Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Zscaler: AkzoNobel Replaces Firewalls with Zero Trust Branch

Zscaler
07/14/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


We have around 1,000 locations, 130 factories and 30,000 employees. We looked at how we were working and we allowed our users to do nearly everything at home, but then when they came into the office we had a lot of complexity. So that's where we defined the idea to go to a full internet-based environment, which would imply removing firewalls and SD-WAN everywhere. AXA Nobel has already moved all remote users to the Zero Trust Access model, but that's across the globe. But we had zero complaints. Now we're working on moving all our manufacturing sites towards the Zero Trust Access model. Our transformation goals for the factories is all around productivity, how we can do more automation, the introduction of AI. And then next to that there's also a security component to make sure that the whole OT environment becomes safer than the way it is today. We have the specific challenge of the OT. Some systems are 30, 40 years old. You cannot just put agents on there. So that's where we introduced the Zscaler ZTB technology, which we're now deploying across 122 factories. Traditionally you connect networks to each other or devices to each other, so there's full access from any network, any device, to any other network and any other device. Now all communication will flow to a central switchboard, which can check and secure all communications. If you have a virus or a hacker in your computer, the switchboard will automatically close the connection and segment your device off, improving security. So the Zero Trust Bench not only allows for our devices to connect to the Zero Trust Cloud, even if they don't support the software, but it also allows for remote access to come back into the manufacturing sites. It allows us to micro-segment all the devices that bring a high level of risk. The biggest benefit, at least for the users, is the consistent global user experience that they have. Regardless of their location, the experience is always the same. As it's our goal to move the entire company to a cafe-style model, it takes about one hour for us to migrate all the services and implement the Zero Trust Bench. With this new architecture, you're able to eliminate hardware, routers, firewalls. You're also able to eliminate services or philosophies, for example, patching, lifecycling. We're very proud of the reduction in infrastructure costs that we've been able to achieve. We also took this as an opportunity to really look at the total architecture, where we eliminated quite a few of the management aspects of the network. We had a significant reduction there, and then even with adding some of the Zscaler technology to make sure that we could do all the technology components, there's still a very positive business case. What I'm really proud of is that we had a vision, we had an idea. Many people at the time said, you guys are totally crazy, and nobody's doing that, nobody's thinking about that, but we insisted on doing it. One of the things I asked our CISO to do is try and break it, and the good thing is that he could not find the devices, so basically it also proves that the security is much better with this new technology than the way it was with the firewalls. So no more SD-WAN, no more firewalls, and a significant uplift in terms of total security.

TL;DR

  • AkzoNobel eliminated firewalls and SD-WAN across its global network, migrating 30,000 employees to a fully internet-based zero trust architecture with zero user complaints during rollout.
  • Zscaler Zero Trust Branch is now being deployed across 122 factories to secure legacy OT systems — some 30–40 years old — that cannot support software agents.
  • The architecture microsegments high-risk devices, enables secure remote access into manufacturing sites, and automatically isolates compromised endpoints through a central cloud switchboard.
  • AkzoNobel achieved significant infrastructure cost reductions and a positive business case, with each factory site migrated in approximately one hour using a café-style connectivity model.

Summary

AkzoNobel, a global paints and coatings company operating across 145 countries, 1,000 locations, 130 factories, and 30,000 employees, shares how it replaced traditional firewalls and SD-WAN with a fully internet-based, zero trust architecture powered by Zscaler Zero Trust Branch (ZTB). After successfully migrating all remote users to a Zero Trust access model with zero complaints, the company is now extending that transformation to 122 manufacturing sites. The core challenge in OT environments — legacy systems up to 40 years old that cannot support software agents — is addressed by ZTB, which connects agentless devices to the Zero Trust cloud, enables secure remote access into factories, and microsegments high-risk devices. A central cloud-based switchboard inspects and controls all communications, automatically isolating compromised devices. The result is a consistent global user experience regardless of location, a dramatic reduction in infrastructure hardware and management overhead, and a positive business case even after adding Zscaler technology costs. AkzoNobel's CISO attempted to locate devices on the new network and could not — validating that the zero trust model delivers materially stronger security than the firewall-based approach it replaced.

Chapters

0:00 - AkzoNobel Global Scale Overview
0:22 - Decision to Go Internet-Based
0:44 - Factory Transformation Goals
1:05 - ZTB Deployment Across OT Environments
1:57 - User Experience and Cost Benefits
2:52 - Security Validation and Results

Key Quotes

0:36 "We had zero complaints."
1:01 "Some systems are 30, 40 years old. You cannot just put agents on there."
1:30 "If you have a virus or a hacker in your computer, the switchboard will automatically close the connection and segment your device off, improving security."
3:04 "One of the things I asked our CISO to do is try and break it, and the good thing is that he could not find the devices, so basically it also proves that the security is much better with this new technology than the way it was with the firewalls."
3:16 "So no more SD-WAN, no more firewalls, and a significant uplift in terms of total security."

FAQ

How does Zscaler Zero Trust Branch handle legacy OT devices that can't run software agents?

ZTB connects agentless devices to the Zero Trust cloud by routing all communications through a central cloud-based switchboard that inspects and secures traffic without requiring any software installed on the endpoint device itself.

What infrastructure did AkzoNobel eliminate by moving to Zero Trust Branch?

AkzoNobel eliminated physical routers, firewalls, and SD-WAN equipment, along with associated management tasks such as patching and hardware lifecycle management, resulting in significant infrastructure cost reductions.


Categories:
  • » Webinar Library » Zscaler
  • » Data Protection » Backup & Recovery
  • » Cybersecurity » Network Security
  • » Cybersecurity » Zero Trust
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Zero Trust
  • OT
  • IoT Security
  • SASE
  • SSE
  • Network Security
  • Customer Story
  • Data Protection
  • Zero Trust Architecture
  • OT
  • ICS Security
  • Network Modernization
  • Firewall Replacement
  • SD-WAN Elimination
  • Microsegmentation
  • Secure Remote Access
  • Manufacturing Cybersecurity
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Zscaler: AkzoNobel Replaces Firewalls with Zero Trust Branch

              XStreaminars (watch here)

              • Jul
                28

                Illumio + Netskope: Zero Trust in the Age of AI Autonomy

                07/28/202601:00 PM ET
                • Jul
                  29

                  Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

                  07/29/202601:00 PM ET
                  More events

                  Industry Events (watch there)

                  • Jul
                    14

                    Crafting a Championship-Caliber Security Team for Lasting Defense

                    07/14/202601:00 PM ET
                    • Jul
                      14

                      Understanding the Crucial Role of Context in Safeguarding AI-Accessible Data

                      07/14/202602:00 PM ET
                      • Jul
                        22

                        Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue

                        07/22/202601:00 PM ET
                        More events

                        Upcoming Webinar Calendar

                        • 07/14/2026
                          01:00 PM
                          07/14/2026
                          Crafting a Championship-Caliber Security Team for Lasting Defense
                          https://www.truthinit.com/index.php/channel/2025/crafting-a-championship-caliber-security-team-for-lasting-defense/
                        • 07/14/2026
                          02:00 PM
                          07/14/2026
                          Understanding the Crucial Role of Context in Safeguarding AI-Accessible Data
                          https://www.truthinit.com/index.php/channel/2037/understanding-the-crucial-role-of-context-in-safeguarding-ai-accessible-data/
                        • 07/21/2026
                          04:00 AM
                          07/21/2026
                          Strategies for Managing AI Governance and Securing App-to-LLM API Traffic
                          https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
                        • 07/22/2026
                          06:30 AM
                          07/22/2026
                          Insights and Strategies in Data Protection and Privacy Management
                          https://www.truthinit.com/index.php/channel/2000/insights-and-strategies-in-data-protection-and-privacy-management/
                        • 07/22/2026
                          01:00 PM
                          07/22/2026
                          Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue
                          https://www.truthinit.com/index.php/channel/2029/insights-from-attackers-during-the-fifa-world-cup-a-human-dialogue/
                        • 07/28/2026
                          01:00 PM
                          07/28/2026
                          Illumio + Netskope: Zero Trust in the Age of AI Autonomy
                          https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
                        • 07/29/2026
                          04:00 AM
                          07/29/2026
                          Real-Time Strategies for Safeguarding Against Prompt Injections
                          https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
                        • 07/29/2026
                          01:00 PM
                          07/29/2026
                          Ask Your Cloud Anything: Unlocking Governance Silos in your Environments
                          https://www.truthinit.com/index.php/channel/2048/ask-your-cloud-anything-unlocking-governance-silos-in-your-environments/
                        • 08/19/2026
                          12:00 PM
                          08/19/2026
                          Becoming Agent Ready: Insights from Cyera's Expertise
                          https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-from-cyeras-expertise/
                        • 09/02/2026
                          12:00 PM
                          09/02/2026
                          Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                          https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                        • 09/30/2026
                          04:00 AM
                          09/30/2026
                          AI Command Center: Optimizing Visibility and Control in Your Operations
                          https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version