You can configure proxy objects using the IP address or FQDN of a third-party proxy service to which you want to forward the traffic using the Third-Party Proxy Chaining feature.

To configure a proxy:

1. Go to Infrastructure > Internet & SaaS > Network Policies > Proxies and Gateways page.
2. Select the Proxies tab.
3. Click Add Proxy. The Add Proxy window appears.
4. In the Add Proxy window:
   • Proxy Name: Enter a user-friendly name for the third-party proxy that you are defining.
   • IP Address/FQDN: Enter the IP address or the FQDN of the third-party proxy service.
   • Port: Enter the port number on which the third-party proxy service listens to the requests forwarded from Zscaler.
   • Root Certificate: (Optional) Select the root certificate used by the third-party proxy to perform SSL inspection. This root certificate is used by Zscaler to validate the SSL leaf certificates signed by the upstream proxy. The required root certificate appears in this drop-down list only if it is uploaded from the Infrastructure > Internet & SaaS > Network Policies > Root Certificates page. To learn more, see Adding Third-Party SSL Root Certificates.
   • Description: (Optional) Enter additional notes or information. The description cannot exceed 256 characters.
5. Click Save and activate the change.

You can configure up to eight proxy objects.