Locations identify the various networks from which your organization sends its Internet traffic. When an organization forwards its traffic to the Zscaler service through a GRE or IPsec tunnel, Zscaler provisions your organization's IP addresses, which you then add as locations in the admin portal. You can either add locations individually in the admin portal or import a CSV file with your locations.

When the Zscaler service receives traffic, it checks whether the traffic is from a known location (a location that is configured on the admin portal), or from an unknown location (road warrior traffic). If the traffic is from a known location, the service processes the traffic based on the location settings. For example, the service checks whether the location has authentication enabled, or whether it has SSL inspection enabled, and proceeds accordingly. It also applies the location policies that you configure and logs Internet activity by location.