1. Secrets to Optimize Office 365 Performance
5/29/2018 4:17 PM
Secrets to Optimize Office 365 Performance
Dhawal Sharma | Director, Products
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Secrets to Optimize Office 365 Performance
Dhawal Sharma | Director, Products

3. Zscaler: The Market Leader in Cloud Security
Cloud Scale
Enterprise Customers
Global Partners
2,700 CUSTOMERS
Over 80 of the Fortune 500
100
Data centers
35B
Daily requests
185
Countries served
Largest Cloud Security Platform in the World
Mature Global Cloud Operations

4. 70% of Fortune 500 companies have purchased Office 365
700+
Office 365 customers
2881 TB
Office 365 traffic processed per month and growing
108 TB
Office 365 traffic processed per month for one customer

5. Office 365 traffic growth and Scalability 1
Office 365 traffic growth and Scalability 1.5 billion Office 365 requests daily
Elastic scale: Mailbox migration from a large customer
27 X Growth Over 3 years

6. Microsoft’s Connectivity Guidance for Office 365
TechNet Blog: bit.ly/ZscalerO365
Local Network Egress as close to user as possible
Unhindered access to Microsoft
Local DNS resolution
4. Optimized connectivity to Microsoft’s global network

7. Legacy Hub and Spoke the WRONG approach
Local Network Egress
Cloud apps are designed for direct access
Hub and Spoke Networks adds unnecessary latency
User experience for Office 365 is compromised
Costly are increased due to MPLS links
DC Apps
Paris
London
Zscaler transforms your network by letting you break free from Hub-and-Spoke networks
New York
San Francisco
HQ/IOT

8. ExpressRoute for Office requires Microsoft approval
Local Network Egress
Complex and adds extra planning
“Microsoft has a review policy… ensure that all parties are aware of the 2-6 months of planning, extra complexity…”
Highly complex to configure correctly
Need to perform NGFW capacity assessment – long lived, high throughput connection
Need to assess WAN latency
ExpressRoute
DC Apps
Paris
London
New York
San Francisco
Zscaler enables local internet breakouts for optimized Office 365 connectivity
HQ/IOT
Hub-and-spoke with ExpressRoute

9. Increased load on firewalls and proxies
Local Network Egress
Office 365 creates a high number of long-lived sessions that quickly exhaust firewall ports (we’ve seen between 8-20 connections per user)
Around 2,000 clients can be supported by a single public IP safely (may require architectural changes)
Office 365 use will require more than Web browsing (ports 80 / 443) – uses ephemeral ports
Outlook connections per user
IMPACT ON THE USER EXPERIENCE
Random hangs and connection issues (Outlook in a disconnected state)
The Zscaler Cloud Platform provides unlimited capacity and elastically scales by demand

10. Local DNS resolution eliminates latency
San Jose User > San Jose DNS > San Jose O365
Shortest path, fewer hops = faster user experience
Latency: 12ms
Local DNS
San Jose RTT=12 ms
O365 Connection
Denver RTT=36 ms
Centralized DNS
O365 Connection
Los Angeles RTT=22 ms
Atlanta RTT=52 ms
Centralized DNS
San Jose user > LA > Denver > Austin > Atlanta O365
Lots of hops increases: slower user experience
Latency: 158ms (22ms+36ms+48ms+52ms)
Austin RTT=48 ms
Zscaler’s 100 Data Centers always provide a local DNS connection no matter User location

11. Zscaler peers with Office 365 in major DCs
Optimized Connectivity Unhindered Access
Oslo
Stockholm
Moscow
Copenhagen
Gdansk
Amsterdam
Toronto
London
Warsaw
Seattle
Chicago
Brussels
Frankfurt
Paris
New York
Zurich
100 DATA CENTERS – 5 CONTINENTS
San Francisco
Denver
Tiajin
Washington DC
Madrid
Milan
Tokyo
Atlanta
Tel Aviv
Kuwait City
Los Angeles
Dallas
Al Khobar
30B+
Requests / day
125M+
Threats blocked / day
120K+
Unique security updates / day
Miami
Cairo
Dubai
Hong Kong
Taipei
Riyadh
Abu Dhabi
Doha
Jeddah
Mumbai
Chennai
Manila
Kuala Lumpur
Lagos
Singapore
O365 Peering Data Center
Sao Paulo
Johannesburg
Sydney
Cape Town
Melbourne
Secure
On-going third party testing
Certified
Reliable
Redundancy within and failover across DCs
Transparent
Trust Portal for service availability monitoring

12. Zscaler Office 365 One-click configuration
Unhindered Access
Automatically configures a white list, exempting Office 365 traffic from authentication and SSL decryption, as recommended by Microsoft.
Zscaler fingerprints all Office 365 applications; you won't have to worry about any URL and IP changes in the Office 365 applications.
Unhindered access to Office 365

13. How well is Office 365 being adopted by your users?
Low Office 365 traffic in NY despite being one of the largest offices – user issues?
Real-time traffic volume trending
OneDrive traffic is low – is Box still being used?
John in IT and Kyle in Marketing are the top users

14. Zscaler Bandwidth Control Ensuring Office 365 traffic is prioritized over YouTube
Policies are defined in a single console and immediately enforced globally
Policies are enforced in the cloud, before the last mile bottleneck
Window shaping and bandwidth throttling deliver a smooth user experience
YouTube capped at 10%
Office365 guaranteed 40%

15. Zscaler Internet Access – Fast, secure access to the Internet and SaaS
Open Internet
Real-time policy engine
Polices follow the user
Changes are immediately enforced, worldwide
Business analytics
Global visibility into apps and threats blocked
Identify botnet infected machines for remediation
Real-time policy and analytics
Your security stack as a service
Data Loss Prevention
Cloud Apps (CASB)
File Type Controls
Data Protection
Cloud Firewall
URL Filtering
Bandwidth Control
DNS Filtering
Access Control
Adv. Protection
Cloud Sandbox
Anti-Virus
DNS Security
Threat Prevention
Direct to Internet
Block the bad, protect the good
IOT
BRANCH
APPS
MOBILE HQ
Data Center
MPLS
The best approach for SD-WAN and Office 365

16. Zscaler for Office 365: Five Reasons why
Enable Office 365 ✔
Microsoft recommended deployment model (700+ customers)
Best possible user experience (fast response times)
Rapid deployment (no upgrades, configuration changes)
Investment protection and cost avoidance (no hardware or backhaul)
Visibility into all Internet traffic within seconds (single console)

17. Your Users Deserve Better
Your Users Deserve Better. Run Office 365 successfully Learn How at Booth 1936.

19. WAN transformation: Fast Office 365 experience
Causing WAN congestion
Sessions were overwhelming firewalls
Deploying UTMs or NGFWs was prohibitively expensive and complex (650 locations)
CHALLENGES
Office 365 is finally the highest use – not YouTube
40% of bandwidth reserved for O365 during periods of contention
YouTube capped at 20%
Local Internet breakouts for a fast connection
Cloud Firewall – elastic scale to handle the increase number of connections
Bandwidth Control for Office 365 prioritization
SOLUTION
17B monthly transactions
700+ successful customer deployments and growing
1.2PB of traffic processed monthly (Oct. 2016)

20. Please evaluate this session
Tech Ready 15
5/29/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.