My question is this: are you sure you want to do that? Zscaler has more than likely implemented as a security tool. Bypassing or disabling it could potentially result in. Creating a Zscaler Package. I normally use the Packages software to create a PKG file. The PKG can be used with the CMAppUtil tool to create a CMMAC file-then I import the CMMAC into SCCM. This gives me the ability to automate the installation of Zscaler using a specific policy configuration. Information on upgrading to macOS Big Sur. Zscaler Root Certificate Firefox In Mac, from the Firefox menu, select Preferences. Click the Advanced icon (or Encryption). Click Certificates (or Encruption). Click View Certificates and Click Import. Navigate to your download folder, select the certificate file (.crt), and click OK. Check Trust this computer to identify websites. The Zscaler App for iOS includes both Zscaler Internet Access and Zscaler Private Access modules. Mobility has raised business productivity, but it’s brought its share of issues, as well. One of the biggest challenges is the need to provide complete, consistent security across devices that you may.
-->If you work with both Cloud App Security and Zscaler, you can integrate the two products to enhance your security Cloud Discovery experience. Zscaler, as a standalone cloud proxy, monitors your organization's traffic enabling you to set policies for blocking transactions. Together, Cloud App Security and Zscaler provide the following capabilities:
- Seamless deployment of Cloud Discovery - Use Zscaler to proxy your traffic and send it to Cloud App Security. This eliminates the need for installation of log collectors on your network endpoints to enable Cloud Discovery.
- Zscaler's block capabilities are automatically applied on apps you set as unsanctioned in Cloud App Security.
- Enhance your Zscaler portal with Cloud App Security's risk assessment for 200 leading cloud apps, which can be viewed directly in the Zscaler portal.
Prerequisites
- A valid license for Microsoft Cloud App Security, or a valid license for Azure Active Directory Premium P1
- A valid license for Zscaler Cloud 5.6
- An active Zscaler NSS subscription
Deployment
In the Zscaler portal, do the steps to complete the Zscaler partner integration with Microsoft Cloud App Security.
In the Cloud App Security portal, do the following integration steps:
Click on the settings cog and select Cloud Discovery Settings.
Click on the Automatic log upload tab and then click Add data source.
In the Add data source page, enter the following settings:
- Name = NSS
- Source = Zscaler QRadar LEEF
- Receiver type = Syslog - UDP
Note
Make sure the name of the data source is NSS. For more information about setting up NSS feeds, see Adding Cloud App Security NSS Feeds.
Click View sample of expected log file. Then click Download sample log to view a sample discovery log, and make sure it matches your logs.
Investigate cloud apps discovered on your network. For more information and investigation steps, see Working with Cloud Discovery.
Any app that you set as unsanctioned in Cloud App Security will be pinged by Zscaler every two hours, and then automatically blocked by Zscaler. For more information about unsanctioning apps, see Sanctioning/unsanctioning an app.
Next steps
If you run into any problems, we're here to help. To get assistance or support for your product issue, please open a support ticket.
ZScaler is the Internet content filtering solution used in the Stokes County School District for all users accessing the Internet inside our District or from District owned devices, used off-site. All users are required to authenticate to the content filter system to gain access to the Internet. Guest Presenters to the Stokes County School District may obtain a day-use username and password from the Technology Department, upon request. Please see your site Media Coordinator or Principal to submit guest access request.
Domain Joined Devices (Windows Desktop & Laptop computers) owned by Stokes County School District
NO USER ACTION NEEDED FOR DOMAIN JOINED DEVICES. Your ZScaler certificate and authentication cookie will automatically push down to your workstation, when you log into the CO domain. This is an automated process that occur's at login. You will NOT need to manually install the certificate to any District owned, domain joined computer. You will be prompted to login to the ZScaler login screen the first time you access the Internet, only once, from each new computer that you login to.
You will login to ZScaler using your Stokes County Domain user credentials as follows: firstname.lastname@stokes.k12.nc.us
When prompted for your password, you will enter the domain password (password that you use to login to the network at your school).
Personally Owned Devices
Personally owned devices are also required to authenticate to the ZScaler Content Filter, to gain access to the Internet. Users will be required to download and install the ZScaler root security certificate. This certificate is installed so that your Internet traffic can be securely transmitted. No data is collected from your computer, and no software or off-site monitoring capabilities are ever installed on personally-owned devices.
Before you install the certificate, you will need to download it to your computer. If you are using a Windows or Mac computer, save the file to your Desktop so that you'll be able to locate it later. Please refer to the installation instructions below, depending on your OS platform.
Download ZScaler Certificate (click here)
Below are the Instructions for manually installing the ZScaler Certificates to various Operating System platforms and Web Browsers for personally owned devices brought into our network.
Windows OS, using Internet Explorer web browser
Download all the ZScaler Certificate and save to your location choice (desktop, flash drive, etc).
Open Internet Explorer.
From Internet Explorer, go to the Toolsmenu, select Internet Options, and then in the window that appears switch to the Content tab and click the 'Certificates' button.
To install the certificate go to the Trusted Root Certification Authorities tab and click the 'Import...' button.
In the Certificate Import Wizard window that appears click the 'Next button.
To select the file, press the 'Browse...' button.
Zscaler Machine Token
Zscaler App Install
Find the saved certificate file (desktop, flash drive, etc.) and click the 'Open' button...'Next','Finish'.
Download Zscaler Application
The first time you open an Internet Page, you will receive a prompt from the Z-Scaler Web filter requesting that you authenticate. You will enter your Stokes Domain Username: firstname.lastname@stokes.k12.nc.us (This will be the same 'format syntax' as your email address.)