Zscaler Zero Trust Device Segmentation has two components:

• Device Segmentation gateways: Provide forwarding and network enforcement points deployed in the customer environments. Depending on the throughput and scale requirements, there are different physical and virtual options available.
• Device Segmentation Admin Portal: A centralized Software as a Service (SaaS) management portal used to manage Device Segmentation gateways.

There are three ways to deploy Device Segmentation:

• Deploying on a VMware Virtual Machine
• Deploying on a Zscaler ZT800
• Deploying on a Zscaler ZTS4000 or ZTS8000