This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Log in to ask a question
Log in to ask a question

Web Proxy Zscaler

Posted on 02-16-2024 07:28 AM
muniraja1
Bronze 1
Bronze 1
Reply posted on --/--/---- --:-- AM

how to integrate  Web Proxy Zscaler into SIEM. Please share the URL.

1 2 194
Topic Labels
2 REPLIES 2

Posted on --/--/---- --:-- AM
DanHansen
Silver 1
Silver 1
Reply posted on --/--/---- --:-- AM

Settings - Feeds - ADD FEED - HTTP(S) Files (non-API) choose your Zscaler Log Type of choice on the Google end you should then be able to drop in your URI from the Zscaler side. Sorry I have no documentation for the work done Zscaler side and the Google documentation is very limited for this function.  Another option might be using a custom Forwarder for your web proxy.   

Posted on --/--/---- --:-- AM
jkephsecru
Bronze 3
Bronze 3
Reply posted on --/--/---- --:-- AM

A quick and easy method is by using the NSS (nanolog streaming service) to ship the logs to your Forwarder. https://help.zscaler.com/zia/adding-cloud-nss-feeds-web-logs
I have not tested this myself recently but I believe this method could work with the re-released webhook feature.

Further information about NSS can be found here : https://help.zscaler.com/zia/understanding-nanolog-streaming-service

0 Likes