To locate the hostnames and IP addresses of the ZIA Public Service Edges for your IPSec VPN tunnels:

1. Go to config.zscaler.com/<Zscaler Cloud Name>/cenr.

You can find the name of your cloud in the URL your admins use to log into the Zscaler service. For example, if an organization logs into admin.zscalertwo.net, then that organization's cloud name is zscalertwo.net. So, you should go to config.zscaler.com/zscalertwo.net/cenr. To learn more, see What is my cloud name for ZIA?

2. Go to Cloud Enforcement Node Ranges.
3. Under VPN Host Name, find the two data centers closest to the organization's location. Choose one as the destination for your primary IPSec VPN tunnel and the other as the destination for your backup IPSec VPN tunnel.

For example, if you're located in London, scroll to the EMEA section of the table to find lon3-vpn.zscalertwo.net (London) as your primary destination and amsterdam2-vpn.zscalertwo.net (Amsterdam) as your backup destination.

See image.

4. If you need the IP addresses of the ZIA Public Service Edges, resolve the hostnames of your primary and backup destinations.