Zscaler

Zscaler is a cloud security solution built for performance and flexible scalability. This integration enables you to manage URL and IP address allow lists and block lists, manage and update categories, get Sandbox reports, create, manage, and update IP destination groups and manually log in, log out, and activate changes in a Zscaler session.

Category

Network Security

Pack

Zscaler

Configuration parameters

• cloud — Cloud Name (i.e., <https://zsapi.zscalertwo.net>) (required)
• credentials — Username (required)
• creds_key —
• key — API Key
• reliability — Source Reliability
• auto_logout — Auto Logout
• auto_activate — Auto Activate Changes
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• requestTimeout — Timeout (in seconds) for HTTP requests to Zscaler

Commands (31)

• domain — Looks up the classification for each of the specified Domains.
• ip — Looks up the classification for each of the specified IP addresses.
• url — Looks up the classification for the each of the specified URLs.
• zscaler-activate-changes — Activates the changes executed by other Zscaler commands in this session.
• zscaler-blacklist-ip — Adds the specified IP addresses to the block list.
• zscaler-blacklist-url — Adds the specified URLs to the block list.
• zscaler-category-add-ip — Adds IP address to the specified category.
• zscaler-category-add-url — Adds URLs to the specified category.
• zscaler-category-remove-ip — Removes IP address from the specified category.
• zscaler-category-remove-url — Removes URLs from the specified category.
• zscaler-create-ip-destination-group — Adds a new IP destination group.
• zscaler-delete-ip-destination-groups — Deletes the IP destination group associated with the specified group ID.
• zscaler-edit-ip-destination-group — Updates the IP destination group information for the specified group ID.
• zscaler-get-blacklist — Retrieves the Zscaler default block list.
• zscaler-get-categories — Retrieves a list of all categories.
• zscaler-get-departments — Get a list of departments. It can be searched by name.
• zscaler-get-usergroups — Gets a list of groups.
• zscaler-get-users — Get Zscaler users.
• zscaler-get-whitelist — Retrieves the Zscaler default allow list.
• zscaler-list-ip-destination-groups — Gets a list of all IP destination groups or the IP destination group information for the specified group ID.
• zscaler-login — Manually create a Zscaler login session. This command will also try to log out of the previous session.
• zscaler-logout — Logs out of the current Zscaler session.
• zscaler-sandbox-report — Retrieves a full or summary report of the file that was analyzed by Sandbox. The file is represented by the specified MD5 hash.
• zscaler-undo-blacklist-ip — Removes the specified IP addresses from the block list.
• zscaler-undo-blacklist-url — Removes the specified URLs from the block list.
• zscaler-undo-whitelist-ip — Removes the specified IP addresses from the allow list.
• zscaler-undo-whitelist-url — Removes the specified URLs from the allow list.
• zscaler-update-user — Updates the user information for the specified ID.
• zscaler-url-quota — Gets information on the number of unique URLs that are currently provisioned for your organization as well as how many URLs you can add before reaching that number.
• zscaler-whitelist-ip — Adds the specified IP address to the allow list.
• zscaler-whitelist-url — Adds the specified URLs to the allow list.