Zscaler ZDX

Connection Requirements

1 - Domain

The host of the ZDX API for your cloud. Enter it without the protocol and without a trailing path.

Default: api.zdxcloud.net

The host changes with the Zscaler cloud your tenant is hosted on. You can see it in the ZDX Admin Portal, in the same page where the API key is created.

2 - API Key

The Key ID of an API key generated in the ZDX Admin Portal.

3 - API Secret

The Key Secret that belongs to the API key entered above. It is shown only once, when the key is created.

You can follow the steps below.

1. Log in to the ZDX Admin Portal.

2. Navigate to Administration > API Keys.

3. Click Add API Key and enter a name for the key.

4. Make sure the key is Enabled. A role with read only permission is enough, because all requests the adapter sends are read operations.

5. Copy the Key ID and the Key Secret before closing the dialog.

4 - Proxy

Proxy url. (optional)

5 - Timeout

The amount of time (in seconds) to wait for API responses.

Default: 30

About the collected data

ZDX reports the devices and users that were active in the last two hours, which is the widest time range a single API request is allowed to cover. A device that is powered off or offline during the discovery is not listed in that run. Assets already collected are never removed, so running the discovery several times a day builds the inventory up gradually and gives wider coverage than a single daily run.

About the rate limit

The ZDX API applies a rate limit per source IP address, and the ceiling depends on your license tier. The adapter reads the rate limit headers the API returns and slows itself down before the limit is reached, so a discovery over a large number of devices can take a while to finish.

Attention

Please perform a connection test to ensure there is a valid connection to the Zscaler Digital Experience host. When the discovery operation is finalized you will be able to see the details on Assets page.