What do I need to do to access azure resources via ZPA?

Question

Hi team

This may be a simple question. But I need help with your guys expertise.

I want to be able to access the Azure resources deployed in Azure subnet (via RDP or SSH). Also be able to join the machines in Azure to corporate domain. Please suggest.

Is this possible without setting up the site-to-site VPN since I have ZPA connectors in Azure.

I have done the following:

1. Deployed ZPA-Private Access connector on the Azure VM.

What do I need to do?

1. Pre-requisites
2. Post work in both Azure and on-site.

Thanks!

Answer 1

1. ZPA Configuration:

• Ensure you have a ZPA subscription and have the necessary permissions to configure and manage it.

1. Azure Resource Configuration:
   • Identify the specific Azure resources you want to access via ZPA. This could be Azure Virtual Machines, Web Apps, or other services.

Connect Azure to ZPA:

• In the ZPA admin portal, you'll need to create a private service connector for Azure. This connector establishes a secure connection between ZPA and your Azure resources.
• Follow the instructions provided by Zscaler to set up the connector. You might need to provide Azure credentials, subscription details, and other relevant information.

Application Configuration in ZPA:

• Create an application profile in ZPA for each Azure resource you want to access.
• Configure the application profile with appropriate settings, including how users will authenticate, access policies, and other related configurations.

User Authentication:

• Define the authentication method for users accessing Azure resources through ZPA. This could be single sign-on (SSO) using SAML or other methods.

Access Policies:

• Define access policies that determine who can access the Azure resources via ZPA. You can specify user groups, roles, or other criteria.

Testing and Verification:

• Once the configurations are set up, perform thorough testing to ensure that users can access the Azure resources securely via ZPA.

Rollout and Training:

• Communicate the availability of access to Azure resources via ZPA to your users.
• Provide any necessary training or documentation on how to access and use resources through ZPA.

1. Monitoring and Maintenance:
   • Regularly monitor the ZPA environment to ensure that access remains secure and that configurations are up to date.
     • Maintain and update access policies as needed.