Zscaler Client Connector

Zscaler Client Connector is an lightweight Zscaler agent installed on endpoints to ensure that internet traffic and access to your organization's internal apps are secure and in compliance with your organization's policies, even when you are off your corporate network.

DataBee integrates with Zscaler Client Connector API’s to provide visibility into an organizations adoption of zero trust.

Integration: API

Tables: Device Inventory Info

Zscaler Configuration

The user organization must meet the following prerequisites before accessing the Zscaler Client Connector API:

• The user must enable API access for their own organization.

• To enable the API, contact Zscaler Support orsubmit a Zscaler Support ticket.

  To configure Zscaler:

1. Generate an API Key.

   1. In the Zscaler Client Connector Portal, go to Administration > Public API.

   2. Click Add API Key. The Add API Key window appears.

      

100. In the Add API Key window, fill in the required information:

     1. Name: Enter a name for the API key. The name must be alphanumeric, cannot contain spaces, and up to a maximum of 50 characters.

     2. Status: Make sure Enabled is selected.

     3. Role: Select Read access for the key.

     4. Session Validity Interval (In Seconds): Enter the amount of time the key is available to use.

        

101. Click Save and the client secret and key will be displayed. Copy this information as it will be needed for setting up authentication in the DataBee UI.

DataBee Configuration

1. Log into the DataBee console, navigate to Data and click on Add New Data Source.

   

2. Search for Zscaler Client Connector and select it

3. Enter the data source details: name, email

   

4. Select API Ingest

5. In the configuration window, choose TokenUrlAuth as the authorization method.

   1. Enter the Client Key and Secret generated from Zscaler earlier.

   2. API URL: enter https://api-mobile.<cloudname> /papi/public/v1/getDevices.

      TOKEN URL: https://api-mobile.<cloudname>/papi/auth/v1/login