Zscaler Zero Trust Branch - Branch Connector and Airgap

Zscaler's Zero Trust Branch (ZTB) platform offers a transformative approach to enterprise security, fundamentally shifting away from legacy network architectures toward a true zero trust posture. Instead of relying on perimeter-based defenses, ZTB enforces least-privilege access and advanced micro-segmentation, ensuring each endpoint is isolated within its own /32 subnet. This design creates a network of one for every device, dramatically reducing the attack surface and preventing lateral movement, which is crucial for containing breaches and limiting the impact of internal threats.

In this lab, you will get the opportunity to explore ZTB and how it can help secure your environment while still allowing for scalability and granular control.  You'll get to see and experience Zscaler Internet Access (ZIA), Zscaler Private Access, and Privileged Remote Access (PRA) in action.  Now let's get started!

The purpose of this lab is to show you how Zscaler Zero Trust Branch works with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA) and Zero Trust Branch Connector..  We'll touch on Zscaler's contractor privileged remote access capabilities, branch to branch communications and configurations, as well as Airgap.

The lab environment is a read-only however you can view the following:

• Zscaler's Zero Trust Branch configurations (DC A & B)
• Zscaler Internet Access
• Zscaler Private Access
• Zscaler Privileged Remote Access (PRA)

Hardware - configured in Site A & B:
 

• 5 Windows 2022 Servers
• 1 Windows 2019 Server
• 2 Linux Servers
• 2 Windows 11 Users
• 2 Traffic Jams
• 4 Zscaler Zero Trust Branches
• 1 Vyos router

Software:

• Zscaler Zero Trust Branch
• Zscaler Internet Access
• Zscaler Private Access