Configure SASE for PTC
Choose and configure SASE (Zscaler ZIA or Netskope) to intercept public package traffic and redirect it through JFrog Artifactory for Package Traffic Controller (PTC).
SASE Configuration for PTC
Package Traffic Controller (PTC) relies on SASE to intercept outbound public package traffic and redirect it to the Artifactory /package-reroute endpoint. Both supported vendors perform the same role—SSL-inspect the matching registry traffic and return a redirect to Artifactory—so the workstation and Artifactory setup is largely the same regardless of which one you use.
Complete Configure Artifactory for PTC before configuring SASE. Artifactory repositories, Package Reroute registration, and anonymous access must be ready before the SASE rules start intercepting traffic, otherwise installs fail after interception begins (see Deployment Sequence).
Supported SASE Options
| SASE | Configuration guide |
|---|---|
| Zscaler Internet Access (ZIA) | Configure Zscaler ZIA |
| Netskope | Configure Netskope |
Choose whichever your organization already operates. Each guide covers the vendor-specific portal steps; the redirect target on Artifactory (/package-reroute) and the supported package types are the same for both.
Shared vs Vendor-Specific Setup
- Shared (global): Artifactory configuration, Package Reroute registration, anonymous access, and workstation trust/install scripts. These do not change between Zscaler and Netskope and are documented in Configure Artifactory for PTC and Prerequisites and Installation Script.
- Vendor-specific: The portal rules that match registry traffic and issue the redirect. These differ per vendor and are documented on each vendor's page (Zscaler ZIA requirements and rules; Netskope destination profiles, HTTP header policy, and real-time protection policy).
Configuration Order
- Complete Configure Artifactory for PTC (remote repository, Package Reroute registration, anonymous access, redirect verification).
- Deploy workstation trust for the SASE CA per package client and OS (see Prerequisites and Installation Script).
- Configure your chosen SASE: Zscaler ZIA or Netskope.