Zscaler is revolutionizing cloud security by empowering organizations to embrace cloud efficiency, intelligence, and agility—securely. This connector integrate with Zscaler and Perform containment, investigation and remediation action.
This document provides information about the Zscaler Connector, which facilitates automated interactions, with a Zscaler server using FortiSOAR™ playbooks. Add the Zscaler Connector as a step in FortiSOAR™ playbooks and perform automated operations with Zscaler.
Connector Version: 2.0.0
Authored By: Fortinet
Certified: No
Following enhancements have been made to the Zscaler Connector in version 2.0.0:
Use the Content Hub to install the connector. For the detailed procedure to install a connector, click here.
You can also use the yum
command as a root user to install the connector:
yum install cyops-connector-zscaler
For the procedure to configure a connector, click here
In FortiSOAR™, on the Connectors page, click the Zscaler connector row (if you are in the Grid view on the Connectors page) and in the Configurations tab enter the required configuration details:
Parameter | Description |
---|---|
Server URL | URL of the Zscaler server to which you will connect and perform the automated operations. |
Authentication Type | Select an authentication method. You can choose from the following options:
|
Verify SSL | Specifies whether the SSL certificate for the server is to be verified. By default, this option is set to True . |
The following automated operations can be included in playbooks and you can also use the annotations to access operations:
Function | Description | Annotation and Category |
---|---|---|
Get Whitelist URLs | Retrieves the list of all the whitelisted URLs from Zscaler. | whitelist_url Investigation |
Get Blacklist URLs | Retrieves the list of all the blacklisted URLs from Zscaler. | blacklist_url Investigation |
Update Whitelist URLs | Adds or removes URLs from the "Whitelisted URL List" in Zscaler based on the URL and action you have specified. | update_whitelist_urls Miscellaneous |
Block URLs | Adds URLs to the "Blacklisted URL List" in Zscaler based on the URLs you have specified. | block_url Containment |
Unblock URLs | Removes URLs from the "Blacklisted URL List" in Zscaler based on the URLs you have specified. | unblock_url Remediation |
Get Cloud Sandbox Report Quota | Retrieves the cloud sandbox report quota from Zscaler. Note: The resource access quota for retrieving Sandbox Detail Reports is restricted to 1000 requests per day, with a rate limit of 2/sec and 1000/hour from Zscaler. | get_sandbox_report_quota Investigation |
Get MD5 Cloud Sandbox Report | Retrieves a report (full or summary) of the file that was analyzed by the Sandbox in Zscaler based on the MD5 filehash value you have specified. | get_sandbox_report_md5_hash Investigation |
Add URL Category | Adds a new custom URL category in Zscaler based on the URLs and additional fields you have specified. | add_new_category Investigation |
Get URL Categories | Retrieves a list of all URL categories from Zscaler. | get_url_categories Investigation |
Get Lightweight URL Categories | Retrieves a lightweight key-value list of all (including custom) URL categories from Zscaler. | get_lightweight_url_categories Investigation |
Get URL Categories Quota | Retrieves information on the number of unique URLs that are currently provisioned for your organization. It also includes the information on how many URLs you can add before reaching the categories quota number for your organization. | get_url_categories_quota Investigation |
Get URL Category Details | Retrieves the URL category information for the specified category ID from Zscaler. | get_url_category_info Investigation |
Update URL Category | Adds or removes URLs from the category list in Zscaler based on the category ID, URLs, and other input parameters you have specified. | update_url_category Miscellaneous |
Delete URL Category | Deletes a specific URL category from Zscaler based on the category ID you have specified. | delete_url_category Investigation |
URL Lookup | Looks up the categorization of the specified set of URLs in Zscaler. | url_lookup Investigation |
Get Exempted URLs | Retrieves a list of URLs that are exempted from the cookie authentication in Zscaler. | get_exempted_urls Investigation |
Update exempted URLs | Adds or removes a URL from the cookie authentication exempt list in Zscaler based on the URLs you have specified. | update_exempted_urls Miscellaneous |
None.
The output contains the following populated JSON schema:
{ "whitelistUrls": [] }
None.
The output contains the following populated JSON schema:
{ "blacklistUrls": [] }
Parameter | Description |
---|---|
URLs | CSV list of URLs that you want to add or remove from the 'Whitelisted URL List' in Zscaler. |
Action | Action that you want to perform on the specified list of URLs. Choose the Add in List option to add the specified URLs to the 'Whitelisted URL List' in Zscaler. Choose the Remove from List option to remove the specified URLs from the 'Whitelisted URL List' in Zscaler. |
The output contains the following populated JSON schema:
{ "whitelistUrls": [] }
Parameter | Description |
---|---|
URLs | CSV list of URLs that you want to add to the 'Blacklisted URL List' in Zscaler. |
The output contains the following populated JSON schema:
{ "status": "", "result": "" }
Parameter | Description |
---|---|
URLs | CSV list of URLs that you want to remove from the 'Blacklisted URL List' in Zscaler. |
The output contains the following populated JSON schema:
{ "status": "", "result": "" }
None.
The output contains the following populated JSON schema:
{ "startTime": "", "used": "", "allowed": "", "scale": "", "unused": "" }
Parameter | Description |
---|---|
MD5 Hash | Specify the MD5 filehash value of the file that was analyzed by the Sandbox in Zscaler for which you want to retrieve the report from Zscaler. |
Report Type | (Optional) Select the type of report you want to retrieve from Zscaler. You can choose between full (default) or summary. |
The output contains the following populated JSON schema:
{ "DBotScore": { "Vendor": "", "Indicator": "", "Score": "", "Type": "" }, "File": { "Zscaler": { "FileType": "", "DetectedMalware": "" }, "Malicious": { "Vendor": "", "Description": "" }, "MD5": "" } }
Parameter | Description |
---|---|
URLs | Specify the set of URLs to be added in Zscaler. |
Additional Fields | Specify additional fields in the JSON format that you want to add to the new URL category in Zscaler. For example, {"configuredName": "configname", "urls": ["url"]} |
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
Parameter | Description |
---|---|
Custom Only | (Optional) Select this option to retrieve information for only custom URL categories from Zscaler. |
Include Only URL Keyword Counts | (Optional) Select this option, i.e., set it to true to include only URLs and keyword counts in the response. If this option is cleared, i.e., set to false (default), the response includes URLs and keywords. |
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
None.
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
None.
The output contains the following populated JSON schema:
{ "uniqueUrlsProvisioned": "", "remainingUrlsQuota": "" }
Parameter | Description |
---|---|
Category ID | Specify the unique identifier for the URL category for which you want to retrieve information from Zscaler. |
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
Parameter | Description |
---|---|
Category ID | Specify the unique identifier of the URL category in which you want to add or remove URLs in Zscaler. |
Action | Select the action that you want to perform on the specified list of URLs. You can choose between Add to List to add the specified URLs to the 'Whitelisted URL List' in Zscaler or Remove from List to remove the specified URLs from the 'Whitelisted URL List' in Zscaler. |
URL Category Name | (Optional) Name of the URL category. This is only required for custom URL categories. |
URLs | Specify the set of URLs to be updated in the specified URL category in Zscaler. |
Additional Fields | (Optional) Specify additional fields in the JSON format that you want to update in the URL category in Zscaler. For example, {"configuredName": "configname", "urls": ["url"]} |
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
Parameter | Description |
---|---|
Category ID | Specify the unique identifier of the URL category that you want to delete from Zscaler. |
The output contains the following populated JSON schema:
{ "Zscaler": { "Category": { "CustomCategory": "", "Description": "", "ID": "", "URL": [] } } }
Parameter | Description |
---|---|
URLs | (Optional) Specify the set of URLs that you want to be looked up in Zscaler. |
The output contains the following populated JSON schema:
{ "url": "", "urlClassifications": [], "urlClassificationsWithSecurityAlert": [] }
None.
The output contains the following populated JSON schema:
{ "urls": [] }
Parameter | Description |
---|---|
Action | The action applied to the exempted URLs list. To add a URL to the list, set the action parameter to Add to List. To remove a URL, set action to Remove from List. |
The output contains the following populated JSON schema:
{ "urls": [] }
The Sample - Zscaler - 2.0.0
playbook collection comes bundled with the Zscaler connector. These playbooks contain steps using which you can perform all supported actions. You can see bundled playbooks in the Automation > Playbooks section in FortiSOAR™ after importing the Zscaler connector.
Note: If you are planning to use any of the sample playbooks in your environment, ensure that you clone those playbooks and move them to a different collection since the sample playbook collection gets deleted during connector upgrade and delete.
Zscaler is revolutionizing cloud security by empowering organizations to embrace cloud efficiency, intelligence, and agility—securely. This connector integrate with Zscaler and Perform containment, investigation and remediation action.
This document provides information about the Zscaler Connector, which facilitates automated interactions, with a Zscaler server using FortiSOAR™ playbooks. Add the Zscaler Connector as a step in FortiSOAR™ playbooks and perform automated operations with Zscaler.
Connector Version: 2.0.0
Authored By: Fortinet
Certified: No
Following enhancements have been made to the Zscaler Connector in version 2.0.0:
Use the Content Hub to install the connector. For the detailed procedure to install a connector, click here.
You can also use the yum
command as a root user to install the connector:
yum install cyops-connector-zscaler
For the procedure to configure a connector, click here
In FortiSOAR™, on the Connectors page, click the Zscaler connector row (if you are in the Grid view on the Connectors page) and in the Configurations tab enter the required configuration details:
Parameter | Description |
---|---|
Server URL | URL of the Zscaler server to which you will connect and perform the automated operations. |
Authentication Type | Select an authentication method. You can choose from the following options:
|
Verify SSL | Specifies whether the SSL certificate for the server is to be verified. By default, this option is set to True . |
The following automated operations can be included in playbooks and you can also use the annotations to access operations:
Function | Description | Annotation and Category |
---|---|---|
Get Whitelist URLs | Retrieves the list of all the whitelisted URLs from Zscaler. | whitelist_url Investigation |
Get Blacklist URLs | Retrieves the list of all the blacklisted URLs from Zscaler. | blacklist_url Investigation |
Update Whitelist URLs | Adds or removes URLs from the "Whitelisted URL List" in Zscaler based on the URL and action you have specified. | update_whitelist_urls Miscellaneous |
Block URLs | Adds URLs to the "Blacklisted URL List" in Zscaler based on the URLs you have specified. | block_url Containment |
Unblock URLs | Removes URLs from the "Blacklisted URL List" in Zscaler based on the URLs you have specified. | unblock_url Remediation |
Get Cloud Sandbox Report Quota | Retrieves the cloud sandbox report quota from Zscaler. Note: The resource access quota for retrieving Sandbox Detail Reports is restricted to 1000 requests per day, with a rate limit of 2/sec and 1000/hour from Zscaler. | get_sandbox_report_quota Investigation |
Get MD5 Cloud Sandbox Report | Retrieves a report (full or summary) of the file that was analyzed by the Sandbox in Zscaler based on the MD5 filehash value you have specified. | get_sandbox_report_md5_hash Investigation |
Add URL Category | Adds a new custom URL category in Zscaler based on the URLs and additional fields you have specified. | add_new_category Investigation |
Get URL Categories | Retrieves a list of all URL categories from Zscaler. | get_url_categories Investigation |
Get Lightweight URL Categories | Retrieves a lightweight key-value list of all (including custom) URL categories from Zscaler. | get_lightweight_url_categories Investigation |
Get URL Categories Quota | Retrieves information on the number of unique URLs that are currently provisioned for your organization. It also includes the information on how many URLs you can add before reaching the categories quota number for your organization. | get_url_categories_quota Investigation |
Get URL Category Details | Retrieves the URL category information for the specified category ID from Zscaler. | get_url_category_info Investigation |
Update URL Category | Adds or removes URLs from the category list in Zscaler based on the category ID, URLs, and other input parameters you have specified. | update_url_category Miscellaneous |
Delete URL Category | Deletes a specific URL category from Zscaler based on the category ID you have specified. | delete_url_category Investigation |
URL Lookup | Looks up the categorization of the specified set of URLs in Zscaler. | url_lookup Investigation |
Get Exempted URLs | Retrieves a list of URLs that are exempted from the cookie authentication in Zscaler. | get_exempted_urls Investigation |
Update exempted URLs | Adds or removes a URL from the cookie authentication exempt list in Zscaler based on the URLs you have specified. | update_exempted_urls Miscellaneous |
None.
The output contains the following populated JSON schema:
{ "whitelistUrls": [] }
None.
The output contains the following populated JSON schema:
{ "blacklistUrls": [] }
Parameter | Description |
---|---|
URLs | CSV list of URLs that you want to add or remove from the 'Whitelisted URL List' in Zscaler. |
Action | Action that you want to perform on the specified list of URLs. Choose the Add in List option to add the specified URLs to the 'Whitelisted URL List' in Zscaler. Choose the Remove from List option to remove the specified URLs from the 'Whitelisted URL List' in Zscaler. |
The output contains the following populated JSON schema:
{ "whitelistUrls": [] }
Parameter | Description |
---|---|
URLs | CSV list of URLs that you want to add to the 'Blacklisted URL List' in Zscaler. |
The output contains the following populated JSON schema:
{ "status": "", "result": "" }
Parameter | Description |
---|---|
URLs | CSV list of URLs that you want to remove from the 'Blacklisted URL List' in Zscaler. |
The output contains the following populated JSON schema:
{ "status": "", "result": "" }
None.
The output contains the following populated JSON schema:
{ "startTime": "", "used": "", "allowed": "", "scale": "", "unused": "" }
Parameter | Description |
---|---|
MD5 Hash | Specify the MD5 filehash value of the file that was analyzed by the Sandbox in Zscaler for which you want to retrieve the report from Zscaler. |
Report Type | (Optional) Select the type of report you want to retrieve from Zscaler. You can choose between full (default) or summary. |
The output contains the following populated JSON schema:
{ "DBotScore": { "Vendor": "", "Indicator": "", "Score": "", "Type": "" }, "File": { "Zscaler": { "FileType": "", "DetectedMalware": "" }, "Malicious": { "Vendor": "", "Description": "" }, "MD5": "" } }
Parameter | Description |
---|---|
URLs | Specify the set of URLs to be added in Zscaler. |
Additional Fields | Specify additional fields in the JSON format that you want to add to the new URL category in Zscaler. For example, {"configuredName": "configname", "urls": ["url"]} |
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
Parameter | Description |
---|---|
Custom Only | (Optional) Select this option to retrieve information for only custom URL categories from Zscaler. |
Include Only URL Keyword Counts | (Optional) Select this option, i.e., set it to true to include only URLs and keyword counts in the response. If this option is cleared, i.e., set to false (default), the response includes URLs and keywords. |
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
None.
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
None.
The output contains the following populated JSON schema:
{ "uniqueUrlsProvisioned": "", "remainingUrlsQuota": "" }
Parameter | Description |
---|---|
Category ID | Specify the unique identifier for the URL category for which you want to retrieve information from Zscaler. |
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
Parameter | Description |
---|---|
Category ID | Specify the unique identifier of the URL category in which you want to add or remove URLs in Zscaler. |
Action | Select the action that you want to perform on the specified list of URLs. You can choose between Add to List to add the specified URLs to the 'Whitelisted URL List' in Zscaler or Remove from List to remove the specified URLs from the 'Whitelisted URL List' in Zscaler. |
URL Category Name | (Optional) Name of the URL category. This is only required for custom URL categories. |
URLs | Specify the set of URLs to be updated in the specified URL category in Zscaler. |
Additional Fields | (Optional) Specify additional fields in the JSON format that you want to update in the URL category in Zscaler. For example, {"configuredName": "configname", "urls": ["url"]} |
The output contains the following populated JSON schema:
{ "id": "", "configuredName": "", "keywords": [], "keywordsRetainingParentCategory": [], "urls": [], "dbCategorizedUrls": [], "ipRanges": [], "ipRangesRetainingParentCategory": [], "customCategory": "", "scopes": [ { "scopeGroupMemberEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ], "Type": "", "ScopeEntities": [ { "id": "", "name": "", "extensions": { "additionalProp1": "", "additionalProp2": "", "additionalProp3": "" } } ] } ], "editable": "", "description": "", "type": "", "urlKeywordCounts": { "totalUrlCount": "", "retainParentUrlCount": "", "totalKeywordCount": "", "retainParentKeywordCount": "" }, "customUrlsCount": "", "urlsRetainingParentCategoryCount": "", "customIpRangesCount": "", "ipRangesRetainingParentCategoryCount": "" }
Parameter | Description |
---|---|
Category ID | Specify the unique identifier of the URL category that you want to delete from Zscaler. |
The output contains the following populated JSON schema:
{ "Zscaler": { "Category": { "CustomCategory": "", "Description": "", "ID": "", "URL": [] } } }
Parameter | Description |
---|---|
URLs | (Optional) Specify the set of URLs that you want to be looked up in Zscaler. |
The output contains the following populated JSON schema:
{ "url": "", "urlClassifications": [], "urlClassificationsWithSecurityAlert": [] }
None.
The output contains the following populated JSON schema:
{ "urls": [] }
Parameter | Description |
---|---|
Action | The action applied to the exempted URLs list. To add a URL to the list, set the action parameter to Add to List. To remove a URL, set action to Remove from List. |
The output contains the following populated JSON schema:
{ "urls": [] }
The Sample - Zscaler - 2.0.0
playbook collection comes bundled with the Zscaler connector. These playbooks contain steps using which you can perform all supported actions. You can see bundled playbooks in the Automation > Playbooks section in FortiSOAR™ after importing the Zscaler connector.
Note: If you are planning to use any of the sample playbooks in your environment, ensure that you clone those playbooks and move them to a different collection since the sample playbook collection gets deleted during connector upgrade and delete.