China Premium: Introducing Private App Access and Backup for Complete Transformation

In my previous blog post, I explained how to solve the challenge of connectivity in China. In this post, I want to explore how customers can embrace the endpoint-centric model, coupled with our latest innovations: Backup in China, and Premium ZTNA.

Why should you care

The corporate network landscape is undergoing a significant transformation, driven by the rapid adoption of cloud applications, the rise of remote work, and the increasing need for simplified IT solutions. Businesses are moving away from complex, centralized network architectures and embracing a new model where endpoint devices – laptops, desktops, and mobile devices – become the primary hub for accessing IT services and security protections.

This shift has also highlighted the need for simplified IT solutions, especially in regions with unique challenges. For example, accessing network services from China can be difficult due to the country's strict internet regulations. This makes it especially difficult for users operating in China to adopt a simplified, endpoint-centric model that can bypass these restrictions.

Empowering the Endpoint: A Global Solution

The endpoint-centric model is emerging as a powerful solution to these challenges, both globally and specifically in China. In this model, the endpoint device becomes the central access point for IT services and security protections. Users can connect directly to cloud applications, bypassing the need for complex VPN configurations or traffic backhauling through the corporate network.

Zscaler: Enabling Transformation in China

For businesses operating in China, Zscaler's China Premium service offers a comprehensive solution for secure, reliable access to cloud applications and the internet. By routing traffic through Zscaler's in-country premium data centers, users in China can experience fast, consistent performance and avoid the challenges associated with Chinese regulation. This enables organizations to fully embrace the endpoint-centric model, even in a region with unique connectivity challenges.

New Innovation and capabilities for China Premium

As customers rely on premium connectivity with Zscaler China Premium, the need for high availability typically necessitates purchasing a 1+1 redundant solution. Given the high cost of premium bandwidth, we have been collaborating with our partner in China to achieve the seemingly impossible: providing cost-effective redundant bandwidth to ensure guaranteed access to premium connectivity:

Dual Data Centers: Backup/Dual Home using multi-region access

Multi-region allows for aggregate bandwidth to be independently spread across two different data centers in an active/active way. We have rebuilt our China Premium architecture to accommodate for multi-region access:

This allows us to support customer traffic hitting the closest DC (either Beijing or Shanghai) and forwarding their traffic based on the user’s location. For example a customer that has 1,000 mbps of traffic in China with 50% of the users in the north (Beijing area) and 50% of the users in the south (Shanghai) will forward traffic proportionately:

If this approach inhibits their usage of one of the data centers, the remaining data center can accommodate their committed bandwidth. 

ZPA China Premium: Unlocking Private Application Access in China

Benefits of Simplification

The benefits of embracing an endpoint-centric model are significant, both globally and in China:

• Reduced Costs: Streamlining network infrastructure can lead to substantial cost savings in hardware, software, and maintenance.
• Easier Management: Simplified networks are easier to manage and troubleshoot, freeing-up IT resources for more strategic initiatives.
• Improved User Experience: Users can access applications and data seamlessly, regardless of their location, leading to increased productivity and satisfaction.
• Enhanced Security: Endpoint security solutions provide a robust layer of protection against cyber threats, reducing the risk of data breaches and downtime.
• China-Specific Advantages: For businesses in China, a simplified endpoint-centric model with Zscaler China Premium can overcome the challenges of the local network, ensuring reliable access to critical resources.

China's content regulation creates obstacles for businesses needing to access private apps. Traditional ZPA setups, or self-managed MPLS face issues like slowdowns and high costs. ZPA China Premium solves this in a streamlined way.

Key Use Cases

• Users in China accessing private apps outside China (ideal use case).
• Users in China accessing private apps within China (also supported).
• Users outside China accessing private apps within China (future support)

Benefits

• Better Connectivity: Zscaler's premium network with connectivity beyond mainland China is designed for consistent access and improved speeds.
• Resiliency: Multiple ISPs and dual data centers in Beijing/Shanghai ensure reliable access.
• “China” network event mitigation: Purpose-built to overcome China's specific internet challenges.

How it Works

ZPA components are placed within China, App Connectors link via Premium lines, and encrypted tunnels are established to create seamless connections between users and their private apps.

Challenges and Considerations

The transition to an endpoint-centric model may not be without challenges. Legacy systems, data privacy concerns, and regulatory compliance requirements are all factors that businesses must consider. However, with careful planning and the right solutions in place, these challenges can be overcome.

Future Outlook

The trend toward endpoint-centric network architectures is likely to continue as cloud adoption and remote work become even more prevalent. IT and security professionals must adapt to this new paradigm by embracing endpoint security solutions, developing new network management strategies, and ensuring that users can access IT resources securely and efficiently from anywhere, including regions like China.

To Conclude

Zscaler China Premium is the ideal solution for organizations requiring seamless, high-speed access to ALL applications for their users in China. It empowers businesses to operate more efficiently and deliver a superior user experience.