China and ZIA PAC

Trying to get to a Zscaler PAC File that will work in china with Office 365, anyone got any good pointers to what to create?

One question that comes to mind should all traffic go via a ZScaler DC and none go direct to help with giving better connectivity?

We use the same PAC file in China that we do everywhere else and send all traffic via the Public Service Edge.

We do use a seperate sub-cloud to ensure that China users only ever use China based Service Edge.

@GordonWright ok are you publishing the subcloud only to china users or too all? - if only china users are you using the country variable?

Everyone uses the same PAC file with this config:

/* Set the proxy variable for China Road Warriors */
if (shExpMatch(country,“China”)) {
proxy = “PROXY ${gateway.china-sub-cloud.zscloud.net_fx}:80; PROXY ${secondary.gateway.china-sub-cloud.zscloud.net_fx}:80;”}

1 Like