Zero Trust Navigator

Field notes on Zscaler, Zero Trust and secure access architectures.

A technical blog about navigating modern security, cloud access, identity, architecture and troubleshooting with curiosity, humility and a practical mindset.

What this site is about

Zero Trust Navigator is my personal technical space for writing about Zero Trust, Zscaler, secure access, cloud security, identity, architecture and real-world troubleshooting.

The goal is simple: collect field notes, practical reflections and technical lessons learned while navigating modern security architectures. Some posts will be conceptual, some will be operational, and some will probably remind us that the problem was DNS all along.

Cybersecurity: After the Traffic Is Allowed

Permission is where the other sections end and this one begins. Notes on the controls that act once the traffic is already allowed: malware and advanced threat protection, sandboxing, what evidence each control can actually work from, how exceptions travel further than they look, and what happens to a file nobody has seen before.

Explore cybersecurity notes →

Zero Trust Foundations

Concepts, principles and mental models behind Zero Trust Networking, identity-based access and security architecture.

Explore foundations →

Zscaler Internet Access

Notes on secure internet access, policy design, inspection, data protection, visibility and practical adoption patterns.

Explore ZIA notes →

Zscaler Private Access

Thoughts on private application access, identity-based segmentation, app connectors, policy design and secure access modernization.

Explore ZPA notes →

Connecting to the Zero Trust Exchange

Notes on Client Connector, App Connectors, tunnels, forwarding profiles, DNS, posture and the components that turn Zero Trust into real traffic.

Explore connectivity notes →