Deployment Workflows
As previously mentioned, Aruba Central can help automate connections with the ZIA service by orchestrating the entire workflow, from creation and definition of “locations” in Zscaler to the establisment of IPsec tunnels to the appropriate Service Edges. SD-Branch Gateways (not Microbranch) also support manual deployment workflows, both using IPsec as well as GRE tunnels.
The most popular deployment model, and the one that’s recommended for most situations is the orchestrated mode, as it drastically reduces the administrative overhead of implementing and maintaining the combined SASE Architecture. Nevertheless, this guide describes how to integrate the Microbanch and SD-branch solutions with ZIA using both Orchestrated as well as Manual workflows.