Step 1: Check the connectivity of NSS going to Zscaler by typing the command sudo nss troubleshoot netstat | grep tcp
The results below shows that NSS VM is unable to reach Zscaler node.
Step 2: Do Arp Request to verify the connectivity by typing the command sudo tcpdump –t tap0 –nvvvs0
Step 3: Check the NSS VM hardware address. Type cat /sc/conf/sc.conf
Step 4: Verify the hardware address by typing ifconfig
As we can see on the results below, the hardware address is different from what we have seen from the step 3. Therefore, the hardware address has to be manually change by editing the sc.conf
Step 5: Edit the sc.conf. Type a command sudo vi /sc/conf/sc.conf
Change the hardware address based on what we have seen in the ifconfig
Example: edit the sc.conf file and change the MAC address from smnet_tap_ethaddr=00:22:48:57:37:68 to 00:22:48:59:bc:6d and then reboot the VM and test
Step 6: Reboot the VM
Step 7: Verify the connectivity
Step 8: Once the NSS VM is able to reach the Zscaler node. You should be able to see logs from Zscaler going to your SIE