https://letslab.dev/Tech Blog is a personal blog of study notes on zero trust networking: Zscaler ZIA, ZPA and ZDX, and preparing for the ZDTE certification.en https://letslab.dev/notes/identity-before-connectivity-how-zpa-works/https://letslab.dev/notes/identity-before-connectivity-how-zpa-works/Wed, 11 Nov 2026 00:00:00 GMTA VPN puts the user on the network and then filters. Zscaler Private Access checks who is asking first, and only then joins two outbound connections for one application.zpazero-trust https://letslab.dev/notes/five-pac-file-bugs-that-fail-quietly/https://letslab.dev/notes/five-pac-file-bugs-that-fail-quietly/Wed, 11 Nov 2026 00:00:00 GMTA PAC file is a small JavaScript function with no error messages. These five mistakes produce the wrong routing without any warning, and each has a quick check.pactroubleshooting https://letslab.dev/notes/choosing-a-zia-forwarding-method/https://letslab.dev/notes/choosing-a-zia-forwarding-method/Wed, 11 Nov 2026 00:00:00 GMTFour questions that decide how a site or a user should send traffic to Zscaler Internet Access, and the mistakes each method invites.ziaarchitecture https://letslab.dev/notes/a-30-day-plan-for-the-zdte-exam/https://letslab.dev/notes/a-30-day-plan-for-the-zdte-exam/Wed, 11 Nov 2026 00:00:00 GMTHow to split thirty days across the six exam domains so that study time follows the published weights, with a mock exam at the start, the middle and the end.zdtestudy-plan