End-to-end guide: from first login to live Zero Trust connectivity.
The company that runs the platform (e.g. NetFoundry). Sets up branding, connector models, and onboards customers.
Your organisation. Has locations, connectors, users, and access policies.
A physical or cloud site — office, data center, VPC. Each location hosts one or more connectors.
A lightweight agent installed at a location that securely exposes internal services — no open firewall ports.
An access policy — defines which users (or connectors) can reach which other connectors and applications.
The client app on your laptop/device that tunnels traffic through the Zero Trust fabric automatically.
127.0.0.1 — for services running on the same machine as the connector.
Authenticate via Auth0 (email/password or SSO). First-time users receive an invitation link by email.
Branded welcome page showing the provider's logo and color theme. Confirms your account is active.
Short onboarding questions to tailor the setup experience (org size, use case, etc.).
Name your customer organisation and set the primary contact details.
Upload a logo and pick primary/secondary colors. These update the portal's look in real time via CSS variables.
Define each physical or cloud site where you will deploy connectors.
For each location, add one or more connectors. Choose the type based on how your service is reached.
If the provider has pre-defined connector models/templates, you can apply one to quickly fill in configuration.
See all connectors grouped by location. Expand each location to verify or update connector settings.
For each connector, define which applications (protocol + port combinations) it exposes.
A Connection links a source (user identity, device, or connector) to a destination connector. This is the Zero Trust access policy.
Explicit: pick specific connectors.
Rule-based: match connectors by type, location, or tag — auto-updates when new connectors are added.
The connection builder shows a live graph of which connectors will be linked before you save.
Enter email addresses for team members who need access to this customer's resources.
Each invited user gets a role that controls what they can see and do.
| Role | Can Do |
|---|---|
| Admin | Full access — manage locations, connectors, connections, users |
| Read-Only | View-only access to the dashboard and audit logs |
A live audit view shows all locations, connectors, connections, and users you've configured. Counts displayed in the header tiles.
Hitting Save pushes all configuration to the backend API. A progress indicator shows each resource as it's created.
For each connector, go to its Setup tab in the dashboard to get the agent install command. Run it on the target server.
End users open Ziti Desktop Edge on their laptops and use the enrollment token from the invitation email to register their identity in the fabric.
Overview of all locations on a map, connector health, active connections, and recent activity.
/dashboard/adminDrill into a single location — connectors, their status, and traffic metrics.
/dashboard/location/:idView, edit, and audit all access policies. See which users are connected and through which connector.
/dashboard/connectionsPer-connector metrics — sessions, traffic, top applications, and trend sparklines over 24h / 7d / 30d / 90d.
Connector → Usage tabReal-time view of all connectors and connections — see what's online, who's connected, and any anomalies.
/provider-dashboard/network-fabricManage team members, change roles, resend invitation emails, or revoke access.
/provider-dashboard/usersThe site where your service runs.
Point it to your service's IP and port.
Link your user identity → Gateway Connector.
Use the command from the connector's Setup tab.
Use the enrollment token from your invitation email.
Traffic from your laptop is tunneled through the Zero Trust fabric to your service. No VPN, no open firewall ports.