Configure NGFW Connector Group and Application Targets

1. In Strata Cloud Manager, select ConfigurationZTNA ConnectorConnector Groups and select Create Connector Group.

   1. Enter a Name and choose NGFW Connector as the Group Type.
   2. Click Create.
2. Select NGFW Connectors and select Create NGFW Connector.

   1. Enter a Name and choose your Connector Group.
   2. Under NGFW Connector, choose your NGFW's serial number from the list of available connectors.
   3. Click Create.
3. Monitor the ZTNA Connector status to confirm tunnels are established and your NGFW is connected.
4. (Optional) Add Wildcard Targets to automatically onboard private applications that match a wildcard domain pattern.

   1. Select Wildcard Targets and choose Create Wildcard Target.
   2. Enter a unique Name for the target.
   3. 3.Choose the Connector Group of type FQDN/Wildcard to associate with this target.
   4. 3.Choose the Connector Group of type FQDN/Wildcard to associate with this target.
      The interface adds the asterisk prefix automatically. Do not specify wildcards of the form*.*, example.*.com, or *.com.
   5. Choose the Protocol (tcp, udp, or both).
   6. Specify the Port for the application.
      Enter a single port, multiple ports separated by commas, or a range using dashes. If you select both TCP and UDP, enter ports separately in TCP Port and UDP Port. Do not add spaces after commas.
   7. Choose a Probing Type of icmp ping or none.
      Selecting tcp ping acts the same as none for FQDN and wildcard targets. Select icmp ping to probe the FQDN's resolved IP address — if a response is received,the app is marked Up. Select none to disable probing and always mark the app as Up.
   8. Select Activated and select Create.
5. (Optional) Add FQDN Targets to provide access to specific private applications identified by a single fully qualified domain name.

   Select FQDN Targets and Create FQDN Target. Follow the same steps as for wildcard targets,entering a single FQDN instead of a wildcard pattern. Applications automatically discovered through a parent wildcard target also appear here — when users access an app that matches the wildcard (for example, app1.example.com for the wildcard *.example.com), ZTNA Connector automatically on boards that app as an FQDN target.