Products & Solutions | Blog https://www.zscaler.com/de/blogs/feeds/product-insights View for blog content type. Mon, 09 Mar 2026 18:38:12 GMT https://validator.w3.org/feed/docs/rss2.html RSS 2.0, JSON Feed 1.0, and Atom 1.0 generator for Node.js de <![CDATA[Automating Data Governance: Strengthening Security with Zscaler DSPM and MPIP Integration]]> https://www.zscaler.com/de/blogs/product-insights/automating-data-governance-strengthening-security-zscaler-dspm-and-mpip https://www.zscaler.com/de/blogs/product-insights/automating-data-governance-strengthening-security-zscaler-dspm-and-mpip Thu, 05 Mar 2026 18:00:23 GMT Mahesh Nawale (Product Marketing Manager) <![CDATA[States, Municipalities, and AI: How to Secure GenAI in Government]]> https://www.zscaler.com/de/blogs/product-insights/states-municipalities-and-ai-how-secure-genai-government https://www.zscaler.com/de/blogs/product-insights/states-municipalities-and-ai-how-secure-genai-government Mon, 23 Feb 2026 15:58:59 GMT Fred Green (Zscaler) <![CDATA[Leveraging Zero Trust for More Accurate Exposure Prioritization]]> https://www.zscaler.com/de/blogs/product-insights/leveraging-zero-trust-more-accurate-exposure-prioritization https://www.zscaler.com/de/blogs/product-insights/leveraging-zero-trust-more-accurate-exposure-prioritization Mon, 23 Feb 2026 15:11:59 GMT   
    
Focus on what’s risky in YOUR environmentJust because a vulnerability is known to be exploited in the wild doesn’t always mean it poses a critical risk in your environment. Consider the following example of CVE-2021-44228, a CISA KEV most commonly known as log4shell. ZIA’s Intrusion Prevention System (IPS) mitigates this particular vulnerability, as detailed in the ThreatLabz Threat Library.Most vulnerability assessment tools would score this finding as critical, and with good reason: exploitation can result in Remote Code Execution. But Zscaler Unified Vulnerability Management (UVM) has automatically reduced the severity to a “medium” 4.7, recognizing the presence of a mitigating control in the form of ZIA.UVM has logged the original CVSS score of 10 and the “original severity score” from the scanning tool, also a 10. But UVM goes on to create a contextual, risk-adjust score – let’s drill deeper into the explanation of that score:All the tools in the environment report the finding as critical, but the vulnerability is fully mitigated by ZIA, taking it off the critical list entirely. As a matter of fact, the integrated ThreatLabz data has determined that all five findings associated with this ticket are mitigated by ZIA or ZPA policies, so the severity score has been automatically adjusted from 10 down to 4.7.Most exposure management programs would fail to recognize the presence of mitigating controls. The ticket would be prioritized as a critical, and organizations would spend security and IT resources fixing a problem that poses no significant risk. By adjusting the severity score automatically, UVM keeps teams focused on the work that matters, the fixes that actually reduce risk.Maximize the value of the tools you already haveIntegrating ThreatLabz research and Zscaler Client Connector (ZCC) data into your exposure management program adds valuable context to help your security team focus on truly critical vulnerabilities in your specific environment. Zscaler customers have a wealth of data and telemetry in their existing deployments that can turbocharge exposure prioritization and risk mitigation, but benefitting from all that context requires an exposure management solution capable of assimilating that data.Tool sprawl is often associated with complexity in exposure management. Dozens of siloed tools producing risk signals, none of which work together, and all contributing to the flood of data that prevents security teams from quickly identifying truly critical risk. Zscaler helps you channel the power of all those currently siloed tools and use the breadth of their insights to your advantage. By combining context from vulnerability scanners, cloud security tools, data security tools, identity and access management, IoT/OT security tools, threat intelligence feeds, and anything else with relevant data, organizations can use that rich context of the risk signals and mitigating controls in place to discern which findings truly represent risk. The haystack shrinks, even as the quantity of assets and findings grows larger.Evolve to a holistic exposure management program with ZscalerYou may be closer than you think to building a holistic exposure management engine that helps your security team pull the needles from the haystack. Your investments in vulnerability scanning and cyber risk assessment tools can work together with Zscaler Exposure Management, and your zero trust policy engine serves as a great foundation for inline controls and mitigation.With Zscaler Exposure Management, organizations can harness the power of contextual data and risk signals across the environment to deliver:Complete visibility of assets in a risk-based inventoryPrioritized exposure findings, unified from every sourceAccelerated remediation leveraging your existing tools and workflowsRequest a demo to see how your Zscaler products and existing security investments can come together to deliver better exposure management.]]> Chris McManus (Senior Product Marketing Manager) <![CDATA[Future-Proof Your Security with the First Quantum-Ready Security Service Edge (SSE)]]> https://www.zscaler.com/de/blogs/product-insights/future-proof-security-first-quantum-ready-security-service-edge-sse https://www.zscaler.com/de/blogs/product-insights/future-proof-security-first-quantum-ready-security-service-edge-sse Tue, 17 Feb 2026 09:00:00 GMT Brendon Macaraeg (Sr. Product Marketing Manager) <![CDATA[Demystifying Key Exchange: From Classical Elliptic Curve Cryptography to a Post-Quantum Future]]> https://www.zscaler.com/de/blogs/product-insights/demystifying-key-exchange-post-quantum-pqc https://www.zscaler.com/de/blogs/product-insights/demystifying-key-exchange-post-quantum-pqc Thu, 12 Feb 2026 22:54:58 GMT Brendon Macaraeg (Sr. Product Marketing Manager) <![CDATA[2026 Zscaler Public Sector Summit: Cyber Strong in the AI Era]]> https://www.zscaler.com/de/blogs/product-insights/2026-zscaler-public-sector-summit-cyber-strong-ai-era https://www.zscaler.com/de/blogs/product-insights/2026-zscaler-public-sector-summit-cyber-strong-ai-era Thu, 12 Feb 2026 14:42:02 GMT Chad Tetreault (Zscaler) <![CDATA[Microsoft Copilot Oversharing Data? Not Anymore. Meet Zscaler’s New Wizard]]> https://www.zscaler.com/de/blogs/product-insights/microsoft-copilot-oversharing-data-not-anymore-meet-zscaler-s-new-wizard https://www.zscaler.com/de/blogs/product-insights/microsoft-copilot-oversharing-data-not-anymore-meet-zscaler-s-new-wizard Thu, 12 Feb 2026 12:10:15 GMT Steve Grossenbacher (Senior Director, Product Marketing) <![CDATA[Communicating Security Notifications to Users with Zscaler Client Connector EUN Notifications]]> https://www.zscaler.com/de/blogs/product-insights/communicating-security-notifications-users-zscaler-client-connector-eun https://www.zscaler.com/de/blogs/product-insights/communicating-security-notifications-users-zscaler-client-connector-eun Tue, 10 Feb 2026 17:43:44 GMT Siddhartha Aggarwal (Staff Technical Product Specialist - Firewall) <![CDATA[A Guide to OpenClaw and Securing It with Zscaler]]> https://www.zscaler.com/de/blogs/product-insights/guide-openclaw-and-securing-it-zscaler https://www.zscaler.com/de/blogs/product-insights/guide-openclaw-and-securing-it-zscaler Mon, 09 Feb 2026 22:23:42 GMT Hersh Patel (Zscaler) <![CDATA[Transforming Threat Detection: How Partnerships in Deception Technology Are Shaping the Future]]> https://www.zscaler.com/de/blogs/product-insights/transforming-threat-detection-how-partnerships-deception-technology-are https://www.zscaler.com/de/blogs/product-insights/transforming-threat-detection-how-partnerships-deception-technology-are Mon, 09 Feb 2026 16:04:51 GMT Jaideep Chanda (Technology Partner Manager) <![CDATA[How Organizations Can Make a Successful Transition to Post-Quantum Cryptography (PQC)]]> https://www.zscaler.com/de/blogs/product-insights/organizations-make-successful-transition-post-quantum-cryptography-pqc https://www.zscaler.com/de/blogs/product-insights/organizations-make-successful-transition-post-quantum-cryptography-pqc Thu, 05 Feb 2026 18:14:07 GMT Brendon Macaraeg (Sr. Product Marketing Manager) <![CDATA[If You're Reachable, You're Breachable, Part 3: The Adversary's Final Move – Exploiting You]]> https://www.zscaler.com/de/blogs/product-insights/if-you-re-reachable-you-re-breachable-part-3-adversary-s-final-move https://www.zscaler.com/de/blogs/product-insights/if-you-re-reachable-you-re-breachable-part-3-adversary-s-final-move Sat, 31 Jan 2026 23:34:51 GMT Akhilesh Dhawan (Sr. Director, Product Marketing - Platform) <![CDATA[If You're Reachable, You're Breachable, Part 2: The Adversary's Second Move – Classifying You]]> https://www.zscaler.com/de/blogs/product-insights/if-you-re-reachable-you-re-breachable-part-2-adversary-s-second-move https://www.zscaler.com/de/blogs/product-insights/if-you-re-reachable-you-re-breachable-part-2-adversary-s-second-move Sat, 31 Jan 2026 21:49:53 GMT Akhilesh Dhawan (Sr. Director, Product Marketing - Platform) <![CDATA[If You're Reachable, You're Breachable, Part 1: The Adversary's First Move – Finding You]]> https://www.zscaler.com/de/blogs/product-insights/if-you-re-reachable-you-re-breachable-part-1-adversary-s-first-move-finding https://www.zscaler.com/de/blogs/product-insights/if-you-re-reachable-you-re-breachable-part-1-adversary-s-first-move-finding Sat, 31 Jan 2026 21:38:26 GMT Akhilesh Dhawan (Sr. Director, Product Marketing - Platform) <![CDATA[From Blunt Force to Surgical Precision: Elevating Control in Zscaler Internet Access]]> https://www.zscaler.com/de/blogs/product-insights/blunt-force-surgical-precision-elevating-control-zscaler-internet-access https://www.zscaler.com/de/blogs/product-insights/blunt-force-surgical-precision-elevating-control-zscaler-internet-access Sat, 31 Jan 2026 18:27:13 GMT Nishant Kumar (Senior Manager, Product Marketing) <![CDATA[Zscaler Adaptive Access Engine: Turning Logs into Logic]]> https://www.zscaler.com/de/blogs/product-insights/zscaler-adaptive-access-engine-turning-logs-logic https://www.zscaler.com/de/blogs/product-insights/zscaler-adaptive-access-engine-turning-logs-logic Sat, 31 Jan 2026 14:23:46 GMT Nishant Kumar (Senior Manager, Product Marketing) <![CDATA[Beyond The Crown Jewel Fallacy: Making Segmentation Work for Your Business]]> https://www.zscaler.com/de/blogs/product-insights/beyond-crown-jewel-fallacy-making-segmentation-work-your-business https://www.zscaler.com/de/blogs/product-insights/beyond-crown-jewel-fallacy-making-segmentation-work-your-business Fri, 30 Jan 2026 22:04:21 GMT Olivia Vort (Senior Product Marketing Manager) <![CDATA[Warum Zero Trust für Finanzinstitute unverzichtbar ist]]> https://www.zscaler.com/de/blogs/product-insights/why-financial-institutions-should-adopt-zero-trust https://www.zscaler.com/de/blogs/product-insights/why-financial-institutions-should-adopt-zero-trust Thu, 29 Jan 2026 18:16:20 GMT Akhilesh Dhawan (Sr. Director, Product Marketing - Platform) <![CDATA[Announcing the Zscaler Automation Hub and Other OneAPI News]]> https://www.zscaler.com/de/blogs/product-insights/announcing-zscaler-automation-hub-and-other-oneapi-news https://www.zscaler.com/de/blogs/product-insights/announcing-zscaler-automation-hub-and-other-oneapi-news Thu, 29 Jan 2026 13:07:16 GMT Jacob Serpa (Sr. Product Marketing Manager) <![CDATA[Zero Trust Branch: Redefining Connectivity]]> https://www.zscaler.com/de/blogs/product-insights/zero-trust-branch-redefining-connectivity https://www.zscaler.com/de/blogs/product-insights/zero-trust-branch-redefining-connectivity Wed, 28 Jan 2026 08:51:45 GMT Andrea Polesel (Principal Transformation Architect) <![CDATA[Building Visibility to Enable Secure Healthcare AI Adoption]]> https://www.zscaler.com/de/blogs/product-insights/building-visibility-enable-secure-healthcare-ai-adoption https://www.zscaler.com/de/blogs/product-insights/building-visibility-enable-secure-healthcare-ai-adoption Tue, 27 Jan 2026 22:53:44 GMT Steven Hajny (Healthcare Principal Sales Engineer) <![CDATA[The "Control" Trap: 3 Reasons Your Legacy Firewall Can’t Keep Up (And Why You Think It Can)]]> https://www.zscaler.com/de/blogs/product-insights/control-trap-3-reasons-your-legacy-firewall-can-t-keep-and-why-you-think-it https://www.zscaler.com/de/blogs/product-insights/control-trap-3-reasons-your-legacy-firewall-can-t-keep-and-why-you-think-it Tue, 27 Jan 2026 08:18:41 GMT Nishant Kumar (Senior Manager, Product Marketing) <![CDATA[Accelerating AI Initiatives with Zero Trust]]> https://www.zscaler.com/de/blogs/product-insights/accelerating-ai-initiatives-zero-trust https://www.zscaler.com/de/blogs/product-insights/accelerating-ai-initiatives-zero-trust Tue, 27 Jan 2026 08:00:10 GMT Eric Andrews (VP, Product Marketing - Data Security) <![CDATA[2025 ZDX Recap: Elevating IT Operations with Customer-Driven Innovations ]]> https://www.zscaler.com/de/blogs/product-insights/2025-zdx-recap-elevating-it-operations-customer-driven-innovations https://www.zscaler.com/de/blogs/product-insights/2025-zdx-recap-elevating-it-operations-customer-driven-innovations Fri, 23 Jan 2026 18:54:45 GMT Cynthia Tu (Sr. Product Marketing Manager, DEM) <![CDATA[Rethinking Branch Security: Embracing Zero Trust Branch for the Modern Enterprise]]> https://www.zscaler.com/de/blogs/product-insights/rethinking-branch-security-embracing-zero-trust-branch-for-the-modern-enterprise https://www.zscaler.com/de/blogs/product-insights/rethinking-branch-security-embracing-zero-trust-branch-for-the-modern-enterprise Wed, 21 Jan 2026 09:58:24 GMT Andrea Polesel (Principal Transformation Architect) <![CDATA[Top 5 Considerations for Effective AI Runtime Protection]]> https://www.zscaler.com/de/blogs/product-insights/top-5-considerations-effective-ai-runtime-protection https://www.zscaler.com/de/blogs/product-insights/top-5-considerations-effective-ai-runtime-protection Tue, 20 Jan 2026 17:00:06 GMT Neelay Thaker (Director of Product Marketing - AI Security) <![CDATA[Digital Experience Predictions in 2026]]> https://www.zscaler.com/de/blogs/product-insights/digital-experience-predictions-2026 https://www.zscaler.com/de/blogs/product-insights/digital-experience-predictions-2026 Fri, 16 Jan 2026 20:03:59 GMT Rohit Goyal (Sr. Director, Product Marketing - ZDX) <![CDATA[Operationalizing Threat Intelligence with Zscaler Integrations MCP Server]]> https://www.zscaler.com/de/blogs/product-insights/operationalizing-threat-intelligence-zscaler-integrations-mcp-server https://www.zscaler.com/de/blogs/product-insights/operationalizing-threat-intelligence-zscaler-integrations-mcp-server Thu, 15 Jan 2026 15:33:31 GMT Aaron Rohyans (Sr. Principal Solutions Architect - Business Development) <![CDATA[Building Trust Through Identity: Addressing Security Challenges in Modern Healthcare]]> https://www.zscaler.com/de/blogs/product-insights/building-trust-through-identity-addressing-security-challenges-modern https://www.zscaler.com/de/blogs/product-insights/building-trust-through-identity-addressing-security-challenges-modern Thu, 15 Jan 2026 04:50:38 GMT Tamer Baker (Healthcare CTO) <![CDATA[Beyond Patient Zero: Why Detection is Dead and Quarantine is King]]> https://www.zscaler.com/de/blogs/product-insights/beyond-patient-zero-why-detection-dead-and-quarantine-king https://www.zscaler.com/de/blogs/product-insights/beyond-patient-zero-why-detection-dead-and-quarantine-king Wed, 14 Jan 2026 12:24:18 GMT Nishant Kumar (Senior Manager, Product Marketing) <![CDATA[Fortify Your Future: How Zscaler Drives a Modern Defensible Architecture for Supercharged Cyber Resilience]]> https://www.zscaler.com/de/blogs/product-insights/fortify-your-future-how-zscaler-drives-modern-defensible-architecture https://www.zscaler.com/de/blogs/product-insights/fortify-your-future-how-zscaler-drives-modern-defensible-architecture Mon, 12 Jan 2026 22:15:03 GMT Nick Clark (Zscaler) <![CDATA[Top 7 Requirements for Effective AI Red Teaming]]> https://www.zscaler.com/de/blogs/product-insights/top-7-requirements-effective-ai-red-teaming https://www.zscaler.com/de/blogs/product-insights/top-7-requirements-effective-ai-red-teaming Mon, 12 Jan 2026 17:00:00 GMT Dorian Granosa (Director, AI Research) <![CDATA[Threat Intel, SSL Inspection and Other Considerations: A Real-World Checklist for SSE]]> https://www.zscaler.com/de/blogs/product-insights/threat-intel-ssl-inspection-and-other-considerations-real-world-checklist https://www.zscaler.com/de/blogs/product-insights/threat-intel-ssl-inspection-and-other-considerations-real-world-checklist Mon, 12 Jan 2026 14:39:39 GMT Nishant Kumar (Senior Manager, Product Marketing) <![CDATA[Zscaler Expands FedRAMP Moderate Cloud Data Plane to Support Global Operations]]> https://www.zscaler.com/de/blogs/product-insights/zscaler-expands-fedramp-moderate-cloud-data-plane-support-global-operations https://www.zscaler.com/de/blogs/product-insights/zscaler-expands-fedramp-moderate-cloud-data-plane-support-global-operations Thu, 08 Jan 2026 15:03:01 GMT Niraj Gopal ( Head of Product Management, Federal and Sovereign Clouds) <![CDATA[2025 Reflections and 2026 Predictions: Healthcare’s Cybersecurity Frontier]]> https://www.zscaler.com/de/blogs/product-insights/2025-reflections-and-2026-predictions-healthcare-s-cybersecurity-frontier https://www.zscaler.com/de/blogs/product-insights/2025-reflections-and-2026-predictions-healthcare-s-cybersecurity-frontier Tue, 06 Jan 2026 22:17:22 GMT Tamer Baker (Healthcare CTO) <![CDATA[ShadyPanda and the Seven-Year Browser Extension Breach: How Zscaler SSPM Strengthens SaaS Supply Chain Security]]> https://www.zscaler.com/de/blogs/product-insights/shadypanda-and-seven-year-browser-extension-breach-how-zscaler-sspm https://www.zscaler.com/de/blogs/product-insights/shadypanda-and-seven-year-browser-extension-breach-how-zscaler-sspm Tue, 06 Jan 2026 16:00:03 GMT Niharika Sharma (Staff Product Manager - CASB PM) <![CDATA[Building A Better Zero Trust Culture Starts With Debunking The Myths Around Trust]]> https://www.zscaler.com/de/blogs/product-insights/building-better-zero-trust-culture-starts-debunking-myths-around-trust https://www.zscaler.com/de/blogs/product-insights/building-better-zero-trust-culture-starts-debunking-myths-around-trust Mon, 05 Jan 2026 22:02:28 GMT Nick Clark (Zscaler) <![CDATA[Do You Really Know Your AI Landscape?]]> https://www.zscaler.com/de/blogs/product-insights/do-you-really-know-your-ai-landscape https://www.zscaler.com/de/blogs/product-insights/do-you-really-know-your-ai-landscape Mon, 05 Jan 2026 18:00:03 GMT Arnab Roy (Director, Product Management) <![CDATA[IPv6: End-to-End Forwarding to Zscaler and Simplified Deployment]]> https://www.zscaler.com/de/blogs/product-insights/ipv6-end-end-forwarding-zscaler-and-simplified-deployment https://www.zscaler.com/de/blogs/product-insights/ipv6-end-end-forwarding-zscaler-and-simplified-deployment Tue, 30 Dec 2025 18:19:01 GMT .net and pac6..net, have been introduced. These domains resolve to IPv6 VIPs in enabled data centers, allowing Zscaler Client Connector to use available IPv6 service endpoints and making rollouts more predictable. Traffic FlowThe traffic flow for the new native IPv6 capability is as follows:Client to Service Ingress: Zscaler Client Connector resolves the PAC/gateway using the new "6" domains over IPv6 and establishes a control connection to the SSL VPN (SVPN) IPv6 VIP. IPv6-enabled edge devices and load balancers direct the connection to the appropriate SVPN node at the Zscaler Datacenter.Inside the Cloud: The inner customer packet remains IPv6 to the Service Edge, which decapsulates the packet, enforces policy (URL, Firewall, Cloud App, etc.), and forwards the traffic toward the destination.To the Destination: Dual-stack destinations are accessed over IPv4, which is preferred over IPv6. Zscaler forwards IPv6 traffic to destinations that are IPv6-only. IPv4-only destinations remain accessible as always, over IPv4. DNS Observation TableThe following table illustrates what DNS records users will observe depending on the client and destination types: ClientDestinationDNS A recordDNS AAAA Record v4 v4+v6 Yes No Ipv6 record v4 v4 Yes No Ipv6 record v4 v6 Empty Native IPv6 v4 + v6 v4+v6 Yes Empty v4 + v6 v4 Yes Empty v4 + v6 v6 Empty Native IPv6 v6 v4+v6 N/A Native IPv6 v6 v4 N/A DNS64 v6 v6 Empty Native IPv6Admin Configuration: What to EnableForwarding IPv6 natively to Zscaler requires only a small set of administrative changes:ZIA Tenant Prerequisites:Ensure your tenant has the required IPv6 licenses (Advanced).Enable IPv6 for the tenant under Administration → IPv6 in your ZIA Admin portal.Firewall and Traffic Controls:Allow IPv6 DNS traffic (on by default).Change the “Block IPv6 All” rule from Block/Drop to Allow so IPv6 flows are permitted and inspected.Zscaler Client Connector Version: For Windows, 4.8+ version and for MacOS, 4.7+ versions are required.Zscaler Client Connector Platform Setting (New):Enable “IPv6 resolution for Zscaler domains” per platform in the Zscaler Client Connector admin portal. This controls whether Zscaler Client Connector resolves the new "6" service domains (e.g., gateway6, pac6).Zscaler Client Connector Forwarding and App Profiles:Forwarding Profile: Continue to use Z-Tunnel 2.0 (or 1.0) as appropriate with no change in forwarding method selection.Application Profile:For Windows and MacOS, include 2000::/3 in the IPv6 inclusion list to route all global unicast IPv6 flows through Zscaler Client Connector. If IPv6 inclusion is left blank, IPv6 traffic may flow direct (fail open).Keep standard exclusions for ULA, link-local, and multicast. For Tunnel 2.0 environments forwarding DNS to ZIA, set DNS inclusion to “*” to forward all DNS traffic to Zscaler.PAC Considerations:If your PAC uses tokenized variables like $GATEWAY, enabling “IPv6 resolution for Zscaler domains” allows Zscaler Client Connector to automatically prefer the correct "6" domains.If your PAC hard-codes hostnames or IPs, plan to update them to the new "6" service FQDNs in IPv6-upgraded regions. Avoid hard-coding IPs during the rollout.Rollout Strategy and MigrationThe need for "subclouds" to enforce connections to specific data centers diminishes as gateway6/pac6 are enabled and Zscaler Client Connector automatically resolves to v6-capable DCs when "IPv6 resolution for Zscaler domains" is active.Continue to prefer service FQDNs in PAC files, over fixed IPs for a smoother rollout.Ensure all pre-requisites listed in the section above are met.Start with a few test users, ensuring all the cases are met before rolling out the change to all users.Validate key use cases, including Dual-stack, IPv4-only, and policy controls on IPv6 traffic. Once validated, you can reduce reliance on local NAT64 for cloud ingress.Design Guidance and CaveatsDo not bypass v4-only destinations for v6-only clients unless the direct path includes NAT64.Be explicit about IPv6 inclusions by including 2000::/3 in your Zscaler Client Connector App Profile configuration to ensure IPv6 flows are serviced by Zscaler.Ensure IPv6 firewall controls are ordered correctly (e.g., QUIC block rules before broad IPv6 allows).For v6-only clients, IPv4-only servers in Z-Tunnel 2.0 DNS Exclusions will not get a NAT64 prefix IPv6 address and will not be resolvable.Similarly, an IPv4-only server in ZT2 IPv4 Exclusions with a NAT64 prefix IPv6 address from DNS Inclusions will not be accessible without ZIA Z-Tunnel 2.0.Additionally, v6-only clients cannot connect to literal IPv4 addresses (e.g., http://8.8.8.8/).Conclusion These enhancements provide a cleaner, more native experience for v6-only clients by enabling IPv6 all the way to Zscaler service VIPs. A few administrative changes - enabling IPv6 resolution for Zscaler domains, allowing IPv6 traffic, and setting appropriate IPv6 inclusions - are sufficient to deliver a seamless user experience, reduce local NAT64 reliance, and keep policy enforcement consistent.To learn more about the native IPv6 forwarding capabilities to Zscaler, refer to the Zscaler help documentation.Glossaryv4-only: Refers to a client or destination that exclusively uses the Internet Protocol version 4 (IPv4) for communication.v6-only: Refers to a client or destination that exclusively uses the Internet Protocol version 6 (IPv6) for communication.Dual-stack: Refers to a client or destination that is configured to run both IPv4 and IPv6 protocols simultaneously, allowing communication with both IPv4 and IPv6 systems.]]> Mithun Hebbar (Principal Product Manager - SWG) <![CDATA[Long-Term Support for Zscaler Client Connector]]> https://www.zscaler.com/de/blogs/product-insights/long-term-support-zscaler-client-connector https://www.zscaler.com/de/blogs/product-insights/long-term-support-zscaler-client-connector Thu, 18 Dec 2025 13:45:03 GMT Jamil Alomari (Staff Product Manager) <![CDATA[Evolving Heroes: How the Role of Healthcare CISOs is Changing]]> https://www.zscaler.com/de/blogs/product-insights/evolving-heroes-how-role-healthcare-cisos-changing https://www.zscaler.com/de/blogs/product-insights/evolving-heroes-how-role-healthcare-cisos-changing Tue, 16 Dec 2025 20:59:43 GMT Steven Hajny (Healthcare Principal Sales Engineer) <![CDATA[What AI Risks Are Hiding in Your Apps?]]> https://www.zscaler.com/de/blogs/product-insights/what-ai-risks-are-hiding-your-apps https://www.zscaler.com/de/blogs/product-insights/what-ai-risks-are-hiding-your-apps Mon, 15 Dec 2025 18:00:03 GMT Steve Grossenbacher (Senior Director, Product Marketing) <![CDATA[AI for Segmentation: The Limits of AI Policy Optimizers and Private Access Co-Pilots]]> https://www.zscaler.com/de/blogs/product-insights/ai-segmentation-limits-ai-policy-optimizers-and-private-access-co-pilots https://www.zscaler.com/de/blogs/product-insights/ai-segmentation-limits-ai-policy-optimizers-and-private-access-co-pilots Fri, 12 Dec 2025 23:58:54 GMT Olivia Vort (Senior Product Marketing Manager) <![CDATA[VPNs Are an Attacker's Front Door. Close It with Zero Trust.]]> https://www.zscaler.com/de/blogs/product-insights/vpns-are-attacker-s-front-door-close-it-zero-trust https://www.zscaler.com/de/blogs/product-insights/vpns-are-attacker-s-front-door-close-it-zero-trust Fri, 12 Dec 2025 17:44:00 GMT Kanishka Pandit (Director, Product Marketing) <![CDATA[Zero Trust Automation: Streamlining Reporting with Zscaler OneAPI]]> https://www.zscaler.com/de/blogs/product-insights/zero-trust-automation-streamlining-reporting-zscaler-oneapi https://www.zscaler.com/de/blogs/product-insights/zero-trust-automation-streamlining-reporting-zscaler-oneapi Wed, 10 Dec 2025 13:35:03 GMT Jacob Serpa (Sr. Product Marketing Manager) <![CDATA[Stop Half-Time Security: Unlock Full Zero Trust Coverage with ZPA Across Your Entire Organization]]> https://www.zscaler.com/de/blogs/product-insights/stop-half-time-security-unlock-full-zero-trust-coverage-zpa-across-your https://www.zscaler.com/de/blogs/product-insights/stop-half-time-security-unlock-full-zero-trust-coverage-zpa-across-your Tue, 09 Dec 2025 23:06:52 GMT Olivia Vort (Senior Product Marketing Manager) <![CDATA[The Gainsight Supply Chain Attack: What it Means for SaaS Security ]]> https://www.zscaler.com/de/blogs/product-insights/gainsight-supply-chain-attack-what-it-means-saas-security https://www.zscaler.com/de/blogs/product-insights/gainsight-supply-chain-attack-what-it-means-saas-security Tue, 09 Dec 2025 17:00:03 GMT Niharika Sharma (Staff Product Manager - CASB PM) <![CDATA[React2Shell and the Case for Deception in Your Vulnerability Management Program]]> https://www.zscaler.com/de/blogs/product-insights/react2shell-and-case-deception-your-vulnerability-management-program https://www.zscaler.com/de/blogs/product-insights/react2shell-and-case-deception-your-vulnerability-management-program Fri, 05 Dec 2025 21:14:47 GMT Amir Moin (Zscaler) <![CDATA[Identifying Vulnerabilities with Cloud Sandbox’s Zero Day Virtual Machine Scan]]> https://www.zscaler.com/de/blogs/product-insights/identify-vulnerabilities-cloud-sandbox-zero-day-virtual-machine-scan https://www.zscaler.com/de/blogs/product-insights/identify-vulnerabilities-cloud-sandbox-zero-day-virtual-machine-scan Fri, 05 Dec 2025 00:24:59 GMT Y: Zero Day VM score decreased: the applied patches fixed some of the vulnerabilities.X < T: Zero Day VM score increased: the applied patches detected latent vulnerabilities, e.g., zero day detection of vulnerabilities.X = Y: Zero Day VM score is negligible: the risk negates the value of a patch that is supposed to address a specific vulnerabilityLet’s look at an example of how this works: a customer submits a suspected zero-day exploit sample in two virtual machine environments: a "Regular VM" with limited patches and a "Zero Day VM" that was fully patched.Despite the Zero Day VM being fully patched, the exploit was still successfully executed, confirming it was a true zero-day vulnerability. The resulting report below shows a threat score of 100 for the exploit. Further, the report also identifies behavioural characteristics that support this finding in addition to security bypass, networking and stealth tactics and techniques.]]> Brendon Macaraeg (Sr. Product Marketing Manager) <![CDATA[From Shadow AI to Trust: How Healthcare Can Secure the Future of Artificial Intelligence]]> https://www.zscaler.com/de/blogs/product-insights/shadow-ai-trust-how-healthcare-can-secure-future-artificial-intelligence https://www.zscaler.com/de/blogs/product-insights/shadow-ai-trust-how-healthcare-can-secure-future-artificial-intelligence Tue, 02 Dec 2025 04:13:56 GMT Tamer Baker (Healthcare CTO)