(Zscaler, Azure) CSC Mux with PriCPA
The easiest way to connect to Zscaler (ZIA) and communicate private Cloud Workloads (PriCPA).The Cloud Security Connector Multiplex (CSC Mux 1, 2, 4 and 8) allows you to protect your Internet traffic in compliance with the best practices for Zscaler Internet Access (ZIA) and and communicate private Cloud Workloads.
The Key Benefits of the CSC Mux are:
Solves the limitation of speed to Zscaler (ZIA) when using IPsec tunnels. The CSC Mux comes in four models:
CSC Mux 1 (1 x IPsec, 400 Mbps to Zscaler, 1 Gbps PriCPA)
CSC Mux 2 (2 x IPsec, 800 Mbps to Zscaler, 1 Gbps PriCPA)
CSC Mux 4 (4 x IPsec, 1.6 Gbps to Zscaler, 1 Gbps PriCPA)
CSC Mux 8 (8 x IPsec, 3.2 Gbps to Zscaler, 1 Gbps PriCPA)
The CSC Mux provides outstanding value for money. The CSC Mux is multiple devices "all in one": a Load Balancer, a Firewall, a VPN Concentrator, a Router and a Proxy.
Includes Private Cloud Private Access (PriCPA) functionality that allows you to create a full mesh among the CSCs communicating your private traffic on a Zero Trust model at Gigabit speeds.
The primary purpose of the CSC Mux family is simplicity. The CSC comes with the optimal values to work with Zscaler (ZIA).
Full tunnel redundancy.
High Availability with automatic "Next-Hop" selection on multiple routes.
All traffic steering options supported:
Route all traffic to Zscaler (or http/s only).
Use of PAC files.
Use of Explicit Proxy.
No default Route scenarios.
Multiple options to Bypass Traffic via dedicated Public IP:
Layer 7 Proxy Bypass to Trusted Web Sites.
Layer 4 Routed Bypass: TCP, UDP and ICMP per source/destination Network and Port (UDP/TCP)
Cloud Firewall and Cloud Web Security.
Complete visibility of internal IPs on Zscaler Console.
No operational burden for Administrators: You can pass main configuration parameters via User Data during initial deployment.
Full hardened device.
Supports integration with Azure Load Balancer.
SIEM / Syslog integration: You can send all user IP traffic and CSC's system logs to a SIEM/Syslog server.
Radius authentication for Admin users.
SNMP v2c and v3.
Multiple tools for testing and troubleshooting included: Traffic Logs. TCPDump, Speed Test, MTR (MyTraceRoute), Keepalives statuses, Etc.
Management via SSH, AWS Systems Manager, Rundeck or similar. (i.e. Ansible)
(Zscaler, On Prem) CSC GRE Cluster
The Cloud Security Connector GRE Cluster allows you to protect your Internet traffic in compliance with the best practices for Zscaler Internet Access (ZIA) and and communicate private Cloud Workloads (PriCPA).
Key benefits of the Cloud Security Connector GRE Cluster for Virtual Platforms
No Networking knowledge is required.
The CSC is a direct replacement for your current legacy Web Security Appliance.
Enables any Location to be connected to Zscaler ZIA up to 3 Gbps.
Easy to create: Filling a form indicating your IPs and GWs.
Easy to deploy: Deploy OVA file setting the External and the Internal interface.
With Private Cloud Private Access (PriCPA) you can connect all sites securely on a Zero Trust model. The CSC secures your Private Traffic between your physical and cloud locations.
The CSC comes with the optimal values to work with Zscaler ZIA.
Full tunnel redundancy.
High Availability.
All traffic forwarding options supported:
Route all traffic to Zscaler (or http/s only).
Use of PAC files.
Use of Explicit Proxy.
No default Route scenarios.
Multiple options to Bypass Traffic via dedicated Public IP:
Layer 7 Proxy Bypass to Trusted Web Sites.
Layer 4 Routed Bypass: TCP, UDP and ICMP per source/destination Network and Port (UDP/TCP)
New! Full Proxy mode for devices with Explicit Proxy settings (i.e. Linux hosts), enabling communications to Zscaler (Location IP based), direct domain Bypass (ie. .domain.com) and communication with internal systems.
Zscaler Cloud Firewall and Cloud Web Security.
Complete visibility of internal IPs on Zscaler Console.
No operational burden for Administrators.
Full hardened device.
Works behind a NAT.
All virtual platforms supported: Vmware, Hyper-V, KVM, Etc. Hardware version available if required.
Multiple tools for testing and troubleshooting included: Traffic Logs. TCPDump, Speed Test, MTR (MyTraceRoute), Keepalives statuses, Etc.
Allow the internal communication between your locations with Private Cloud Private Access.
Management via SSH, AWS Systems Manager, Rundeck or similar. (Ansible, Salt, Etc.)
Small OVA instance: 2 CPU, 4 GB RAM, 16 GB Disk
(Zscaler, AWS) CSC GRE
The Cloud Security Connector (CSC) for AWS is an EC2 instance that connects internal AWS resources to Zscaler Internet Access (ZIA).
The CSC for AWS comes with all configurations required, and it works with the Zscaler API. After launching the CSC from the AWS Marketplace using the CloudFormation template provided, the CSC will automatically select the best ZEN nodes, do the GRE tunnels and create the Location on your Zscaler console.
Simple to install and not further management is required.
All Zscaler ZIA functionalities are available, providing complete visibility of all Internet traffic.
In addition to this, the CSC provides high availability changing the default route to Zscaler when configured as High Availability pair, and an easy way to manage direct bypasses to trusted sites using your public IP.
(Zscaler, GCloud) CSC GRE
The Cloud Security Connector for Gcloud will allow to protect your Internet traffic in compliance with the best practices for Zscaler Internet Access (ZIA).No manual configuration required: everything is automated with the perfect configuration. Simply input your IPs tunnel values.
Key Benefits of the Cloud Security Connector:
Enables to connect any Gcloud internal resource to Zscaler Internet Access.
Automated deployment via Gcloud Marketplace or Deployment Manager template.
Easy Configuration: Just insert your GRE tunnel IPs.
Full tunnel redundancy.
All parametrization required for Gcloud and Zscaler (ZIA) is already configured with the optimal values according Zscaler Best practices.
All Zscaler functionalities can be used: Firewall and Web Security.
Full visibility of internal IPs.
Easy way to do Bypasses to trusted sites.
No operational burden for Administrators.
Automatic default route selection on multiple Routes.
When deployed as HA pair, you can achieve 2 Gbps to Zscaler (ZIA)
(Zscaler, AWS) CSC GRE Mux
The Cloud Security Connector Mux 4 or 8 (CSC Mux 4 or 8) for AWS is an EC2 instance that connects internal AWS resources to Zscaler Internet Access (ZIA) at 4 or 8 Gbps.The CSC Mux 4 or 8 for AWS comes with all configurations required, and it works with the Zscaler API.After launching the CSC Mux 4 or 8 from the AWS Marketplace using the CloudFormation template provided, the CSC Mux 4 or 8 will automatically select the best ZEN nodes, do the GRE tunnels and create the Location on your Zscaler console.Simple to install and not further management is required.All Zscaler ZIA functionalities are available, providing complete visibility of all Internet traffic.In addition to this, the CSC provides high availability changing the default route to Zscaler when configured as High Availability pair, and an easy way to manage direct bypasses to trusted sites using your public IP.When deployed as HA Pair, you can duplicate your Web Traffic to 8 or 16 Gbps to Zscaler (ZIA).
