Zscaler Clud Update FALL 2014 RELEASE UPDATE SUMMARY This release intrduces a new unified user interface that features redesigned Plicy and Administratin tabs integrated with the Dashbard and Analytics. It als ffers majr enhancements t the Zscaler Web and Mbile security services. The fllwing is a summary f the enhancements being delivered. Please refer t the nline Help pages fr detailed infrmatin. NEW FEATURES NEW POLICY AND ADMINISTRATION TABS The redesigned Plicy and Administratin tabs, integrated with the Dashbard and Analytics, prvide a smther wrkflw and cnsistent user experience. The Plicy and Administratin tabs are nw mre intuitive and easier t learn and use. Fall, 2014 (Rev. C) Cpyright 2014 Zscaler 1
NEW THREAT LIBRARY PORTAL The Help prtal includes a new Threat Library, which shws all the threats and vulnerabilities that Zscaler blcks. Frm the Zscaler service prtal, click Help > Threat Library t brwse the Threat Library WEB SECURITY ENHANCEMENTS Behaviral Analysis This release intrduces a new prduct ffering, Behaviral Analysis. The Zscaler service detects and blcks 0-day threats, including Advanced Persistent Threats (APTs) with integrated file sandbxing analysis. The service runs all PDFs, Micrsft Office dcuments (Wrd, Excel, PwerPint ), and Java, Adbe Flash, DLL and Windws executables in a virtual envirnment t detect malicius behavir. (Please cntact yur Zscaler sales representative fr additinal infrmatin.) Fall 2014 (Rev. C) Cpyright 2014 Zscaler 2
Kerbers Prxy Authenticatin Zscaler supprts Kerbers t authenticate users transparently. Kerbers enables transparent Single Sign-On (SSO) authenticatin fr users and allws the service t authenticate users even when they use apps that d nt supprt ckies, such as Windws 8 Metr apps and Office 365. Additinally, Kerbers als enables the Zscaler service t apply granular plicies t users, grups and departments withut requiring SSL decryptin. Virtual ZAB The Zscaler Authenticatin Bridge (ZAB) is nw available as a virtual machine t prvisin and ptinally authenticate users against Active Directry r LDAP. The virtual ZAB replaces the SyncBridge prvisining tl and ZAB hardware platfrm. Custmers wh currently use SyncBridge r a ZAB hardware platfrm can cntact their Zscaler representative t migrate t sftware the virtual ZAB. Users Can Belng t Up t 128 Grups Users can nw belng t up t 128 grups. (In earlier releases, users were limited t eight r 16 grups.) Web Plicies fr Departments Web plicies can nw be applied t departments, as well as users and grups. In earlier releases, web plicies culd nly be applied t users and grups. Dwnlad and Imprt Users, Grups, Departments, Lcatins and VPN Credentials Yu can nw dwnlad users, grups, departments and lcatins t a CSV file, as well as imprt users, grups, departments, lcatins and VPN credentials. Please see the sample CSV file befre imprting any f these bjects. Additinal Clud Applicatins Three new Clud Applicatins Classes enhance visibility and cntrl f clud applicatins: Cnsumer Web (ebay, PayPal, Fatwallet, etc.) Sales and Marketing (DubleClick, Mailchimp, etc.) System and Develpment (Github, Bugtrack, etc.) Antivirus Enhancements and Static Analysis Zscaler has updated its in-line antivirus engine, which can als perfrm advanced static analysis, such as validating digital certificates and perfrming file structure analysis. Fall 2014 (Rev. C) Cpyright 2014 Zscaler 3
Access t Mbile Security Zscaler custmers wh have a subscriptin t 'Web Advanced Threats' can nw use the fllwing mbile security features: Mbile Analytics, including the Mbile Applicatins Dashbard and Mbile Insights. Mbile Malware Prtectin and Mbile App Cntrl plicies fr mbile traffic sent ver GRE r IPsec tunnels frm knwn lcatins. Please nte that SecureAgent, the applicatin that secures mbile devices n a 3G/4G netwrk and pushes crprate cmpliance plicies, requires an additinal license. Bandwidth Cntrl Imprvements The Bandwidth Cntrl Plicy algrithm has been enhanced t enfrce rule pririty when the service allcates the ttal available bandwidth. A higher pririty rule gets all available bandwidth up t its cnfigured maximum percentage. Any rule, even the rule with the lwest pririty, is guaranteed its cnfigured minimum percentage. In earlier releases, the service reserved the cnfigured minimum bandwidth and allcated nly the remaining bandwidth based n the plicy rules, regardless f their rder. Organizatins that enable the Bandwidth Cntrl SKU after the clud upgrade will use the new Bandwidth Cntrl algrithm. Organizatins with a cnfigured Bandwidth Cntrl Plicy will cntinue t use the previus algrithm even after the clud upgrade. T switch t the new algrithm, please cntact Zscaler Technical Supprt. Data Lss Preventin (DLP) Yu can nw cnfigure the service t send a ntificatin t auditrs utside f yur rganizatin. Additinally, the service nw enfrces DLP plicy n files that are recursively cmpressed up t five levels. Renaming Objects Yu can nw rename the bjects listed belw. In earlier releases, yu had t delete the bject and then create it with the new name. URL Categries (custm) DLP Dictinaries (custm) DLP Engines (custm) Lcatins Fall 2014 (Rev. C) Cpyright 2014 Zscaler 4
Grups (Nt allwed if the authenticatin mechanism is LDAP/AD synchrnizatin.) Departments (Nt allwed if the authenticatin mechanism is LDAP/AD synchrnizatin.) Bandwidth Classes (custm) Time Intervals Netwrk Services (custm) Netwrk Service Grups Netwrk Applicatin Grups Surce IP Grups Destinatin IP Grups Nte that the Zscaler service des nt stre any renamed bjects. Fr example, if an administratr saves a reprt, and the bjects are renamed, the bject names will nt match when the reprt is run again. Enhanced Activate Feature The Activate feature nw allws administratrs t see wh else is wrking in the service prtal and t frce activatin, when necessary. REPORTING and ANALYTICS ENHANCEMENTS New Reprts New reprts are available, such as the list f tp users with vulnerable brwsers and plugins, and categries f malicius files detected thrugh Behavir Analysis. Additinally, all reprts nw supprt UTF-8. Exprt Active Users Yu can nw exprt a list f active users t a CSV file fr further analysis. Frm the Analytics tab, g t the Web Insights tl and summarize by Users t activate the Exprt Active Users functin. Fall 2014 (Rev. C) Cpyright 2014 Zscaler 5
MOBILE SECURITY ENHANCEMENTS SecureAgent fr Samsung Andrid The Zscaler service is nw integrated in t the Samsung Knx. The SecureAgent ffers lightweight frwarding f all Andrid web traffic t the Zscaler clud with advanced user ntificatins fr all blcked cntent. Data Plan Quta Enfrcement fr Samsung Devices Yur rganizatin can blck persnal applicatins frm using ut-f-quta bandwidth by restricting them t Wi-Fi nly while authrizing business applicatin t keep using the cellular netwrk. Mbile App Cntrl Plicy fr Departments The Mbile App Cntrl plicy can nw be applied t departments, as well as users and grups. In earlier releases, this plicy culd nly be applied t users and grups. OTHER CHANGES RSS Alerts Remved RSS alerts were deprecated and have been remved frm. Yur cmpany can use e-mail alerts r Zscaler Nanlg Streaming Service (NSS) fr all alerts. Quick Links Dashbard Remved The Quick Links Dashbard was remved. The links are nw available frm the Help menu fr ease f use. SyncBridge Remved Starting with this release, SyncBridge can n lnger be used t imprt users t the Zscaler database. Custmers wh currently use SyncBridge can cntact their Zscaler representative t migrate t the virtual ZAB. Email Plicy Management The email plicy management interface has nt changed. T lg in t the interface, append /plicy t the administrative URL. Fr example: https://admin.zscalerne.net/plicy/ Fall 2014 (Rev. C) Cpyright 2014 Zscaler 6