When you purchase Zscaler you automatically get unlimited Internet access for your business. But because you use the Internet as a last mile to get to the Zscaler Cloud, you end up paying for the Internet twice.
Because the customer uses their own Internet to connect to Zscaler and then Zscaler's Internet to get legitimate traffic to the WWW, they are essentially paying for the Internet twice. Once to their Internet provider and once to Zscaler as an inclusive part of their security service.
No matter what your network architecture, your Internet break-outs will always route to the closest Zscaler enforcement node. This includes MPLS, hybrid (MPLS+Internet), SD-WAN or no WAN (Zero Trust).
Not all traffic goes to Zscaler as SD-WAN traffic or private domain Cloud services may bypass Zscaler.
Not all traffic goes to Zscaler as SD-WAN traffic or private domain Cloud services may bypass Zscaler.
When considering Z-Connect or peering with Zscaler, confirm what IP transit is required for Internet traffic that may bypass Zscaler. This traffic can be made available in Z-Connect or must be purchased through an IP transit provider.
|
Purchase Z-Connect from a partner
Z-Connect is a dedicated L3 service that zero rates all Internet traffic to Zscaler POP. If the Zscaler primary POP fails, it will route all traffic to the next POP regardless of destination. Z-Connect is available at Teraco and Xneelo (Previously Hetzner). |
Peer with Zscaler via NAP-Africa
Customers with an ASN can peer with Zscaler via NAPAfrica or JINX at Teraco. Customers will need to peer at both POP locations for H/A. If that is not possible, customers can consider Z-Connect which is a full L3 service blended with peering. |
Peer with Zscaler via Xneelo
Customers with an ASN can peer with Zscaler via Xneelo or JINX at Xneelo. Customers will need to peer at both POP locations for H/A. If that is not possible, customers can consider Z-Connect which is a full L3 service blended with peering. |
