Application segmentation is a core feature of Zscaler Private Access (ZPA), which underpins Zscaler Private AppProtection. It works on the principle of least-privileged access by creating secure segments of one, connecting an authenticated user directly to a specific application without ever placing them on the network. Access policies are defined for each application segment, granting users granular control over which specific applications they can access based on identity, device posture, and other contextual factors. This prevents lateral movement and unauthorized access.

A. Threat Intelligence integration: This feature enhances security by blocking known threats but does not provide the primary mechanism for granular user-to-application access control.

C. Role-based access control: RBAC is a method used to define the policies that govern application segments, but application segmentation is the architectural feature that provides the control.

D. User behavior analysis: This is used to detect anomalous activity and potential threats, rather than being the primary feature for defining and enforcing granular access policies.

1. Zscaler, Inc. "What is Zscaler Private Access (ZPA)?" Zscaler. Accessed 2024. "ZPA is built on a foundation of application segmentation, not network segmentation. Users are never placed on the network..."

2. Zscaler, Inc. "Zscaler Private Access Datasheet." Zscaler. Accessed 2024. "Enable application segmentation to limit user access to specific private applications, reducing the attack surface and preventing lateral threat movement."

3. Zscaler, Inc. "About AppProtection." Zscaler Help Portal. Accessed 2024. This section describes how AppProtection builds upon the core ZPA architecture, which is based on application segmentation.