Quick Overview

Gateways in zAccess define the logical routing points through which endpoint traffic is processed and directed. Each gateway is typically tied to one or more Subnet Groups, allowing application requests from endpoint devices to be securely routed through the proper network path. Gateways serve as policy enforcement points, traffic routers, and optional breakout nodes.

How to Use This Feature in the UI

1. Navigate to Network Configuration > Gateways in the zAccess UI.
2. Click ADD GATEWAY.
3. Provide a Gateway Name (e.g., “Atlanta Gateway” or “Remote Office Router”).
4. Optionally, enter metadata such as:
   • WAN/LAN IPs
   • Device Type or Model
   • Gateway Group (if applicable)
5. Select one or more Subnet Groups to associate with this gateway.
6. Click Save to finalize the configuration.

Concepts & Use Cases

• Traffic Routing: Gateways determine how application traffic from endpoints is routed across internal or external networks.
• Policy Enforcement Points: All policies, once applied via rulesets, are enforced at the gateway level.
• Geographic Optimization: Deploy gateways near end users to reduce latency and optimize application performance.
• Breakout Control: Use specific gateways to allow or restrict internet or SaaS breakout traffic.
• High Availability: Use multiple gateways in a group to provide redundancy for critical access zones.

Troubleshooting & FAQs

• Why is a gateway not routing traffic as expected?
  Check that the gateway is online and correctly associated with the relevant subnet and policy configuration. Also confirm the endpoint is in the expected IP range.
• Can multiple gateways share the same subnet?
  Yes, but care must be taken to avoid routing conflicts. This setup is useful in load-balanced or HA configurations.
• How do I know if a gateway is being used?
  View Endpoint Sessions to see the assigned gateway per session or check Event Logs for connection routing activity.
• Can I update a gateway without reassigning all subnet groups?
  Yes. You can edit gateway details directly and modify subnet assignments as needed without deleting existing relationships.