Your organization must configure your corporate firewall to allow for remote access: 

• If the Private Service Edges are deployed in the DMZ of your organization or behind the network firewall. To learn more, see Deploying Internet & SaaS Private Service Edge.
• If your organization uses PAC files to forward traffic from your internal network to the Private Service Edges.

To review firewall configuration requirements and cloud enforcement node ranges:

1. Go to https://config.zscaler.com/
2. In the Cloud drop-down menu, ensure your appropriate Zscaler cloud is selected (e.g., zscaler.net).
3. Review the Firewall Config Requirements and Cloud Enforcement Node Ranges sections.