https://help.zscaler.com/rss-feed/workflow-automation/release-upgrade-summary-2026/Zscaler-Automation Workflow Automation Release Upgrade Summary for service updates deployed in 2026. Mon, 05 Oct 2026 16:00:29 +0000 en-us https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-09-30&id=1546227 <p>The <code>POST /dlp/v1/incidents/search</code> endpoint is enhanced to include additional properties within the DLP incident <code>matchingPolicies</code> model. The following properties are added:</p><ul><li data-list-item-id="e93b872ab79b2813471590aba6dc2a841"><code>dictionariesHtmlLocations</code></li><li data-list-item-id="ede7982f6827ab4101aeef0429eb74973"><code>dictionariesEmailBody</code></li><li data-list-item-id="eeb2f7ab1a59bc1014dc646bca19a077f"><code>dictionariesEmailSubject</code></li><li data-list-item-id="e47341cfb9d309a572558b8042ca66f93"><code>dictionariesEmailAttachment</code></li><li data-list-item-id="e0618851adfde9ab4a7008015ac81b628"><code>dictionariesPropertiesLocation</code></li><li data-list-item-id="e82540f3fd592d8c0ff10239aec4dc498"><code>dictionariesFilenameLocation</code></li><li data-list-item-id="e691473cb0f8dd06294a51bb1c75fea37"><code>enginesHtmlLocations</code></li><li data-list-item-id="ea64ee6deaab634001f9f4d7bda4f329d"><code>enginesEmailBody</code></li><li data-list-item-id="e13609414624a579ac05142c4627dd951"><code>enginesEmailSubject</code></li><li data-list-item-id="e9441fd45f9ecf0206adde3fa4ddb08fd"><code>enginesEmailAttachment</code></li><li data-list-item-id="e34e79ae70094e2a1aca62a89816941be"><code>enginesPropertiesLocation</code></li><li data-list-item-id="e56b435883f6323e5eb5f2c588aeaf648"><code>enginesFilenameLocation</code></li></ul><p>In addition to this update, the following <code>matchingPolicies</code> properties are deprecated:</p><ul><li data-list-item-id="ee705b0ced1d2e0734f1bb0f4211ebf43"><code>dictionaryPropertiesLocation</code></li><li data-list-item-id="e3b8e166d2a9485ebb1c46b4d00aa69de"><code>dictionaryFilenameLocation</code></li></ul><p>To learn more, see the <a href="https://help.zscaler.com/legacy-apis/csv-user-attributes" target="_blank">API Reference</a>.</p> Feature Available Wed, 30 Sep 2026 07:00:00 GMT feature 1546227 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-09-30&id=1546075 <div class="sub"><p>On the Incident Details drawer, the content is modified on the Overview tab and the Violation Details tab. The following modifications were made:</p><ul><li data-list-item-id="ea6635be4bc61e1d33758bacd19ff0f3d">Overview tab:<ul><li data-list-item-id="e44361af9fec8e398712483101701bac3">The Overview section title is removed. The overview information still appears at the top of the tab without a section title.</li><li data-list-item-id="efbc4705134ecaf19889509bc6c888415">The Current State Details section is removed. The fields that were in that section (Status and User) are now in the overview information at the top of the tab. The Status field is the first field that appears in the overview information before the Incident ID field, and the User field appears after the Priority field.<br><a class="image-icon" href="#overview-tab">See image.</a></li></ul></li><li data-list-item-id="e9f5e84b905e4432983fa7aa5c1fb8e0c">Violation Details tab:<ul><li data-list-item-id="e8cd1e4e164a8938db001d9b85975eaf6">The Violation Details section title is removed.</li><li data-list-item-id="e24caf5ccb11994a87b56bd6d8d61dbf2">Some of the fields in the overview information on the Overview tab are also displayed at the top of this tab. This partial overview information appears at the top of the tab without a section title.<br><a class="image-icon" href="#violation-details-tab">See image.</a></li></ul></li></ul><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="overview-tab" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Drawer-Overview-Tab-Content-Modification.png" alt="Viewing the Overview tab in the Incident Details drawer. The Status field and User field are highlighted in the overview information at the top of the tab." title="Incident Details drawer - Overview tab"></p></div><div class="subc"><p><a class="ck-anchor" id="violation-details-tab" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Drawer-Violation-Details-Tab-Content-Modification.png" alt="Viewing the Violation Details tab in the Incident Details drawer. The partial overview information is highlighted at the top of the tab." title="Incident Details drawer - Violation Details tab"></p></div> Feature Available Wed, 30 Sep 2026 07:00:00 GMT feature 1546075 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-09-30&id=1546017 <div class="sub"><p>You can configure an Azure DLP application integration using cloud-to-cloud incident forwarding to use shared credentials between Internet & SaaS (ZIA) and Workflow Automation (i.e., Azure certificate-based authentication). If you choose to use shared credentials between Internet & SaaS and Workflow Automation, you must onboard an Azure application tenant in Internet & SaaS using a private key, and the tenant must be onboarded for Workflow Automation. After you onboard the Azure application tenant, the system automatically adds a new Azure DLP application integration in Disabled state for you in Workflow Automation. To use this integration in Workflow Automation, you must enable it on the edit Zscaler DLP Azure Integration page in Workflow Automation.</p><p><a class="image-icon" href="#integration-created-from-zia">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/configuring-azure-dlp-application-integration-using-cloud-cloud-incident-forwarding" target="_blank">Configuring the Azure DLP Application Integration Using Cloud-to-Cloud Incident Forwarding</a> and <a href="https://help.zscaler.com/zia/configuring-dlp-cloud-cloud-incident-forwarding-ms-azure" target="_blank">Configuring DLP Cloud-to-Cloud Incident Forwarding for Microsoft Azure</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="integration-created-from-zia" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Zscaler-DLP-Azure-Integration-Page-After-Add-From-ZIA.png" alt="Viewing the Zscaler DLP Azure Integration details page with an integration that was automatically created with shared credentials from Internet & SaaS. The account name, status, and edit icon are highlighted for the integration." title="Zscaler DLP Azure Integration details page - Integration created from Internet & SaaS"></p><p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Edit-Zscaler-DLP-Azure-Integration-Page-c2c-Integration-Created-From-ZIA.png" alt="Viewing a Zscaler DLP Azure integration that was automatically created from Internet & SaaS on the edit Zscaler Azure DLP Integration page. The Integration Name field and ZIA Tenant Information fields are highlighted." title="Edit Zscaler DLP Azure Integration page - Integration created from Internet & SaaS"></p></div> Feature Available Wed, 30 Sep 2026 07:00:00 GMT feature 1546017 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-09-14&id=1543141 <div class="sub"><p>On the add Zscaler DLP Integration page, the add Zscaler DLP Azure Integration page, and the add Zscaler DLP GCP Integration page, three additional privacy settings are added. These privacy settings are:</p><ul><li data-list-item-id="eab99b20015c18705bb253d7df59967ab">Hide Policy Details for Non-Triggered Matches - Admin: Select this privacy setting if you do not want the admins to be able to view the Non-Triggered Engines and Dictionaries section and the Other Matched Rules section of the policy details for the incident on the Violation Details tab of the Incident Details drawer. Otherwise, they can view these sections of the policy details for the incident. This privacy setting is only available if you do not select the Hide Policy Details - Admin privacy setting.</li><li data-list-item-id="eeb9594ab1f8cc30790cdfb52b8bb339c">Hide Policy Details for Non-Triggered Matches - End User: Select this privacy setting if you do not want the end users responding to an incident notification to be able to view the Non-Triggered Engines and Dictionaries section and the Other Matched Rules section of the policy details for the incident. Otherwise, they can view these sections of the policy details for the incident. This privacy setting is only available if you do not select the Hide Policy Details - End User privacy setting.</li><li data-list-item-id="e2d0152f8628ee08cc87704921a7a5c37">Hide Policy Details for Non-Triggered Matches - Manager/Approver: Select this privacy if you do not want the approvers or managers responding to an incident escalation notification to be able to view the Non-Triggered Engines and Dictionaries section and the Other Matched Rules section of the policy details for the incident. Otherwise, they can view these sections of the policy details for the incident. This privacy setting is only available if you do not select the Hide Policy Details - Manager/Approver privacy setting.</li></ul><p>The following image shows the add Zscaler DLP Integration page with the additional privacy settings.</p><p><a class="image-icon" href="#add-zscaler-dlp-integration-page-image">See image.</a></p><p>To learn more, see:</p><ul><li data-list-item-id="e28989b6c3883c9a99ea301280aeb7df8"><a class="external-link" href="https://help.zscaler.com/workflow-automation/configuring-amazon-web-services-dlp-application-integration-using-zscaler-incident-receiver" target="_blank" rel="nofollow noopener">Configuring the Amazon Web Services DLP Application Integration Using Zscaler Incident Receiver</a></li><li data-list-item-id="ed0998368b25a76327cc4e29581aaa4b4"><a class="external-link" href="https://help.zscaler.com/workflow-automation/configuring-amazon-web-services-dlp-application-integration-using-cloud-cloud-incident-forwarding" target="_blank" rel="nofollow noopener">Configuring the Amazon Web Services DLP Application Integration Using Cloud-to-Cloud Incident Forwarding</a></li><li data-list-item-id="ead71fcdd756f9f0ed53ce30812e642cb"><a class="external-link" href="https://help.zscaler.com/workflow-automation/configuring-azure-dlp-application-integration-using-zscaler-incident-receiver" target="_blank" rel="nofollow noopener">Configuring the Azure DLP Application Integration Using Zscaler Incident Receiver</a></li><li data-list-item-id="e4be274b671150ae9631b953a4de5af0d"><a class="external-link" href="https://help.zscaler.com/workflow-automation/configuring-azure-dlp-application-integration-using-cloud-cloud-incident-forwarding" target="_blank" rel="nofollow noopener">Configuring the Azure DLP Application Integration Using Cloud-to-Cloud Incident Forwarding</a></li><li data-list-item-id="efd4be908f564f7852253c3c661246d19"><a class="external-link" href="https://help.zscaler.com/workflow-automation/configuring-dlp-application-integration-using-google-cloud-platform" target="_blank" rel="nofollow noopener">Configuring the DLP Application Integration Using Google Cloud Platform</a></li><li data-list-item-id="e447cc09c8ebefa6aa2bbd1a5499eb057"><a class="external-link" href="https://help.zscaler.com/workflow-automation/managing-dlp-aws-application-integrations-workflow-automation" target="_blank" rel="nofollow noopener">Managing DLP Amazon Web Services Application Integrations in Workflow Automation</a></li><li data-list-item-id="ed79a0073219f55dd765fd8911e8ff2a3"><a class="external-link" href="https://help.zscaler.com/workflow-automation/managing-dlp-azure-application-integrations-workflow-automation" target="_blank" rel="nofollow noopener">Managing DLP Azure Application Integrations in Workflow Automation</a></li><li data-list-item-id="e8ce6bde302395663c6ecefab0c2dc3a6"><a class="external-link" href="https://help.zscaler.com/workflow-automation/managing-dlp-gcp-application-integrations-workflow-automation" target="_blank" rel="nofollow noopener">Managing DLP GCP Application Integrations in Workflow Automation</a></li></ul></div><div class="subc"><p><a class="ck-anchor" id="add-zscaler-dlp-integration-page-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Add-Zscaler-DLP-AWS-Integration-Page-Privacy-Settings.png" alt="Viewing the add Zscaler DLP Integration page with the Hide Policy Details for Non-Triggered Matches - Admin, the Hide Policy Details for Non-Triggered Matches - End User, and the Hide Policy Details for Non-Triggered Matches - Manager/Approver privacy settings highlighted" title="Add Zscaler DLP Integration page"></p></div> Feature Available Mon, 14 Sep 2026 07:00:00 GMT feature 1543141 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-09-14&id=1543030 <div class="sub"><p>The following enhancements were made to the Incident Details drawer:</p><ul><li data-list-item-id="eb36640900f66875618c1bcd65056b80f"><p>At the top of the drawer, you can use the Next Incident and Previous Incidents icons to navigate through the list of incidents that are displayed on the Incidents page.</p><p><a class="image-icon" href="#next-previous-icons">See image.</a></p></li><li data-list-item-id="ef9977519584d6ef97d039516492e0726"><p>You can change the default tab that appears when the Incident Details drawer opens by clicking the star icon next to one of the tab headings in the Incident Details drawer. The Overview tab initially appears, by default. A blue star indicates the default tab. This tab setting is stored in your browser's local storage so that your change is preserved for the next time you log on. If you clear your cache or use a different browser, this setting is lost.</p><p><a class="image-icon" href="#set-default-tab">See image.</a></p></li><li data-list-item-id="ebe8b5f08535ab5aed0377f447c466f95">After you close the Incident Details drawer, the system automatically refreshes the Incidents page.</li></ul><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="next-previous-icons" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Drawer-Next-Previous-Icons.png" alt="Viewing the Incident Details drawer with Next Incident icon and the Previous Incident icon highlighted at the top of the drawer" title="Incident Details drawer - Next and Previous Incident icons"></p></div><div class="subc"><p><a class="ck-anchor" id="set-default-tab" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Drawer-Set-Default-Tab.png" alt="Viewing the Incident Details drawer with the star icons highlighted next to each tab heading" title="Incident Details drawer - Set default tab"></p></div> Feature Available Mon, 14 Sep 2026 07:00:00 GMT feature 1543030 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-08-20&id=1542722 <div class="sub"><p>The following enhancements were made to the Incident Details drawer:</p><ul><li data-list-item-id="ee981d686182fee799af1e41aac496e7a">On the Violation Details tab, in the Policy section, the dictionaries and engines are displayed that triggered the incident because of the content of the email subject line, the email body, or the email attachments associated with the incident. The Policy section is redesigned to contain an Email Subject tab, an Email Body tab, and an Email Attachments tab. In the Email Attachments tab, a subtab appears for each attachment that caused a violation.<br><a class="image-icon" href="#violation-details-tab-policy-section-email">See image.</a></li><li data-list-item-id="e398437dc0fbad862aa9d0230b8fcd4e5">On the Violation Content tab, the View Trigger Data section is enhanced to display the trigger data for the different types of violations triggered by the different DLP dictionaries associated with an incident. This section is also redesigned to contain an Email Subject tab, an Email Body tab, and an Email Attachments tab. In the Email Attachments tab, a subtab appears for each attachment that caused a violation. In this section, you can view the dictionaries and the exact data that violated the DLP policies.<br><a class="image-icon" href="#violation-content-tab-view-trigger-data-email">See image.</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="violation-details-tab-policy-section-email" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Incident-Details-Drawer-Policy-Section-Email-Subject.png" alt="Viewing the policy section with the Email Subject tab selected for both the triggered and non-triggered engines and dictionaries" title="Policy section - Email Subject tab"></p><p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Incident-Details-Drawer-Policy-Section-Email-Body.png" alt="Viewing the policy section with the Email Body tab selected for both the triggered and non-triggered engines and dictionaries" title="Policy section - Email Body tab"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Incident-Details-Drawer-Policy-Section-Email-Attachments.png" alt="Viewing the policy section with the Email Attachments tab selected for both the triggered and non-triggered engines and dictionaries" title="Policy section - Email Attachments tab"></div><div class="subc"><p><a class="ck-anchor" id="violation-content-tab-view-trigger-data-email" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Incident-Details-Drawer-View-Trigger-Data-Email-Subject.png" alt="Viewing the View Trigger Data section with the Email Subject tab selected" title="View Trigger Data section - Email Subject tab"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Incident-Details-Drawer-View-Trigger-Data-Email-Body.png" alt="Viewing the View Trigger Data section with the Email Body tab selected" title="View Trigger Data section - Email Body tab"><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Incident-Details-Drawer-View-Trigger-Data-Email-Attachments.png" alt="Viewing the View Trigger Data section with the Email Attachments tab selected" title="View Trigger Data section - Email Attachments tab"></div> Feature Available Thu, 20 Aug 2026 07:00:00 GMT feature 1542722 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-08-06&id=1542214 <div class="sub"><p>On the Notification Template page, you can create custom email, Slack, and Microsoft Teams notification templates that your organization can use. When creating these different types of templates, you can use the merge tags that Workflow Automation provides to include incident attribute values in the notifications. The following additional merge tags are added:</p><ul><li data-list-item-id="ea456d8aa82804332cd6f8b7750f78e73">Email Quarantine Status</li><li data-list-item-id="e706ccd92c92a9a55af9efd50ff1f2b50"><p>Matched Files</p><p>A combination of file name and file size.</p></li></ul><p>The same merge tags are available for all formats of notification templates. The following images show the new merge tags when configuring a Slack template.</p><p><a class="image-icon" href="#notification-template-page-email-quarantine-status">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-notification-templates" target="_blank">Managing Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-email-notification-templates" target="_blank">Adding Email Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-slack-notification-templates" target="_blank">Adding Slack Notification Templates</a>, and <a href="https://help.zscaler.com/workflow-automation/adding-microsoft-teams-notification-templates" target="_blank">Adding Microsoft Teams Notification Templates</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="notification-template-page-email-quarantine-status" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Email-Quarantine-Status-MT.png" alt="Viewing the Notification Template page with the Select Merge Tag drop-down menu expanded. The Email Quarantine Status merge tag is highlighted. " title="Email Quarantine Status merge tag"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Matched-Files-MT.png" alt="Viewing the Notification Template page with the Select Merge Tag drop-down menu expanded. The Matched Files merge tag is highlighted. " title="Matched Files merge tag"></div> Feature Available Thu, 06 Aug 2026 07:00:00 GMT feature 1542214 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-08-06&id=1542237 <div class="sub"><p>The following enhancements were made to the Incident Details drawer:</p><ul><li data-list-item-id="e8ddfd6bab8234af3122f17756ced7a2c">On the Violation Details tab, in the Policy section, the dictionaries and engines are displayed that triggered the incident because of the file content, file metadata, and filename of the incident. The Policy section is redesigned to contain a File Content tab, a File Metadata tab, and a Filename tab.<br><a class="image-icon" href="#rn-policy-section">See image.</a></li><li data-list-item-id="ee39ca2875fa0ae8757714554cc7a32bc">On the Violation Content tab, the View Trigger Data section is enhanced to display the trigger data for the different types of violations triggered by the different DLP dictionaries associated with an incident. This section is also redesigned to contain a File Content tab, a File Metadata tab, and a Filename tab. In this section, you can view the dictionaries and the exact data that violated the DLP policies.<br><a class="image-icon" href="#rn-view-trigger-data-section">See image.</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="rn-policy-section" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Drawer-Policy-Section-New-Tabs.png" alt="Viewing the Policy section with the different headings expanded. The File Content tab, File Metadata tab, and Filename tab are highlighted for the triggered engines and dictionaries and the non-triggered engines and dictionaries." title="Policy section"></p></div><div class="subc"><p><a class="ck-anchor" id="rn-view-trigger-data-section" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Drawer-View-Trigger-Data-Section-New-Tabs.png" alt="Viewing the View Trigger Data section with the heading expanded. The File Content tab, File Metadata tab, and Filename tab are highlighted at the top of this section." title="View Trigger Data section"></p></div> Feature Available Thu, 06 Aug 2026 07:00:00 GMT feature 1542237 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-08-06&id=1542653 <p>The following new endpoints are added to the Workflow Automation API:</p><ul><li data-list-item-id="e65b63ee3846a9243fc0512633e3bf05e"><p><code>GET /dlp/v1/incidents/{dlpIncidentId}/quarantine/status</code></p><p>This endpoint provides the quarantine email release status for the recipients. Statuses are quarantined, failed, in progress, and success.</p></li><li data-list-item-id="ec87e577e30303289f9819b83dbff3c87"><p><code>POST /dlp/v1/incidents/{dlpIncidentId}/quarantine/release</code></p><p>This endpoint releases the quarantined email to one or more of its recipients. It accepts and processes the email release request asynchronously.</p><p class="note">This endpoint is only applicable for incidents with a Source DLP type of Email with a quarantine action.</p></li><li data-list-item-id="e7f83f1b04c44d6416c833532e20d4982"><p><code>GET /dlp/v2/incidents/{dlpIncidentId}/triggers</code></p><p>This endpoint fetches the DLP incident trigger metadata in a nested structure organized by source category. This is an enhanced <code>v2</code> format of the <code>/dlp/v1/incidents/{dlpIncidentId}/triggers</code> endpoint that retrieves additional details of the incident trigger data.</p></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/legacy-apis/csv-user-attributes" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/legacy-apis/api-rate-limit-summary-workflow-automation-api" target="_blank">API Rate Limit Summary</a>.</p> Feature Available Thu, 06 Aug 2026 07:00:00 GMT feature 1542653 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-08-06&id=1542059 <div class="sub"><p>The Incident Details page has been redesigned from a page to a drawer. The Incident Details drawer has the same functionality as the Incidents page except the drawer contains an Overview tab, Violation Details tab, Violation Content tab, and State Changes tab. By clicking each tab, you can see the different details for an incident.</p><p><a class="image-icon" href="#incident-details-drawer">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="incident-details-drawer" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Drawer-Initial-View.png" alt="Viewing the Incident Details drawer. This drawer has an Overview tab, a Violation Details tab, a Violation Content tab, and a State Changes tab." title="Incident Details drawer"></p></div> Feature Available Thu, 06 Aug 2026 07:00:00 GMT feature 1542059 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-08-06&id=1542054 <div class="sub"><p>On the Incidents page, you can select the time zone in which the time-related merge tags appear in the user or escalation notifications when you manually perform the Notify User action or Escalate action for one or more incidents on the page.</p><p><a class="image-icon" href="#time-zone-selection">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a>, <a href="https://help.zscaler.com/workflow-automation/managing-notification-templates" target="_blank">Managing Notification Templates</a>, and <a href="https://help.zscaler.com/workflow-automation/managing-admin-assignments" target="_blank">Managing Admin Assignments</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="time-zone-selection" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Notify-User-Window-Time-Zone-Field.png" alt="Viewing the Notify User window with the Time Zone field highlighted" title="Notify User window"></p><p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/RN-WA-Escalate-Window-Time-Zone-Field.png" alt="Viewing the Escalate window with the Time Zone field highlighted" title="Escalate window"></p></div> Feature Available Thu, 06 Aug 2026 07:00:00 GMT feature 1542054 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-06-26&id=1541394 <div class="sub"><p>On the custom workflow builder page, a new Configure Notify Node window is added. This window is conversation based and assists you with configuring a Notify node for a user notification or an escalation notification in a custom workflow. After you click the Notify tile and drag and drop it to the custom workflow design area, this window appears.</p><p><a class="image-icon" href="#configure-notify-node-window-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-workflows" target="_blank">Managing Workflows</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="configure-notify-node-window-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Configure-Notify-Node-Window.png" alt="Configure Notify Node window populated with the configuration settings for an escalation notification" title="Configure Notify Node window"></p></div> Feature Available Fri, 26 Jun 2026 07:00:00 GMT feature 1541394 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-06-26&id=1541285 <div class="sub"><p>You can select the time zone in which the time-related merge tags appear on a user or escalation notification that are created manually or through a workflow. There are several ways to select the time zone. You can select the time zone:</p><ul><li data-list-item-id="e7b3ce991deda5d070a6d7cae80f3f3e6"><p>On the Incident Details page, when you perform the Notify User or Escalate action for an incident.</p><p><a class="image-icon" href="#incident-details-page-images">See image.</a></p></li><li data-list-item-id="ec6327c2db4428d96efaf582593cc58a9"><p>On the custom workflow builder page, when you configure a workflow with a notify tile for a user or escalation notification.</p><p><a class="image-icon" href="#custom-workflow-builder-image">See image.</a></p></li><li data-list-item-id="e172ca6f6179433e602b4404a149fcde7"><p>On the Notification Template page, when you configure an email, Slack, or Microsoft Teams notification template.</p><p><a class="image-icon" href="#Notification-Template-Page-Image">See image.</a></p></li><li data-list-item-id="e1eccfcce704bd9eabd252931071bc80c"><p>On the Add or Edit Admin Assignment window, when you add or edit an admin assignment.</p><p><a class="image-icon" href="#Edit-Admin-Assignment-Page">See image.</a></p></li></ul><p>If you do not select the time zone using any of these pages or windows, then the system uses the UTC+00:00 time zone, by default.</p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing and Managing Incident Details</a>, <a href="https://help.zscaler.com/workflow-automation/managing-workflows" target="_blank">Managing Workflows</a>, <a href="https://help.zscaler.com/workflow-automation/managing-notification-templates" target="_blank">Managing Notification Templates</a>, and <a href="https://help.zscaler.com/workflow-automation/managing-admin-assignments" target="_blank">Managing Admin Assignments</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="incident-details-page-images" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notify-User-Window-Time-Zone_0.png" alt="Notify User window with the Time Zone field highlighted" title="Notify User window"></p><p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Escalate-Window-Time-Zone_0.png" alt="Escalate window with the Time Zone field highlighted" title="Escalate window"></p></div><div class="subc"><p><a class="ck-anchor" id="custom-workflow-builder-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Custom-Email-Builder-Time-Zone_0.png" alt="Notify Rich Text Editor when configuring a Notify tile on the custom email builder page. The Time Zone field is highlighted. " title="Custom email builder page - Notify Rich Text Editor"></p></div><div class="subc"><p><a class="ck-anchor" id="Notification-Template-Page-Image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Time-Zone.png" alt="Notification Template page for an email template with the Time Zone field highlighted at the top of the page" title="Notification Template page - Email template"></p></div><div class="subc"><p><a class="ck-anchor" id="Edit-Admin-Assignment-Page" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Edit-Admin-Assignment-Window-Time-Zone.png" alt="Edit Admin Assignment window with the Notification Time Zone field highlighted" title="Edit Admin Assignment window"></p></div> Feature Available Fri, 26 Jun 2026 07:00:00 GMT feature 1541285 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-05-29&id=1540231 <div class="sub"><p>On the Notification Template page, you can create custom email, Slack, and Microsoft Teams notification templates that your organization can use. When creating these different types of templates, you can use the merge tags that Workflow Automation provides to include incident attribute values in the notifications. The following additional merge tags are added:</p><ul><li data-list-item-id="e0c70f3bc5a0c32b4c9cd6173a1274e9f">Sender Email</li><li data-list-item-id="ebda15f4ef713ecb0b7029027ffb39f96">Subject</li></ul><p>The same merge tags are available for all formats of notification templates. The following image shows the available merge tags when configuring a Slack template.</p><p><a class="image-icon" href="#merge-tags-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-notification-templates" target="_blank">Managing Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-email-notification-templates" target="_blank">Adding Email Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-slack-notification-templates" target="_blank">Adding Slack Notification Templates</a>, and <a href="https://help.zscaler.com/workflow-automation/adding-microsoft-teams-notification-templates" target="_blank">Adding Microsoft Teams Notification Templates</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="merge-tags-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Sender-Email-Subject.png" alt="Viewing the Notification Template page for a Slack template with the Select Merge Tag drop-down menu expanded. The Sender Email and Subject merge tags are highlighted. " title="Notification Template page - Select Merge Tag drop-down menu"></p></div> Feature Available Fri, 29 May 2026 07:00:00 GMT feature 1540231 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-05-29&id=1540229 <div class="sub"><p>On the Incidents page, the Attachments column is added to the incidents table. The names of the files that were sent to the recipients of an email incident appear in this column. The file names appear only for incidents of Source DLP type Email.</p><p><a class="image-icon" href="#incidents-page-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="incidents-page-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incidents-Page-Attachments-Column.png" alt="Viewing the Incidents page with the Attachments column highlighted in the incidents table." title="Incidents page - Attachments column"></p></div> Feature Available Fri, 29 May 2026 07:00:00 GMT feature 1540229 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-05-29&id=1540929 <p>The following new endpoints are added to the Workflow Automation API:</p><ul><li data-list-item-id="e3b15f337017362ed72e35619c6fc98e4"><p><code>GET /dlp/v1/csv-user-data/{csv_user_data_uuid}/download</code></p><p>This endpoint provides you with a pre-signed S3 bucket link to download your original CSV user attributes file and the validation error file.</p></li><li data-list-item-id="e8414531b43e0ae3c247dae33c6d1850c"><p><code>POST /dlp/v1/csv-user-data/import</code></p><p>This endpoint allows you to import the end user attributes as a multipart CSV file.</p></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/legacy-apis/csv-user-attributes" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/legacy-apis/api-rate-limit-summary-workflow-automation-api" target="_blank">API Rate Limit Summary</a>.</p> Feature Available Fri, 29 May 2026 07:00:00 GMT feature 1540929 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-05-04&id=1539941 <div class="sub"><p>On the Incidents page, you can export the incidents that are displayed on the page to a CSV file. For incidents that have duplicate incidents, the CSV file lists the main incident ID along with each of the duplicate incident IDs in the Transaction ID field. The incident IDs are separated by a comma.</p><p><a class="image-icon" href="#csv-file-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="csv-file-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Export-Incidents-File-CSV.png" alt="Viewing an Export Incidents CSV file for incidents that have duplicate incidents. The Transaction ID field is highlighted for multiple rows for those incidents that have duplicate incidents." title="Export Incidents - CSV file"></p></div> Feature Available Mon, 04 May 2026 07:00:00 GMT feature 1539941 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-05-04&id=1539959 <p>The duplicate incident logic is modified to not require the MD5 hash value for incidents resulting from rules without content inspection (i.e., the Engines attribute value is External DLP).</p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/understanding-duplicate-incidents-workflow-automation" target="_blank">Understanding Duplicate Incidents in Workflow Automation</a>.</p> Feature Available Mon, 04 May 2026 07:00:00 GMT feature 1539959 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-05-04&id=1540109 <p>Workflow Automation supports integration with SaaS Security Posture Management (SSPM). This integration enables you to configure workflows that automatically trigger tickets for SSPM controls and findings through a SaaS application ticketing system (i.e., ServiceNow). In SSPM, the workflows that you configure in Workflow Automation are manually triggered when an admin clicks the Add Ticket icon next to a control or finding that is captured in SSPM.</p><p>As a result of the integration, the manual ticket-creation process for SSPM controls and findings is simplified. Reducing the ticket creation time results in faster remediation and clear ownership of SSPM controls and findings.</p><p class="note">This feature is in limited availability. To access this feature, contact your Zscaler Account team.</p><p>To learn more, see:</p><ul><li data-list-item-id="ecc0c5e94fc57ae7cc2013fbb8ecef1b3"><a href="https://help.zscaler.com/legacy-workflow-automation/what-workflow-automation" target="_blank">What Is Workflow Automation?</a></li><li data-list-item-id="e72f6a3ac2ca9b302230c94544d9fad0c"><a href="https://help.zscaler.com/legacy-workflow-automation/step-step-configuration-guide-workflow-automation-sspm-controls-and-findings" target="_blank">Step-by-Step Configuration Guide for Workflow Automation for SSPM Controls and Findings</a></li><li data-list-item-id="e8b4ca89a954ce45b73947c84fd7c6f87"><a href="https://help.zscaler.com/legacy-workflow-automation/accessing-and-navigating-workflow-automation-admin-portal-sspm-controls-and-findings" target="_blank">Accessing and Navigating the Workflow Automation Admin Portal for SSPM Controls and Findings</a></li><li data-list-item-id="ed8fa49d0390fe1645e9892cf6090ab54"><a href="https://help.zscaler.com/legacy-zia/about-posture" target="_blank">About Posture</a></li><li data-list-item-id="e797a7ad7b247b9d98aeaafe66edb2904"><a href="https://help.zscaler.com/legacy-zia/about-control-panel" target="_blank">About the Control Panel</a></li><li data-list-item-id="ed852bf8e9cf7d1572bffaf2a80d54f30"><a href="https://help.zscaler.com/legacy-zia/about-app-inventory" target="_blank">About the App Inventory</a></li><li data-list-item-id="e5465bd10801ed1f9a4c301d2a9f15d45"><a href="https://help.zscaler.com/legacy-zia/about-app-panel" target="_blank">About the App Panel</a></li></ul> Feature in Limited Availability Mon, 04 May 2026 07:00:00 GMT feature 1540109 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-04-16&id=1539691 <div class="sub"><p>On the Incident Details page opened in a new tab from the Incidents page, you can perform actions on the incident on this page, and you can click the Refresh button at the top of the page to display the latest information for the incident.</p><p><a class="image-icon" href="#incident-details-page-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="incident-details-page-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Page-Open-New-Tab.png" alt="Viewing the Incident Details page for an incident opened in a new tab from the Incidents page. The Actions menu and Refresh button are highlighted." title="Incident Details page"></p></div> Feature Available Thu, 16 Apr 2026 07:00:00 GMT feature 1539691 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-04-16&id=1539692 <div class="sub"><p>On the Incident Details page, for an email incident with a quarantined status, after you release the quarantined email to one or more of its recipients, the Quarantined Email Status field appears in the Overview section on this page. When you click the View Status link in this field, the Quarantined Email Status page appears. On this page, you can view the status of the quarantine release for each of the recipients.</p><p><a class="image-icon" href="#incident-details-page-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="incident-details-page-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Quarantined-Email-Status-Page.png" alt="Viewing the Quarantined Email Status page." title="Quarantined Email Status page"></p></div> Feature Available Thu, 16 Apr 2026 07:00:00 GMT feature 1539692 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-04-16&id=1539690 <div class="sub"><p>On the Incident Group Mapping page and the Workflow Mappings page, you configure the mappings for incident groups or workflows, respectively, by adding statements (i.e., rules). Each statement contains one or more predicates. You can add up to 100 predicates for a statement.</p><p><a class="image-icon" href="#mappings-predicate">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incident-group-mappings" target="_blank">Managing Incident Group Mappings</a> and <a href="https://help.zscaler.com/workflow-automation/managing-workflow-mappings" target="_blank">Managing Workflow Mappings</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="mappings-predicate" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Group-Mapping-Page-Predicate.png" alt="Viewing the Incident Group Mapping page for an incident group. The statement section and Add Predicate button are highlighted." title="Incident Group Mapping page"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Workflow-Mappings-Page-Predicate.png" alt="Viewing the Workflow Mappings page for a workflow. The statement section and Add Predicate button are highlighted." title="Workflow Mappings page"></div> Feature Available Thu, 16 Apr 2026 07:00:00 GMT feature 1539690 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-03-23&id=1538811 <div class="sub"><p>The following are enhancements to the Data Protection features in Workflow Automation:</p><h1>Enhancement to the Incidents Page and the Incident Analytics Dashboard</h1><p>On the Incidents page and the Incident Analytics dashboard, a Response Available widget is added. This widget displays the number of incidents where a user has provided a response from a user notification, or where a manager or approver has provided a response from an escalation notification (i.e., incidents with the status Received Justification Response).</p><p><a class="image-icon" href="#Response-Available-Widget">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a> and <a href="https://help.zscaler.com/workflow-automation/about-incident-analytics-dashboard" target="_blank">About the Incident Analytics Dashboard</a>.</p><h1>Enhancement to the Incident Details Page</h1><p>On the Incidents Details page, you can manually create a policy exception for an incident by selecting the Create Policy Exception action. When creating the policy exception, you enter the duration for the policy exception using days, hours, and minutes. Previously, the duration could only be entered in minutes.</p><p><a class="image-icon" href="#create-policy-exception">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p><h1>Enhancements to the Incident Summary Page</h1><p>A couple of enhancements were made to the Incident Summary page. These enhancements are:</p><ul><li data-list-item-id="ef528b344b42288cc77cb3535215959ea">The Incident Summary page is now a stand-alone page. Previously, it was accessed from the Incidents page.</li><li data-list-item-id="e79c016828ba12ae312c7321ac94abe00">On the Incident Summary page, when you click a link that appears in the Incident Summary table, a new tab opens, displaying the Selected Criteria page. This page displays the criteria associated with the link in the Selected Criteria section of the page, and lists the actual incidents with the relevant filters applied for that combination of criteria. Each link you click in the Incident Summary table opens a new tab, and the tab stays open until you close it.</li></ul><p><a class="image-icon" href="#incident-summary-page-closeable-tabs">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incident-summaries" target="_blank">Managing Incident Summaries</a>.</p><h1>Enhancements to Notification Templates</h1><p>A couple of enhancements were made to the Notification Templates page. These enhancements are:</p><ul><li data-list-item-id="e4e7a16cd2b6a1a5bc8fbd040807dab90"><p>A Digest Type field is added to the top of the page. This field enables you to select whether you are configuring an end user or admin digest notification template.</p><p><a class="image-icon" href="#digest-type-field">See image.</a></p></li><li data-list-item-id="e6fd7b94d456e18bc302fbeb99302a77c"><p>The merge tags that are available when configuring a notification template depend upon the type of notification template you are configuring. Different sets of merge tags are available for a user or escalation notification template versus an end user or admin digest notification template. The following images are examples of the merge tags for the different types of notification templates.</p><p><a class="image-icon" href="#merge-tags-different-not-templates">See image.</a></p></li></ul><p>If you have existing notification templates that are configured with the merge tags that are no longer available for that particular notification type, an error message is shown when you attempt to edit those templates.</p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-notification-templates" target="_blank">Managing Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-email-notification-templates" target="_blank">Adding Email Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-slack-notification-templates" target="_blank">Adding Slack Notification Templates</a>, and <a href="https://help.zscaler.com/workflow-automation/adding-microsoft-teams-notification-templates" target="_blank">Adding Microsoft Teams Notification Templates</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Response-Available-Widget" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incidents-Page-Response-Available.png" alt="Viewing the Incidents page with the Response Available widget highlighted at the top of the page." title="Incidents page"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Analytics-Dashboard-Response-Available.png" alt="Viewing the Incident Analytics dashboard with the Response Available widget highlighted at the top of the dashboard." title="Incident Analytics dashboard"></div><div class="subc"><p><a class="ck-anchor" id="create-policy-exception" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Create-Policy-Exception-Window-Duration.png" alt="Viewing the Create Policy Exception window with the Policy Exception Duration field highlighted. The Policy Exception Duration field contains fields for Days, Hours, and Minutes. " title="Create Policy Exception window"></p></div><div class="subc"><p><a class="ck-anchor" id="incident-summary-page-closeable-tabs" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Summary-Selected-Criteria-Page_0.png" alt="Viewing the Selected Criteria page for a summary criteria link. The tab is highlighted for the page and the Selected Criteria section of the page is highlighted. The Selected Criteria section displays casb_Citizen Service Number in the Dictionary field, casb_HIPAA in the Engine field, and All in the Severity field. " title="Incident Summary page - Selected Criteria page"></p></div><div class="subc"><p><a class="ck-anchor" id="merge-tags-different-not-templates" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Merge-Tags-Esc-User-Notifications.png" alt="Viewing the merge tags that are available for a user and escalation notification template on the Notification Template page. The Digest option is not enabled and is highlighted and the Merge Tags drop-down menu is highlighted." title="Notification Template page - Merge Tags for User and Escalation Notification Templates"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Merge-Tags-End-User-Digest-Notification.png" alt="Viewing the merge tags that are available for a user digest notification template on the Notification Template page. The Digest option is enabled and is highlighted, the Digest Type field is set to End User and highlighted, and the Merge Tags drop-down menu is highlighted." title="Notification Template page - Merge Tags for User Digest Notification Templates"><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Merge-Tags-DLP-Admin-Digest-Notification.png" alt="Viewing the merge tags that are available for a DLP Admin digest notification template on the Notification Template page. The Digest option is enabled and is highlighted, the Digest Type field is set to Admin and highlighted, and the Merge Tags drop-down menu is highlighted." title="Notification Template page - Merge Tags for DLP Admin Digest Notification Templates"></div><div class="subc"><p><a class="ck-anchor" id="digest-type-field" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Digest-Type-Field.png" alt="Viewing the drop-down menu for the Digest Type field on the Notification Template page. The menu contains End User and Admin values. " title="Notification Template page - Digest Type field"></p></div> Feature Available Mon, 23 Mar 2026 07:00:00 GMT feature 1538811 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-03-05&id=1538627 <div class="sub"><p>The following are enhancements to the Data Protection features in Workflow Automation:</p><h1>Enhancement to Notification Templates</h1><p>On the Notification Template page, you can create custom email, Slack, and Microsoft Teams notification templates that your organization can use. When creating these different types of templates, you can use the merge tags that are provided by Workflow Automation to include incident attribute values in the notifications. The following additional merge tags are added:</p><ul><li>External Collaborators</li><li>External Recipients</li><li>Internal Collaborators</li><li>Internal Recipients</li><li>Manager Email</li><li>Manager Name</li></ul><p>The same merge tags are available when configuring email, Slack, and Microsoft Teams notification templates. The following image shows the available merge tags when configuring a Slack template.</p><p><a class="image-icon" href="#merge-tags">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-notification-templates" target="_blank">Managing Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-email-notification-templates" target="_blank">Adding Email Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-slack-notification-templates" target="_blank">Adding Slack Notification Templates</a>, and <a href="https://help.zscaler.com/workflow-automation/adding-microsoft-teams-notification-templates" target="_blank">Adding Microsoft Teams Notification Templates</a>.</p><h1>Enhancement to Email Addresses</h1><p>In Workflow Automation, there are a few pages (e.g., the Approvers page, Integration Users page, Incident Details page, and custom workflows page) that require you to enter an email address, and you must enter email addresses when importing user attributes using a CSV file on the Import CSV page. In addition, email addresses are displayed on a few of the pages (e.g., Incidents page, Incident Summary page, and Incident Details page) in Workflow Automation. Email addresses are enhanced throughout to support apostrophes (e.g., john.o’mailley@companyabc.com and k’lynn.brown@companyabc.com) and hyphenated characters (e.g., susan.smith-jones@companyabc.com and mary-lou.johnson@companyabc.com).</p><p>The following image shows examples of email addresses with apostrophes and hyphenated characters on the Approvers page.</p><p><a class="image-icon" href="#email-addresses">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-approvers" target="_blank">Managing Approvers</a>, <a href="https://help.zscaler.com/workflow-automation/managing-integration-users" target="_blank">Managing Integration Users</a>, <a href="https://help.zscaler.com/workflow-automation/managing-workflows" target="_blank">Managing Workflows</a>, <a href="https://help.zscaler.com/workflow-automation/managing-user-attributes" target="_blank">Managing User Attributes</a>, <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a>, <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>, and <a href="https://help.zscaler.com/workflow-automation/managing-incident-summaries" target="_blank">Managing Incident Summaries</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="merge-tags" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Merge-Tags-First.png" alt="Viewing the Notification Template page for a Slack notification. The Select Merge Tag drop-down menu is expanded to display the available merge tags. The External Collaborators and External Recipients merge tags are highlighted." title="Notification Template page - Select Merge Tag Drop-Down Menu "></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Merge-Tags-Second.png" alt="Viewing the Notification Template page for a Slack notification. The Select Merge Tag drop-down menu is expanded to display the available merge tags. The Internal Collaborators, Internal Recipients, Manager Email, and Manager Name merge tags are highlighted." title="Notification Template page - Select Merge Tag Drop-Down Menu"></div><div class="subc"><p><a class="ck-anchor" id="email-addresses" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Approvers-Page-Hyphenated-Apostrophes-Examples.png" alt="Viewing the Approvers page with hyphenated characters and apostrophes displayed within the Name and Email fields for four different approvers. The following names and email address are highlighted on the page: John O'Mailley/john.o'mailley@companyabc.com, Susan Smith-Jones/susan.simth-jones@companyabc.com, K'Lynn Brown/k'lynn.brown@companyabc.com, and Mary-Lou Johnson/mary-lou.johnson@companyabc.com." title="Approvers page"></p></div> Feature Available Thu, 05 Mar 2026 08:00:00 GMT feature 1538627 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-02-23&id=1535438 <div class="sub"><p>The following are enhancements to the Data Protection features in Workflow Automation:</p><h1>Enhancement to Custom Date Range</h1><p>On the Incidents page, Incident Summary page, and the Incident Analytics dashboard, you can filter the incidents that appear by selecting the time range. The custom date range option is enhanced to enable you to specify the time (i.e. hour, minute, and second) for the start date and the end date.</p><p><a class="image-icon" href="#custom-date-range">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a>, <a href="https://help.zscaler.com/workflow-automation/managing-incident-summaries" target="_blank">Managing Incident Summaries</a>, and <a href="https://help.zscaler.com/workflow-automation/about-incident-analytics-dashboard" target="_blank">About the Incident Analytics Dashboard</a>.</p><h1>Enhancements for Incidents of Source DLP Type SaaS Security</h1><p>Several enhancements were made for incidents of Source DLP type SaaS Security. These enhancements are:</p><ul><li><p>On the Incidents page, the following additional columns are added to the incident table:</p><ul><li>Component: The specific subresource within a SaaS tenant where the incident violation occurred.</li><li>Content Location: The category of the collaboration channel for the event.</li><li>Workspace: The name or identifier of the collaboration workspace.</li><li>Domains: The list of domains associated with the incident transaction context.</li></ul><p>In addition, when you export incidents, these new columns appear in the incident export file, and in the Filters window, these attributes are added as filter options.</p><p><a class="image-icon" href="#incident-page-saas-security-attributes">See image.</a></p></li><li><p>On the Incident Group Mapping page and the Workflow Mappings page, the following additional properties are available for mapping:</p><ul><li>Component</li><li>Content Location</li><li>Domains</li><li>Workspace</li></ul><p>The same properties are available when mapping an incident group as when mapping a workflow. The following image shows the properties when mapping an incident group.</p><p><a class="image-icon" href="#saas-security-incident-group-mapping-additional-properties">See image.</a></p></li><li><p>On the Notification Template page, the following additional items are added as merge tags when configuring Email, Slack, and Microsoft Teams notification templates:</p><ul><li>Component</li><li>Content Location</li><li>Domains</li><li>Workspace</li></ul><p>The same merge tags are available when configuring Email, Slack, and Microsoft Teams notification templates. The following image shows the available merge tags when configuring a Slack template.</p><p><a class="image-icon" href="#notification-template-merge-tags">See image.</a></p></li></ul><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a>, <a href="https://help.zscaler.com/workflow-automation/using-incident-filters-workflow-automation" target="_blank">Using Incident Filters in Workflow Automation</a>, <a href="https://help.zscaler.com/workflow-automation/managing-workflow-mappings" target="_blank">Managing Workflow Mappings</a>, <a href="https://help.zscaler.com/workflow-automation/managing-incident-group-mappings" target="_blank">Managing Incident Group Mappings</a>, <a href="https://help.zscaler.com/workflow-automation/adding-email-notification-templates" target="_blank">Adding Email Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-slack-notification-templates" target="_blank">Adding Slack Notification Templates</a>, and <a href="https://help.zscaler.com/workflow-automation/adding-microsoft-teams-notification-templates" target="_blank">Adding Microsoft Teams Notification Templates</a>.</p><h1>Enhancement to Incident Group Mappings and Workflow Mappings</h1><p>On the Incident Group Mapping page, you can map an incident group to one or more properties, and on the Workflow Mappings page, you can map a workflow to one or more properties. The Integration Name property is added to these pages for incidents of Source DLP type Inline, Email, Endpoint, and SaaS Security. You can use this property to map an incident group or workflow.</p><p>The same properties are available when mapping an incident group as when mapping a workflow. The following image shows the property when mapping an incident group.</p><p><a class="image-icon" href="#integration-names-property">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incident-group-mappings" target="_blank">Managing Incident Group Mappings</a> and <a href="https://help.zscaler.com/workflow-automation/managing-workflow-mappings" target="_blank">Managing Workflow Mappings</a>.</p><h1>Enhancement to the Incidents Page and Incident Details Page</h1><p>On the Incidents page and the Incident Details page, a Refresh button is added to the top of the page. When you click this button, the system reloads the page and displays the latest information.</p><p><a class="image-icon" href="#refresh-button">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a> and <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="custom-date-range" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Time-Range-Filter-Custom-Date-Range.png" alt="Viewing the Start Date field after it is selected for a custom date range. The columns for hours, minutes, and seconds are highlighted, and the chosen time for the start date is highlighted in the Start Date field." title="Incidents page - Time Range filter - Custom Date Range"></p></div><div class="subc"><p><a class="ck-anchor" id="incident-page-saas-security-attributes" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incidents-Page-SaaSSecurity-Additional-Attributes.png" alt="Viewing the Incidents page for a SaaS Security DLP Type incident. The Component column, Content Location column, Workspace column, and Domains column are highlighted in the Incidents table. " title="Incidents page - SaaS Security DLP Type Incident"></p></div><div class="subc"><p><a class="ck-anchor" id="integration-names-property" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Group-Mapping-Page-Integration-Name-Property.png" alt="Viewing the Integration Name property on the Incident Group Mapping page." title="Incident Group Mapping page - Integration Name property"></p></div><div class="subc"><p><a class="ck-anchor" id="saas-security-incident-group-mapping-additional-properties" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Group-Mapping-Page-Additional-Properties.png" alt="Viewing the property menu when adding an incident group mapping on the Incident Group Mapping page. The Component, Content Location, Domains, and Workspace properties are highlighted." title="Incident Group Mapping page"></p></div><div class="subc"><p><a class="ck-anchor" id="notification-template-merge-tags" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Page-Merge-Tags.png" alt="Viewing the available merge tags on the Notification Template page when adding a Slack notification template. The Select Merge Tag drop-down menu is highlighted and the Component and Content Location merge tags are highlighted in the menu." title="Notification Template page - Select Merge Tag drop-down menu"></p></div><div class="subc"><p><a class="ck-anchor" id="refresh-button" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incidents-Page-Refresh-Button.png" alt="Viewing the Incidents page with the Refresh button highlighted at the top of the page." title="Incidents page - Refresh button"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Page-Refresh-Button.png" alt="Viewing the Incident Details page with the Refresh button highlighted at the top of the page." title="Incident Details page - Refresh button"></div> Feature Available Mon, 23 Feb 2026 08:00:00 GMT feature 1535438 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-02-05&id=1535145 <div class="sub"><p>The following are enhancements to the Data Protection features in Workflow Automation:</p><h1>Introducing Incident Summaries</h1><p>On the Incident Summary page, you can view aggregate incident counts for a specified date range by using various selectable attributes and filters. Workflow Automation provides several attributes that you can use to summarize the number of the incidents that have occurred in your organization.</p><p><a class="image-icon" href="#incident-summary-page">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/tech-pubs-drafts/managing-incident-summaries" target="_blank">Managing Incident Summaries</a>.</p><h1>Enhancement to Audit Logs</h1><p>Workflow Automation creates an audit log when you click the Generate Presigned Link for an incident in the Violation Content section on the Incident Details page. You can view this audit log on the Audit Logs page.</p><p><a class="image-icon" href="#audit-log-page">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/about-audit-logs" target="_blank">About Audit Logs</a> and <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a>.</p><h1>Support for Policy Exceptions</h1><p>Workflow Automation enables you to create a policy exception for an Inline Source DLP type incident for a specified period of time. You can create a policy exception for an incident using one of the following methods:</p><ul><li><p>On the Incident Details page, you can select the Create Policy Exception action from the Actions drop-down menu and specify the period of time for the policy exception.</p><p><a class="image-icon" href="#policy-exception-action-drop-down-menu">See image.</a></p></li><li><p>On the custom workflow builder page, you can configure a custom workflow so that a policy exception can be applied to an incident through an escalation notification or user notification. A Policy Exception tile is added to the custom workflow builder.</p><p><a class="image-icon" href="#policy-exception-custom-workflow-builder">See image.</a></p></li></ul><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank">Viewing & Managing Incident Details</a> and <a href="https://help.zscaler.com/workflow-automation/managing-workflows" target="_blank">Managing Workflows</a>.</p><h1>Introducing Notification Reminders</h1><p>Workflow Automation can send notification reminders to end users, managers, and approvers who have previously received user or escalation notifications for incidents but have not yet responded to those notifications. On the Account Settings page, you can configure who is to receive these reminders and the frequency at which they are sent.</p><p><a class="image-icon" href="#notification-reminders-account-settings-page">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-account-settings" target="_blank">Managing Account Settings</a> and <a href="https://help.zscaler.com/workflow-automation/understanding-notification-reminders" target="_blank">Understanding Notification Reminders</a>.</p><h1>Support for Releasing Quarantined Emails for Email Incidents</h1><p>Email Data Loss Prevention (DLP) incidents that Microsoft has quarantined are displayed in Workflow Automation. In Workflow Automation, you can release the email to one or more of its recipients using one of the following methods:</p><ul><li>On the Incident Details page, an admin can select the Release Email Quarantine action from the Actions drop-down menu and select the recipients to release the email to.<br><a class="image-icon" href="#release-email-quarantine-action">See image.</a></li><li>When a user responds to an end user notification or an escalation notification that is associated with a quarantined email incident, the notifications are enhanced to include a new Release Email to Recipients section that includes release quarantine options.<br><a class="image-icon" href="#user-notification-example">See image.</a></li></ul><p class="note">To enable this feature, contact Zscaler Support.</p><p>To learn more, see:</p><ul><li><a href="https://help.zscaler.com/zia/about-outbound-email-policy" target="_blank" data-entity-type="node" data-entity-uuid="430e602c-032d-4d76-a9f5-4bc849c20891" data-entity-substitution="canonical">About Outbound Email Policy</a></li><li><a href="https://help.zscaler.com/zia/configuring-outbound-email-policy-rules" target="_blank" data-entity-type="node" data-entity-uuid="76ec614d-5582-425f-9b77-2b84a123edd6" data-entity-substitution="canonical">Configuring Outbound Email Policy Rules</a></li><li><a href="https://help.zscaler.com/zia/step-step-configuration-guide-zscaler-outbound-email-dlp" target="_blank" data-entity-type="node" data-entity-uuid="eaf3330b-49f7-4972-83ff-f1c590778c86" data-entity-substitution="canonical">Step-by-Step Configuration Guide for Zscaler Outbound Email DLP</a></li><li><a href="https://help.zscaler.com/zia/configuring-microsoft-exchange-zscaler-outbound-email-dlp" target="_blank" data-entity-type="node" data-entity-uuid="608c4200-e927-4ec5-ae92-65d555b5241e" data-entity-substitution="canonical">Configuring Microsoft Exchange for Zscaler Outbound Email DLP</a></li><li><a href="https://help.zscaler.com/zia/adding-email-tenants" target="_blank" data-entity-type="node" data-entity-uuid="87b77398-9d9f-4afc-aaa6-908388c1a1b5" data-entity-substitution="canonical">Adding Email Tenants</a></li><li><a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank" data-entity-type="node" data-entity-uuid="0c869339-80cf-4874-b29b-ee801a413f75" data-entity-substitution="canonical">Managing Incidents</a></li><li><a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank" data-entity-type="node" data-entity-uuid="712fad3b-06b4-4353-9903-e39296c3fcd8" data-entity-substitution="canonical">Viewing & Managing Incident Details</a></li><li><a href="https://help.zscaler.com/workflow-automation/responding-end-user-notification" target="_blank">Responding to an End User Notification</a></li><li><a href="https://help.zscaler.com/workflow-automation/responding-escalation-notification" target="_blank">Responding to an Escalation Notification</a></li></ul></div><div class="subc"><p><a class="ck-anchor" id="incident-summary-page" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Summary-Page.png" alt="Viewing an incident summary on the Incident Summary page. This page displays the Summary Criteria section and a table listing the summary criteria combinations for the incidents along with the incident counts for those combinations." title="Incident Summary page"></p></div><div class="subc"><p><a class="ck-anchor" id="audit-log-page" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Audit-Logs-Page-Read-Action-Presigned-Link.png" alt="Viewing the Audit Logs page with a couple of the audit logs highlighted that were generated from clicking the Generate Presigned Link for an incident on the Incident Details page. These audit logs have a Read action, an Incident module, an Evidence Data resource, the email address of the person who performed the action, and Change Notes of Generated Presigned Url." title="Audit Logs page"></p></div><div class="subc"><p><a class="ck-anchor" id="policy-exception-action-drop-down-menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Page-Action-Menu-Create-Policy-Exception.png" alt="Viewing the Actions drop-down menu on the Incident Details page. The Create Policy Exception action is highlighted." title="Incident Details page - Actions drop-down menu"></p><p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Page-Create-Policy-Exception-Window.png" alt="Viewing the Create Policy Exception window. The window contains a Policy Exception duration (in minutes) field, a Notify User checkbox, and a Create button." title="Incident Details page - Create Policy Exception window"></p></div><div class="subc"><p><a class="ck-anchor" id="policy-exception-custom-workflow-builder" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Custom-Workflow-Builder-Workflow-with-Policy-Exception.png" alt="Viewing a workflow that has already been configured on the custom email builder page. The workflow is configured with a Notify tile for a user response that is connected to a Notify tile for the escalation to manager. Then the Notify tile for the escalation to manager is connected to a Policy Exception tile." title="Custom email builder page"></p></div><div class="subc"><p><a class="ck-anchor" id="notification-reminders-account-settings-page" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Account-Settings-Page-Notifications-Reminder-Tab.png" alt="Viewing the Notifications Reminder tab on the Account Settings page" title="Account Settings page - Notifications section - Notifications Reminder tab"></p></div><div class="subc"><p><a class="ck-anchor" id="release-email-quarantine-action" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Details-Page-Release-Email-Quarantine-Action.png" alt="Viewing the Actions drop-down on the Incident Details page. The Release Email Quarantine action is highlighted in the menu." title="Incident Details page - Actions drop-down menu"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Release-Email-Window-One-More-Recipients.png" alt="Viewing the Release Email window on the Incident Details page. The Release to one or more recipients option is selected, a couple of email addresses are selected in the Email table, the False Positive checkbox is selected, and a justification reason is entered. " title="Incidents Details page - Release Email window"></div><div class="subc"><p><a class="ck-anchor" id="user-notification-example" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-User-Notification-Release-Email-to-Recipients-Section.png" alt="Viewing a user notification example with the Release Email to Recipients section highlighted." title="Example of a User Notification with the Release Email to Recipients section"></p></div> Feature Available Thu, 05 Feb 2026 08:00:00 GMT feature 1535145 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-02-02&id=1535236 <div class="sub"><p>On the Notification Template page in the Data Protection integration, you can create custom email, Slack, and Microsoft Teams notification templates that can be used by your organization. When creating these different types of templates, you can use the merge tags that are provided by Workflow Automation to include incident attribute values in the notifications. The following additional merge tags are added:</p><ul><li>Action</li><li>Activity Type</li><li>Category</li><li>Channel</li><li>Confirm Action</li><li>Date</li><li>Department</li><li>Destination</li><li>Destination Location</li><li>Destination Type</li><li>Device Name</li><li>Device OS</li><li>Device Trust Level</li><li>DLP Admin</li><li>Document Type</li><li>Email Subject</li><li>Expected Action</li><li>File Link Expiry</li><li>File MD5</li><li>File Modified By</li><li>File Shared At</li><li>File Shared By</li><li>File Size</li><li>File Source Location</li><li>File Type</li><li>Is Copilot Accessible</li><li>Protocol</li><li>Referral URL</li><li>Source</li><li>Source DLP Type</li><li>Source Location</li><li>Source Type</li><li>URL</li></ul><p>The following existing merge tags are removed:</p><ul><li>Destination URL</li><li>Operation</li></ul><p><a class="image-icon" href="#merge-tag-images">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-notification-templates" target="_blank">Managing Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-email-notification-templates" target="_blank">Adding Email Notification Templates</a>, <a href="https://help.zscaler.com/workflow-automation/adding-slack-notification-templates" target="_blank">Adding Slack Notification Templates</a>, and <a href="https://help.zscaler.com/workflow-automation/adding-microsoft-teams-notification-templates" target="_blank">Adding Microsoft Teams Notification Templates</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="merge-tag-images" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Email-Button.png" alt="Viewing the Notification Template page when adding an Email type template. The Merge Tags drop-down menu is highlighted when adding button text. " title="Notification Template page - Email template -Button merge tags"></p><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Email-Heading.png" alt="Viewing the Notification Template page when adding an Email type template. A Heading is added to the template and the Merge Tags drop-down menu is highlighted. " title="Notification Template page - Email template - Heading Merge Tags"><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Email-Paragraph.png" alt="Viewing the Notification Template page when adding an Email type template. A Paragraph is added to the template and the Merge Tags drop-down menu is highlighted. " title="Notification Template page - Email template - Paragraph Merge Tags"><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-Slack.png" alt="Viewing the Notification Template page when adding a Slack type template. The Merge Tags drop-down menu is highlighted. " title="Notification Template page - Slack template - Merge Tags"><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Notification-Template-MSTeams.png" alt="Viewing the Notification Template page when adding a Teams type template. The Merge Tags drop-down menu is highlighted. " title="Notification Template page - Teams template - Merge Tags"></div> Feature Available Mon, 02 Feb 2026 08:00:00 GMT feature 1535236 at https://help.zscaler.com https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026?applicable_category=Zscaler-Automation&deployment_date=2026-01-08&id=1534346 <div class="sub"><p>The following are enhancements to the Data Protection features in Workflow Automation:</p><h1>Protocol Enhancement</h1><p>A few enhancements were made for incident protocol. These enhancements are:</p><ul><li><p>On the Incidents page, the Protocol column is added to the Incidents table for incidents of Source DLP type Inline.</p><p><a class="image-icon" href="#protocol-column-incidents-page">See image.</a></p></li></ul><p class="zindent1">In addition, when you export incidents, the Protocol column appears in the export file, and in the Filters window, the Protocol field is added as a filter option.</p><p class="zindent1"><a class="image-icon" href="#protocol-filters-window">See image.</a></p><p class="zindent1">To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a> and <a href="https://help.zscaler.com/workflow-automation/using-incident-filters-workflow-automation" target="_blank">Using Incident Filters in Workflow Automation</a>.</p><ul><li><p>On the Incident Group Mapping page and the Workflow Mapping page, the Protocol property is added for incidents of Source DLP type Inline. You can map incident groups and workflows to this property.</p><p><a class="image-icon" href="#incident-group-mapping-protocol">See image.</a></p></li></ul><p class="zindent1">To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incident-group-mappings" target="_blank">Managing Incident Group Mappings</a> and <a href="https://help.zscaler.com/workflow-automation/managing-workflow-mappings" target="_blank">Managing Workflow Mappings</a>.</p><h1>Enhancement to the Incidents Page</h1><p>On the Incidents page, each incident in the incident table shows all the engines, rules, and dictionaries it matched. For dictionaries, the number of times the incident matched a specific dictionary is shown in brackets. In addition, the column titles are changed for these attributes.</p><p><a class="image-icon" href="#incidents-page-columns-renamed">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank">Managing Incidents</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="protocol-column-incidents-page" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incidents-Page-Protocol-Col.png" alt="Viewing the Protocol column in the Incident table on the Incidents page. The Protocol column is highlighted." title="Incidents page"></p></div><p> </p><div class="subc"><p><a class="ck-anchor" id="protocol-filters-window" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Filters-Window-Protocol.png" alt="Viewing the Protocol filter option in the Filters window." title="Filters window - Protocol filter option"></p></div><p> </p><div class="subc"><p><a class="ck-anchor" id="incident-group-mapping-protocol" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incident-Group-Mapping-Page.png" alt="Viewing the Protocol property for an incident group mapping. The Protocol property is highlighted." title="Incident Group Mapping page"></p></div><div class="subc"><p><a class="ck-anchor" id="incidents-page-columns-renamed" target="_blank"></a><img src="https://help.zscaler.com/downloads/workflow-automation/release-notes/release-upgrade-summary-2026/WA-RN-Incidents-Page-Renamed-Columns.png" alt="Viewing the Engine(s), Dictionary Match Count(s), and Rule(s) columns in the Incident table for a few incidents. The column headings are highlighted and the number with a plus sign is highlighted in the third row." title="Incidents page"></p></div> Feature Available Thu, 08 Jan 2026 08:00:00 GMT feature 1534346 at https://help.zscaler.com