Background
Sites represent the logical segmentation of the organization. Each site ought to contain at least 1 App Gateway that publishes resources from that site. This article explains the types of sites, how they are configured, and their relevance to the configuration of applications.
What Are Sites?
Sites have CIDRs (Classless Inter-Domain Routing) and DNSs (Domain Name System):
-
CIDRs represents IP addresses (e.g., 192.168.0.0/16), a network with a prefix of 16 bits that assigns individual addresses to devices on the network.
-
DNSs (Domain Name System) are hierarchical naming systems that resolve that name to the IP address.
In each site, Administrators can configure the CIDRs that the site publishes. This setting will be used every time a new application is added to determine the relevant site.
Administrators can also configure DNS suffixes and these are resolved through the site when the Safous Agent user tries to resolve them.
Configuration of Sites
-
Configuration of sites can be found in the Admin Portal, under Settings > ZTNA > Configuration > Sites.
-
To add new sites, click on the orange “New Site” button.
-
Enter the Site name, the Domain names (e.g., http://www.example.com ), and the CIDR (IP) addresses. You can enter as many domains and/or CIDR names as you wish for one site.
-
Once the sites are configured, the page will look like this:
- Note that the App Gateway Count for the new site is 0.
This is because you have not installed an App Gateway on that site yet. If you specify the site's name during the installation an App Gateway, the App Gateway will be assigned to that site and the App Gateway Count will increase. - Whenever you attempt to install an App Gateway using a name that isn't already included in the Sites list, a new site will be automatically created and added to the list.
Why Sites Matter?
For multiple site deployment, configuring sites can provide several benefits:
-
Determines the site of the application automatically when you add applications in the admin portal. After you enter an internal network address or domain in the application that belongs to the CIDR or domain configured on the sites page, the correct site is automatically chosen by Safous. This means that you would not need to manually select the correct site when creating an application.
-
Sites are used for redirecting to the correct site when accessing an application that is published on all sites with a dynamic internal address (personal desktop, for example).
-
Administrators have the flexibility to designate multiple sites for applications that are published by some, but not all, of the App Gateways.
Logs
The actions of adding, deleting, or editing sites are logged in the Admin Portal (Analytics > ZTNA > Audit Logs)