icon_zsdk.svg
Zscaler SDK for Mobile Apps

Ranges & Limitations

This article lists the ranges and limitations for policies, fields, and other features of Zscaler SDK for Mobile Apps (ZSDK). All values are per organization unless noted otherwise.

If you need to increase the maximum limit for your organization, send a request to Zscaler Support.

Administration

The following table shows the ranges and limitations for administration settings:

FeatureLimit
Admins1,000 admins
Roles100 roles

App Connector Management

The following table shows the ranges and limitations for App Connector management:

FeatureLimit
App Connectors100 App Connectors
App Connector Groups100 groups
App Connector Provisioning Keys100 keys

Application Management

The following table shows the ranges and limitations for application management:

FeatureLimit
Applications

6,000 applications

2,000 applications per application segment

The 2,000 applications per application segment limit applies to both IP addresses and domains. Wildcards also fall in the same category (i.e., every entry for the application in the ZSDK Admin Portal counts as one).

4,000 Source IP Anchoring-enabled domains or IP addresses

DNS resolution can resolve a single domain (such as example.com or host.example.com) to no more than 200 IP addresses on the App Connector.

The ZSDK cloud can only handle up to 100 TXT records for any domain that it looks up. The DNS TXT records are ignored if the lookup surpasses 100 DNS TXT records.

Application Segments

6,000 segments

240 Source IP Anchoring-enabled segments

DNS Suffixes50 suffixes
Segment Groups200 groups
Servers10,000 servers
Server Groups1,000 groups

Authentication

The following table shows the ranges and limitations for authentication configuration:

FeatureLimit
IdP Configurations10 configurations
SAML Attributes100 attributes

Certificate Management

The following table shows the ranges and limitations for certificate management:

FeatureLimit
(web server) Certificates1,000 certificates
Enrollment Certificates1,000 certificates

Organization

The following table shows the organization ranges and limitations for organization management:

FeatureLimit
Admin User Password100 characters

Access Policies

The following table shows the ranges and limitations for access policy management:

FeatureLimit
Access Policy

2,000 policy rules

1,000 application segments per policy rule

48 App Connector groups per policy rule

The 48 App Connector groups per policy rule limit applies even if All App Connector groups for the application is selected when configuring an access policy rule.

Related Articles
What Is Zscaler SDK for Mobile Apps?Understanding ZSDK Cloud ArchitectureStep-by-Step Configuration Guide for ZSDKWhat Is My Cloud Name for ZSDK?Ranges & Limitations