Protection Against Domain Fronting
Domain fronting is blocked by all major CDNs (amazon, Google, Cloudflare etc.). Domain fronting "bad" host can be detected/blocked by multi-layered Zscaler engines (IPS, Pagerisk,......
Ranges & Limitations for Zscaler Configuration
Active Directory & OpenLDAP Synchronization Following are the Active Directory (AD) and OpenLDAP synchronization ranges and limitations. Feature Limit Primary/Secondary Directory Name 255 characters Authentication......
Subscribe to Zscaler Trust
Subscribe to Zscaler Trust Process Access https://trust.zscaler.com/ and click on ‘Subscribe’. Sign Up using your working email address. Check your email address and click ‘Click......
Testing SSL Inspection Policy
Zscaler do not provide a test page for testing SSL Inspection. But you can still test these settings using 3rd party page such as https://badssl.com.......
Tunnel 2.0: Domain Based Bypasses + Proxy Listener Configuration
In the Tunnel forwarding mode with Z-Tunnel 2.0, Zscaler Client Connector behaves as a pseudo-VPN client and ‘includes’ or ‘excludes’ traffic at the IP Layer,......
URL & SSL Policies Co-Relation
This article will elaborate on how Zscaler service evaluate URL request when single URL logically belongs to multiple URL Categories and referenced in both URL......
ZIA NSS VM Can't connect to the Zscaler Cloud
Step 1: Check the connectivity of NSS going to Zscaler by typing the command sudo nss troubleshoot netstat | grep tcp The results below shows......
Zscaler Client Connector is not capturing IPV6 Traffic
Presently Zscaler Client Connector is not capturing IPV6 traffic. In the forwarding profile you can specify to drop IPV6 traffic and you can specify in......
Zscaler DLP supported File Types
Archive - ZIP w/Suspicious Script (js, vbs, svg, ps1, hta, cmd, lnk) Database - ACCDB (accdb) - SQL (sql, sqlproj, eql) Executable - Appx (appx)......
Zscaler Root & Intermediate Certificate Validity Period
Generally, the root certificate will issue the intermediate certificate as per the certificate chaining process . So, generally Zscaler Root Certificate will be having a......
Zscaler Unauthenticated Traffic
Sometimes, Zscaler service does not identify the user's traffic For example, the service does not authenticate user traffic to URLs or cloud apps you have......
Tunnel 2.0 DTLS and TLS mode
- Based on multiple reports and data analysis, it is observed that certain ISPs deprioritize UDP-based traffic which includes DTLS. DTLS is the primary transport......
