Zscaler recommends deploying Private Service Edges for Private Applications in groups for high availability and horizontal scaling. You can create new Private Service Edge groups for Private Applications whenever you add a new Private Service Edge for Private Applications using a new provisioning key. Every Private Service Edge belongs to a specific Private Service Edge group.

You do not need to create a new Private Service Edge group every time you add a Private Service Edge. Instead, you can assign the Private Service Edge to a Private Service Edge group that already exists. To learn more, see Configuring Private Service Edges for Private Applications.

About the Private Service Edge Groups Page

On the Private Service Edge Groups page (Infrastructure > Private Applications > Components > Service Edge Groups), you can do the following:

1. Filter the information that appears in the table. By default, no filters are applied.
2. View a list of all Private Service Edge groups that are configured for your organization. For each Private Service Edge group, you can see:
   • Name: The name of the Private Service Edge group. Expand a Private Service Edge group in the table to see the following for that specific Private Service Edge group:
     • Persist Local Version Profile: Indicates whether a Private Service Edge Group is enabled or disabled to persist the local Version Profile.
     • Location: The location where the Private Service Edge group, which the Private Service Edge belongs to, is set up.
     • Location Coordinates: The latitude and longitude of the Private Service Edge group location.
     • Publicly Accessible: Choose if the Private Service Edge group with specific trusted networks mapping is also available publicly for all users outside of these trusted networks. It is important to ensure the Private Service Edge is reachable over a public IP address if you need remote users to be able to connect to it.
     • Client Connector Trusted Networks: Your organization's trusted networks that are mapped to the Private Service Edge group. This is used to prioritize Private Service Edges matching the given trusted network when users connect from those trusted networks. To learn more, see About Trusted Networks.
     • Alternative Cloud Domain: The alternative cloud domain that can override the default cloud domain for the Private Service Edge Group it is assigned to.
     • Private Service Edge Provisioning Keys: The key used to identify the Private Service Edge group to which a Private Service Edge must deploy.
     • Private Service Edges: List of deployed Private Service Edges that are included in the group.
     • Description: The description of the Private Service Edge group if available.
     • Disaster Recovery: Indicates the Private Service Edge group is enabled for disaster recovery.
     • Public Service Edge Proximity Override: Indicates whether to allow this Private Service Edge group within a specified distance from the user to be prioritized over a closer Public Service Edge.
   • Status: Indicates whether the Private Service Edge group is enabled or disabled.
   • Version Profile: Indicates the Version Profile of the Private Service Edge group.
   • Next Periodic Software Update: The date and time of the next periodic software update for all of the Private Service Edges within the group.
3. Edit a configured Private Service Edge group for Private Applications.
4. Delete a Private Service Edge group.
5. Select a Version Profile of the Private Service Edge group. To learn more, see Configuring a Version Profile.
6. Expand all of the rows in the table to see more information about each Private Service Edgegroup.
7. View a table of all the Private Service Edge groups.
8. View a map of all the Private Service Edge groups.