Jump to Content
End User Guide
Release Notes
Customer Support Portal
Home
Administrator Guide
End User Guide
Release Notes
Customer Support Portal
Log In
Administrator Guide
Log In
Home
Administrator Guide
ZTNA vs VPN | Side-by-Side Comparison
Search
ABOUT AXIS
About Axis
Architecture
Feature Comparison: Atmos Agent Versus Atmos Air
Axis Security ZTNA Solution Versus VPN
Axis Management Console
Supported Browsers
Editing and Deleting Items
Deployment Considerations and Best Practices
Getting Started
Migrating Applications from Zscaler ZPA to Axis
Migrating Web Categories from Zscaler ZIA to Atmos
Migrating Destinations Lists from Cisco Umbrella to Atmos
ADMINISTRATORS
Adding Administrators
Role-Based Access Control
TENANT ADMINISTRATION
Workspace Settings
Agent Settings
Managing Multi-Tenants
CUSTOMIZATION
Customizing User Portal, Block Pages and Error Pages
Custom Block Pages
Block Profiles
CONNECTORS
About Connectors
Connector Zones
Connector Best Practices
Connector Deployment Checklist
Connector History
Connector Deployment Technical Prerequisites
Server Requirements for the Connector
Firewall Rules for Connector Connectivity
File Extensions to Allow
Connector Deployment Guides
Adding and Deploying Connectors
OVA and OVF in Axis Frequently Asked Questions
Deploying an OVA using vSphere
Connector Deployment for the Static Network Configurations OVA
Axis Connector Deployment for AWS AMI
Uninstalling Connectors for CentOS, Oracle, Ubuntu, and Red Hat
Connector Troubleshooting and Managing
Connector Information Notification
Determining a Connector's Version
Troubleshooting Connectors
IDENTITY PROVIDERS
About Identity Management
Azure (Entra) IdP Integration
JumpCloud IdP Integration
Okta IdP Integration
PingFederate IdP Integration
Step 1: Obtain an IdP SSO URL
Step 2: Download an IdP Certificate
Step 3: Integrate PingFederate
Google Workspace IdP Integration
SAML Integration: Advanced Settings
Configuring an Identity Provider's Advanced Settings
APPLICATIONS
About Applications
Creating Applications in Bulk
Active Directory Application
DNS Application
Cyberark Applications: Allowing Access
Database
Database Events
GIT
Step 1: Adding a Git Application
Step 2: Adding a Git Profile
Git Events
ICMP
Network Range
About Network Range
Adding a Network Range
Excluding a DNS Search from a DNS Wildcard
Configuring Network Range Applications: Using the Logical "and" Operator
Network Range Visibility
Office 365
About Office 365 with Conditional Access (Atmos Agent)
Step 1: Adding Office 365 Applications with Conditional Access
Step 2: Applying a Rule to the Office 365 Application
Step 3: Configure Azure Active Directory Conditional Access
RDP
About Remote Desktop Protocol
Adding an RDP Application
Adding an RDP Profile
RDP Events
RDP Application Errors and Troubleshooting
Troubleshooting RDP: Users Cannot Transfer Files
Step 1: Verify that the RDP Client Allows Drive Redirection
Step 2: Verify that the Axis Security RDP Policy Allows File Transfers
Step 3: Verify that RDP Group Server Security Policy Allows Drive Redirection Transfers
Server Initiated Flow
About Server Initiated Flows
Configuring a Server Initiated Flows
How Do I Find the Agent Assigned Static IP?
Viewing the Connector’s IP Pool Settings & Allocated IPs
SSH Range Application
About SSH Range Applications
Step 1: Adding an SSH Range Application
Step 2: Adding a SSH Range Profile
Troubleshooting an SSH Range Application
SSH Events
Excluding a DNS Search from a DNS Wildcard
SSH Server Application
Adding an SSH Server Application
Adding an SSH Profile
SSH User Provisioning
Web Applications
Adding a Web Application
Feature Comparison: Using your Own Domain or Axis Hosted Domain in Web Applications
Option 1: Using Your Own Domain
Option 2: Using an Axis Hosted Domain
Option 3: Using a Hybrid Approach: Applying URL Rewriting on Your Own Domain
Managing Your Own Domains
Adding Trusted Sources
Adding a Web Profile
Own Domain, Axis Hosted Domain, and Hybrid Approach Feature Comparison Matrix
Configuring a Web Application's Advanced Settings
Web Applications Errors
Web Application Events
About Certificates
Domain Certificates
Additional Domains for Web Applications
Service-to-Service Integrations in Web Applications
Integrating a Service Using an API Token
Okta OIDC Configuration for Self-Hosted Web App
Application Tags
VNC
About Virtual Network Computing (VNC)
Adding a VNC Application
Unique Application URLs
AXIS SECURITY IDENTITY PROVIDER
About Axis Security Identity Provider
Adding Users to Axis IdP
Performing Bulk Actions in Axis IdP
Email Password Reset Link
POLICIES
About Policies
Best Practices for Configuring a Policy
Adding Policy Rules
Adding IP Ranges
Adding a Time Range
Adding a Temporary Rule
Device Trust
About Device Trust
Creating a Device Trust Client Object
Configuring the Atmos Agent Device Posture
Key Considerations for Using the Device Posture and Domain Joined Check
MDM Ownership Variable
Continuous Policy Enforcement
Adding an Identity Object
Multiple User-Destination Pairings
Destination TAGS
Creating a New Destination Tag
ATMOS AGENT
About the Atmos Agent
Atmos Agent: Routing Traffic to the Atmos Cloud
Atmos Agent: Frequently Asked Questions
Atmos Agent Device Prerequisites
Atmos Agent Deployment Guides
Atmos Agent Download from the Management Console
Installing the Atmos Agent for Android
Installing the Atmos Agent for iOS
Deploy the Atmos Agent using an MDM
Configuring a Workspace for the Atmos Agent
Allowing Atmos Agent Processes
Configuring Atmos Agent and Cisco AnyConnect Simultaneous Operation
Atmos Agent Troubleshooting & Managing
Enrolled Agent Management
Atmos Agent Connectivity Controls
Policy Updates and Continuous Enforcement
Troubleshooting the Atmos Agent
Atmos Agent Updates
Machine Token
VISIBILITY & INSIGHTS
Events and Sessions in the Management Console
Insights In the Management System
The Insights Dashboard
Viewing Application Activity in Insights
Viewing User Activity in Insights
AUDIT LOG
About Audit Logs
LOG STREAMING
About Log Streaming
Stream Activity Log Models
Sending Logs to Syslog
Sending Logs to Splunk Enterprise and Splunk Cloud
PARTNER INTEGRATIONS
Integrating with Crowdstrike
Checking Your Crowdstrike Rate Limit
ADMIN API
Configuring Postman
Atmos Cloud API: Generate Token
Atmos Cloud API: Management API
Atmos Cloud API: Axis IdP
Atmos Cloud API: Connectors
Atmos Cloud API: Connector Zones
Atmos Cloud API: Tunnels
Atmos Cloud API: Locations
Atmos Cloud API: Tags
Atmos Cloud API: Applications
Atmos Cloud API: Web Categories
Atmos Cloud API: SSL Exclusions
Usage Guidelines
Connector Deployment using a Launch Template
TROUBLESHOOTING
Generating HAR Files
Basic Troubleshooting Guide
USER PROVISIONING
About User Provisioning
SCIM Provisioning with Okta
SCIM Provisioning with Azure (Entra)
SCIM Provisioning with PingFederate
SCIM Provisioning with JumpCloud
Viewing Provisioned Users and Groups
THE ATMOS WEB GATEWAY
About the Atmos Web Gateway
Keeping the Atmos Agent Active at All Times
DNS and URL Filtering
Adding and Editing Web Categories
Determining a URL's Web Category
Blocking Access to a Web Category
Enabling SSL Inspection
About Secure Sockets Layer (SSL)
Certificate Management
Uploading a CA certificate
Creating an External Web Profile
Downloading and Installing a Root Certificate from the User Portal
Threat Intelligence Protection
SSL Exclusion Menu
SaaS Applications
Atmos IPSec
About Locations
Configuring Locations
Configuring IPSec Tunnels
Configuring Locations as Policy Conditions
Data and File Security
File Security Profile
File Matchers
Create a File Security Profile
Applying a File Security Profile to a Policy Rule
File Security Actions
VIDEO LIBRARY
Atmos Agent
Atmos Agent Deployment Options
Atmos Agent for iOS
Atmos Agent for Windows
Atmos Agent for MacOS
Installing and Configuring Connectors
Atmos CASB
Atmos Web Gateway
Atmos ZTNA
Multi-Tenancy
What is Security Service Edge?
ZTNA vs VPN | Side-by-Side Comparison
Atmos URL Filtering
Atmos Experience
Atmos Connectors
Atmos IdP Integrations
Atmos Shortcut Features
Atmos RBAC
Atmos Data Localization
Atmos Threat Intelligence Protection
END USER GUIDE
The Atmos Portal
Supported Browsers
Atmos Agent Download from the User Portal
Atmos Agent Installation
Atmos Agent Installation for Windows
Atmos Agent Installation for macOS
Atmos Agent Installation for Linux
Connecting to Applications
Connecting to a Database
Connecting to a Git Repository
Connecting to a Remote Desktop
RDP: Frequently Asked Questions
Connecting to an SSH Server
Connecting to an SSH Range Application
Connecting to a Web Application
Atmos Agent Updates on Mobile Devices
Changing the Atmos Agent Workspace
Atmos Agent: Frequently Asked Questions
Accessing an Application Using a Direct Link
Atmos Agent Tray Icons
Atmos Agent for iOS
Atmos Agent for Android
ATMOS LOCAL EDGE
About Atmos Local Edge
Atmos smart routing
Multi Region Application
Atmos RELEASE NOTES
Atmos Platform
Atmos Agent
COPYRIGHT NOTICES AND LICENCES
Open Source Notices
ZTNA vs VPN | Side-by-Side Comparison
Suggest Edits
Updated over 2 years ago
