Quick Overview

The Apps section in zAccess allows administrators to define individual applications that endpoints can access. Each app entry is configured using either a web URL or an IP address and is paired with a designated gateway IP through which traffic should be routed. This is foundational to policy creation and enforcement.

How to Use This Feature in the UI

1. Navigate to the zAccess interface and select Policy Configuration > Apps.
2. Click on ADD APP.
3. Enter the application details:
   • App Name: A user-friendly label for identification.
   • IP Address or URL: The destination for which access is being configured.
   • Gateway IP: The local gateway through which traffic to this app should route.
4. Click Save to register the app configuration.
5. Repeat as necessary for other apps, or group them later using App Groups.

Concepts & Use Cases

• Access Control Granularity: Define access to specific applications or services rather than allowing unrestricted internet access.
• Gateway-Aware Routing: Direct application traffic through designated paths (gateways), optimizing performance or enforcing security boundaries.
• Application Whitelisting: Combine with policies and rulesets to implement app-specific allowlists.
• Compliance Control: Restrict access to only approved enterprise services, especially for remote or mobile users.

Troubleshooting & FAQs

• Why is my app not reachable?
  Ensure the gateway IP is correctly configured and reachable from the endpoint’s assigned subnet.
• Can I assign the same app to multiple gateways?
  Yes, but you’ll need to define separate entries for each app-gateway pair or group them accordingly for conditional routing.
• What if the app uses a dynamic IP?
  Use a domain name instead of an IP address to account for DNS-based resolution.
• Is there logging for app access?
  Yes, app access attempts can be tracked via endpoint sessions and event logs.
• Does the gateway need to host the application?
  No, the gateway acts as a route/path enforcement point, not a host for the application itself.