Zscaler Client Connector

Zscaler Client Connector is an agent that runs on the endpoint device. It enables a seamless connection to Zscaler’s cloud service. More information can be found at the Zscaler website.

Integration Method: API

Tables: Device Inventory Info (5001)

This integration supports the following events.

This integration supports the following versions.

Prerequisites

• The user must enable the Zscaler Client Connector API for their organization. To enable the API, contact Zscaler Support or submit a Zscaler Support ticket.

• The user should have access to the DataBee console.

Configuration Overview

1. Generate an API Key from the Zscaler Client Connector portal.

2. Add the Zscaler Client Connector data feed in the DataBee console with the below parameters.

Zscaler Configuration

1. Navigate to Policy > Zscaler Client Connector Portal under Mobile section.
    

2. Generate an API Key.

   1. In the Zscaler Client Connector Portal, go to Administration > Public API.
       

   2. Click on the + Add API Key option.
       

   3. In the “Add API Key” window, fill in all the required information:

      • Name: enter a name for the API key. The name must be alphanumeric, cannot contain spaces, and up to a maximum of 50 characters.

      • Status: make sure Enabled is selected.

      • Role: select Read access for the key.

      • Session Validity Interval (In Seconds): enter the amount of time the key is available to use. Enter a session validity interval value between 30 to 999999999 seconds.

   4. Click Save.
       

3. Copy the Client Secret value for later use.
    

   Note:

   Copy and save the Client secret, as it’ll not be shown again. Once the configured Session Validity Interval is over, these credentials will expire, and the user needs to generate them again and update them in DataBee as well.

4. Copy the Client ID for the newly created secret.
    

5. Record the Zscaler Cloudname from the portal URL for setting up API endpoint, as highlighted in the above screenshot.

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for the Zscaler Client Connector and click it as shown below.
    

3. Click on the API Ingest option for collection method.  

4. Enter feed contact information and click Next.
    

5. In the configuration page, confirm the following:

   • API Base URL: this is the base URL that DataBee will interact with, wherein replace the <cloudname> placeholder with Zscaler Cloudname

   • Authorization Method: Token URL Auth

   • Token URL: replace the <cloudname> placeholder with Zscaler Cloudname copied earlier from the portal.

   • Secret Key: paste the Client Secret for the earlier generated API Key.

   • Key Id: paste the Client ID for the earlier generated API Key.

   • Event Types: preselected for all the event types that integration pulls.
     

6. Click Submit.

Troubleshooting Tips

• Ensure that API is enabled for the organization. If you encounter any issues with the Zscaler Client Connector API, contact Zscaler Support or submit a Zscaler support ticket.

• Ensure the secrets are pasted correctly. Since you cannot view the API secrets after the 1^st time, re-create the API Key, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.