.. _site:

.. role:: raw-html(raw)
    :format: html

Site Management
===============

This is the management page for configuring SASE. Through Site Management, you can create Service Edges (|product_name| Gateway, Hub) in the Cloud and configure Branches to connect to them.

Site Types
----------

Sites can be created as either **Hub type** or **Branch type**.

Hub Type
~~~~~~~~~

A Hub site acts as an intermediary for **IPsec tunnels** with Branch sites and serves as a network access point.

- If there are multiple Hub sites, you can configure tunnels between the Hub sites.

Branch Type
~~~~~~~~~~~~

The Branch type only routes traffic for the Branch site's network.

- When selecting a Parent Hub site, an IPsec tunnel can be configured to the Hub.

Site Connection Methods
~~~~~~~~~~~~~~~~~~~~~~~~

- You can connect to the Hub by running IPsec on the |product_name| Gateway.
- Integration between Hub sites in |product_name| and dedicated IPsec devices (e.g., Cisco, Fortinet) is possible.
- If direct routing between the Hub and Branch is possible, you can connect via routing.

How to Configure a Site
------------------------

#. Click **System -> Site**
#. Click **Select Action -> Create**
#. Enter basic information:

   - Enter the **Site Name**
   - Set the type (Hub, Branch)
   - Configure the infrastructure (Cloud, On-Premises)
      - For **Cloud**, you must configure **Cloud Provider**, **Region**, and **VPC ID**
      - Use a previously created Cloud Provider. If none exists, refer to :ref:`How to create a Cloud Provider <cloud-provider>` to create one.
      - Set the **Region** that matches the location.
      - Select the **VPC ID** to configure the site. When you select a **VPC ID**, the **Network Address** is automatically set to the VPC range.
      - For **On-premises**, manually set the IP range of the site in **Network Address**.
   - Select options to be used per site. [ |product_name|-IPsec, |product_name|-Client, Routing, Collector, URL Filter ]

Site Options
------------

The available site options are |product_name|-Client, |product_name|-IPsec, Routing, Collector, URL Filter.

.. toctree::
   :maxdepth: 1 

   collector
   ztna_client
   ztna_ipsec