A cloud-native Zero Trust security platform (SSE/SASE) that routes user traffic through a globally distributed cloud to enforce security policies, inspect threats, and prevent data loss — without traditional firewalls or VPNs.
What is Zscaler?
Zscaler is a cloud-native Zero Trust security platform built on a Security Service Edge (SSE) and SASE architecture, designed to replace traditional network security approaches that rely on firewalls and VPNs. All user traffic, whether destined for the internet, SaaS applications, or internal private applications, is routed through Zscaler's globally distributed cloud, where it is inspected for threats, policy violations, and sensitive data before being forwarded to its destination. This architecture means that security policies follow the user regardless of their location, and there is no need to backhaul remote traffic through a corporate data center. Zscaler's inspection capabilities cover SSL/TLS traffic at scale, malware sandboxing, data loss prevention, cloud access security brokering, and DNS security. The detailed transaction logs generated by the platform provide a comprehensive record of every connection made by every user, which is valuable for security investigations involving suspicious outbound activity.
How does Zscaler work with Qevlar?
Qevlar integrates with Zscaler to retrieve network traffic logs and security events during investigations. When an alert involves suspicious outbound connections, data exfiltration indicators, or policy violations, Qevlar can query Zscaler logs to identify the specific transactions involved, the user and device behind them, and whether the traffic matches known malicious patterns.
Want to help your analysts focus on the most critical alerts?
Frequently asked questions
What is Zscaler?
Zscaler is a cloud-native Zero Trust (SSE/SASE) platform that routes all user traffic through a globally distributed cloud to inspect threats, enforce policy and prevent data loss — without traditional firewalls or VPNs.
What can you do with Zscaler in Qevlar?
Qevlar can retrieve Zscaler traffic logs and security events during an investigation, identifying the specific transactions behind suspicious outbound connections or data-exfiltration indicators and the user and device responsible.
Does Qevlar investigate network alerts automatically?
Yes. When Zscaler flags suspicious activity or a policy violation, Qevlar gathers the relevant transaction context and reaches a verdict without manual log review.
Can Qevlar correlate Zscaler data with the rest of my stack?
Yes. Qevlar ties Zscaler traffic signals together with endpoint, identity and threat-intelligence sources to build the full picture of an incident.
Other integrations
.avif)
