Surrogate IP
termZIA mechanism mapping a known internal IP to an authenticated user for a period, so traffic that cannot carry credentials still gets user-level policy.
The proxy-auth fallback for the unauthenticatable - printers, tools, embedded clients.