autobotAI

Zscaler

Overview

The Zscaler integration allows autobotAI to connect with the Zscaler cloud-native zero trust platform through the OneAPI framework. This enables programmatic access to Zscaler Internet Access (ZIA) and other Zscaler products for automated security policy management, threat detection, user management, and network security monitoring across your organization.

This guide provides instructions for setting up the Zscaler integration in your autobotAI account. By completing this process, you will connect your Zscaler tenant and its associated resources to the platform.

Prerequisites

Before starting, ensure you have:

  • A Zscaler tenant migrated to ZIdentity (required for OneAPI)
  • An API Client created in the ZIdentity Admin UI with the required scopes/roles
  • Your organization's Vanity Domain (e.g., if your login URL is https://mycompany.zslogin.net, the vanity domain is mycompany)

Instructions for creating an API Client can be found in the Additional Information section.

Steps to Set Up Zscaler Integration

Step 1:
Navigate to the Integrations page by selecting Integrations from the menu. Click the + Add Integration button in the top-right corner to view available integrations.

add_integration

Step 2:
From the list, under the Security Tools section, select Zscaler + Add to create the Zscaler integration.

select_zscaler

Step 3:
Fill in the required fields as follows:

Note: Fields marked with an asterisk (*) are mandatory.

  • Alias: Provide a meaningful name or alias for this integration.
  • Groups: Use groups to organize multiple integrations, similar to how labels work in email systems.
  • Client ID: Enter the API Client ID from ZIdentity.
  • Client Secret: Enter the corresponding Client Secret.
  • Vanity Domain: Enter your organization's vanity domain (the part before .zslogin.net).
  • Test API Path: API path to test integration (default: /zia/api/v1/status).
  • Test HTTP Method: HTTP method to use for testing (GET, POST, or HEAD).
  • Skip Test Integration: Enable to bypass the integration test (useful when API is not accessible).
add_details

Verify the information, then click Create to complete the integration.

Step 4:
After the integration is successfully created, locate it under Integrations. Click on the three dots on the left side and select Test to ensure your integration is properly configured with autobotAI.

validation

Additional Information

How to Create an API Client in ZIdentity

  1. Log in to ZIdentity:

    • Navigate to your Zscaler admin portal and access the ZIdentity Admin UI.

  2. Create an API Client:

    • Go to Administration > API Clients.
    • Click Add API Client.
    • Provide a name and description for the API client.
    • Select the appropriate API scopes and roles for your use case.
    • Click Save.

  3. Copy Credentials:

    • After creation, copy the Client ID and Client Secret. The Client Secret is only shown once, so store it securely.

  4. Find Your Vanity Domain:

    • Your vanity domain is the subdomain in your Zscaler login URL. For example, if you log in at https://mycompany.zslogin.net, your vanity domain is mycompany.

Supported Connection Interfaces

The Zscaler integration supports two connection interfaces:

  • REST API: Access 162 ZIA endpoints for policy management, user management, firewall rules, DLP, URL filtering, and more.
  • Python SDK: Uses the official zscaler-sdk-python package with the ZscalerClient for programmatic access to ZIA, ZPA, ZDX, ZCC, and other Zscaler products.

References