Zscaler ZEN Non Meraki VPN Setup

[Pveunen]

Currently setting up non meraki vpns to connect to zscalers public ZEN service (zscaler enforcement nodes).
All internet traffic will be routed thru the non meraki vpn to zscaler datacenters.
We setup the non meraki vpn's with a primary and secondary zen nodes so if one went down it would failover to the secondary.

1. It didn't work as planned because if 2 non meraki vpn's went down (Primary and secondary) it was suppose to default to the Meraki Wan 1/ 2 Primary internet connection. - Ended up being a bug so we upgraded to version 19.x.x on all or MX devices.

Does anybody have any insight or advice for setting up zscaler ZEN and Meraki ?

[Mloraditch]

I've used it at a client and it was as simple as setting up the third party vpn with a 0.0.0.0/0 remote subnet listing.

You seem to have resolved the one problem you were having, is there something specific you are looking for insight on?

This wasn't available when I used it, but you may want to look at VPN exclusions for certain known traffic to optimize performance: https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-t... 

[RWelch]

Zscaler Internet Access (ZIA) Integration