The primary goal of Zone Selection is to enable customers to selectively provide access to specialized infrastructure, such as China Elite POPs or Special Access POPs, based on the user identity such as Users Groups or Organization Units (OUs). Administrators can ensure that users requiring high-performance or specific regional access (like China Elite) are automatically routed through the appropriate POPs.
Prerequisite
-
Supported minimum Client version: 135.0.0
-
Applicable to tenants with China Elite subscription.
Enable Zone Selection
To activate Zone Selection, navigate to Settings > Security Cloud Platform >Netskope Client > Client Configuration > Tunnel Settings > Advanced Options and enable Zone Selection. To learn more, view Zone Selection.
Implementation Details
The feature allows specific zone selections with Client Configuration profiles:
-
China Elite: Returns an ordered list of Elite POPs followed by Premium POPs.
-
China Elite Extended: Returns China Elite Extended POPs (for example, HKG2), followed by Elite POPs and then Premium POPs.
China Elite Extended: Supported Use Cases and Guidelines
China Elite Extended is available to China Elite users for two use cases:
-
Supporting traveling executives or VIP users who need consistent access to sites and apps outside China while in mainland China.
-
Supporting marketing teams that need access to social media sites to manage ad campaigns.
China Elite Extended is intended for steering specific user groups to solve specific problems, not for routing an entire user base through the service. Netskope enforces this scope to ensure China Elite Extended is provided only to the user groups that need it.