Zscaler Source IP Anchoring - subscription license (1 year) - additional 1 GB capacity per month
Mfg # ZS-SIPA-EXTRA-GB
CDW # 7104714
Know your gear
Forwarding policies for Source IP Anchoring allows organizations to steer selective traffic processed by ZIA to the internal or external destination servers of their choice. This ensures that Zscaler secures the traffic and that the source IP address is of the organization's choice. The application traffic is forwarded through the intranet to the internal destination servers and through the Internet to the external destination servers.
Some cloud applications or web services restrict access based on the source IP address of the traffic. These applications require that your traffic originates from a pre-registered unique IP address, which usually belongs to your organization. These applications deny access to user traffic that originate from other IP addresses within or outside the organization, such as the IP address of a Zscaler data center, and that is not pre-registered with the service. Some other applications allow access only from specific countries where Zscaler might not have a presence. For example, certain government sites hosted in a country may be accessible only from within that country. Because Zscaler does not have a data center within that country, the users in that country may use a data center from the nearest country and do not have access to certain federal sites.
In such scenarios, the organizations bypass some traffic from the Zscaler service and create a security gap. Alternatively, organizations could use Private Service Edge (formerly Private ZEN or PZEN) or Virtual Service Edge (formerly Virtual ZEN or VZEN) to overcome this issue.
By using Forwarding policies for Source IP Anchoring, you can control the source IP address of the traffic that is forwarded to destination servers, without bypassing the Zscaler security service.
Source IP Anchoring uses forwarding policies and Zscaler Private Access (ZPA) App Connectors. You can configure these granular policies on the ZIA Admin Portal to forward the selected traffic to ZPA through ZIA threat and data protection engines. These policies use ZIA and ZPA to selectively forward the application traffic to the appropriate destination servers via the App Connectors of your choice.
Some cloud applications or web services restrict access based on the source IP address of the traffic. These applications require that your traffic originates from a pre-registered unique IP address, which usually belongs to your organization. These applications deny access to user traffic that originate from other IP addresses within or outside the organization, such as the IP address of a Zscaler data center, and that is not pre-registered with the service. Some other applications allow access only from specific countries where Zscaler might not have a presence. For example, certain government sites hosted in a country may be accessible only from within that country. Because Zscaler does not have a data center within that country, the users in that country may use a data center from the nearest country and do not have access to certain federal sites.
In such scenarios, the organizations bypass some traffic from the Zscaler service and create a security gap. Alternatively, organizations could use Private Service Edge (formerly Private ZEN or PZEN) or Virtual Service Edge (formerly Virtual ZEN or VZEN) to overcome this issue.
By using Forwarding policies for Source IP Anchoring, you can control the source IP address of the traffic that is forwarded to destination servers, without bypassing the Zscaler security service.
Source IP Anchoring uses forwarding policies and Zscaler Private Access (ZPA) App Connectors. You can configure these granular policies on the ZIA Admin Portal to forward the selected traffic to ZPA through ZIA threat and data protection engines. These policies use ZIA and ZPA to selectively forward the application traffic to the appropriate destination servers via the App Connectors of your choice.