Creating ZTNA tag groups

You must enable the visibility of this feature in Policy & Objects before it can be configured. To toggle feature visibility, go to Policy & Objects > Tools > Feature Visibility, and add or remove a checkmark for the corresponding feature.

Once a ZTNA tag group has been configured, you can select the object in a proxy policy with the ZTNA proxy type. See Create a new proxy policy.

To create a ZTNA Tag Group:

1. Go to Object Configurations > Firewall Objects > ZTNA Tag, and click Create New.
   The Create New ZTNA Tag Group window opens.
   
2. Enter a name for the group.
3. Select a ZTNA Tag type from one of the following:
   • EMS
   • Geographic IP
4. Select Members to add to the ZTNA tag group.
   
   • When configuring an EMS tag group, members are configured in Policy & Objects > Object Configurations > Firewall Objects > ZTNA Tag with a IP or MAC object type. See Viewing ZTNA tags.
   • When configuring a Geographic IP tag group, members are configured in Policy & Objects > Object Configurations > Firewall Objects > Addresses as a Firewall Address with the Type set as Geography. See Creating ZTNA geographic IP objects.
5. Click OK to save the group.