authentication exceptions identified counted as one user license. exceptions. the agency will need to determine a create a policy for the sub-site and have DET route the traffic into the tunnel. Network Access: Setup Item Description Notes Date Complete Identify Test Identify subnets the Subnets agency would like to use for testing Zscaler and coordinate with DET. PAC Files PAC files would be Zscaler PAC File Best Practices: used for mobile Keep them lean users. Commonly evaluated sections at the top. (makes it faster) Only do a DNS lookup once and then save it to a variable Make efficient like coding Fail Open / Fail Close Fail open/close can design for the be determined by agency subnet. The agency should identify to DET how they want their subnets handled. Applications Accessing the Internet: Setup Item Description Notes Date Complete Define servers / Enterprise security server policy: applications accessing the internet Exception process to the enterprise DET hosted servers DET has created an security server policy on accessing the are routed via unauthenticated internet: Zscaler policy that is applied to all DET hosted servers that are acceptable to have access to the
authentication exceptions. exceptions identified the agency will need to determine a create a policy for the sub-site and have DET route the traffic into the tunnel. counted as one user license. Network Access: Setup Item Description Notes Date Complete Identify Test Subnets Identify subnets the agency would like to use for testing Zscaler and coordinate with DET. PAC Files PAC files would be used for mobile users. Zscaler PAC File Best Practices: Keep them lean Commonly evaluated sections at the top. (makes it faster) Only do a DNS lookup once and then save it to a variable Make efficient like coding Fail Open / Fail Close design for the agency Fail open/close can be determined by subnet. The agency should identify to DET how they want their subnets handled. Applications Accessing the Internet: Setup Item Description Notes Date Complete Define servers / applications accessing the internet Enterprise security server policy: DET hosted servers are routed via Zscaler DET has created an unauthenticated policy that is applied to all DET hosted servers that are acceptable to have access to the Exception process to the enterprise security server policy on accessing the internet:
Web%20Security%20Agency%20Setup%20Guide%20Template.docx