Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Handbook

Configuring a ZTNA Profile

The ZTNA Profile is the ZTNA policy used to enforce access control to Layer 7 HTTPS and TCPS virtual servers. ZTNA profiles consist of one or more ZTNA rule that determine the Source IP and ZTNA tags that are allowed access, and the resulting action to take.

After you have created a ZTNA profile, you can reference the ZTNA profile in Layer 7 HTTPS and TCPS virtual server Security configurations.

Before you begin:
To create and configure a ZTNA Profile:
  1. Go to Network Security > ZTNA.
  2. Click the ZTNA Profile tab.
  3. Click Create New to display the configuration editor.
  4. Configure the following:

    Parameter

    Description

    Name Specify the ZTNA Profile name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces.
    Log Status Enable/disable logging.
    Comments Optionally, enter comments about the ZTNA Profile.
  5. Click Save.
  6. Under Rule List, click Create New to display the configuration editor.
  7. Configure the following:

    Parameter

    Description

    Source IP

    Select the source IPs.

    ZTNA Tags Select the ZTNA tags.
    Action

    Select either of the following actions:

    • Pass

    • Deny

    Deny is the default action.

    Comments Optionally, enter comments about the ZTNA rule.

  8. Click Save.

Apply the Security ZTNA profile to a Layer 7 HTTPS or TCPS virtual server to activate ZTNA for server load balancing. Ensure the corresponding Client SSL profile is enabled for client certificate verification. For details, see Configuring virtual servers and Configuring client SSL profiles.

Configuring a ZTNA Profile

The ZTNA Profile is the ZTNA policy used to enforce access control to Layer 7 HTTPS and TCPS virtual servers. ZTNA profiles consist of one or more ZTNA rule that determine the Source IP and ZTNA tags that are allowed access, and the resulting action to take.

After you have created a ZTNA profile, you can reference the ZTNA profile in Layer 7 HTTPS and TCPS virtual server Security configurations.

Before you begin:
To create and configure a ZTNA Profile:
  1. Go to Network Security > ZTNA.
  2. Click the ZTNA Profile tab.
  3. Click Create New to display the configuration editor.
  4. Configure the following:

    Parameter

    Description

    Name Specify the ZTNA Profile name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces.
    Log Status Enable/disable logging.
    Comments Optionally, enter comments about the ZTNA Profile.
  5. Click Save.
  6. Under Rule List, click Create New to display the configuration editor.
  7. Configure the following:

    Parameter

    Description

    Source IP

    Select the source IPs.

    ZTNA Tags Select the ZTNA tags.
    Action

    Select either of the following actions:

    • Pass

    • Deny

    Deny is the default action.

    Comments Optionally, enter comments about the ZTNA rule.

  8. Click Save.

Apply the Security ZTNA profile to a Layer 7 HTTPS or TCPS virtual server to activate ZTNA for server load balancing. Ensure the corresponding Client SSL profile is enabled for client certificate verification. For details, see Configuring virtual servers and Configuring client SSL profiles.