What’s New in GovCloud: March 2026 Zscaler Product Updates

Staying up-to-date on product releases can be challenging, especially when you’re balancing mission requirements, operational priorities, and compliance. To make it easier, here’s a monthly roundup of notable Zscaler GovCloud updates from the past month. Each section includes a quick product refresher, brief context on what’s changing, and scan-friendly highlights you can share with your teams.

Zscaler Internet Access (ZIA)

Zscaler Internet Access (ZIA) is Zscaler’s secure internet and SaaS access service, providing policy-based protection and visibility for users wherever they work. For many federal environments, ZIA is central to enforcing acceptable use, preventing data loss, and maintaining consistent controls across distributed users.

This month’s ZIA updates focus on smoother admin workflows, expanded policy coverage, and improved visibility, especially in logging and monitoring, so operations teams can move faster without sacrificing oversight.

Highlights

• Insights Logs: Insights Logs pages now feature asynchronous log retrieval, so admins can continue working while queries run in the background. This is helpful during active investigations and routine log review.
• DLP and file type support for MSIX files: File Type Control and DLP policies now support MSIX files in the Executable category, extending policy coverage to a modern packaging format without requiring workarounds.
• Logs for MCP transactions: Application activity MCP is added to Web Insights Logs to log Model Context Protocol (MCP) transactions in the ZIA Admin Portal, improving traceability for MCP-related activity.
• Gen AI prompt obfuscation (released to FedRAMP High): Gen AI prompts displayed in Web Insights Logs can be obfuscated when configuring admin roles, supporting least-privilege access to sensitive prompt content.
• Dedicated IP for ZIA in Moderate: Cloud-based service that allows organizations to be provisioned with dedicated IP addresses and use them as the source IP addresses for their traffic.

Learn more: https://help.zscaler.us/zia/release-upgrade-summary-2026

Deception

Zscaler Deception helps detect and disrupt attackers by deploying decoys and lures that expose malicious activity early and with high confidence. Deception can be especially valuable for high-signal detection. When a decoy is accessed, it often points to behavior that warrants immediate attention.

This month’s update expands cloud coverage with new support for GCP-based deception resources, helping teams extend consistent detection strategies as workloads span multiple cloud providers.

Highlights

• Cloud Deception with GCP: Integrate Google Cloud Platform (GCP) with Zscaler Deception and deploy GCP-specific decoys to detect malicious activity (based on decoy type and configuration), extending deception capabilities into GCP environments.

Learn more: https://help.zscaler.us/deception/release-upgrade-summary-2026

Cloud Connector

Zscaler Cloud Connector helps extend Zscaler policy enforcement and traffic forwarding for workloads running in public cloud environments. It supports organizations that need consistent security controls for cloud-hosted services while enabling architectures aligned to modernization initiatives.

Cloud Connector updates this month support automation for Azure environments and improve usability for multisession VDI. These are two practical areas that can reduce operational friction.

Highlights

• Azure endpoints for partner integrations: New endpoints extend programmatic access to features and functionality for Azure accounts and groups, supporting broader integration and automation workflows.
• Zscaler Client Connector for VDI username visibility: In multisession VDI, users can view their username in the Zscaler Client Connector for VDI app, improving clarity in shared-session scenarios and helping streamline troubleshooting.

Learn more:  https://help.zscaler.us/cloud-branch-connector/release-upgrade-summary-2026

Zscaler Digital Experience (ZDX)

Zscaler Digital Experience (ZDX) provides end-to-end visibility into user experience and application performance to help IT teams pinpoint and resolve issues faster. For federal IT, this visibility supports improved service delivery and more efficient triage across network, endpoint, and SaaS dependencies.

This month’s ZDX enhancements add more control over Zoom monitoring scope and strengthen admin session governance.

Highlights

• Zoom call quality monitoring exclusion criteria: Zoom call quality monitoring now supports exclusion criteria during tenant onboarding, enabling collection for all users except specified users or groups.
• Session timeout duration: Configure Session Timeout Duration to control how long a user can remain in the ZDX Admin Portal session while inactive, supporting stronger session management.

Learn more: https://help.zscaler.us/zdx/release-upgrade-summary-2026

Conclusion

Want the full details? Use the links above to review the complete release summaries, and check back next month for the next GovCloud update roundup.

Zscaler continues to invest in a robust GovCloud roadmap and remains committed to supporting the unique security, compliance, and operational requirements of the federal market. We’ll keep delivering enhancements that help agencies and federal partners strengthen resilience, simplify operations, and advance mission success.