Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Zscaler: AkzoNobel Replaces Firewalls with Zero Trust Branch

Zscaler
07/14/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


We have around 1,000 locations, 130 factories and 30,000 employees. We looked at how we were working and we allowed our users to do nearly everything at home, but then when they came into the office we had a lot of complexity. So that's where we defined the idea to go to a full internet-based environment, which would imply removing firewalls and SD-WAN everywhere. AXA Nobel has already moved all remote users to the Zero Trust Access model, but that's across the globe. But we had zero complaints. Now we're working on moving all our manufacturing sites towards the Zero Trust Access model. Our transformation goals for the factories is all around productivity, how we can do more automation, the introduction of AI. And then next to that there's also a security component to make sure that the whole OT environment becomes safer than the way it is today. We have the specific challenge of the OT. Some systems are 30, 40 years old. You cannot just put agents on there. So that's where we introduced the Zscaler ZTB technology, which we're now deploying across 122 factories. Traditionally you connect networks to each other or devices to each other, so there's full access from any network, any device, to any other network and any other device. Now all communication will flow to a central switchboard, which can check and secure all communications. If you have a virus or a hacker in your computer, the switchboard will automatically close the connection and segment your device off, improving security. So the Zero Trust Bench not only allows for our devices to connect to the Zero Trust Cloud, even if they don't support the software, but it also allows for remote access to come back into the manufacturing sites. It allows us to micro-segment all the devices that bring a high level of risk. The biggest benefit, at least for the users, is the consistent global user experience that they have. Regardless of their location, the experience is always the same. As it's our goal to move the entire company to a cafe-style model, it takes about one hour for us to migrate all the services and implement the Zero Trust Bench. With this new architecture, you're able to eliminate hardware, routers, firewalls. You're also able to eliminate services or philosophies, for example, patching, lifecycling. We're very proud of the reduction in infrastructure costs that we've been able to achieve. We also took this as an opportunity to really look at the total architecture, where we eliminated quite a few of the management aspects of the network. We had a significant reduction there, and then even with adding some of the Zscaler technology to make sure that we could do all the technology components, there's still a very positive business case. What I'm really proud of is that we had a vision, we had an idea. Many people at the time said, you guys are totally crazy, and nobody's doing that, nobody's thinking about that, but we insisted on doing it. One of the things I asked our CISO to do is try and break it, and the good thing is that he could not find the devices, so basically it also proves that the security is much better with this new technology than the way it was with the firewalls. So no more SD-WAN, no more firewalls, and a significant uplift in terms of total security.

TL;DR

  • AkzoNobel eliminated firewalls and SD-WAN across its global network, migrating 30,000 employees to a fully internet-based zero trust architecture with zero user complaints during rollout.
  • Zscaler Zero Trust Branch is now being deployed across 122 factories to secure legacy OT systems — some 30–40 years old — that cannot support software agents.
  • The architecture microsegments high-risk devices, enables secure remote access into manufacturing sites, and automatically isolates compromised endpoints through a central cloud switchboard.
  • AkzoNobel achieved significant infrastructure cost reductions and a positive business case, with each factory site migrated in approximately one hour using a café-style connectivity model.

Summary

AkzoNobel, a global paints and coatings company operating across 145 countries, 1,000 locations, 130 factories, and 30,000 employees, shares how it replaced traditional firewalls and SD-WAN with a fully internet-based, zero trust architecture powered by Zscaler Zero Trust Branch (ZTB). After successfully migrating all remote users to a Zero Trust access model with zero complaints, the company is now extending that transformation to 122 manufacturing sites. The core challenge in OT environments — legacy systems up to 40 years old that cannot support software agents — is addressed by ZTB, which connects agentless devices to the Zero Trust cloud, enables secure remote access into factories, and microsegments high-risk devices. A central cloud-based switchboard inspects and controls all communications, automatically isolating compromised devices. The result is a consistent global user experience regardless of location, a dramatic reduction in infrastructure hardware and management overhead, and a positive business case even after adding Zscaler technology costs. AkzoNobel's CISO attempted to locate devices on the new network and could not — validating that the zero trust model delivers materially stronger security than the firewall-based approach it replaced.

Chapters

0:00 - AkzoNobel Global Scale Overview
0:22 - Decision to Go Internet-Based
0:44 - Factory Transformation Goals
1:05 - ZTB Deployment Across OT Environments
1:57 - User Experience and Cost Benefits
2:52 - Security Validation and Results

Key Quotes

0:36 "We had zero complaints."
1:01 "Some systems are 30, 40 years old. You cannot just put agents on there."
1:30 "If you have a virus or a hacker in your computer, the switchboard will automatically close the connection and segment your device off, improving security."
3:04 "One of the things I asked our CISO to do is try and break it, and the good thing is that he could not find the devices, so basically it also proves that the security is much better with this new technology than the way it was with the firewalls."
3:16 "So no more SD-WAN, no more firewalls, and a significant uplift in terms of total security."

FAQ

How does Zscaler Zero Trust Branch handle legacy OT devices that can't run software agents?

ZTB connects agentless devices to the Zero Trust cloud by routing all communications through a central cloud-based switchboard that inspects and secures traffic without requiring any software installed on the endpoint device itself.

What infrastructure did AkzoNobel eliminate by moving to Zero Trust Branch?

AkzoNobel eliminated physical routers, firewalls, and SD-WAN equipment, along with associated management tasks such as patching and hardware lifecycle management, resulting in significant infrastructure cost reductions.


Categories:
  • » Webinar Library » Zscaler
  • » Data Protection » Backup & Recovery
  • » Cybersecurity » Network Security
  • » Cybersecurity » Zero Trust
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Zero Trust
  • OT
  • IoT Security
  • SASE
  • SSE
  • Network Security
  • Customer Story
  • Data Protection
  • Zero Trust Architecture
  • OT
  • ICS Security
  • Network Modernization
  • Firewall Replacement
  • SD-WAN Elimination
  • Microsegmentation
  • Secure Remote Access
  • Manufacturing Cybersecurity
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Zscaler: AkzoNobel Replaces Firewalls with Zero Trust Branch

              Upcoming 360 View Events

              • Nov
                19

                360View: Govern, Secure & Recover Your Microsoft 365 Environment

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Oct
                  28

                  EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                  10/28/202601:00 PM ET
                  More events

                  Industry Events (Sponsor Hosted)

                  • Oct
                    13

                    Ensuring Compliance: Audit Evidence from CJIS to FERPA

                    10/13/202601:00 PM ET
                    • Oct
                      15

                      Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

                      10/15/202611:00 AM ET
                      • Oct
                        20

                        Harnessing Data Governance for AI with Cyera and Snowflake

                        10/20/202611:00 AM ET
                        • Oct
                          27

                          Maximize Your Microsoft Investment for Security and Growth

                          10/27/202611:00 AM ET
                          • Oct
                            27

                            The HUMAN Experience: Real-Time Insights into Page Intelligence

                            10/27/202601:00 PM ET
                            More events

                            Upcoming Webinar Calendar

                            • 10/13/2026
                              01:00 PM
                              10/13/2026
                              Ensuring Compliance: Audit Evidence from CJIS to FERPA
                              https://www.truthinit.com/index.php/channel/2159/ensuring-compliance-audit-evidence-from-cjis-to-ferpa/
                            • 10/15/2026
                              11:00 AM
                              10/15/2026
                              Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation
                              https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
                            • 10/20/2026
                              11:00 AM
                              10/20/2026
                              Harnessing Data Governance for AI with Cyera and Snowflake
                              https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
                            • 10/27/2026
                              11:00 AM
                              10/27/2026
                              Maximize Your Microsoft Investment for Security and Growth
                              https://www.truthinit.com/index.php/channel/2178/maximize-your-microsoft-investment-for-security-and-growth/
                            • 10/27/2026
                              01:00 PM
                              10/27/2026
                              The HUMAN Experience: Real-Time Insights into Page Intelligence
                              https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                            • 10/28/2026
                              01:00 AM
                              10/28/2026
                              [APAC:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                              https://www.truthinit.com/index.php/channel/2125/apac-ensuring-comprehensive-security-for-ai-applications/
                            • 10/28/2026
                              06:00 AM
                              10/28/2026
                              [EMEA:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                              https://www.truthinit.com/index.php/channel/2127/emea-ensuring-ai-security-across-all-platforms/
                            • 10/28/2026
                              01:00 PM
                              10/28/2026
                              [AMERICAS:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                              https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-strategies-and-insights/
                            • 10/28/2026
                              01:00 PM
                              10/28/2026
                              EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                              https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                            • 11/04/2026
                              11:00 AM
                              11/04/2026
                              Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape
                              https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
                            • 11/04/2026
                              11:00 AM
                              11/04/2026
                              Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                              https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                            • 11/05/2026
                              02:00 PM
                              11/05/2026
                              HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI
                              https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
                            • 11/05/2026
                              02:00 PM
                              11/05/2026
                              Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                              https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              360View: Govern, Secure & Recover Your Microsoft 365 Environment
                              https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                              https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                            Truth in IT
                            • Sponsor
                            • About Us
                            • Terms of Service
                            • Privacy Policy
                            • Contact Us
                            • Preference Management
                            Desktop version
                            Standard version