Phasing out App Group Policy in ZPA


(Kunal) #1

This note is to highlight that App Group Policies in ZPA are being phased out. This change in behavior will be executed in 3 steps. The goal is to ensure minimal impact to existing customers as well as prevent the scope from exploding as new ZPA accounts get provisioned. Timelines for phases as well as considerations for existing and new customers are listed below:

Phase 1:

Admin UI will not save updates to existing App Group Policies or configuration for new App Group Policies. When an Admin attempts to save an App Group Policy config, a message will be displayed indicating, App Group policies are being phased out and new policies should be managed via Access Policy under Global Policies.

Considerations for Existing Customer:
Existing App Group policies will continue to be displayed and enforced. Changes to existing App Group policies will not save. If a customer needs to add a rule to an existing App Group policy, Zscaler recommends creating a new rule in Access Policy. In the event a customer requires a rule to be deleted from an existing App Group policy, they should open a Support Case.

Considerations for New Customer:
Zscaler recommends configuring Application or Application Group policies in Access Policy.

Timeline: Week of Oct 23, 2017 (this week)
Release Note: https://help.zscaler.com/zpa/release-notes-october-23-2017

Phase 2:

Considerations for Existing Customer:
For each existing App Group Policy, Admin UI will have a knob to migrate configuration in App Group policy to rules in Access Policy. When a customer executes this step, rules in the existing App Group Policy will be added at the bottom of the existing rules in Access Policy. Customer will be responsible for executing the migration and verifying the updated configuration in Access Policy.

Considerations for New Customer:
Zscaler recommends configuring Application or Application Group policies in Access Policy.

Timeline: Dec 2017.

Phase 3:

Considerations for Existing Customer:
The goal is to no longer have App Group policies in configuration beyond June 2018. Existing App Group Policies as well as the option to configure App Group Policies will no longer be displayed in Admin UI.

Considerations for New Customer:
Option to configure App Group Policies will no longer be displayed in Admin UI.

Timeline: June 2018

Let us know if you have questions or need additional information.

Thanks,
Kunal Shah
Sr. Product Manager
Zscaler Inc.