Enable network protection on the Secure Access Service Edge (SASE) client to route your device's traffic through a secure, policy-enforced tunnel and access your enterprise's private applications. This topic describes how to enable and disable network protection, and how to configure access points and DNS settings.
Prerequisites
Before you begin, make sure that:
The SASE client is installed and you have logged on. For details, see Install and log on to the SASE client.
Your enterprise administrator has configured private access, office applications, and Zero Trust policies. For details, see Private access.
Enable network protection
On the Network page of the SASE client, click Connect.
Configure an access point
On the Network page, click the 
icon in the lower-right corner. In the Connection Settings dialog box, select an access point based on your business requirements.
To minimize network latency, select the access point nearest to you.
| Option | Description |
|---|---|
| Manually select an access point | Switch between the access points provided by the SASE client. |
| Automatically select an access point | Click Auto POP Access point. The SASE client connects to the nearest access point automatically. |
Configure a DNS service
The SASE client automatically uses the default DNS service configured by your enterprise administrator to resolve the domain names of office applications.
If Alibaba Cloud DNS PrivateZone is configured for the applications you want to access, the client uses DNS PrivateZone for domain name resolution. If the DNS PrivateZone record does not match the internal CIDR block of your enterprise, the system falls back to the administrator-configured default DNS service.
| Option | Description |
|---|---|
| Add a custom DNS service | Click Add custom DNS address. |
| Switch DNS services | On the Network page, click the icon in the lower-right corner. |
Disable network protection
Click Disconnect to disable network protection.
After you disable network protection, your terminal can no longer access the office applications over the internal network. Proceed with caution.