Forum Discussion

PaulCollinge's avatar
PaulCollinge
Icon for Microsoft rankMicrosoft
Jun 27, 2022

Optimizing RDP Connectivity for Windows 365

Updated with RDP & Zscaler connectivity improvements August 2025 The use of VPN or Secure Web Gateway (SWG) client software or agents to provide tunneled access to on-premises resources in addition...
PaulCollinge_3-1656338336520.png
best practices
UmairK's avatar
UmairK
Copper Contributor
Feb 28, 2025

We use ZIA and have setup the config using IP-Based, Predefined Application bypass for Windows 365 & Azure Virtual Desktop and added the following IPs in the IPv4 Inclusion list but we continue to get the disconnects at login

20.202.0.0/16

169.254.169.254

168.63.129.16

The Zscaler client version is 4.5.0.352. Do these IPs above need to go in the IPv4 inclusion or the IPv4 exclusion list?

PaulCollinge's avatar
PaulCollinge
Icon for Microsoft rankMicrosoft
Mar 05, 2025

They need to be bypassed from the Ztunnel. However, if using Tunnel V1 you should be able to bypass *.wvd.microsoft.com and the subnets you list above in the PAC file. 

Resources