Zscaler
Import your enrolled devices inventory and cloud security policies from Zscaler
The Zscaler connector allows you to import your enrolled devices inventory, cloud security policies and users from your Zscaler platform.
Objective
The Zscaler connector allows you to import the following information:
- Enrolled devices inventory (Zscaler clients)
- Cloud security policies
- Users and groups
Prerequisites
- Access to Zscaler with data export rights
- Active Zscaler platform
Import modes
This connector works in file import mode. OverView accepts the following formats:
- CSV: tabular export from Zscaler
- JSON: structured export from Zscaler
Information to provide in OverView
| Field | Description |
|---|---|
| Client ID | Zscaler OAuth2 client ID |
| Client Secret | Zscaler OAuth2 client secret |
| Vanity Domain | your-company.zscloud.net |
Parameters
These parameters are optional. Leave them at their default value unless you have a specific reason to change them.
| Parameter | Description | Default |
|---|---|---|
| Crawl ZCC | Enable crawling of Zscaler Client Connector data | Disabled |
| Crawl ZIA | Enable crawling of Zscaler Internet Access data | Disabled |
Procedure
Export data from Zscaler
- Log in to the Zscaler console.
- Go to Administration > Devices or Client Management for inventory.
- Select devices to export.
- Click Export and choose the CSV or JSON format.
- For policies, go to Security Policies and use the export.
- Download the export file.
Import into OverView
- In OverView, go to Data Sources Settings > Sources.
- Select Zscaler and click Configure.
- Choose the CSV Import or JSON Import mode according to your export format.
- Import your export file.
- Click Save Configuration.
Synchronization frequency
Exports can be scheduled regularly via:
- Manual weekly export
- Integration with a scheduler for automation
- Periodic export script via Zscaler API
Alternative: file import through DropPoint
The API access described above is the recommended method for this connector. Where it is not available (a segregated network, a version or licence without API, an export you already produce), OverView accepts file exports, to be uploaded to the bucket dedicated to Zscaler.
Bucket : s3://zscaler/
Example : s3://zscaler/export.csv
The procedure is described in the OverView DropPoint guide: generating credentials, configuring the client, then sending files from the OverView web interface, the AWS CLI or an SDK. Its examples come pre-filled with this bucket when you follow this link.