Secure Private Access (ZPA)
About App Connector Groups
Zscaler recommends deploying App Connectors in groups for high availability and horizontal scaling. You can create new App Connector groups whenever you add a new App Connector using a new provisioning key. Every App Connector belongs to a specific App Connector group, and every App Connector group should always be associated with at least one provisioning key and one Server group to serve any application. App Connector Groups must be associated with applications that the App Connector can access (i.e., only assign App Connectors to applications that the App Connector is capable of reaching). ZPA selects the closest App Connector given the location of the user and the App Connector-to-application latency.
You do not need to create a new App Connector group every time you add an App Connector. If the App Connector group to which you want to add a new App Connector already exists, you can assign the App Connector to that group. To learn more, see Configuring App Connectors.
App Connector groups provide the following benefits and enable you to:
- Deploy App Connectors in your tenant using provisioning keys.
- Group App Connectors per region or functional area; each App Connector must belong to a single group.
- Configure the automated update schedule to an off-hours maintenance window in a region.
- Configure the preferred local version profile for associated App Connectors and the App Connector’s location used in application path selection.
- Enable the necessary interface (IPv4, IPv6, or IPv4 and IPv6) using the DNS Resolution Option.
About the App Connector Groups Page
On the App Connector Groups page (Configuration & Control > Private Infrastucture > App Connector Management > App Connector Groups), you can do the following:
- View a list of applied filters available from the current and previous user sessions. Applied filters must be saved to the user session first before they can be viewed. Use the drop-down menu to select the applied filters to view. To learn more, see Using Tables.
- Hide the filters on the page by clicking Hide Filters. Click Show Filters to show the filters.
- View the App Connector groups as a table.
- View the App Connector groups in a map.
- Refresh the App Connector page to reflect the most current information.
- Select a Version Profile of the App Connector group. To learn more, see Configuring a Version Profile.
- Filter the information that appears in the table. By default, no filters are applied.
- Expand all of the rows in the table to see more information about each App Connector group.
- View a list of all App Connector groups that are configured for your organization. For each App Connector group, you can see:
- Name: The name of the App Connector group.
- Status: Indicates whether the App Connector group is enabled or disabled.
- Version Profile: The profile used to specify an App Connector build for the group.
- Next Periodic Software Update: The date and time of the next periodic software update for all of the App Connectors within the group.
If you accessed the App Connector Groups page from the Log Receivers page, then you only see groups with App Connectors that are set up for log streaming. The group also has a Log Streaming Service icon next to the name within the table.
- Modify the columns displayed in the table.
- Edit a configured App Connector group.
- Delete an App Connector group.
If an App Connector Group is configured using Zscaler Deception, then the edit and delete options are unavailable.
- Display more rows or a different page of the table.
- Open the Zscaler Help Browser and view Help Portal articles without leaving the ZPA Admin Portal.
- Go to the App Connectors page to add new App Connectors or manage existing App Connectors.
- Go to the App Connector Provisioning Keys page to manage your App Connector provisioning keys.
