---
title: Zscaler Deployment Planning & Design | SecureDynamics
description: Phase 1 of the SecureDynamics Zscaler deployment motion drafts design, policy baseline, identity assumptions, forwarding model, and rollout plan.
---

[Skip to content](https://securedynamics.net/deployment/planning-design#main-content)

[![SecureDynamics Logo Dark-1](https://securedynamics.net/hs-fs/hubfs/SecureDynamics%20Logo%20Dark-1.png?width=1250&height=296&name=SecureDynamics%20Logo%20Dark-1.png)](https://cm360.securedynamics.net?hsLang=en)

- [Home](https://securedynamics.net)
- Solutions
  
  Show submenu for Solutions 
  
    - [Distribution](https://securedynamics.net/distribution)
      
      Show submenu for Distribution 
      
          - [AWS Marketplace Sales](https://securedynamics.net/aws-marketplace-zscaler-partners)
          - [Procurement Cheat Sheet](https://securedynamics.net/trusted-procurement-proxy)
    - [MSSP](https://securedynamics.net/mssp)
    - [For VAR Executives](https://securedynamics.net/grow-your-services-business)
- [Services](https://securedynamics.net/services)
  
  Show submenu for Services 
  
    - [Zscaler Deployment Services](https://securedynamics.net/services)
      
      Show submenu for Zscaler Deployment Services 
      
          - [Overview](https://securedynamics.net/deployment/overview)
          - [Qualification](https://securedynamics.net/deployment/qualification)
          - [Pre-Kickoff](https://securedynamics.net/deployment/pre-kickoff)
          - [Kickoff](https://securedynamics.net/deployment/kickoff)
          - [Phase 1: Planning & Design](https://securedynamics.net/deployment/planning-design)
          - [Phase 2: Pilot](https://securedynamics.net/deployment/pilot)
          - [Validation](https://securedynamics.net/deployment/validation)
          - [Phase 3: Full Rollout](https://securedynamics.net/deployment/full-rollout)
          - [Training While Deploying](https://securedynamics.net/deployment/training-while-deploying)
          - [Closeout Health Check](https://securedynamics.net/deployment/closeout-health-check)
          - [ZBoost Adoption](https://securedynamics.net/deployment/zboost-adoption)
          - [Reporting](https://securedynamics.net/deployment/reporting)
          - [ZBoost](https://securedynamics.net/zboost)
    - [Project Delivery Portal](https://securedynamics.net/projects)
    - Deployment Methodology
      
      Show submenu for Deployment Methodology 
      
          - [Pre-Kickoff](https://securedynamics.net/deployment/pre-kickoff)
          - [Kickoff](https://securedynamics.net/deployment/kickoff)
          - [Phase 1: Planning & Design](https://securedynamics.net/deployment/planning-design)
          - [Phase 2: Pilot](https://securedynamics.net/deployment/pilot)
          - [Phase 3: Full Rollout](https://securedynamics.net/deployment/full-rollout)
          - [Closeout](https://securedynamics.net/deployment/closeout-health-check)
          - [Zscaler Health Check](https://securedynamics.net/zscaler-health-check)
          - [ZBoost Adoption](https://securedynamics.net/deployment/zboost-adoption)
    - [Enterprise Services Access](https://securedynamics.net/enterprise-services-access)
- [Training](https://securedynamics.net/education)
- Resources
  
  Show submenu for Resources 
  
    - [Operations Guides](https://securedynamics.net/operations-guides)
    - [SSL Bypass Library](https://securedynamics.net/ssl-bypass-library)
    - [ZCC Log Explorer](https://securedynamics.net/zcc-log-explorer)
    - [Zero Trust Maturity Map](https://securedynamics.net/zero-trust-maturity)
    - [Customer Health and Readiness Portal](https://securedynamics.net/customer-health-readiness-portal)
    - [Project Delivery Portal](https://securedynamics.net/projects)
    - [Partner Onboarding](https://securedynamics.net/zscaler-partner-onboarding)
    - [Learning Workshop (invite only)](https://securedynamics.net/zscaler-learning-workshop)
    - [Compliance FAQs](https://securedynamics.net/enterprise-compliance-faq)
- [Support](https://securedynamics.net/support)
  
  Show submenu for Support 
  
    - [Knowledge Base](https://securedynamics.net/kb)
    - [Submit a Case](https://securedynamics.net/support)

Open main navigation

Close main navigation

- [Home](https://securedynamics.net)
- Solutions
  
  Show submenu for Solutions 
  
    - [Distribution](https://securedynamics.net/distribution)
      
      Show submenu for Distribution 
      
          - [AWS Marketplace Sales](https://securedynamics.net/aws-marketplace-zscaler-partners)
          - [Procurement Cheat Sheet](https://securedynamics.net/trusted-procurement-proxy)
    - [MSSP](https://securedynamics.net/mssp)
    - [For VAR Executives](https://securedynamics.net/grow-your-services-business)
- [Services](https://securedynamics.net/services)
  
  Show submenu for Services 
  
    - [Zscaler Deployment Services](https://securedynamics.net/services)
      
      Show submenu for Zscaler Deployment Services 
      
          - [Overview](https://securedynamics.net/deployment/overview)
          - [Qualification](https://securedynamics.net/deployment/qualification)
          - [Pre-Kickoff](https://securedynamics.net/deployment/pre-kickoff)
          - [Kickoff](https://securedynamics.net/deployment/kickoff)
          - [Phase 1: Planning & Design](https://securedynamics.net/deployment/planning-design)
          - [Phase 2: Pilot](https://securedynamics.net/deployment/pilot)
          - [Validation](https://securedynamics.net/deployment/validation)
          - [Phase 3: Full Rollout](https://securedynamics.net/deployment/full-rollout)
          - [Training While Deploying](https://securedynamics.net/deployment/training-while-deploying)
          - [Closeout Health Check](https://securedynamics.net/deployment/closeout-health-check)
          - [ZBoost Adoption](https://securedynamics.net/deployment/zboost-adoption)
          - [Reporting](https://securedynamics.net/deployment/reporting)
          - [ZBoost](https://securedynamics.net/zboost)
    - [Project Delivery Portal](https://securedynamics.net/projects)
    - Deployment Methodology
      
      Show submenu for Deployment Methodology 
      
          - [Pre-Kickoff](https://securedynamics.net/deployment/pre-kickoff)
          - [Kickoff](https://securedynamics.net/deployment/kickoff)
          - [Phase 1: Planning & Design](https://securedynamics.net/deployment/planning-design)
          - [Phase 2: Pilot](https://securedynamics.net/deployment/pilot)
          - [Phase 3: Full Rollout](https://securedynamics.net/deployment/full-rollout)
          - [Closeout](https://securedynamics.net/deployment/closeout-health-check)
          - [Zscaler Health Check](https://securedynamics.net/zscaler-health-check)
          - [ZBoost Adoption](https://securedynamics.net/deployment/zboost-adoption)
    - [Enterprise Services Access](https://securedynamics.net/enterprise-services-access)
- [Training](https://securedynamics.net/education)
- Resources
  
  Show submenu for Resources 
  
    - [Operations Guides](https://securedynamics.net/operations-guides)
    - [SSL Bypass Library](https://securedynamics.net/ssl-bypass-library)
    - [ZCC Log Explorer](https://securedynamics.net/zcc-log-explorer)
    - [Zero Trust Maturity Map](https://securedynamics.net/zero-trust-maturity)
    - [Customer Health and Readiness Portal](https://securedynamics.net/customer-health-readiness-portal)
    - [Project Delivery Portal](https://securedynamics.net/projects)
    - [Partner Onboarding](https://securedynamics.net/zscaler-partner-onboarding)
    - [Learning Workshop (invite only)](https://securedynamics.net/zscaler-learning-workshop)
    - [Compliance FAQs](https://securedynamics.net/enterprise-compliance-faq)
- [Support](https://securedynamics.net/support)
  
  Show submenu for Support 
  
    - [Knowledge Base](https://securedynamics.net/kb)
    - [Submit a Case](https://securedynamics.net/support)

Navigate **Deployment methodology**

[01**Overview**](https://securedynamics.net/deployment/overview?hsLang=en) [02**Qualification**](https://securedynamics.net/deployment/qualification?hsLang=en) [03**Pre-Kickoff**](https://securedynamics.net/deployment/pre-kickoff?hsLang=en) [04**Kickoff**](https://securedynamics.net/deployment/kickoff?hsLang=en) [05**Phase 1: Planning & Design**](https://securedynamics.net/deployment/planning-design?hsLang=en) [06**Phase 2: Pilot**](https://securedynamics.net/deployment/pilot?hsLang=en) [07**Validation**](https://securedynamics.net/deployment/validation?hsLang=en) [08**Phase 3: Full Rollout**](https://securedynamics.net/deployment/full-rollout?hsLang=en) [09**Training While Deploying**](https://securedynamics.net/deployment/training-while-deploying?hsLang=en) [10**Closeout Health Check**](https://securedynamics.net/deployment/closeout-health-check?hsLang=en) [11**ZBoost Adoption**](https://securedynamics.net/deployment/zboost-adoption?hsLang=en) [12**Reporting**](https://securedynamics.net/deployment/reporting?hsLang=en)

Phase 1

# Planning & Design sets the technical foundation

Phase 1 captures the architecture, identity assumptions, forwarding approach, application model, and baseline policy decisions that drive the rest of the deployment.

[Continue to Pilot](https://securedynamics.net/deployment/pilot?hsLang=en) [Open Phase 1 template](https://securedynamics.net/phase1?hsLang=en)

Deployment focus

## Design outputs

- Working design document and customer review cycle
- Identity, forwarding, access, and application assumptions validated
- Policy baseline drafted before configuration work expands

Current phase **Phase 1**

Milestone **Policy baseline drafted**

Customer ask **Review and feedback**

Template **Planning & Design**

Design discipline

## Phase 1 makes the later configuration predictable

This phase is collaborative and sometimes quiet from the outside. Aiden keeps design decisions, clarification questions, and unresolved assumptions from getting lost.

01

### Architecture and identity

Document licensed products, tenant assumptions, identity provider details, user groups, administrator access, and authentication paths.

02

### Forwarding and access

Define Client Connector behavior, trusted network handling, branch or cloud considerations, app access paths, and connector placement assumptions.

03

### Policy baseline

Draft initial policy structure from Zscaler recommended practices, customer requirements, exception expectations, and future tuning needs.

Canonical milestones

## Milestone anchors the customer, partner, and ZTSM can reference consistently

These labels are used as section anchors so customer communications, Aiden reporting, and internal delivery notes stay aligned.

**Phase 1**

### Policy baseline drafted

SecureDynamics drafts the initial policy baseline from the agreed design, licensed products, identity model, forwarding approach, and Zscaler recommended practices.

Meet Aiden

## Aiden (Ai-den) keeps every phase moving.

Aiden is our always-on virtual project manager across the deployment methodology. In Phase 1: Planning & Design, Aiden stays part of the workflow and communication layer, using Kanban boards to track individual and team action items, customer updates, blockers, and value milestones.

- Kanban boards
- Customer updates
- Team actions
- Value milestones

### Aiden phase view

Always on

**Methodology phase** Phase 1: Planning & Design

**Milestone status** Policy baseline drafted

**Workflow owners** Customer, partner, SecureDynamics ZTSM, and technical workstream owners

**Communication** Customer, partner, ZTSM, and project-team updates stay tied to the same source of truth

**Dates** Kickoff, working sessions, pilot windows, rollout waves, closeout, and ZBoost checkpoints

**Blockers** Access, identity, change windows, application edge cases, approvals, and customer-owned decisions

**Next steps** The next owner/action/date set that keeps the deployment moving between meetings

Customer knowledge layer

## Customers can learn while the deployment is moving

SecureDynamics gives customers guided access to Zscaler Deployment Advisor GPT, Learn Zscaler GPT, Design Workshop GPT, the Knowledge Base, and, when appropriate, a project access key for deeper custom RAG/MCP-backed deployment insight.

### [Zscaler Deployment Advisor GPT Deployment sequencing, readiness validation, configuration questions, and next-step guidance.](https://chatgpt.com/g/g-68a25ffec5108191bbd29ee9faab59b3-zscaler-deployment-advisor)

### [Design Workshop GPT Discovery, requirements capture, architecture workshop notes, and design decision support.](https://chatgpt.com/g/g-687a50bc202c8191bd9454b5d5d24487-zscaler-design-workshop)

### [Learn Zscaler GPT Always-available onboarding knowledge for customer admins, partners, and delivery stakeholders.](https://chatgpt.com/g/g-67edd4fcb15481918bb909ef8c5f4870-learn-zscaler)

### [SecureDynamics Knowledge Base Reference material for Zscaler products, SKUs, deployment concepts, and adoption guidance.](https://securedynamics.net/kb?hsLang=en)

Templated customer emails

## Phase communications are linked directly from the delivery motion

Each thumbnail opens the live templated email view so partners, ZTSMs, and customers can see the customer-facing message for the relevant phase.

[![Phase 1 email template thumbnail](https://securedynamics.net/hs-fs/hubfs/Continuum%20-%20Phase%201%20Planning%20%26%20Design.png?width=1120&upscale=true&name=Continuum%20-%20Phase%201%20Planning%20%26%20Design.png) *Phase 1* **Planning & Design email** Design document, assumptions, and baseline policy work.](https://securedynamics.net/phase1?hsLang=en)

Related pages

## Move through the deployment motion without losing context

### [Pilot Move from design into initial configuration.](https://securedynamics.net/deployment/pilot?hsLang=en)

### [Design Workshop GPT Support requirements and workshop output.](https://chatgpt.com/g/g-687a50bc202c8191bd9454b5d5d24487-zscaler-design-workshop)

### [Zscaler Deployment Advisor GPT Use for sequencing and readiness questions.](https://chatgpt.com/g/g-68a25ffec5108191bbd29ee9faab59b3-zscaler-deployment-advisor)

### [Knowledge Base Reference Zscaler configuration topics.](https://securedynamics.net/kb?hsLang=en)

Next step

## Design is where deployment risk becomes visible

A clear Phase 1 baseline gives the customer a shared blueprint and gives Aiden the assumptions needed for downstream reporting.

[Continue to Pilot](https://securedynamics.net/deployment/pilot?hsLang=en) [Back to services](https://securedynamics.net/services?hsLang=en)

[![SD logo transparent](https://securedynamics.net/hs-fs/hubfs/SD%20logo%20transparent.png?width=354&height=92&name=SD%20logo%20transparent.png "SD logo transparent")](https://cm360.securedynamics.net?hsLang=en)

 

[Join our Team](https://cm360.securedynamics.net/hiring?hsLang=en)

[Blog](https://cm360.securedynamics.net/securedynamics-channel/?hsLang=en)

[RSS Feed](https://cm360.securedynamics.net/securedynamics-channel/rss.xml?hsLang=en)

 

 

© SecureDynamics 2026. All rights reserved.

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securedynamics.net/#organization",
  "@type" : "Organization",
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "US",
    "addressLocality" : "Santa Clara",
    "addressRegion" : "CA",
    "postalCode" : "95054",
    "streetAddress" : "5201 Great America Pkwy, Suite 320"
  },
  "logo" : {
    "@type" : "ImageObject",
    "url" : "https://securedynamics.net/hubfs/SecureDynamics%20Zscaler%20Logo-1.webp"
  },
  "name" : "SecureDynamics",
  "sameAs" : [ "https://www.linkedin.com/company/3626024/" ],
  "url" : "https://securedynamics.net/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securedynamics.net/#website",
  "@type" : "WebSite",
  "inLanguage" : "en-US",
  "name" : "SecureDynamics",
  "potentialAction" : {
    "@type" : "SearchAction",
    "query-input" : "required name=search_term_string",
    "target" : {
      "@type" : "EntryPoint",
      "urlTemplate" : "https://securedynamics.net/hs-search-results?q={search_term_string}"
    }
  },
  "publisher" : {
    "@id" : "https://securedynamics.net/#organization"
  },
  "url" : "https://securedynamics.net/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securedynamics.net/deployment/planning-design#service",
  "@type" : "Service",
  "description" : "Planning and design for Zscaler architecture, identity, forwarding, policy baselines, and rollout.",
  "inLanguage" : "en-US",
  "name" : "Zscaler Deployment Planning and Design",
  "provider" : {
    "@id" : "https://securedynamics.net/#organization"
  },
  "url" : "https://securedynamics.net/deployment/planning-design"
}
```