Zscaler

Zscaler Internet Access

Dashboard and Browsers

Changes (see Change Browser)

Rule Viewer (see Rule Viewer)

Cleanup (Summary of the number of rules that are disabled or have not been hit in the past year)

Topology

GRE (Generic Routing Encapsulation) Tunnel

IPsec Tunnel

Notes for Zscaler

• Rule and object usage collection and analysis: First, configure Zscaler to allow TOS to analyze syslog information. After configuration, the Last Hit field is populated in the Rule Viewer. From Rule Viewer, search timeLastHit to identify unused rules, You can also search object.timeLastHit and object.notHit to identify unused objects within rules. For details, see TQL queries in the Rule Viewer.

• Schedule and run reports to identify unused rules and objects using the Rule Analytics report in SecureTrack Reporting Essentials. The data is not supported in the Rule and Objects Usage report.

• TOS supports Zscaler advanced firewall visiblity and path analysis including NGFW objects:

  • FQDN objects: Resolved by TOS DNS.

  • Application IDs: When the application is specified and the service field is ANY, TOS treats the service as application-default (only the default ports of the application can pass through the rule).

  • Custom URL categories