How does public service edge distinguish traffic from multiple customers?

Zscaler public service edge is a machine cluster shared among all customers.

How does the edge distinguish the traffic from the customer-A and customer-B?

Because customer-A and B have different policies, it is required to know where the traffic is coming from, I guess.

Best regards

ZS distinguishes the traffic based on either the user domain (, and/or the public IP address where the traffic is coming from. In case of GRE/IPSec, the public IP (location) should be enough to detect the company. For remote users, they have to authenticate and based on the user domain ZS detects the company.

1 Like