📝 Section Review: App Segments & Policies
اہم نکاتKey TakeawaysKey Takeaways
- Application Segments طے کرتے ہیں کیا publish ہو گا: FQDNs, IP ranges, ports۔Application Segments tay karte hain kya publish hoga: FQDNs, IP ranges, ports.Application Segments define what gets published: FQDNs, IP ranges, ports.
- Server Groups segments کو ایپ کے قریبی App Connectors سے جوڑتے ہیں۔Server Groups segments ko app ke qareebi App Connectors se jorte hain.Server Groups bind segments to the App Connectors near the app.
- Access Policy rules IdP users/groups کو allow/deny actions کے ساتھ استعمال کرتی ہیں۔Access Policy rules IdP users/groups ko allow/deny actions ke saath istemal karti hain.Access Policy rules use IdP users/groups with allow/deny actions.
- Rule order اوپر سے نیچے ہے؛ allow سے اوپر broad deny اسے block کر دیتا ہے۔Rule order oopar se neeche hai; allow se oopar broad deny use block kar deta hai.Rule order is top-to-bottom; a broad deny above an allow blocks it.
- ہمیشہ client سے allowed اور denied دونوں users سے تصدیق کریں۔Hamesha client se allowed aur denied dono users se verify karein.Always verify from the client with both an allowed and a denied user.
خود جانچ (مشق)Self-Check (Practice)Self-Check (Practice)
یہ مشقی سوالات ہیں، امتحانی سوالات نہیں۔These are practice questions, not exam questions.These are practice questions, not exam questions.
❓ Application Segment کے اہم fields کی فہرست بتائیں۔Application Segment ke ahem fields ki list batayein.List the key fields of an Application Segment.
Segment Name, Domain Names (FQDN), TCP/UDP Port Ranges, Server Groups, Browser Access setting۔Segment Name, Domain Names (FQDN), TCP/UDP Port Ranges, Server Groups, Browser Access setting.Segment Name, Domain Names (FQDN), TCP/UDP Port Ranges, Server Groups, Browser Access setting.
❓ Access Policy rules کیسے evaluate ہوتے ہیں؟Access Policy rules kaise evaluate hote hain?How are Access Policy rules evaluated?
اوپر سے نیچے، پہلا match جیتتا ہے — مخصوص ALLOW rules کو general deny سے اوپر رکھیں۔Oopar se neeche, pehla match jeet-ta hai — makhsoos ALLOW rules ko general deny se oopar rakhein.Top to bottom, first match wins — keep specific ALLOW rules above general denies.
❓ User ایپ نہیں کھول سکتا — troubleshooting order بتائیں۔User app nahi khol sakta — troubleshooting order batayein.A user cannot open an app — state your troubleshooting order.
Client sign-in → policy decision → segment definition → connector health۔Client sign-in → policy decision → segment definition → connector health.Client sign-in → policy decision → segment definition → connector health.
❓ Application Segment کو اصل ایپ سے کون جوڑتا ہے؟Application Segment ko asal app se kaun jorta hai?What connects an Application Segment to the actual app?
ایپ کے قریب ایک connector جو اسے serve کرے؛ شرائط (جیسے country یا subnet) کے ساتھ connector groups۔App ke qareeb ek connector jo ise serve kare; conditions (jaise country ya subnet) ke saath connector groups.A connector near the app serving it; connector groups with conditions like country or subnet.