Which tunnel mode supports both web and non-web applications, ensuring comprehensive security for modern enterprises?

Z-Tunnel 2.0 (TLS-over-TCP) carried by the Zscaler Client Connector forwards all ports and protocols—both web (HTTP/HTTPS) and non-web (e.g., SSH, VoIP)—enabling unified inspection and zero trust access for modern enterprises.

A. IPSec tunnels are router-based and limited to site traffic, not client devices.

B. Z-Tunnel 1.0 handles only web (80/443) traffic from Client Connector.

C. GRE tunnels are site-to-cloud and cannot encapsulate client-initiated non-web traffic with per-user identity.

1. Zscaler Client Connector Help, “Z-Tunnel 2.0 Architecture and Traffic Flows,” §Overview, para 1.

2. Zscaler Zero Trust Exchange Tech Brief, “Comparing Z-Tunnel 1.0 and 2.0,” Table 3, p. 7.

3. Zscaler Internet Access Admin Guide, “GRE and IPSec Tunnels,” pp. 30-31.