Check a PAC file live: which line actually applies
Instead of reading a PAC file line by line: enter a test URL, see the rule that applies. How PAC-Lens reads the active file and makes the path of a request traceable.
Read article
Undo a rule change without waiting for the maintenance window
When a Zscaler rule change does not do what it should: how Configuration Rollback restores the previous state traceably instead of reconstructing it from memory.
Read article
Maintain DLP dictionaries centrally and validate before saving
DLP rules help decide which content may leave the organisation. How DLP Configuration Desk brings dictionaries, engines and notifications together and validates before saving.
Read article
Keep contractor access to protected systems under control
External technicians need access, but not permanently and not to everything. How Vendor Orbit and time-limited sessions keep external ZPA access manageable.
Read article
Make unapproved cloud apps visible and approve them in an orderly way
Shadow IT appears because people want to get their work done. How Shadow IT Findings reveals the cloud services in use and turns a ban into a risk-based decision.
Read article
Steer CASB rules in one place instead of three screens
CASB rules, DLP checks and malware scans belong together but are maintained separately. How CASB Guard brings them together and makes a rule's effect visible.
Read article
Maintain custom URL categories without hunting for them each time
Custom URL categories grow quietly and are rarely tidied. How Category Forge bundles their maintenance and turns a scattered collection into a manageable order.
Read article
Assign your own roles without sharing super admin rights
Anyone working in Zscaler operations needs permissions, but rarely all of them. Why graded roles are more than a security measure and how they relieve day-to-day operations.
Read article
Spot connector outages before the first call comes in
App connectors are invisible as long as they run. How Connector Status Overview makes their state visible and turns an incident report into an observation.
Read article
The video call runs. Checked beforehand, not searched afterwards.
A short self-test before an important meeting says whether the connection holds. How Service Tunnel Check turns an assumption into an answer before the call begins.
Read article
Manage several ZPA microtenants from one interface
Microtenants separate areas of responsibility within a ZPA environment. How ZPA Microtenant Control restores the overview without softening the separation.
Read article
NSS Virtual Appliance: The Download Keeps Running in the Background
The NSS Virtual Appliance download shows no progress and looks dead. It keeps running in the background regardless, here is how to prove that in the browser before clicking again.
Read article
Analyzing Zscaler Client Connector logs: from export to finding
How Log Analyzer evaluates ZCC log bundles and how CentaurNexusAgent brings structured findings directly into the Unified Support Center.
Read article
Zscaler self-service directly in the browser
How a browser extension brings access requests, app requests and connection checks into the user workflow without a portal switch.
Read article
What NSS and LSS feeds enable in CentaurNexus
How NSS web, NSS firewall and ZPA LSS feeds support user context, reporting, rule assessment and change retrospectives in CentaurNexus.
Read article
Confirm Zscaler changes only after read-back
A controlled write does not end with the API call. Target-system effect and read-back are required before a change is successful.
Read article
Connect Zscaler operations with ITSM, Teams and Slack
Connect ServiceNow, Jira Service Management, Freshservice and Zendesk, and send selected outbound events to Teams or Slack.
Read article
Security reports and URL assessments without admin dependency
How security teams interpret reports, approvals and URL assessments with source, data age and coverage.
Read article
Simple Zscaler approvals in the admin app
What the native CentaurNexusMobile for iOS and Android covers, and why complex rule changes remain in the web cockpit.
Read article
Regional hosting and qualified self-hosting
How CentaurNexus is delivered regionally, what applies to EU customers and why self-hosting is qualified before commitment.
Read article
Beyond ZIA, ZPA and ZDX: Zscaler operations through OneAPI
How CentaurNexus brings supported Zscaler domains together through OneAPI in an operational and governance layer.
Read article
Getting more from your Zscaler license: the configuration health check
Many Zscaler customers do not use every licensed capability. A configuration health check structures findings and actions for documented reviews.
Read article
Finding and cleaning up unused Zscaler rules (stale rules)
Identify orphaned, conflicting and shadowed Zscaler rules and clean them up in a controlled way. Read-only analysis with Policy Hygiene Desk and Policy Conflict Review, remediation approved individually and via four-eyes.
Read article
Managing multiple Zscaler tenants from a single interface
MSPs and enterprise IT with multiple Zscaler tenants: cross-tenant help desk in one interface, RBAC domain scoping, 360-degree search and four-eyes approvals instead of many logins.
Read article
Is it Zscaler or the Wi-Fi? Root cause analysis in minutes
Teams is stuttering and the suspicion immediately falls on Zscaler. How Connectivity Triage Map pulls together the ZDX chain and policy status and names the real cause in plain language: ISP, Wi-Fi, device or Zscaler.
Read article
Zscaler support without admin rights across supported domains
How the help desk handles Zscaler user issues in a role-based context without broad Zscaler admin rights for every operator.
Read article