Application Discovery Simplifies ZTNA Connector Onboarding—Your enterprise network can host many applications in its cloud or data center environment that the network security teams are unaware of. As a result, when you deploy a ZTNA Connector and start to add application targets, determining which applications to include can be difficult.

Private application target discovery solves this visibility challenge and simplifies application hosting by:

User-ID Across NAT lets your network distribute the User- or Device-ID mapping from mobile users to the NGFW, thus allowing the NGFW to enforce Security policy rules based on the mapping it has learned. This configuration ensures a consistent security posture across your mobile user deployment.

You can delete the Connector IP Blocks only after you delete all the ZTNA Connector objects such as connectors, applications, wildcards, and connector-groups on the tenant.