> For the complete documentation index, see [llms.txt](https://docs.octoxlabs.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.octoxlabs.com/adapters/adapters/zscaler-zdx.md).

# Zscaler ZDX

## Connection Requirements

### 1 - Domain

The host of the ZDX API for your cloud. Enter it without the protocol and without a trailing path.

{% hint style="info" %}
**Default:** api.zdxcloud.net
{% endhint %}

{% hint style="danger" %}
The host changes with the Zscaler cloud your tenant is hosted on. You can see it in the ZDX Admin Portal, in the same page where the API key is created.
{% endhint %}

### 2 - API Key

The **Key ID** of an API key generated in the ZDX Admin Portal.

### 3 - API Secret

The **Key Secret** that belongs to the API key entered above. It is shown only once, when the key is created.

{% hint style="info" %}
**You can follow the steps below.**
{% endhint %}

1. Log in to the **ZDX Admin Portal**.
2. Navigate to **Administration** > **API Keys**.
3. Click **Add API Key** and enter a name for the key.
4. Make sure the key is **Enabled**. A role with **read only** permission is enough, because all requests the adapter sends are read operations.
5. Copy the **Key ID** and the **Key Secret** before closing the dialog.

### 4 - Proxy

Proxy url. (optional)

### 5 - Timeout

The amount of time (in seconds) to wait for API responses.

{% hint style="info" %}
**Default:** 30
{% endhint %}

{% hint style="info" %}
**About the collected data**

ZDX reports the devices and users that were **active in the last two hours**, which is the widest time range a single API request is allowed to cover. A device that is powered off or offline during the discovery is not listed in that run. Assets already collected are never removed, so running the discovery several times a day builds the inventory up gradually and gives wider coverage than a single daily run.
{% endhint %}

{% hint style="info" %}
**About the rate limit**

The ZDX API applies a rate limit per source IP address, and the ceiling depends on your license tier. The adapter reads the rate limit headers the API returns and slows itself down before the limit is reached, so a discovery over a large number of devices can take a while to finish.
{% endhint %}

{% hint style="danger" %}
**Attention**

Please perform a connection test to ensure there is a valid connection to the Zscaler Digital Experience host. When the discovery operation is finalized you will be able to see the details on Assets page.
{% endhint %}
