This playbook blocks domains using Zscaler.
The playbook checks whether the Zscaler integration is enabled, whether the Domain input has been provided and if so, blocks the domain.
Zscaler Internet Access
- Details
- Content
- Dependencies
- Version History
Zscaler is a cloud security solution built for performance and flexible scalability.
Playbooks
| Name | Description |
|---|---|
| Block Domain - Zscaler |
Integrations
| Name | Description |
|---|---|
| Zscaler Internet Access | Zscaler is a cloud security solution built for performance and flexible scalability. This integration enables you to manage URL and IP address allow lists and block lists, manage and update categories, get Sandbox reports, and manually log in, log out, and activate changes in a Zscaler session. |
Modeling Rules
| Name | Description |
|---|---|
Zscaler Internet Access Modeling Rule |
Playbooks
| Name | Description |
|---|---|
| Block Domain - Zscaler | This playbook blocks domains using Zscaler. |
Integrations
| Name | Description |
|---|---|
| Zscaler Internet Access | Zscaler is a cloud security solution built for performance and flexible scalability. This integration enables you to manage URL and IP address allow lists and block lists, manage and update categories, get Sandbox reports, and manually log in, log out, and activate changes in a Zscaler session. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
1.3.0 - R3863575 (October 18, 2022)
- 21429
- 21215
Download
Integrations
Zscaler Internet Access
Added the requestTimeout parameter, which enables you to define the amount of time (in seconds) that the http requests to zscaler will wait before it throws an error. Default was left to 15 seconds.
- Updated the Docker image to: demisto/python3:3.10.7.33922.
- 21429
- 21215
Download
1.2.0 - 2888155 (May 8, 2022)
Integrations
Zscaler Internet Access
Enhanced version of the content pack "Zscaler Internet Access". Changes:
- More details from API returned on error
- Added command zscaler-get-users
- Added command zscaler-get-departments
- Added command zscaler-get-usergroups
- Added command zscaler-update-user
- Updated the Docker image to: demisto/python:2.7.18.27799.
1.1.17 - R2615718 (March 20, 2022)
Integrations
Zscaler Internet Access
- Fixed an issue in the url command where a non indicative error was returned on error status code 406.
1.1.16 - 2260252 (January 16, 2022)
Integrations
Zscaler Internet Access
- General documentation improvements.
1.1.15 - R2146019 (December 21, 2021)
Integrations
Zscaler
- Added the filter and query arguments to the zscaler-get-blacklist command.
- Documentation fixes
Playbooks
Block Domain - Zscaler
- Documentation fixes
1.1.13 - 2022871 (November 29, 2021)
Integrations
Zscaler
- Updated the Docker image to: demisto/python:2.7.18.24398.
1.1.12 - 1913264 (November 8, 2021)
Integrations
Zscaler
- Changed the parameter Credentials to Username to better reflect its purpose.
1.1.11 - 1782770 (October 12, 2021)
Integrations
Zscaler
- Added array input support for ip command.
1.1.10 - 7789574 (September 26, 2021)
Integrations
Zscaler
- Updated the Docker image to: demisto/python:2.7.18.24066.
1.1.9 - 7640590 (September 16, 2021)
Playbooks
New: Block Domain - Zscaler
- This playbook blocks domains using Zscaler.
The playbook checks whether the Zscaler integration is enabled, whether the Domain input has been provided and if so, blocks the domain. (Available from Cortex XSOAR 5.5.0).
1.1.8 - 7335091 (August 29, 2021)
Integrations
Zscaler
- Fixed an issue where the URL protocol was omitted from the results of the url command.
1.1.7 - 411157 (August 13, 2021)
Integrations
Zscaler
- Upgraded the Docker image to: demisto/python:2.7.18.22912.
1.1.6 - 387183 (June 20, 2021)
Integrations
Zscaler
- Upgraded the Docker image to: demisto/python:2.7.18.20958.
1.1.5 - 376375 (June 3, 2021)
Integrations
Zscaler
- Fixed an issue where the zscaler-category-add-url and zscaler-category-remove-url commands would fail on large categories.
1.1.4 - 366242 (May 25, 2021)
Integrations
Zscaler
- Added support for the get_ids_and_names_only argument to the get-categories command.
1.1.3 - 342151 (May 2, 2021)
Integrations
Zscaler
- Fixed an issue where the zscaler-get-categories command failed on KeyError.
1.1.2 - 279146 (February 11, 2021)
Integrations
Zscaler
- Fixed an issue where the integration expirienced timeout errors.
1.1.1 - R264879 (January 27, 2021)
Integrations
Zscaler
- Fixed an issue where some arguments were incorrectly marked as default arguments.
1.1.0 - R262872 (January 26, 2021)
Integrations
Zscaler
- Added support for the custom_categories_only argument for the get-categories command.
- Added the zscaler-url-quota command which can be used for URL quota information.
1.0.6 - R180529 (November 9, 2020)
Integrations
Zscaler
- Add the following new parameters:
- Auto Activate Changes - When enabled, the integration activates the Zscaler command changes after
each execution. If disabled, the user will have to call zscaler-activate-changes
to activate Zscaler command changes. - Auto Logout - When enabled, the integration will logout with each command execution.
- Auto Activate Changes - When enabled, the integration activates the Zscaler command changes after
- Added the following new commands:
- zscaler-login - Manually create a Zscaler login session. This command will also try to log out of the previous session.
- zscaler-logout - Log out of the current Zscaler session. To be used when the Auto Logout command is disabled.
- zscaler-activate-changes - Activate the changes executed by other Zscaler commands. To be used when the Auto Activate Changes command is disabled.
- Added array handling for the following commands:
- ip - The comma-separated list of IP addresses will be handled in a single command execution.
- zscaler-category-remove-ip - The comma-separated list of IP addresses will be handled in a single command execution.
- zscaler-whitelist-ip - The comma-separated list of IP addresses will be handled in a single command execution.
- zscaler-undo-whitelist-ip - The comma-separated list of IP addresses will be handled in a single command execution.
- zscaler-blacklist-ip - The comma-separated list of IP addresses will be handled in a single command execution.
- zscaler-undo-blacklist-ip - The comma-separated list of IP addresses will be handled in a single command execution.
- url - The comma-separated list of URLs will be handled in a single command execution.
- zscaler-whitelist-url - The comma-separated list of URLs will be handled in a single command execution.
- zscaler-undo-whitelist-url - The comma-separated list of URLs will be handled in a single command execution.
- zscaler-blacklist-url - The comma-separated list of URLs will be handled in a single command execution.
- zscaler-undo-blacklist-url - The comma-separated list of URLs will be handled in a single command execution.
1.0.5 - 132259 (October 1, 2020)
Integrations
Zscaler
- Maintenance and stability enhancements.
1.0.4 - R124496 (September 23, 2020)
Integrations
Zscaler
Fixed an issue where URLs were sent to the Zscaler server with the protocol prefix.
1.0.3 - 83267 (August 6, 2020)
Integrations
Zscaler
Added urlClassificationsWithSecurityAlert to the url command context.
1.0.2 - R65573 (July 15, 2020)
Integrations
Zscaler
Improved list handling for the zscaler-category-add-url and zscaler-category-add-ip commands.
PUBLISHER
Cortex
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | July 15, 2020 | |
| Last Release | November 8, 2022 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
