Zscaler VNFs Specifications

Licensing

Bring Your Own License (BYOL) products require a valid license. You are responsible for purchasing and managing your own licenses from Zscaler. To purchase a software license, contact your Zscaler sales representative or partners.

Support

Zscaler support is available for BYOL licenses. Contact your Zscaler sales representative or partner to purchase a license and support contract.

Use Cases and Deployment Options

Network Edge Platform supports two Zscaler devices: the App Connector (APPC) and the Private Services Edge (PSE).

Zscaler has two specific technical requirements when deployed on Network Edge. The first is that the Zscaler Virtual Device are limited to a single interface and the second is that both Zscaler Virtual Devices require Internet access for proper function. This allows the Virtual Devices to properly register with the Zscaler service.

For the December release, the initial use case targets a joint Zscaler and Equinix customer that has co-location in an Equinix IBX. The expectation is that devices will route via the co-located devices and get Internet access via the co-location as well.

For detailed description of the deployment see the Zscaler Deployment Guide.

Resilient Deployment Best Practices

The recommended best practice for customers that require resiliency is to deploy at least two PSEs and APPCs in the same Network Edge metro. This will ensure that there is no single point of failure with the Zscaler service in Network Edge. Additionally, the virtual devices should be deployed in separate compute planes using the Network Edge Single Device Anti-Affinity option. (See Architecting for Resiliency.)

In order to connect the Virtual Devices to the customer’s Colocation, an EVP-LAN is required. (See EVP-LAN Support for Network Edge.) For maximum resiliency, the recommended best practice is to create redundant EVP-LAN networks to redundant Colocation ports.

Zscaler App Connector (Self-Configured)

The Zscaler App Connector requires a valid license. The Subscription and Support license is necessary to provision the device and is available during the Create Virtual Device workflow.

  Small
CPU 4 Cores
Memory 8 GB
Software Package Standard

Virtual Data Interfaces Supported (Default/Max)

1
System Reserved Interfaces 1
Available License Type BYOL
Access Methods SSH (CLI)
Image Version See Available Image Versions
Deployment Options Single

For information about creating a Zscaler App Connector device, see Create a Zscaler App Connector.

Zscaler Private Service Edge (Self-Configured)

  Small Medium Large
CPU 4 Cores 8 Cores 16 Cores
Memory 10 GB 18 GB 34 GB
Software Package Standard

Virtual Data Interfaces Supported (Default/Max)

1
System Reserved Interfaces 1
Available License Type BYOL
Access Methods SSH (CLI)
Image Version See Available Image Versions
Deployment Options Single

For information about creating a Zscaler Private Service Edge device, see Create a Zscaler Private Service Edge.