You're reading from Zscaler Cloud Security Essentials Discover how to securely embrace cloud efficiency, intelligence, and agility with Zscaler

Product type Paperback

Published in Jun 2021

Publisher Packt

ISBN-13 9781800567986

Length 236 pages

Edition 1st Edition

Tools

Zscaler

Concepts

Cloud Security

Author (1):

Devarasetty

View More author details

Table of Contents (15) Chapters

Preface

1. Section 1: Zscaler for Modern Enterprise Internet Security

2. Chapter 1: Security for the Modern Enterprise with Zscaler FREE CHAPTER

3. Chapter 2: Understanding the Modular Zscaler Architecture

4. Chapter 3: Delving into ZIA Policy Features

5. Chapter 4: Understanding Traffic Forwarding and User Authentication Options

6. Chapter 5: Architecting and Implementing Your ZIA Solution

7. Chapter 6: Troubleshooting and Optimizing Your ZIA Solution

8. Section 2: Zero-Trust Network Access (ZTNA) for the Modern Enterprise

9. Chapter 7: Introducing ZTNA with Zscaler Private Access (ZPA)

10. Chapter 8: Exploring the ZPA Admin Portal and Basic Configuration

11. Chapter 9: Using ZPA to Provide Secure Application Access

12. Chapter 10: Architecting and Troubleshooting Your ZPA Solution

13. Assessments

14. Other Books You May Enjoy

Understanding traffic forwarding

There are different ways to send end user web traffic to Zscaler. The recommended and well-supported options are using GRE or IPsec tunnels, PAC files, and the ZCC application. The proxy chaining option is not recommended for production or long-term use. Other limited or deprecated choices include using port forwarding and secure agents.

The recommended choices for corporate locations are GRE, IPsec, PAC files, or the ZCC application. For mobile users, only PAC files and the ZCC app options are available. We will only discuss the recommended options here. First, we'll look at the GRE tunnel forwarding option.

GRE tunnel forwarding

Generic Routing Encapsulation (GRE) is a tunneling protocol that can be used to encapsulate data packets using one protocol inside the packets of another protocol. GRE enables us to use protocols not usually supported by a certain network because now, those packets are put inside other packets that use supported...