Zscaler Mac M1
Zscaler Mac Install
Zscaler Mac App
Zscaler Mac Processes

Zscaler have been following the latest developments with the Mac OS X Flashback Trojan and its exploitation of the recently patched Java vulnerability. Mac OS X (MacBook Pro, MacBook Air, iMac, Mac mini, etc.) Download ZScaler Certificate. Double-Click files and depending on your version of OS X, the 'Keychain' window will open, where you will install the ZScaler Certificates. Information on upgrading to macOS Big Sur.

-->

If you work with both Cloud App Security and Zscaler, you can integrate the two products to enhance your security Cloud Discovery experience. Zscaler, as a standalone cloud proxy, monitors your organization's traffic enabling you to set policies for blocking transactions. Together, Cloud App Security and Zscaler provide the following capabilities:

Seamless deployment of Cloud Discovery - Use Zscaler to proxy your traffic and send it to Cloud App Security. This eliminates the need for installation of log collectors on your network endpoints to enable Cloud Discovery.
Zscaler's block capabilities are automatically applied on apps you set as unsanctioned in Cloud App Security.
Enhance your Zscaler portal with Cloud App Security's risk assessment for 200 leading cloud apps, which can be viewed directly in the Zscaler portal.

Prerequisites

A valid license for Microsoft Cloud App Security, or a valid license for Azure Active Directory Premium P1
A valid license for Zscaler Cloud 5.6
An active Zscaler NSS subscription

Deployment

In the Zscaler portal, do the steps to complete the Zscaler partner integration with Microsoft Cloud App Security.
In the Cloud App Security portal, do the following integration steps:
1. Click on the settings cog and select Cloud Discovery Settings.
2. Click on the Automatic log upload tab and then click Add data source.
3. In the Add data source page, enter the following settings:
  - Name = NSS
  - Source = Zscaler QRadar LEEF
  - Receiver type = Syslog - UDP
  Note
  Make sure the name of the data source is NSS. For more information about setting up NSS feeds, see Adding Cloud App Security NSS Feeds.
4. Click View sample of expected log file. Then click Download sample log to view a sample discovery log, and make sure it matches your logs.
Investigate cloud apps discovered on your network. For more information and investigation steps, see Working with Cloud Discovery.
Any app that you set as unsanctioned in Cloud App Security will be pinged by Zscaler every two hours, and then automatically blocked by Zscaler. For more information about unsanctioning apps, see Sanctioning/unsanctioning an app.

Next steps

If you run into any problems, we're here to help. To get assistance or support for your product issue, please open a support ticket.

The thoughts and opinions in this post are my own and do not necessarily reflect those of Zscaler.

In this guide, we’ll walkthrough how to configure Microsoft Intune from scratch and use it to deploy the Zscaler Client Connector agent (ZCC) - formerly known as Zscaler Client Connector (ZCC).

Due to length, I’ve split this into two posts (the orginal was over 8000 words):

This post covers deployment on Windows and macOS.
The other post, available here, covers iOS and Android.

I suggest you use the Table of Contents to jump to the section that you need.

According to Microsoft:

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM).

With Intune, you can:

Set rules and configure settings on personal and organization-owned devices to access data and networks.
Deploy and authenticate apps on devices – on-premises and mobile.
Be sure devices and apps are compliant with your security requirements.

In order to access Intune, you need to have either a Microsoft 365 or Enterprise & Mobility E3/E5 subscription. If you’re using a free Azure account, you’ll need to sign up to a trial, or pay per user (which can get costly).

Scott Bullock of Zscaler (@scottyb) has posted a great 10 minute video in their community forum that runs through the user experience of enrolling a fresh Windows 10 device into Intune. ZCC is automatically pushed out and transparently authenticated for both ZIA and ZPA.

When adding an app to Intune, you’ll be prompted to allocate the groups of users (or devices) that the app will be rolled out to. Hence before beginning, ensure you have the users of Zscaler inside of an AD or Azure AD group that you can assign the Zscaler Client Connector app to.

Depending on whether you want the ZCC app to be mandatory or optional for certain groups of users, you may want to divide your users into two groups:

The users to which the app is MANDATORY. Any user in this group will have the app automatically pushed out to them.
The users to which the app is OPTIONAL. The app will not be automatically pushed for users in this group, allowing them to go to the Company Portal and download it themselves if they choose.

In my examples below, I have 3 groups:

Group	Description
ZIA_Entitlement	This is the group of all users that are entitled to use Zscaler Internet Access (ZIA)
ZPA_Entitlement	This is the group of all users that are entitled to use Zscaler Private Access (ZPA). In my case, this is a subset of users from the ZIA_Entitlement group as I might not want to roll ZPA out to every user in the organization.
Zscaler - Mandatory	This group contains every user in the organization to which the ZCC app will be automatically rolled out to. Ie: The majority of users from the above two groups. If this is your organization, you might include the whole org in this group, except select users (eg: some from IT) for which the app will be optional.

We’ll be using the Microsoft Endpoint Manager console (MEM) to orchestrate Intune. You can log in using the same Azure Portal credentials here: https://endpoint.microsoft.com

(Optional) Setting the MDM Authority

If you’re using an existing Office 365 account and have been using the Office 365 MDM, you’ll need to change the MDM authority from Office 365 to Intune. This Microsoft help article will guide you through it.

This section will cover deploying ZCC onto Windows using Intune.

1. Download the Zscaler Client Connector MSI

To start you’ll need the .MSI installer for ZCC from the Zscaler Client Connector Portal. Log into the portal (either through ZIA or ZPA) and navigate to Administration > Zscaler Client Connector Store.

In the Windows panel, download the MSI for the latest 2.X.X version. Do not use the older 1.X.X releases.

2. Add a new Line-of-Business App

Add a new Line of Business (LoB) App

Back in the Apps menu of the MEM portal, navigate to Apps > All Apps > Add. In the panel that appears, scroll to the bottom and under the Other heading, select Line-of-business app. Leslie sansone torrent.

When prompted to select an app package file, upload the MSI of the Zscaler Client Connector you downloaded above and click OK.

Customize the App Details

Fill in the required details about the app:

Field	Content
Name	Enter Zscaler Client Connector 2.X.X.X (where 2.X.X.X is the version number of the app - this will help you distinguish what version is being distributed by Intune)
Description	Enter Zscaler Client Connector
Publisher	Enter Zscaler, Inc
Ignore app version	Set to Yes. ZCC will automatically update itself once deployed, so Intune can safely ignore the version the user has installed after deployment.
Category	(Optional) Select an app category to allocate the Zscaler Client Connector to.</

Zscaler Mac