All Categories Zscaler Internet Access ZIA NSS VM Can't connect to the Zscaler Cloud

ZIA NSS VM Can't connect to the Zscaler Cloud

Step 1: Check the connectivity of NSS going to Zscaler by typing the command sudo nss troubleshoot netstat | grep tcp

The results below shows that NSS VM is unable to reach Zscaler node.
image.png

Step 2: Do Arp Request to verify the connectivity  by typing the command sudo tcpdump –t tap0 –nvvvs0

image.png

Step 3: Check the NSS VM hardware address. Type cat /sc/conf/sc.conf

 image.png

Step 4: Verify the hardware address by typing ifconfig

As we can see on the results below, the hardware address is different from what we have seen from the step 3. Therefore, the hardware address has to be manually change by editing the sc.conf

image.png

Step 5: Edit the sc.conf. Type a command sudo vi /sc/conf/sc.conf

Change the hardware address based on what we have seen in the ifconfig

Example: edit the sc.conf file and change the MAC address from smnet_tap_ethaddr=00:22:48:57:37:68  to 00:22:48:59:bc:6d and then reboot the VM and test

image.png

Step 6: Reboot the VM

image.png

Step 7: Verify the connectivity

image.png

 

Step 8: Once the NSS VM is able to reach the Zscaler node. You should be able to see logs from Zscaler going to your SIE