Configuring Zscaler Private Access for ZTNA

When to Use

• When replacing traditional VPN concentrators with application-level zero trust access
• When providing remote users secure access to internal applications without network-level connectivity
• When implementing least-privilege access where users only see authorized applications
• When needing to make internal applications invisible to unauthorized users and the internet
• When integrating ZTNA with existing SASE architecture using Zscaler Internet Access (ZIA)

Do not use for applications requiring raw UDP access (ZPA primarily supports TCP), for providing full network-level access equivalent to site-to-site VPN (use ZPA AppProtection or branch connector instead), or when the organization requires on-premises-only access control without cloud dependency.

Prerequisites