Zscaler Customer Success Team Zscaler Customer Success Deployment Advisory Services v2.7, August 2016

F90 (First 90 Day Customer Experience) Overview 1 Deployment Advisory Services (DAS) are part of a larger overall Zscaler F90 program FIRST 30 (Start = Customer PO) SERVICE PURCHASED TRAIN KEY PARTNERS (SHADOW) PARTNERS DELIVER FIRST 60FIRST 90 ONGOING DAS KICK-OFF CALL ONBOARDING CALL (Introduction to Zscaler) DEPLOYMENT ADVISORY SERVICES (90 days average) 30-DAY CHECK-IN 60 DAY CHECK-IN 90 DAY CHECK-IN CUSTOMER CONTINUES TO DEPLY REMAINING USERS DAS ENDS, HAND-OVER TO SUPPORT

2 WHY DEPLOYMENT ADVISORY SERVICES ? OPTIMUM PERFORMANCE Leverage Zscaler best practices for optimal performance, right from the start Receive a Zscaler Mission Critical Audit (ZMCA), that scores your design EXPERTS Zscaler experts have experience from world class deployment assistance Certified DAS partners expand Zscaler services reach SPEED Speed time of deployment Speed time to protection and Zscaler service value

3 ZSCALER MISSION CRITICAL AUDIT (ZMCA) HOW DO I GET ? Purchase a qualified DAS Package WHAT IS IT ? Review - A design audit by an architect on configuration resiliency/redundancy to ensure optimum service availability through proper configuration. If design or configuration does not meet ZMCA criteria, deficiencies will be documented for the customer as part of the Design Plan BENEFITS ? Ensure optimum design and configuration for mission critical performance required for proxy gateway services

4 SERVICE COLLABORATION CUSTOMER CERTIFIED DAS PARTNER ZSCALER DAS Zscaler or Certified DAS Partners can deliver Deployment Advisory Services, project collaboration is key

DEPLOYMENT ADVISORY SERVICE OVERVIEW DEFINE Hand-over from Sales Review requirements Design questionnaire DESIGN CONFIGURE GUIDANCE TEST GUIDANCE PHASE-1 LIMITED STAGE 1-ARCHITECT 90-DAY CHECK-IN STAGE 2-BUILD PHASE-2 EXPANDED PHASE-3 FINAL STAGE 3-TRAFFIC ROLL-OUT Complete design Document design Migration strategy Test strategy Best Practice Guidance On: Traffic forwarding Authentication Policy structure Reporting Internal IT testing Test key applications Test business process 1 Site ~10 users Multiple sites ~50 users Road warriors Expanded users KEY SUCCESS GATES 5 DAS designs and launches deployments through best practice guidance, then customers continue to roll-out traffic DESIGN PLAN COMPLETEBUILD AND TEST COMPLETEROLL-OUT LAUNCHED DAS COMPLETE IN 90 DAYS ELSE SERVICE EXPIRES (USE-IT-OR-LOSE-IT)

DAS TYPICAL TIMELINE DEFINE DESIGN CONFIGURETEST 1 - ARCHITECT 90-DAY CHECK-IN 2 - BUILD Week 4-6 Week 3 Week 2 Week TRAFFIC ROLL-OUT Week 6-7Week 8-9 Week PHASE-1 LIMITED PHASE-2 EXPANDED PHASE-3 FINAL 6 TYPICAL DAS TIMELINE = 90 days

ARCHITECT – STAGE 1 DETAILS 7 AreaSteps + Actions Define Define Project Zscaler and customer team introductions Establish program schedules Determine collaboration and program tools and process Determine customer and Zscaler team resources Define Solution Review customer goals and requirements Define key business process Define key applications Complete design questionnaire Review design questionnaire results Design Design Solution Architectural review sessions Determine final architecture Documented design provided ZMCA provided Customer design final approval

BUILD – STAGE 2 DETAILS 8 AreaSteps + Actions Configure Guidance Traffic Forwarding Configuration guidance on VPN/Tunnels Customer configures, customer network (routers, firewalls) PAC configuration, Geo location Sub-location configuration Optional SSL Inspection Authentication Configuration guidance on authentication method Authentication types such as Hosted Database, LDAP Sync, SAML Authentication, Kerberos Policy Structure Assist in determining policy migration plans Configuration guidance on policies such URL filtering, Cloud Application Control, Anti Virus Scanning, P2P, VoIP controls, Behavioral Analysis, DLP, Bandwidth Policies, Outbound Firewall policies, DNS. Customer configures. Reporting - Configure required reports, dashboards, and scheduling Test Guidance Internal IT Testing Assist in creating test plans. Customer determine test resources and timeline Assist in testing key business process and applications Testing complete and approval for next stage - roll-out

TRAFFIC ROLL-OUT - STAGE 3 DETAILS 9 AreaSteps + Actions Phase-1 Limited roll-out 1 site, ~10 users Open Zscaler support tickets for all issues found Move to Phase 2, if no blocking issues Phase-2 Expanded Roll-out Multiple sites, ~50 users Open Zscaler support tickets for all issues found Move to Phase 2, if no blocking issues Phase-3 Final Roll-out Road Warriors, Multiple sites, expanded users = ~ target # of users deployed Open Zscaler support tickets for all issues found Deployment Service completed, solution considered deployed, if no blocking issues DAS Complete Customer continues to roll-out additional sites and users, not yet deployed Zscaler transitions service to Zscaler support team, for continued support

DAS PACKAGE COMPARISON 10 VALUE PACKAGE-1 ZCES-DAS-PKG1 PACKAGE-2 ZCES-DAS-PKG2 PACKAGE-3 ZCES-DAS-PKG3 CUSTOMER SIZE (TOTAL USERS)Up to 5,000Up to 10,000Up to 20,000 TOTAL CONSULTING TIME DEPLOYMENT ADVISORY ENGINEER DEPLOYMENT ARCHITECT 5 Days ~4 Days ~1 Day 10 Days ~8 Days ~2 Days 15 Days ~12 Days ~3 Days ZSCALER MISSION CRITICAL AUDIT (ZMCA)Report Provided ZSCALER ONLINE TRAINING3 Credits4 Credits5 Credits DAS PACKAGES PROVIDED PER CUSTOMER TOTAL USER SIZE Consulting time consumed in 1-hour minimum increments, 1 day = 8 hours Typical deployment consulting period is 90 days. A 90-day use-it-or-lose-it policy on packages, timed from Zscaler receipt of qualified Purchase Order Training credits = 1 credit per user required to complete ZCCA, ZCCP courses (lab not included). Credits also expire in 90 days, when the package expires ZMCA is an audit of the mission critical readiness of the deployment configuration and design. ZMCA recommendation report is provided

SERVICE FUNCTIONS + REQUIRED RESOURCES 11 SERVICE FUNCTIONCUSTOMER RESOURCEZSCALER RESOURCE EXECUTIVE SPONSOR Responsible for the overall success of the deployment acting Executive sponsorDirector of Customer Success PROJECT MANAGER Responsible for delivery of the overall project management, project tracking and reporting Project Manager Manages overall project to include Zscaler, customer network, 3 rd parties, partners Deployment Advisory Engineer Technical Account Manager (for TAM accounts) ARCHITECT Resource responsible for the overall solution design decisions and can provide a single technical decision point. Architect or senior leaderCustomer Care Architect TECHNICAL LEADS Primary contacts to define solutions requirements, and assist with testing and configuration Networks Operations (Traffic forwarding) Authentication Expert (Authentication) Desktop Operations (Road Warriors) Deployment Advisory Engineer POST-DAS SUPPORT Post consulting support organizations Customer - support organizationZscaler TAC

Thank you