How can intranet sites be defined in tunnel mode?

Defining intranet sites in tunnel mode is achieved by explicitly configuring them in the intranet zone with an allow list. This approach allows administrators to specify which internal resources should be accessed directly, ensuring that traffic to these resources does not go through the secure tunnel or cloud service provided by Zscaler. This is particularly important for organizations where internal applications and resources require local network access.

By placing specific intranet sites on an allow list, administrators can better control how their users interact with both internal and external resources. This method not only enhances performance by reducing unnecessary traffic through the Zscaler cloud but also provides users with a seamless experience when accessing trusted internal applications.

Other options focus on different methods that don't directly pertain to the configuration of intranet sites in tunnel mode. For example, default browser settings and operating system network settings do not provide the granularity or specificity needed for effective intranet site management in this context. Additionally, third-party security applications may introduce complexities rather than streamlining the process of defining and managing intranet site traffic.