Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Zscaler: AkzoNobel Replaces Firewalls with Zero Trust Branch

Zscaler
07/14/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


We have around 1,000 locations, 130 factories and 30,000 employees. We looked at how we were working and we allowed our users to do nearly everything at home, but then when they came into the office we had a lot of complexity. So that's where we defined the idea to go to a full internet-based environment, which would imply removing firewalls and SD-WAN everywhere. AXA Nobel has already moved all remote users to the Zero Trust Access model, but that's across the globe. But we had zero complaints. Now we're working on moving all our manufacturing sites towards the Zero Trust Access model. Our transformation goals for the factories is all around productivity, how we can do more automation, the introduction of AI. And then next to that there's also a security component to make sure that the whole OT environment becomes safer than the way it is today. We have the specific challenge of the OT. Some systems are 30, 40 years old. You cannot just put agents on there. So that's where we introduced the Zscaler ZTB technology, which we're now deploying across 122 factories. Traditionally you connect networks to each other or devices to each other, so there's full access from any network, any device, to any other network and any other device. Now all communication will flow to a central switchboard, which can check and secure all communications. If you have a virus or a hacker in your computer, the switchboard will automatically close the connection and segment your device off, improving security. So the Zero Trust Bench not only allows for our devices to connect to the Zero Trust Cloud, even if they don't support the software, but it also allows for remote access to come back into the manufacturing sites. It allows us to micro-segment all the devices that bring a high level of risk. The biggest benefit, at least for the users, is the consistent global user experience that they have. Regardless of their location, the experience is always the same. As it's our goal to move the entire company to a cafe-style model, it takes about one hour for us to migrate all the services and implement the Zero Trust Bench. With this new architecture, you're able to eliminate hardware, routers, firewalls. You're also able to eliminate services or philosophies, for example, patching, lifecycling. We're very proud of the reduction in infrastructure costs that we've been able to achieve. We also took this as an opportunity to really look at the total architecture, where we eliminated quite a few of the management aspects of the network. We had a significant reduction there, and then even with adding some of the Zscaler technology to make sure that we could do all the technology components, there's still a very positive business case. What I'm really proud of is that we had a vision, we had an idea. Many people at the time said, you guys are totally crazy, and nobody's doing that, nobody's thinking about that, but we insisted on doing it. One of the things I asked our CISO to do is try and break it, and the good thing is that he could not find the devices, so basically it also proves that the security is much better with this new technology than the way it was with the firewalls. So no more SD-WAN, no more firewalls, and a significant uplift in terms of total security.

TL;DR

  • AkzoNobel eliminated firewalls and SD-WAN across its global network, migrating 30,000 employees to a fully internet-based zero trust architecture with zero user complaints during rollout.
  • Zscaler Zero Trust Branch is now being deployed across 122 factories to secure legacy OT systems — some 30–40 years old — that cannot support software agents.
  • The architecture microsegments high-risk devices, enables secure remote access into manufacturing sites, and automatically isolates compromised endpoints through a central cloud switchboard.
  • AkzoNobel achieved significant infrastructure cost reductions and a positive business case, with each factory site migrated in approximately one hour using a café-style connectivity model.

Summary

AkzoNobel, a global paints and coatings company operating across 145 countries, 1,000 locations, 130 factories, and 30,000 employees, shares how it replaced traditional firewalls and SD-WAN with a fully internet-based, zero trust architecture powered by Zscaler Zero Trust Branch (ZTB). After successfully migrating all remote users to a Zero Trust access model with zero complaints, the company is now extending that transformation to 122 manufacturing sites. The core challenge in OT environments — legacy systems up to 40 years old that cannot support software agents — is addressed by ZTB, which connects agentless devices to the Zero Trust cloud, enables secure remote access into factories, and microsegments high-risk devices. A central cloud-based switchboard inspects and controls all communications, automatically isolating compromised devices. The result is a consistent global user experience regardless of location, a dramatic reduction in infrastructure hardware and management overhead, and a positive business case even after adding Zscaler technology costs. AkzoNobel's CISO attempted to locate devices on the new network and could not — validating that the zero trust model delivers materially stronger security than the firewall-based approach it replaced.

Chapters

0:00 - AkzoNobel Global Scale Overview
0:22 - Decision to Go Internet-Based
0:44 - Factory Transformation Goals
1:05 - ZTB Deployment Across OT Environments
1:57 - User Experience and Cost Benefits
2:52 - Security Validation and Results

Key Quotes

0:36 "We had zero complaints."
1:01 "Some systems are 30, 40 years old. You cannot just put agents on there."
1:30 "If you have a virus or a hacker in your computer, the switchboard will automatically close the connection and segment your device off, improving security."
3:04 "One of the things I asked our CISO to do is try and break it, and the good thing is that he could not find the devices, so basically it also proves that the security is much better with this new technology than the way it was with the firewalls."
3:16 "So no more SD-WAN, no more firewalls, and a significant uplift in terms of total security."

FAQ

How does Zscaler Zero Trust Branch handle legacy OT devices that can't run software agents?

ZTB connects agentless devices to the Zero Trust cloud by routing all communications through a central cloud-based switchboard that inspects and secures traffic without requiring any software installed on the endpoint device itself.

What infrastructure did AkzoNobel eliminate by moving to Zero Trust Branch?

AkzoNobel eliminated physical routers, firewalls, and SD-WAN equipment, along with associated management tasks such as patching and hardware lifecycle management, resulting in significant infrastructure cost reductions.


Categories:
  • » Webinar Library » Zscaler
  • » Data Protection » Backup & Recovery
  • » Cybersecurity » Network Security
  • » Cybersecurity » Zero Trust
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Zero Trust
  • OT
  • IoT Security
  • SASE
  • SSE
  • Network Security
  • Customer Story
  • Data Protection
  • Zero Trust Architecture
  • OT
  • ICS Security
  • Network Modernization
  • Firewall Replacement
  • SD-WAN Elimination
  • Microsegmentation
  • Secure Remote Access
  • Manufacturing Cybersecurity
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Zscaler: AkzoNobel Replaces Firewalls with Zero Trust Branch

              XStreaminars (watch here)

              • Aug
                27

                Becoming Agent Ready with Cyera: Essential Strategies and Insights

                08/27/202601:00 PM ET
                • Sep
                  03

                  Verge.io: Can You Afford Your Next Storage Refresh?

                  09/03/202601:00 PM ET
                  More events

                  Industry Events (Sponsor Hosted)

                  • Aug
                    27

                    Summer of Satori: FunFoneFarm's Transformation of Fraud into Seamless Integration

                    08/27/202601:00 PM ET
                    More events

                    Upcoming Webinar Calendar

                    • 08/27/2026
                      01:00 PM
                      08/27/2026
                      Becoming Agent Ready with Cyera: Essential Strategies and Insights
                      https://www.truthinit.com/index.php/channel/2081/becoming-agent-ready-with-cyera-essential-strategies-and-insights/
                    • 08/27/2026
                      01:00 PM
                      08/27/2026
                      Summer of Satori: FunFoneFarm's Transformation of Fraud into Seamless Integration
                      https://www.truthinit.com/index.php/channel/2086/summer-of-satori-funfonefarms-transformation-of-fraud-into-seamless-integration/
                    • 09/02/2026
                      12:00 PM
                      09/02/2026
                      Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                      https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                    • 09/03/2026
                      01:00 PM
                      09/03/2026
                      Verge.io: Can You Afford Your Next Storage Refresh?
                      https://www.truthinit.com/index.php/channel/2082/verge-io-can-you-afford-your-next-storage-refresh/
                    • 09/30/2026
                      04:00 AM
                      09/30/2026
                      AI Command Center: Optimizing Visibility and Control in Your Operations
                      https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                    • 11/19/2026
                      01:00 PM
                      11/19/2026
                      360View: Govern, Secure & Recover Your Microsoft 365 Environment
                      https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                    Truth in IT
                    • Sponsor
                    • About Us
                    • Terms of Service
                    • Privacy Policy
                    • Contact Us
                    • Preference Management
                    Desktop version
                    Standard version