon the same service fabric framework that has been powering SQL Database for years. Unlike an VM-based PaaS offering like AWS RDS, Azure Database Services do not have the overhead a full VM stack has (e.g.; Linux OS + DB). Running on in a secured container implementation (SQLPAL, a very light-weight SQL OS), Azure Database Services can provision a new server in seconds in the event that a primary server hangs or crashes whereas in a traditional VM-based implementation the entire Linux (or Windows) OS stack has to bootstrap before the DB service loads. This means the entire experience of a failover can happen in as little as 30-45 seconds – and most importantly WITHOUT the need for a replica. AWS RDS requires deployment in Multi-AZ in order to achieve 99.95% SLA, which doubles your costs as you have 2 DB servers running at all times. With Azure Database Services, no replicas are needed which means no additional cost, or maintenance, by the customer. Additionally, this HA infrastructure enables the ability for Azure Database Services to scale performance on the fly. When a customer needs to scale-up for workload spikes, by simply changing a slider in the portal, a new server is provisioned at a higher performance level and the previous server’s DNS name and storage is connected to the new instance. Scaling can take a little time as 20 seconds meaning customers can scale performance, up or down, with little/no downtime to the application. Secure and Compliant “Secure by default” is the standard for any Azure service, meaning elements such as SSL encryption between the database and application are turned on by default. Additionally, all data at-rest is encrypted by default in Azure storage using AES 256 bit encryption. And since Azure Database Services are using OSS database engines, the Azure IP Advantage means that customers do not have to worry about litigation using an OSS product in Azure. Microsoft provides indemnification for any OSS first party workload in Azure. Industry-leading global reach With more regions across the globe than any other public cloud provider, Azure offers the ability to have the most globally distributed MySQL, PostgreSQL or MariaDB-based application in the world.
- #16 Guideline: If you make minimal changes, App Service is a good destination for .NET apps. Azure services Compute: App Service, Azure Container Service (AKS), Service Fabric Data: Azure SQL Database Managed Instance, Azure Database Service for PostgreSQL, Azure Database Service for MySQL and Azure Cosmos DB Land DevOps and Docker
- #17 Azure services Compute: App Service, AKS, ACI, Service Fabric, Azure Functions Integration: API Management, Logic Apps, Event Grid and Service Bus Data: Azure SQL Database Managed Instance, Azure Database Service for PostgreSQL, Azure Database Service for MySQL and Azure Cosmos DB Land DevOps
- #18 Research shows almost all enterprise customers are only deploying single container app AKS renaming doublecheck – consider flipping?
- #20 Azure services Compute: App Service, AKS, ACI, Service Fabric, Azure Functions Integration: API Management, Logic Apps, Event Grid and Service Bus Data: Azure SQL Database Managed Instance, Azure Database Service for PostgreSQL, Azure Database Service for MySQL and Azure Cosmos DB Land DevOps
- #21 .NET, Java, Node.js. Python are the supported languages. Not every language Abstraction of servers: Complete freedom from thinking about provisioning, maintaining or scaling any server or infrastructure aspects Event-driven/instant scale: Ability to handle any volume of traffic without explicit configuration handle sudden jump from 0 execution to tens of thousand of executions seamlessly Micro-billing: Paying only for what you use You pay only for the amount of time your code runs and the amount of resources it consumes during that period Never pay for idle capacity
- #22 Lets talk about what really makes up MSFT’s Serverless platform: At the center of the Serverless platform, is our compute offerings: Azure Functions and Azure Logic Apps. Azure Functions is an event based Serverless compute experience that helps you accelerate your development. Logic Apps is a powerful orchestration tool. It enables building a Serverless app in minutes – by orchestrating multiple functions using a visual workflow tool. Say you have your apps up and running using Serverless. Congratulations! You now need to collect intelligence from different apps across platforms to take actions upon. There are a few essential components which we think are core to building Serverless applications are: Data/ Storage –Functions has triggers and bindings with Azure document DB and Azure Blob storage ** Triggers: Triggers are event responses used to trigger your custom code. They allow you to respond to events across the Azure platform or on premise. ** Bindings: Bindings represent the necessary meta data used to connect your code to the desired trigger or associated input or output data. Messaging such as queues and topics using Azure Service Bus and Azure Event Hubs Integration – that includes core LOB apps and SaaS apps integration via Azure Logic Apps. Intelligence on data and sentiment/ predictive analysis using Cognitive services and Machine learning Conversation as a service – how do we equip developers to build apps that offer an end-to-end experience for their end users – Azure Bot Service offers a Serverless interactive bot experience. More, developers are spending more time writing code that allows them to add huge business impact with Serverless. MSFT offers numerous development tools such as IDE Support for Visual Studio in functions and Logic Apps, enables local development (vs web browser coding environment), visual debugging capability, all with your tools of choice. Lastly, I also want to highlight top scenarios and use cases for Serverless: Real-time Stream analytics: Customers can use Functions to feed real-time streams of data from application tracking into structured data and store it in SQL online. SaaS event processing: Customers can use Functions and Logic Apps to analyze data from an excel file in Onedrive and perform validation, filtration, sorting and convert data into consumable business charts Web app architecture: Used a lot in creating targeted marketing collaterals – when a customer clicks on a webpage, it triggers a webhook, that uses a function to create an ad that matches the customer profile and displays a completed webpage. Real-time bot messaging: When customers send a message to a chatbox, Functions calls Cortana analytics to generate appropriate answers and sends a response back. //from before: Customers have different paths to build a Serverless app – start by building the distributed application components using functions by leveraging the numerous templates and declarative bindings Or Start with the workflow and orchestration of Serverless application using Azure Logic Apps. The visual designer enables developers to quickly and easily author, edit and visualize orchestration of multiple functions and workflow.
- #23 Only Microsoft Azure Cosmos database delivers a truly globally distributed database service Azure Cosmos: Puts your data where your users are –wherever they are. Easily handles multi-model data as well as your favorite APIs And offers multiple, well-defined data consistency levels Using Azure Cosmos DB’s fully managed database service with turnkey consistency models, you can now build and deploy new global apps faster than ever