Legacy firewalls, typically deployed in a centralized, hub-and-spoke architecture, create a significant performance bottleneck. All user traffic, including traffic destined for the cloud, must be backhauled to a data center for security inspection. This "hairpinning" or "tromboning" of traffic introduces latency, which degrades application performance and harms the user experience. As organizations adopt more cloud-based applications (SaaS, IaaS), this performance degradation becomes a major business risk, directly impacting employee productivity and operational agility. The intensive processing required for tasks like SSL/TLS inspection further strains these hardware-based appliances, often forcing a trade-off between security and performance.

B. Reduced management: Legacy firewalls require increased management, involving complex policy administration, patching, and hardware maintenance across multiple physical locations.

C. Low costs: The total cost of ownership (TCO) for legacy firewalls is high, encompassing hardware refresh cycles, expensive maintenance contracts, and bandwidth costs for backhauling traffic.

D. Low licensing support: Major firewall vendors typically offer robust (though costly) support contracts; the primary business risk is the architectural limitation, not the support for licenses.

1. Zscaler Official Documentation

"What is a Firewall?": "Traditional firewalls

especially next-generation firewalls (NGFWs)

can become a bottleneck

slowing down network traffic and hindering productivity. This is because all traffic must pass through the firewall for inspection

which can be a slow process

especially for encrypted traffic." (Found under the section "What are the limitations of a firewall?")

2. Zscaler Whitepaper

"The 5 Tenets of Zero Trust": "The hub-and-spoke network architecture

with its centralized security stack

was designed for a world where applications resided in the data center. When you backhaul cloud-bound traffic to your data center for security

you introduce latency

degrade the user experience

and increase costs." (Page 4

Section: "The Old Way: Castle-and-Moat Security")

3. Zscaler Solution Brief

"Transform Your Network Security with Zscaler": "Legacy network security

built around the corporate data center

is no longer adequate. Backhauling traffic from branch offices to a central security stack adds latency and impairs the performance of cloud applications." (Page 1

Introduction)