---
title: Setup VPN tunnels from Ubiquiti to Zscaler
description: "Ubiquiti UniFi - VPN Zscaler: Guide for IPSec Site-to-Site, ideal for IoT/OT and non-agent traffic. More security via SSE, policies and failover"
image: https://rheintec.io/hubfs/Ubiquiti-Logo.jpg
---

[Skip to content](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#main-content)

[![Rheintec logo](https://rheintec.io/hubfs/website_assets/logo/logo-white.svg "Rheintec logo")](https://rheintec.io/home?hsLang=en)

- [ KMU ](https://kmu.rheintec.io/de-ch/it-fuer-kmus)
- [Enterprise](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
  
  Show submenu for Enterprise 
  
    - [Consulting](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
      
      Show submenu for Consulting 
      
          - [ IT Security Consulting ](https://rheintec.io/en/consulting/security/it-security-consulting)
          - [ Cyber Security Review ](https://rheintec.io/en/consulting/cybersecurity-review)
          - [ Governance, Risk & Compliance Consulting ](https://rheintec.io/en/consulting/compliance-and-governance)
    - [Zscaler](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
      
      Show submenu for Zscaler 
      
          - [ Zscaler Architecture Consulting ](https://rheintec.io/en/consulting/zscaler/architecture-consulting)
          - [ Zscaler Health Checks ](https://rheintec.io/en/consulting/zscaler/healthchecks)
          - [ Zscaler Automation ](https://rheintec.io/en/consulting/zscaler/automation)
          - [ Zscaler Proof of Concepts ](https://rheintec.io/en/consulting/zscaler/proof-of-concept)
          - [ Z-Automate ](https://rheintec.io/en/zscaler-automation-tool)
    - [ Solutions ](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#services)
      
      Show submenu for Solutions 
      
          - [ Bring Your Own Device (BYOD) ](https://rheintec.io/en/solutions/zscaler-remote-browser-access)
          - [ CNAPP ](https://rheintec.io/en/managed-services/enterprises/wiz)
          - [ Secure Access Service Edge (SASE) ](https://rheintec.io/en/solutions/secure-access-service-edge)
          - [ Secure Service Edge ](https://rheintec.io/en/managed-services/enterprises/zscaler-sse)
          - [ Zscaler Data Security ](https://rheintec.io/en/solutions/zscaler-data-security)
          - [ SD-WAN & WAN-Edge ](https://rheintec.io/en/managed-services/enterprises/ubiquitiy-wan-edge)
          - [ Z-Automate ](https://rheintec.io/en/zscaler-automation-tool)
- [Managed Services](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
  
  Show submenu for Managed Services 
  
    - [ Managed Security Services ](https://rheintec.io/en/managed-security-services)
    - [ Small & Medium Companies (5-250) ](https://rheintec.io/managed-services/small-medium-companies-smb)
      
      Show submenu for Small & Medium Companies (5-250) 
      
          - [ Zscaler 4 Small Businesses ](https://rheintec.io/en/managed-services/small-companies/zscaler-sse-4-small-businesses)
          - [ CrowdStrike XDR 4 Small Businesses ](https://rheintec.io/en/en/managed-services/small-companies/crowdstrike-xdr-4-small-businesses)
          - [ Mimecast 4 Small Businesses ](https://rheintec.io/de/mimecast-for-kmu)
          - [ Proofpoint 4 Small Businesses ](https://rheintec.io/en/rheintec-proofpoint-mail-sicherheit-f%C3%BCr-kmu-kleinunternehmen)
          - [ Small Business Secure ](https://rheintec.io/en/managed-services/small-companies/small-business-secure)
          - [ Small Business Complete ](https://rheintec.io/en/managed-services/small-companies/small-business-complete)
          - [ Medium Business Complete
 ](https://rheintec.io/en/managed-services/medium-companies/medium-business-complete)
    - [ Enterprises (250+) ](https://rheintec.io/managed-services/enterprise)
      
      Show submenu for Enterprises (250+) 
      
          - [ Wiz CNAPP ](https://rheintec.io/en/managed-services/enterprises/wiz)
          - [ Zscaler SSE ](https://rheintec.io/en/managed-services/enterprises/zscaler-sse)
          - [ Zscaler PSE as a Service ](https://rheintec.io/en/managed-services/enterprises/zscaler-pse)
          - [ CrowdStrike XDR ](https://rheintec.io/en/managed-services/enterprises/crowdstrike-xdr)
          - [ Mimecast Email Security ](https://rheintec.io/en/mimecast-for-enterprise)
          - [ Mimecast DMARC Monitoring ](https://rheintec.io/en/managed-services/enterprises/mimecast-dmarc)
          - [ Proofpoint Email Security ](https://rheintec.io/en/managed-services/enterprises/proofpoint-emailsecurity)
          - [ Cloudflare WAF ](https://rheintec.io/en/managed-services/enterprises/cloudflare-waf)
          - [ Cloudflare Zero Trust ](https://rheintec.io/en/cloudflare-sse-zero-trust-cloud-proxy)
          - [ Cloudflare DNS ](https://rheintec.io/en/managed-services/enterprises/cloudflare-dns)
          - [ Check Point Datacenter and Cloud Firewall ](https://rheintec.io/en/managed-services/enterprises/checkpointdatacenter)
          - [ Keeper PAM ](https://rheintec.io/en/managed-services/enterprises/keeper-pam)
          - [ Keeper Password Manager ](https://rheintec.io/en/managed-services/enterprises/password-manager)
          - [ Rubrik Backup & Data Protection ](https://rheintec.io/en/managed-services/enterprises/rubrik-backup)
          - [ Ubiquitiy WAN-Edge & SD-WAN ](https://rheintec.io/en/managed-services/enterprises/ubiquitiy-wan-edge)
- [ Case Studies ](https://rheintec.io/case-studies-rheintec)
- [ Blog ](https://rheintec.io/en/it-security-blog)
- [About](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
  
  Show submenu for About 
  
    - [ Partner ](https://rheintec.io/de/partners)
    - [ About us ](https://rheintec.io/de/about)
    - [ Karriere ](https://rheintec.io/de/karriere)

- [ KMU ](https://kmu.rheintec.io/de-ch/it-fuer-kmus)
- [Enterprise](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
  
  Show submenu for Enterprise 
  
    - [Consulting](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
      
      Show submenu for Consulting 
      
          - [ IT Security Consulting ](https://rheintec.io/en/consulting/security/it-security-consulting)
          - [ Cyber Security Review ](https://rheintec.io/en/consulting/cybersecurity-review)
          - [ Governance, Risk & Compliance Consulting ](https://rheintec.io/en/consulting/compliance-and-governance)
    - [Zscaler](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
      
      Show submenu for Zscaler 
      
          - [ Zscaler Architecture Consulting ](https://rheintec.io/en/consulting/zscaler/architecture-consulting)
          - [ Zscaler Health Checks ](https://rheintec.io/en/consulting/zscaler/healthchecks)
          - [ Zscaler Automation ](https://rheintec.io/en/consulting/zscaler/automation)
          - [ Zscaler Proof of Concepts ](https://rheintec.io/en/consulting/zscaler/proof-of-concept)
          - [ Z-Automate ](https://rheintec.io/en/zscaler-automation-tool)
    - [ Solutions ](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#services)
      
      Show submenu for Solutions 
      
          - [ Bring Your Own Device (BYOD) ](https://rheintec.io/en/solutions/zscaler-remote-browser-access)
          - [ CNAPP ](https://rheintec.io/en/managed-services/enterprises/wiz)
          - [ Secure Access Service Edge (SASE) ](https://rheintec.io/en/solutions/secure-access-service-edge)
          - [ Secure Service Edge ](https://rheintec.io/en/managed-services/enterprises/zscaler-sse)
          - [ Zscaler Data Security ](https://rheintec.io/en/solutions/zscaler-data-security)
          - [ SD-WAN & WAN-Edge ](https://rheintec.io/en/managed-services/enterprises/ubiquitiy-wan-edge)
          - [ Z-Automate ](https://rheintec.io/en/zscaler-automation-tool)
- [Managed Services](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
  
  Show submenu for Managed Services 
  
    - [ Managed Security Services ](https://rheintec.io/en/managed-security-services)
    - [ Small & Medium Companies (5-250) ](https://rheintec.io/managed-services/small-medium-companies-smb)
      
      Show submenu for Small & Medium Companies (5-250) 
      
          - [ Zscaler 4 Small Businesses ](https://rheintec.io/en/managed-services/small-companies/zscaler-sse-4-small-businesses)
          - [ CrowdStrike XDR 4 Small Businesses ](https://rheintec.io/en/en/managed-services/small-companies/crowdstrike-xdr-4-small-businesses)
          - [ Mimecast 4 Small Businesses ](https://rheintec.io/de/mimecast-for-kmu)
          - [ Proofpoint 4 Small Businesses ](https://rheintec.io/en/rheintec-proofpoint-mail-sicherheit-f%C3%BCr-kmu-kleinunternehmen)
          - [ Small Business Secure ](https://rheintec.io/en/managed-services/small-companies/small-business-secure)
          - [ Small Business Complete ](https://rheintec.io/en/managed-services/small-companies/small-business-complete)
          - [ Medium Business Complete
 ](https://rheintec.io/en/managed-services/medium-companies/medium-business-complete)
    - [ Enterprises (250+) ](https://rheintec.io/managed-services/enterprise)
      
      Show submenu for Enterprises (250+) 
      
          - [ Wiz CNAPP ](https://rheintec.io/en/managed-services/enterprises/wiz)
          - [ Zscaler SSE ](https://rheintec.io/en/managed-services/enterprises/zscaler-sse)
          - [ Zscaler PSE as a Service ](https://rheintec.io/en/managed-services/enterprises/zscaler-pse)
          - [ CrowdStrike XDR ](https://rheintec.io/en/managed-services/enterprises/crowdstrike-xdr)
          - [ Mimecast Email Security ](https://rheintec.io/en/mimecast-for-enterprise)
          - [ Mimecast DMARC Monitoring ](https://rheintec.io/en/managed-services/enterprises/mimecast-dmarc)
          - [ Proofpoint Email Security ](https://rheintec.io/en/managed-services/enterprises/proofpoint-emailsecurity)
          - [ Cloudflare WAF ](https://rheintec.io/en/managed-services/enterprises/cloudflare-waf)
          - [ Cloudflare Zero Trust ](https://rheintec.io/en/cloudflare-sse-zero-trust-cloud-proxy)
          - [ Cloudflare DNS ](https://rheintec.io/en/managed-services/enterprises/cloudflare-dns)
          - [ Check Point Datacenter and Cloud Firewall ](https://rheintec.io/en/managed-services/enterprises/checkpointdatacenter)
          - [ Keeper PAM ](https://rheintec.io/en/managed-services/enterprises/keeper-pam)
          - [ Keeper Password Manager ](https://rheintec.io/en/managed-services/enterprises/password-manager)
          - [ Rubrik Backup & Data Protection ](https://rheintec.io/en/managed-services/enterprises/rubrik-backup)
          - [ Ubiquitiy WAN-Edge & SD-WAN ](https://rheintec.io/en/managed-services/enterprises/ubiquitiy-wan-edge)
- [ Case Studies ](https://rheintec.io/case-studies-rheintec)
- [ Blog ](https://rheintec.io/en/it-security-blog)
- [About](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0#)
  
  Show submenu for About 
  
    - [ Partner ](https://rheintec.io/de/partners)
    - [ About us ](https://rheintec.io/de/about)
    - [ Karriere ](https://rheintec.io/de/karriere)

[ Kostenlose Beratung anfordern ](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLJhOjx3NEjl3dTzs3alex%2B2Sz%2BrhHiNeNPr3qhM%2Bmnd1xhH0hZc85R016Zfr4tNiAXpoJQutSl0RRl7l33WGIvDzQIOIR%2FMvZZ4ouwxGAFoXaQFdiHiPwDtXR0sbIfzA1ujA5%2BwzxqPoZeWO7EECpw3hpDCs%2BgvNAkrhioMf3iQWFSgkHyl51blL5ZZHc6r9v50UNaVzw%3D%3D&portalId=48452581)

English

- [Deutsch](https://rheintec.io/de/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler)
- [English](https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0)

# Setup VPN tunnels from Ubiquiti to Zscaler

[ Linus Espach ](https://rheintec.io/en/it-security-blog/author/linus-espach)  - Nov 5, 2025 6:50:12 PM

- **Problem: **Many IoT/OT devices, servers and legacy systems do not support agents (e.g. Zscaler Client Connector).
- **Solution:** IPSec tunnels from UniFi Gateways to Zscaler (ZIA) to centrally inspect and filter HTTP/HTTPS traffic - without an agent on the endpoint device.
- **Added value:** Unified SSE security controls (web filtering, threat protection, DLP, CASB), consistent egress IP handling, easy rollout and high availability across two Zscaler data centers.
  
  ![Zscaler VPN via Ubiquiti Architecture](https://rheintec.io/hubfs/FHNW%20Vorlesung%20-%20Vorlesung.svg)

## Architecture in 60 seconds

- UniFi gateway (HA cluster here) establishes redundant IPSec tunnels to the two closest Zscaler DCs (primary/backup).
- Policy-Based Routing (PBR) on the Ubiquiti routes defined traffic (e.g. IoT VLANs → Web) into the tunnel (i.e. as a transparent proxy), internal destinations (RFC1918) and Zscaler agent traffic is bypassed.
- Zscaler (ZIA) inspects/processes the traffic according to the policies.
- Depending on the resilience and performance requirements, any number of tunnels can be set up via any ISPs at any Zscaler data centers with any priorities.

## Requirements (checklist)

- Static public IP on the Ubiquiti WAN.
- Access to ZIA Admin Portal with rights for static IPs, VPN credentials, location management.
- Preliminary planning: Which source networks/VLANs should go via Zscaler? Which destinations need to be bypassed (RFC1918, management networks, ZCC backends)?
- Time sync (NTP) & correct MTU on the WAN (IPSec/SSL inspection can trigger fragmentation).

## 1. IPSec from Ubiquiti to Zscaler

1. Determine the next Zscaler-DC and note the VPN host name (e.g. zrh1-... or fra4-...). The overview/table is shown in the SOP, page 2.
2. Register static IP: ZIA Admin Portal → Administration → Static IPs & GRE Tunnels → Add Static IP (enter UniFi WAN IP). Page 2.
3. Create VPN Credential: ZIA Admin Portal → Administration → VPN Credentials → Add VPN Credentials → Select Static IP, set Pre-Shared Key, save. Page 2-3, incl. mask.
4. Assign location: Administration → Location Management → Add credential to the desired location. Page 3.
5. Configure policies (SSL inspection for IoT and OT must be switched off in most cases, for servers the Zscaler Root CA can be rolled out on the servers)

## 2. configure UniFi side (Tunnel 1 - Primary DC)

1. UniFi Network → Settings → VPN → Site-to-Site VPN → Create New.
2. VPN Type: IPSec, VPN Method: Route-Based.
3. Remote IP/Hostname: the Zscaler VPN host name from step 1 (e.g. zrh1-2-vpn.zscaler.net).
4. IKE/ESP (see screenshot):
5. Key Exchange: IKEv2
6. AES-256 / SHA1, DH group 14, PFS active, SA-Lifetime IKE 28800s / ESP 3600s
7. Tunnel IP: /31 according to UniFi mask (default in screenshot).
8. Remote Networks: set so that the failover pair matches Tunnel 2 (see next step).
9. Route Distance (metric): smaller value = preferred (e.g. 30 for primary).

## 3. configure UniFi side (Tunnel 2 - Backup-DC)

1. Repeat step 2 with second DC hostname (e.g. fra4-vpn.zscaler.net).
2. Remote Networks identical to the first tunnel - this way UniFi recognizes the failover pair.
3. Route Distance higher than the primary tunnel (e.g. 60).

## 4. configure UniFi side (Tunnel 2 - Backup-DC)

1. Bypass RFC1918 (10/8, 172.16/12, 192.168/16) → not in the tunnel.
2. Bypass Zscaler backends/ZCC infrastructure (e.g. config.zscaler.com aggregated ranges).
3. ANY → Tunnel for the predefined source VLANs/networks (IoT/OT/Server).
4. Then check whether both tunnels are "online"

Important:

- UniFi cannot (yet) reorder PBR rules. Create them in the correct order specific → general and build placeholder rules for different use cases, which should be updated later if necessary.
- For exclusions, the exception and ANY rule must have the same source
- Do not activate the kill switch in the exception (otherwise the failover to the other tunnels will no longer work)

## Verification & operation

- Check egress IP in ZIA (Log/Insights) - is it assigned to your static IP/location?
- Test SSE policies (URL filter, DLP, upload controls, SSL inspection).
- Monitoring: Tunnel status, latency to the DCs, MTU/MSS clamp (in case of fragmentation).
- Key hygiene: rotate PSK regularly, audit admin access.

## Best practices from projects

- VLAN-based onboarding: dedicated IoT/OT VLANs via PBR in the tunnel - minimizes blast radius.
- Cleanly separate "web only": Do not tunnel internal services (e.g. OT HMIs) to the internet; RFC1918 bypass helps.
- Select two regional DCs (e.g. Zurich + Frankfurt) → failover with clear priority (route distance).
- Schedule a change window: SSL inspection or DLP can have app side effects; start with a pilot group.
- Maintain documentation: DC lists, PBR exceptions (e.g. ZCC/update CDNs), responsible VLANs, emergency rollback.

## Conclusion

With IPSec UniFi → Zscaler, non-agent-capable IoT/OT assets and servers can be connected to modern SSE controls easily, scalably and cost-effectively - without any intervention on the end device. The combination of two DC tunnels, clean PBR and consistent policy checking quickly delivers measurable security gains - exactly where agents do not fit.

[Zscaler](https://rheintec.io/en/it-security-blog/tag/zscaler), [SASE](https://rheintec.io/en/it-security-blog/tag/sase), [Ubiquiti](https://rheintec.io/en/it-security-blog/tag/ubiquiti)

### You might like

[![Ubiquiti Logo](https://rheintec.io/hs-fs/hubfs/Ubiquiti-Logo.jpg?width=352&name=Ubiquiti-Logo.jpg) ](https://rheintec.io/en/it-security-blog/how-to-configure-a-vpn-tunnel-from-ubiquiti-to-cloudflare?hsLang=en)

##### [How to configure a VPN Tunnel from Ubiquiti to Cloudflare](https://rheintec.io/en/it-security-blog/how-to-configure-a-vpn-tunnel-from-ubiquiti-to-cloudflare?hsLang=en)

 Problem: Many IoT/OT devices, servers and legacy systems do not support agents (e.g. Cloudflare WARP), or Cloudflare Magic WAN is used to ramp up locations.Solution: IPSec tunnels from UniFi gateways to Cloudflare via Magic WAN to centrally inspect and filter HTTP/HTTPS traffic - without an...

[![Unifi Blueprints](https://rheintec.io/hs-fs/hubfs/image-png-Apr-15-2026-07-26-16-7038-PM.png?width=352&name=image-png-Apr-15-2026-07-26-16-7038-PM.png) ](https://rheintec.io/en/it-security-blog/unifi-network-application-10.3.52-blueprints-and-zero-touch-provisioning?hsLang=en)

##### [UniFi Network Application 10.3.52: Blueprints and Zero Touch Provisioning](https://rheintec.io/en/it-security-blog/unifi-network-application-10.3.52-blueprints-and-zero-touch-provisioning?hsLang=en)

 UniFi Network Application 10.3.52: Blueprints und zentrale Orchestrierung für WiFi, Netzwerke und Security-Policies Wer viele Standorte betreibt, kennt das eigentliche Problem: Nicht die Hardware bremst, sondern die Wiederholbarkeit. Sobald SSIDs, VLANs, DNS-Einträge, Protection-Profile...

[![Ubiquiti Logo](https://rheintec.io/hs-fs/hubfs/Ubiquiti-Logo.jpg?width=352&name=Ubiquiti-Logo.jpg) ](https://rheintec.io/en/it-security-blog/unifi-site-manager-5-zero-touch-provisioning-for-ubiquiti-sd-wan-gateways?hsLang=en)

##### [UniFi Site Manager 5.X: Zero-Touch Provisioning for Ubiquiti SD-WAN Gateways](https://rheintec.io/en/it-security-blog/unifi-site-manager-5-zero-touch-provisioning-for-ubiquiti-sd-wan-gateways?hsLang=en)

 Companies that operate multiple sites (or are growing rapidly) know the pattern: The actual bottleneck is rarely the hardware - it is time, processes and the susceptibility to errors during rollout. This is exactly where UniFi Site Manager 5.0.0 comes in: With the new "UniFi Fabrics"...

## How much does IT security cost for your SMB?

Easily estimate your IT security expenses with our pricing calculator.

[ Check our pricing calculator ](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLLdDaGp037PwumG%2BW1z1Azp65Anr6w1bT6quyIouhPKiq9x7zfbiD2B5x7NH%2Bq7KohFerMK6uORsvnlI7w%2F%2Bcc42MZwuwbW7LvWtuiY1SdwKH3wM5erK5rc7V%2Bo4C75GnQhTIVya%2B8KfbeTtmznXJYqAgmVKwW7AKWj14zj0TvjCQ%3D%3D&portalId=48452581)

[![logo-white](https://rheintec.io/hubfs/website_assets/logo/logo-white.svg "logo-white")](https://rheintec.io?hsLang=en)

[Legal Notice](https://rheintec.io/legal-notice?hsLang=en) [Privacy Policy](https://rheintec.io/en/privacy-policy?hsLang=en) [Careers](https://rheintec.io/de/karriere?hsLang=en)

[![rht-tuev-iso-9001](https://rheintec.io/hubfs/website_assets/iso/rht-tuev-iso-9001.webp)](https://rheintec.io/hubfs/Rheintec%20ISO%209001%20EN.pdf?hsLang=en) [![rht-tuev-iso-iec-27001](https://rheintec.io/hs-fs/hubfs/website_assets/iso/rht-tuev-iso-iec-27001.png?width=200&height=95&name=rht-tuev-iso-iec-27001.png)](https://rheintec.io/hubfs/Rheintec%20ISO%2027001%20EN.pdf?hsLang=en)

 

Locations

![switzerland flag](https://rheintec.io/hs-fs/hubfs/website_assets/flags/switzerland%20flag.webp?width=80&height=49&name=switzerland%20flag.webp)

Rheintec Solutions AG

 Uferstrasse 90, CH-4057 Basel

![germany flag](https://rheintec.io/hs-fs/hubfs/website_assets/flags/germany%20flag.png?width=60&height=37&name=germany%20flag.png)

Rheintec Solutions GmbH

Gartenstrasse 28 • DE-86938 Schondorf am Ammersee

Contact Us

+41 (0) 61 568 73 95

info@rheintec.ch

Subscribe to our newsletter for security insights.

© 2026 All rights reserved.

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Linus Espach",
    "url" : "https://rheintec.io/en/it-security-blog/author/linus-espach"
  },
  "dateModified" : "2026-04-15T18:40:58.469Z",
  "datePublished" : "2025-11-05T17:50:12.000Z",
  "headline" : "Setup VPN tunnels from Ubiquiti to Zscaler",
  "image" : [ "https://rheintec.io/hubfs/Ubiquiti-Logo.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://rheintec.io/en/it-security-blog/how-to-setup-vpn-tunnels-von-ubiquiti-zu-zscaler-0",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://rheintec.io/hubfs/rheintecblue.png"
    },
    "name" : "Rheintec Solutions AG"
  }
}
```