Configuring |product_name| Gateway Options
=============================================

.. note:: This section assumes you have already installed a |product_name| Gateway.  For |product_name| Gateway installation instructions refer to the link below.

See :doc:`/install/installing-ztna-gateway`

Enable |product_name| Client Option
------------------------------------------

See :ref:`enable-ztna-client-in-cloud-site`

|product_name| Client Split Tunneling Option
'''''''''''''''''''''''''''''''''''''''''''''''''''
The network address entered into the Access Network text box (ex 192.168.100.0/24) will be routed through
the |product_name| Gateway while all other traffic will be routed out the local default gateway. 

Default setting: If nothing is entered, then all traffic (0.0.0.0/0) will be routed through the |product_name| Gateway.  

|product_name| Client Isolation Option
'''''''''''''''''''''''''''''''''''''''
When enabled, connected |product_name| clients with different IP addresses or different usernames will not be able to communicate.
|product_name| clients with different IP addresses but the same username will be able to communicate.

Default setting: Off.  All |product_name| connected clients can communicate with each other.

Enable |product_name| Netflow Agent Option
--------------------------------------------------

See :doc:`/monitoring/network-traffic`

Enable Cloud Collector Option
--------------------------------

Ensure steps 10 and 11 in the link below have been completed for the appropriate Hub site.

See :ref:`create-cloud-site`

Enable Multi-Factor (MFA, 2FA, 2-step) Authentication for |product_name| Connection Manager
---------------------------------------------------------------------------------------------------

To enable MFA for clients connecting through the |product_name| Gateway, refer to the link below.

See :doc:`/authentication/enabling-authentication/mfagateway`