icon-zia.svg
Secure Internet and SaaS Access (ZIA)

Understanding Sublocations

Sublocations enable an organization to create new locations that reference IP addresses that are encapsulated within a GRE or IPSec tunnel, or that are passed to the Zscaler service through X-Forwarded-For (XFF) headers.

For example, an organization can define one sublocation for its corporate network and another sublocation for its guest network, even if their traffic goes through the same GRE or IPSec tunnel. The organization can then use these sublocations to do the following:

  • Implement different policies based on IP addresses.
  • Enforce authentication on the internal corporate network, while disabling it for the guest network.
  • Enforce bandwidth control for sublocations while ensuring that unused bandwidth remains available at the parent location.
  • Provide reporting information for different internal networks or offices when they share the same egress IP address.

Key considerations while using sublocations:

  • Sublocations cannot have overlapping IP addresses within a location.
  • Sublocations can reference IP address ranges (e.g., 10.10.20.2-10.10.20.250).
  • After you add a sublocation, the Zscaler service automatically creates the other sublocation on the Locations page. This other sublocation is created, by default, for IP addresses that are sent to the cloud from the location that is not already defined in the sublocation. You can rename the other sublocation if desired.

    If the Enable IPv6 option is enabled for the location, the Zscaler service automatically creates the other6 sublocation in addition to the other sublocation. You can rename the other6 sublocation if desired.

  • You can use a previously deleted sublocation name when you create a new sublocation, but you cannot use a deleted name when you edit an existing one. To learn more, see Naming Locations & Sublocations.
  • Although IP addresses within a location cannot overlap, the same IP address can exist in multiple locations.

You can add sublocations individually or import multiple locations and sublocations using a CSV file.

On the Locations page, when you click the sublocations number within the table, the sublocations for the location appear. For sublocation lists, you can view up to 100 sublocations on a page.

Related Articles
About LocationsConfiguring LocationsUnderstanding SublocationsConfiguring Sub-LocationsConfiguring Multiple Locations and Sub-LocationsDownloading Location and Sub-Location Information to a CSV FileImporting Location and Sub-Location Information from a CSV FileConfiguring Dedicated Proxy PortsConfiguring a Location Without a Static Public IP AddressAbout Location GroupsConfiguring Manual Location GroupsConfiguring Dynamic Location GroupsConfiguring Azure Virtual WAN Locations