Surrogate IP
termcloudsecurity
ZIA mechanism mapping a known internal IP to an authenticated user for a period, so traffic that cannot carry credentials still gets user-level policy.
The proxy-auth fallback for the unauthenticatable - printers, tools, embedded clients.