Firewall and DNS
Firewall rules, IPS, and DNS control.
FedRAMP High connection
This page calls the ZIA API at zsapi.zscalerten.net. The cloud service API key stays in Parameter Store. The administrator password is used to open a session and is not stored on this host.
- Cloud
- zscalerten.net
- API host
- zsapi.zscalerten.net
- API key
- /disa-conops-demo/zia/api-key
- Source address
- NAT Elastic IP Loading
- Web server
- Checking
- Connector
- Checking the connector.
URL category lookup
| Order | Name | Action | State | Categories | Actions |
|---|
New URL filtering rule
URLs are saved in a custom category for this rule. Choose categories when the rule should match the Zscaler category database. Admin rank is required; 7 is the default. Changes stay pending until you activate them.
This creates the cloud side of a site-to-site IPSec tunnel: a VPN credential, then a location that uses it. An IP identity is registered as a static IP first. The pre-shared key is sent to ZIA and is not stored on this host.
VPN credentials
| Type | Identity | Location | Comments |
|---|
Locations
| Name | Country | Profile | VPN |
|---|
Other areas
SSL inspection
Inspection rules and the certificate posture for this demo.
Administrators
Admin roles and the audit record of changes made from this console.