Zscaler

Zscaler Setup "Tunnel 2.0"

ZIA = Zscaler Internet Access (Direction: Laptop => Internet)

ZPA = Zscaler Private Access (Direction: Internet => Company-Server)

ZIA Information

https://help.zscaler.com/zscaler-client-connector/about-z-tunnel-1.0-z-tunnel-2.0

https://help.zscaler.com/zscaler-client-connector/best-practices-deploying-z-tunnel-2.0

avantec

https://www.avantec.ch/zscaler-client-connector-z-tunnel-2-0-vor-und-nach-version-3-8/

YouTube

ZIA - Basics ok
https://www.youtube.com/watch?v=ngo3sbZZ-v8

• as of minute 10: Application profile
• PAC File needed? Yes … (at least one …)
• Forwarding profile!
• DTLS Timeout ... Is this the reason for the slow connections? (we should try with TLS first ...) 
• Where do we allow all the other ports? Or do we need to bypass all of that?
• Bypasses ... https://help.zscaler.com/zscaler-client-connector/best-practices-adding-bypasses-z-tunnel-2.0
  
• APP Profile: https://community.zscaler.com/s/question/0D54u00009evnDhCAI/zscaler-tunnel-20-restrict-access-to-ports
• Was wollen wir überhaupt? Wenn wir alle ports weiter leiten, ist auch ein proxy möglich… oder sagen wir: soll zscaler einfach scannen?

ZPA (so, wrong for us)
https://www.youtube.com/watch?v=awGHbLxwdjY

#