Find below some sample Questions and answers.

Q1- What is Zscaler

Ans -

Zscaler provides the technology and expertise to guide and secure organizations on their digital transformation journeys. It help them move away from appliance-based network and security infrastructure models, replacing traditional inbound and outbound gateways with modern cloud-delivered services built for today’s business

Q2 - How many deployment models available -

Ans - We can deploy Zscaler using two methods -

1- IPSEC VPN

2- GRE Tunnel

1- IPSEC VPN -

The configuration of a VPN connection to the “Zscaler Cloud Security Platform”. The use of IPSec allows the use of dynamic WAN addresses on the client side

2- GRE Tunnel-

You can self provision your GRE tunnels to connect to the Zscaler service via the ZIA Admin Portal

Q3 - Difference between Tunnel 1.0 and Tunnel 2.0

Ans -

Tunnel 1.0 -

Z-Tunnel 1.0 forwards traffic to the Zscaler cloud via CONNECT requests, much like a traditional proxy. Version 1.0 sends all proxy-aware traffic or port 80/443 traffic to the Zscaler service, depending the forwarding profile configuration

Tunnel 2.0 -

Z-Tunnel 2.0 has a tunneling architecture that uses DTLS or TLS to send packets to the Zscaler service. Because of this, Z-Tunnel 2.0 is capable of sending all ports and protocols.

Use Tunnel 2.0 with below points-

1. Deploy Zscaler Client Connector 2.0.1 (and later) to your users.
2. Select Z-Tunnel 2.0 when configuring a forwarding profile with Tunnel mode and the packet filter driver is enabled.
3. Configure bypasses for Z-Tunnel 2.0 in Zscaler Client Connector profile. To learn more, see Best Practices for Adding Bypasses for Z-Tunnel 2.0.