https://help.zscaler.com/rss-feed/zia/release-upgrade-summary-2026/zscalertwo.net Zscaler Internet Access (ZIA) Release Upgrade Summary for service updates deployed per cloud in 2026. Tue, 06 Oct 2026 15:26:46 +0000 en-us https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-29&id=1546030 <div class="sub"><p>The Zscaler service supports configuring your Outbound Email Data Loss Prevention (DLP) policy rules to include detection of personal email addresses. When you select this option, the rule detects when end users attempt to send sensitive data to their personal email address by matching the user’s organizational name with recipient names on external email domains (e.g., Gmail or Yahoo). This option ensures that the rule is enforced only when the recipient is the sender’s personal email address.</p><p><a class="image-icon" href="#personal-email-detection-rn">See image.</a></p><p>A filter and column, Personal Email, is added to the Email DLP Insights Logs page to display the user’s personal email address when the email is sent to the user's personal email address.</p><p><a class="image-icon" href="#personal-email-log-rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-outbound-email-policy-rules" target="_blank">Configuring Outbound Email Policy Rules</a>,<a href="https://help.zscaler.com/zia/email-dlp-insights-logs-filters" target="_blank"> Email DLP Insights Logs: Filters</a>, and <a href="https://help.zscaler.com/zia/email-dlp-insights-logs-columns" target="_blank">Email DLP Insights Logs: Columns</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="personal-email-log-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/documentation-knowledgebase/analytics/dashboards-reports-and-logs/logs/email-dlp-insights-logs-filters/ZIA-personel-email-dlp-insights.png" alt="The Personal Email field in the Email DLP Insights" title="The Personal Email Field"></p></div><div class="subc"><p><a class="ck-anchor" id="personal-email-detection-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/XC-Outbound-Email-DLP-Personal-Email-Detection-RN.png" alt="Setting the Personal Email Detection option on an Outbound Email DLP policy rule" title="The Personal Email Detection option on an Outbound Email DLP policy rule"></p></div> Feature Available Tue, 29 Sep 2026 07:00:00 GMT feature 1546030 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-29&id=1542963 <div class="sub"><p>You can choose to monitor specific workspaces within your Slack enterprise account for DLP and Malware scanning using a custom connector. While onboarding your Slack tenant, authorize Zscaler service via a custom connector with necessary permissions.</p><p><a class="image-icon" href="#custom-connector">See image.</a></p><p>Additionally, on the Scan Configuration page, you can see a new option, Chat Bots. You can choose to either include or exclude chatbots from the scan.</p><p><a class="image-icon" href="#chatbots">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a>, <a href="https://help.zscaler.com/zia/authorizing-custom-zscaler-connector-slack" target="_blank" data-entity-type="node" data-entity-uuid="fc05ccd0-635d-40e8-b75d-cbfe8a7bf804" data-entity-substitution="canonical">Authorizing a Custom Zscaler Connector for Slack</a>, <a href="https://help.zscaler.com/zia/about-saas-security-scan-configuration" target="_blank" data-entity-type="node" data-entity-uuid="89e01909-7aa2-4c6a-8196-dba4c5acd808" data-entity-substitution="canonical">About SaaS Security Scan Configuration</a>, and <a href="https://help.zscaler.com/zia/configuring-saas-security-scan-schedules" target="_blank" data-entity-type="node" data-entity-uuid="724cc219-efbf-44a8-8407-c06d16c43678" data-entity-substitution="canonical">Configuring SaaS Security Scan Schedules</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="custom-connector" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/adding-saas-application-tenants-draft-doc-65006/slack-connector.png" alt="Custom Connector for Slack" title="Custom Connector for Slack"></div><div class="subc"><p><a class="ck-anchor" id="chatbots" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/adding-saas-application-tenants-draft-doc-65006/slack-chatbots.png" alt="Chatbots option on the Scan Configuration page" title="Chatbots option on the Scan Configuration page"></div> Feature Available Tue, 29 Sep 2026 07:00:00 GMT feature 1542963 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-25&id=1545644 <div class="sub"><p class="note">To enable this feature for your organization, contact Zscaler Support.</p><p>As part of Zscaler Data Loss Prevention (DLP) phrase matching and Exact Data Match (EDM) indexing, the Zscaler service supports Normalization Form Compatibility Composition (NFKC). During DLP processing and EDM indexing, the Zscaler service converts all recognized unicode full-width characters into half-width characters, as in the following examples:</p><table class="table"><thead><tr><th>Original Full-Width Characters</th><th>Converted Half-Width Characters</th></tr></thead><tbody><tr><td>テラシマハルカ</td><td>ﾃﾗｼﾏﾊﾙｶ</td></tr><tr><td>①</td><td>1</td></tr><tr><td>ＡＢＣＤＥ</td><td>ABCDE</td></tr><tr><td>ＣＤＥＦ　ＡＢＣ　３４５</td><td>CDEF ABC 345</td></tr></tbody></table><p>To learn more, see <a href="https://help.zscaler.com/zia/about-data-loss-prevention" target="_blank">About Data Loss Prevention</a> and <a href="https://help.zscaler.com/zia/about-exact-data-match" target="_blank">About Exact Data Match</a>.</p></div> Feature Available Fri, 25 Sep 2026 07:00:00 GMT feature 1545644 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-25&id=1519616 <div class="sub"><p>You can create policies, configure browser control, and configure HTTP header control for the Brave browser. As part of this update, the Brave browser is supported in the following locations:</p><ul><li data-list-item-id="e1f58529f6b59dcc93e3bde4500486494"><p>Cloud App Control Policy: In the User Agent criterion of the <a href="https://help.zscaler.com/zia/adding-rules-cloud-app-control-policy" target="_blank">Add Rule</a> page.</p><p><a class="image-icon" href="#cac-user-agent">See image.</a></p></li><li data-list-item-id="e23a4bdc35c6297877d900597d1b530fa"><p>SSL/TLS Inspection Policy: In the User Agent criterion of the <a href="https://help.zscaler.com/zia/configuring-ssltls-inspection-policy#criteria-section" target="_blank">Add Rule</a> page.</p><p><a class="image-icon" href="#ssl-tls">See image.</a></p></li><li data-list-item-id="eeb2e85177dba245d1ca81ab810a782c8"><p>URL Filtering Policy: In the User Agent criterion of the <a href="https://help.zscaler.com/zia/configuring-url-filtering-policy#what" target="_blank">Add Rule</a> page.</p><p><a class="image-icon" href="#url-filtering-brave">See image.</a></p></li><li data-list-item-id="ee88b0df12d0c7558c7b62356bcb29044"><p>Browser Control: In the <a href="https://help.zscaler.com/zia/configuring-browser-control-policy#browser-blocking" target="_blank">Browser Blocking</a> section.</p><p><a class="image-icon" href="#browser-control">See image.</a></p></li><li data-list-item-id="effcf91f5e21370cb330403eea54de11a"><p>HTTP Header Control: In the Browser field of the <a href="https://help.zscaler.com/zia/adding-http-header-profile#user-agent" target="_blank">User Agent</a> HTTP header.</p><p><a class="image-icon" href="#http-header-control">See image.</a></p></li></ul></div><div class="subc"><p><a class="ck-anchor" id="cac-user-agent" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/Cloud-App-Control-Policy-User-Agent-RN.png" alt="Cloud App Control Policy shows the Brave browser selected for the User Agent field" title="Cloud App Control Policy"></p></div><div class="subc"><p><a class="ck-anchor" id="ssl-tls" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/SSL-TLS-Inspection-Policy-User-Agent-Brave-RN.png" alt="SSL/TLS Inspection Policy shows the Brave browser selected for the User Agent criteria " title="SSL/TLS Inspection Policy"></p></div><div class="subc"><p><a class="ck-anchor" id="url-filtering-brave" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/URL-Filtering-Policy-User-Agent-Brave-RN.png" alt="URL Filtering Policy shows the Brave browser selected for the User Agent criteria " title="URL Filtering Policy"></p></div><div class="subc"><p><a class="ck-anchor" id="browser-control" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/Browser-Control-Brave.png" alt="The Browser Control page with the Brave browser" title="Browser Control page"></p></div><div class="subc"><p><a class="ck-anchor" id="http-header-control" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/HTTP-Header-Control-Browser-Brave_RN.png" alt="Add Header Criterion shows the Brave browser selected" title="Add Header Criterion"></p></div> Feature Available Fri, 25 Sep 2026 07:00:00 GMT feature 1519616 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-25&id=1545369 <p>You can onboard a Zoom tenant enabled with the Data at Rest Scanning Data Loss Prevention (DLP) and Malware functionality to scan two additional content types: AI transcript and AI meeting summary.</p><p class="note">You must enable AI Companion for your Zoom account to generate transcripts and summaries.</p><p>To enable the AI Transcripts and Summaries capability for an existing tenant, you must add additional scopes, subscribe to additional transcript and summary webhook events, and reauthorize the tenant.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a>.</p> Feature Available Fri, 25 Sep 2026 07:00:00 GMT feature 1545369 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-23&id=1545416 <p>The number of SaaS Security Posture Management (SSPM) controls for Google Workspace has been increased. There are 53 new cloud identity controls and 7 new mobile device controls that are supported for Google Workspace.</p><p class="note">You must add additional OAuth scopes for the new controls.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/authorizing-custom-zscaler-connector-google-applications" target="_blank" data-entity-type="node" data-entity-uuid="62882540-3412-4988-8747-555526193e66" data-entity-substitution="canonical">Authorizing a Custom Zscaler Connector for Google Applications</a>.</p> Feature Available Wed, 23 Sep 2026 07:00:00 GMT feature 1545416 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-21&id=1545494 <p>Internet & SaaS (ZIA) supports Unified Role-Based Access Control (RBAC). Administrators can now view, create, and manage Internet & SaaS roles centrally on the Role Management page (Administration > Role Management > Role Management).</p><p class="note">The existing Internet & SaaS Role Management page is deprecated if you use Unified RBAC.</p><p>To access Unified RBAC, contact your Zscaler Account team.</p><p>To learn more, see <a href="https://help.zscaler.com/unified/about-role-management" target="_blank" data-entity-type="node" data-entity-uuid="a5ed9876-6e1f-487a-9068-72a4fa2ab279" data-entity-substitution="canonical">About Role Management</a>.</p> Feature in Limited Availability Mon, 21 Sep 2026 07:00:00 GMT feature 1545494 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-18&id=1545507 <p>The Internet & SaaS (ZIA) File Type Control evaluation rule no longer allows a potential evasion of File Type Control policies (CVE-2026-25684).</p> Feature Available Fri, 18 Sep 2026 07:00:00 GMT feature 1545507 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-18&id=1540320 <div class="sub"><p>You can filter logs for specific user groups. As part of the update, the following changes are available in the Zscaler Admin Console:</p><ul><li data-list-item-id="e7d387be94bbeeeb8aba63d909cf74144"><p>The User Group filter is added to the following Insights Logs pages:</p><ul><li data-list-item-id="eca3c154b26cc1a8db4806dc02cfb629a"><a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs</a></li><li data-list-item-id="ef4663895ca3c5aedd3da16ffaf97e55d"><a href="https://help.zscaler.com/zia/firewall-insights-logs-filters" target="_blank">Firewall Insights Logs</a></li><li data-list-item-id="ed0357a3b169d578f979d77fb14196644"><a href="https://help.zscaler.com/zia/dns-insights-logs-filters" target="_blank">DNS Insights Logs</a></li><li data-list-item-id="e1cda169e76e369ff476dc07989e834ee"><a href="https://help.zscaler.com/zia/about-saas-security-insights-logs" target="_blank">SaaS Security Insights Logs</a></li><li data-list-item-id="e532b86e861771b1ba49d57db58edf64d"><a href="https://help.zscaler.com/zia/endpoint-dlp-insights-logs-filters" target="_blank">Endpoint DLP Insights Logs</a></li><li data-list-item-id="ec5a4418d6b94b196f8c801c1bd39bf41"><a href="https://help.zscaler.com/zia/email-dlp-insights-logs-filters" target="_blank">Email DLP Insights Logs</a></li></ul><p><a class="image-icon" href="#user-group-filter">See image.</a></p></li><li data-list-item-id="e6c7d3f21aa7f165a0dbd311fb21fc124"><p>The User Group filter is available when configuring Dashboard and Interactive Report widgets.</p><p><a class="image-icon" href="#user-group">See image.</a></p></li><li data-list-item-id="eaf7bc43d5639821ab2229e917a4bc5bb"><p>The following data types are available under the Web data class in the Interactive Reports:</p><ul><li data-list-item-id="e17188d806b48de06759406f0f0464c07">URL Filtering Policy</li><li data-list-item-id="ed5346c3d9c2717d71d1d820ff8e342ef">Cloud App Control Policy</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/web-data-types-and-filters" target="_blank">Web Data Types and Filters</a>, <a href="https://help.zscaler.com/zia/mobile-data-types-and-filters" target="_blank">Mobile Data Types and Filters</a>, <a href="https://help.zscaler.com/zia/firewall-data-types-and-filters" target="_blank">Firewall Data Types and Filters</a>, and <a href="https://help.zscaler.com/zia/dns-data-types-and-filters" target="_blank">DNS Data Types and Filters</a>.</p></li></ul></div><div class="subc"><p><a class="ck-anchor" id="user-group" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/web-data-types-and-filters/zia-user-group-field%20(1).png" alt="User Group filter in New Widget window" title="User Group Filter"></p></div><div class="subc"><p><a class="ck-anchor" id="user-group-filter" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/web-data-types-and-filters/ZIA-User-Group-filter%20(1).png" alt="The User Group filter in the Insights Logs pages" title="User Group Filter"></p></div> Feature Available Fri, 18 Sep 2026 07:00:00 GMT feature 1540320 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-18&id=1545624 <div class="sub"><p>When onboarding a Software as a Service (SaaS) application tenant, you can no longer select the App Governance functionality. If you select the SaaS Security Posture Management (SSPM) Scan checkbox for applications that support App Governance, you can scan both SSPM security checks and SSPM 3rd-party add-ons.</p><p><a class="image-icon" href="#Add-SaaS-Application-Tenant-Page">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank">Adding SaaS Application Tenants</a>.</p><div class="subc"><a class="ck-anchor" id="Add-SaaS-Application-Tenant-Page" target="_blank"></a><img src="https://help.zscaler.com/downloads/SSPM_Checkbox_0.png" alt="Tenant Name field and SSPM Scan Checkbox" title="Tenant Name and SSPM Scan Checkbox"></div></div> Feature Available Fri, 18 Sep 2026 07:00:00 GMT feature 1545624 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-04&id=1541604 <div class="sub"><p>The Tenant Profiles feature is extended to the Claude application. This allows you to provide access to specific workspace IDs for Claude.</p><p><a class="image-icon" href="#claude-tenant-profile">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-tenant-profiles" target="_blank">Adding Tenant Profiles</a>.</p></div><div class="subc"><a class="ck-anchor" id="claude-tenant-profile" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/Add-Tenant-Profile-Claude.png" alt="Add Tenant Profile window with the Claude application selected" title="Add Tenant Profile window"></div><div class="subc"><h1>Claude Application Support to Tenancy Restriction Profile APIs</h1><p>A new enum, <code>CLAUDE_AI</code>, is added to the <code>appType</code> query parameter in the <code>GET /tenancyRestrictionProfile/app-item-count/{appType}/{itemType}</code> endpoint. <code>CLAUDE_AI</code> is also added to the <code>appType</code> field of the <code>TenancyRestrictionProfile</code> model referenced by the tenancy restriction profile APIs.</p><p>To learn more, go to <code>TenancyRestrictionProfile</code> model and <code>GET /tenancyRestrictionProfile/app-item-count/{appType}/{itemType}</code> from <a href="https://help.zscaler.com/zia/cloud-app-control-policy" target="_blank">Cloud App Control Policy</a>.</p></div> Feature Available Fri, 04 Sep 2026 07:00:00 GMT feature 1541604 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-03&id=1541766 <div class="sub"><p>You can use Zscaler Outbound Email Data Loss Prevention (DLP) policies with your secure email gateway (SEG) to prevent the exfiltration of sensitive data by enforcing policy rules on email content sent to external domains, including content in subject lines, body text, and attachments. As part of your larger DLP strategy, Zscaler Outbound Email DLP for SEGs lets you use the same DLP policy tools that you already use across other channels (i.e., Inline Web DLP, Endpoint DLP, and SaaS Security Data at Rest Scanning DLP), eliminating the need for different DLP point solutions and the operational overhead involved in maintaining those solutions. Additionally, you can monitor outbound email activity with dashboards, reports, and NSS feeds. This enhancement supplements existing Outbound Email DLP support for Microsoft Exchange and Gmail.</p><div class="note"><p>Because of recent enhancements to next-hop validation that enforce stricter security checks during SMTP connections, the Zscaler service:</p><ul><li data-list-item-id="e0c39fd35a7cf8b2bc7530ae81140e7d1">Strictly enforces SSL/TLS for secure SMTP connections.</li><li data-list-item-id="e698eb6e5b29113d3ce33698fe8b93ae0">Performs server certificate validation that requires the presented certificate to be valid and trusted.</li><li data-list-item-id="e3d3cd4e06cc9cc2ccebc65be76343d43">Does not allow self-signed, expired, or otherwise invalid certificates.</li></ul></div><p>As you set up Email tenants in the Zscaler Admin Console (Policies > Data Protection > Policy > Email Tenants), you have the option to select an SEG tenant.</p><p><a class="image-icon" href="#email-dlp-seg-support-rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-email-tenants#secure-email-gateway" target="_blank">Adding Email Tenants</a> and <a href="https://help.zscaler.com/zia/configuring-segs-zscaler-outbound-email-dlp" target="_blank">Configuring SEGs for Zscaler Outbound Email DLP</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="email-dlp-seg-support-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Email-Tenant-SEG-Selected-RN.png" alt="Add new file type to Outbound Email DLP rule" title="Adding a TNEF file type to an Outbound Email DLP rule"></p></div> Feature Available Thu, 03 Sep 2026 07:00:00 GMT feature 1541766 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-09-03&id=1541592 <div class="sub"><p>Custom Data Loss Prevention (DLP) dictionaries support near and not near proximity. This functionality helps you define how close (in bytes) phrases from phrase groups must be for a dictionary to detect and count them as a match.</p><p><a class="image-icon" href="#email-dlp-tnef-image-rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-custom-dlp-dictionary" target="_blank">Adding Custom DLP Dictionaries</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="email-dlp-tnef-image-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-DLP-Dictionary-Near-Not-Near-RN.png" alt="Match Near or Not Near Phrases option for a custom DLP dictionary" title="Match Near or Not Near Phrases option for a custom DLP dictionary"></p></div> Feature Available Thu, 03 Sep 2026 07:00:00 GMT feature 1541592 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-31&id=1540925 <div class="sub"><p>The Cloud App Control policy supports granular upload action for the Google Gemini application. This allows you to control the upload action for Google Gemini or instances of it. As part of this change, the Uploading granular action is added to the Allow application access in the Add/Edit AI & ML Rule window.</p><p><a class="image-icon" href="#gemini-cac-policy-upload">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/legacy-zia/adding-ai-ml-applications-rule-cloud-app-control" target="_blank" data-entity-type="node" data-entity-uuid="62368fb7-fbd8-4649-8d8e-ed8fe96de88a" data-entity-substitution="canonical">Adding an AI & ML Applications Rule for Cloud App Control</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="gemini-cac-policy-upload" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/AI-ML-Gemini-Uploading-RN.png" alt="Uploading action for Google Gemini application on Add or Edit AI & ML Rule window" title="Uploading action for Google Gemini application on Add or Edit AI & ML Rule window"></p></div> Feature Available Mon, 31 Aug 2026 07:00:00 GMT feature 1540925 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-31&id=1535260 <div class="sub"><p>You can set a periodic or custom expiration period for your Google Drive links (internal or external). Access to the files is automatically revoked after the expiration period.</p><p>In the Edit DLP rule window, four new actions with expiration have been added:</p><ul><li data-list-item-id="e2125ff6e9e6a1b262ad4a5a170e6277d">Remove Collaborators After Expiry</li><li data-list-item-id="ebf5093f83d645e2b2ae55e0c1d3bf38d">Remove External Sharing Links After Expiry</li><li data-list-item-id="e5ce777c1a79608da506dc8651fa1a984">Remove Internal Sharing Links After Expiry</li><li data-list-item-id="ecaf642613e39ed2c921c4128711bedb3">Remove Sharing After Expiry</li></ul><p><a class="image-icon" href="#expiry-actions">See image.</a></p><p>Additionally, you can also set manual expiration for Google Drive under Remediation Actions on the SaaS Assets with Incidents page.</p><p>To learn more, see:</p><ul><li data-list-item-id="e4e94194b78e11cc3738a6e2f46a53996"><a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="5735781d-0020-47a8-9a1a-bcf4b475636d" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy with Content Inspection</a></li><li data-list-item-id="e1294d1afcc4169f74127e5ed485f342b"><a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-without-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="c7bb5123-f862-485b-a600-2cb1aabddbe6" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy without Content Inspection</a></li><li data-list-item-id="e8916326e4ab1229a9d2a0125d736434e"><a href="https://help.zscaler.com/zia/understanding-saas-security-apis" target="_blank" data-entity-type="node" data-entity-uuid="e7491b91-bf66-4e60-b00f-7ad556b9e3a0" data-entity-substitution="canonical">Understanding SaaS Security API Supported Capabilities Draft</a></li><li data-list-item-id="e4d1178ab202314ec648afea70897b0a2"><a href="https://help.zscaler.com/zia/understanding-assets-report-assets-with-incidents" target="_blank" data-entity-type="node" data-entity-uuid="ba2e0644-2d59-4da7-a41b-6b093c87087e" data-entity-substitution="canonical">Understanding the Assets Report: Assets with Incidents</a></li></ul></div><div class="subc"><p><a class="ck-anchor" id="expiry-actions" target="_blank"></a><img src="https://help.zscaler.com/downloads/external-expiry-gd-rn.png" alt="Actions with expiration for Google Drive tenants" title="Actions with expiration for Google Drive"></p></div><div class="subc"><h1>Enhancements to the SaaS Security Data at Rest Scanning Data Loss Prevention (DLP) APIs</h1><p>Enum values <code>OFLCASB_DLP_REMOVE_COLLABORATORS_EXPIRY</code>, <code>OFLCASB_DLP_REMOVE_SHARING_EXPIRY</code>, <code>OFLCASB_DLP_REMOVE_INTERNAL_LINK_SHARE_EXPIRY</code>, and <code>OFLCASB_DLP_REMOVE_EXTERNAL_LINK_SHARE_EXPIRY</code> are added to the <code>action</code> field in the <code>CASBDlpRule</code> model referenced by the <code>/casbDlpRules</code> APIs. For a Google Drive tenant, these enum values allow you to:</p><ul><li data-list-item-id="e0f691bc5b14ff44c04a305d9a0197198">remove collaborators after expiration</li><li data-list-item-id="ea7f026a37326ce8478ee359a34499c61">remove sharing after expiration</li><li data-list-item-id="e9d4cfffc4dca652afb51d564b70b3893">remove internal sharing links after expiration</li><li data-list-item-id="ed1fc400333b002d7970a337d3d1695fe">remove external sharing links after expiration</li></ul><p>Additionally, two new fields, <code>fileSharingExpiryTimeType</code> and <code>fileSharingExpiryTime</code> are available in the <code>CASBDlpRule</code> model referenced by the <code>/casbDlpRules</code> APIs. These fields are required to set the file sharing expiration period. To learn more, go to the <code>CASBDlpRule</code> model from <a href="https://help.zscaler.com/zia/saas-security-api" target="_blank">SaaS Security API</a>.</p></div> Feature Available Mon, 31 Aug 2026 07:00:00 GMT feature 1535260 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-28&id=1533932 <div class="sub"><p>The Zscaler service supports the following predefined Data Loss Prevention (DLP) dictionaries:</p><ul><li data-list-item-id="e45f57e54358d977094a90603bf352bac">Enhanced Credentials and Secrets</li><li data-list-item-id="e6b43866a2f4f9cc4219bbb1744a2f029">Enhanced International Bank Account Number (IBAN)</li><li data-list-item-id="e0388257caaecd9ead4898c543aaf9ffd">Enhanced Passport Number (Asia)</li><li data-list-item-id="ecd9d10fbd27a566ee6f68aef5b59a5f7">Enhanced Passport Number (European Union)</li></ul><p>The parent dictionaries contain predefined sub-dictionaries, and each sub-dictionary can be individually referenced in your DLP engines.</p><p>On the DLP Dictionaries & Engines page (Policies > Data Protection > Common Resources > DLP Dictionaries & Engines), you can expand each dictionary's section to see its sub-dictionary. You can configure each of the individual sub-dictionaries to set the Confidence Score Threshold, Proximity Length, and any Custom High Confidence Phrases.</p><p><a class="image-icon" href="#DLP-Enhanced-dictionary-1533932">See image.</a></p><div class="note"><ul><li data-list-item-id="e53c94fbbe556264ae30e9b279932e0a6">The Enhanced dictionaries for Credentials and Secrets, Driver License (US), International Bank Account Number, Passport Number (Asia), and Passport Number (European Union) are not supported for Endpoint DLP.</li><li data-list-item-id="e57a301ba0fe92736154a900cf1fbcaa9">The legacy dictionaries for Credentials and Secrets, Driver License (US), International Bank Account Number, Passport Number (Asia), and Passport Number (European Union) have been replaced, but not deprecated, by the Enhanced Credentials and Secrets, Enhanced Driver License (US), Enhanced International Bank Account Number, Enhanced Passport Number (Asia), and Enhanced Passport Number (European Union) predefined dictionaries.</li></ul></div><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-predefined-dlp-dictionaries" target="_blank">Understanding Predefined DLP Dictionaries</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="DLP-Enhanced-dictionary-1533932" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/dlp-dictionaries-engines-page.png" alt="Enhanced Dictionaries on the DLP Dictionaries & Engines page" title="Enhanced Dictionaries on the DLP Dictionaries & Engines page"></p></div><div class="subc"><p><a class="ck-anchor" id="DLP-Enhanced-subdictionary-edit-1533932" target="_blank"></a></p></div> Feature Available Fri, 28 Aug 2026 07:00:00 GMT feature 1533932 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-28&id=1541776 <p>You can clone predefined Data Loss Prevention (DLP) sub-dictionaries. Predefined DLP sub-dictionaries are hierarchical child dictionaries associated with predefined DLP dictionaries. Cloning a predefined DLP sub-dictionary creates a separate copy that you can customize with different confidence score thresholds and other dictionary-specific parameters without modifying the original sub-dictionary.</p><div class="sub"><p><a class="image-icon" href="#Cloning">See image.</a></p></div><p>To learn more, see <a href="https://help.zscaler.com/zia/cloning-predefined-dlp-dictionaries" target="_blank">Cloning Predefined DLP Dictionaries</a>.</p><div class="subc"><p><a class="ck-anchor" id="Cloning" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/data-loss-prevention/cloning-predefined-dlp-dictionaries/zia-cloning-sub-dictionary.png" alt="Enable cloning of predefined DLP sub-dictionaries" title="Cloning of predefined DLP sub-dictionaries"></p></div> Feature Available Fri, 28 Aug 2026 07:00:00 GMT feature 1541776 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-28&id=1542961 <div class="sub"><p>DLP now supports the Credit Card Image predefined dictionary, which detects images of credit cards in supported file types such as JPEG and PNG.</p><p><a class="image-icon" href="#credit-card-image-dictionary">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-predefined-dlp-dictionaries" target="_blank" data-entity-type="node" data-entity-uuid="f173b5cc-2578-471c-94b6-3bc1fac2ec70" data-entity-substitution="canonical">Understanding Predefined DLP Dictionaries</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="credit-card-image-dictionary" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/data-loss-prevention/cloning-predefined-dlp-dictionaries/dlp-dictionary-credit-card-image.png" alt="Credit Card Image Predefined Dictionary" title="Credit Card Image Predefined Dictionary"></p></div> Feature Available Fri, 28 Aug 2026 07:00:00 GMT feature 1542961 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-28&id=1541230 <p>The <code>profileId</code> field in the <code>IdmProfile</code> object used by the <code>/idmprofile</code> APIs provides an enhanced limit to the Indexed Document Match (IDM) profile index tool template, increasing from 64 to 512.</p> Feature Available Fri, 28 Aug 2026 07:00:00 GMT feature 1541230 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-28&id=1543113 <div class="sub"><p>The Zscaler service extends support to identify the following new network applications:</p><ul><li data-list-item-id="eb1b9444457096211db00a06f45eedfc9">WARP under the Tunneled Traffic category</li><li data-list-item-id="ec8a0b6963fc2ecc9523895d1af991610">DOQ, DOH3, STOMP, and AMQP under the Network Service category</li></ul><p>You can view these apps on the Network Applications page and configure them in Firewall Filtering rules to identify and manage associated traffic.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-network-applications" target="_blank">About Network Applications</a>.</p></div> Feature Available Fri, 28 Aug 2026 07:00:00 GMT feature 1543113 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-28&id=1532868 <div class="sub"><p>The SaaS Security Data at Rest Scanning DLP Policies support a new action that allows you to apply Jira Application Labels when creating SaaS Security Data at Rest Scanning DLP Policy rules in the Zscaler Admin Console by going to Policies > Data Protection > Policy > Out-of-Band CASB and selecting the Data Loss Prevention tab. Tenants support the Apply Jira Classification Label Action for DLP rules with the ITSM Application.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="5735781d-0020-47a8-9a1a-bcf4b475636d" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy with Content Inspection</a> <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-without-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="c7bb5123-f862-485b-a600-2cb1aabddbe6" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy without Content Inspection</a>, and <a href="https://help.zscaler.com/zia/understanding-saas-security-supported-capabilities" target="_blank" data-entity-type="node" data-entity-uuid="e7491b91-bf66-4e60-b00f-7ad556b9e3a0" data-entity-substitution="canonical">Understanding SaaS Security Supported Capabilities</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="add-atlassian-label-1532868" target="_blank"></a></p></div> Feature Available Fri, 28 Aug 2026 07:00:00 GMT feature 1532868 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-28&id=1542047 <p>Zscaler inspects bidirectional WebSocket traffic across applications, allowing you to extend security and data protection controls to these communications. This inspection applies to WebSocket traffic carrying supported content. Advanced inspection scenarios, including support for other payload types, might require application-specific support (e.g., Microsoft Copilot or Grammarly).</p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-url-filtering-policy" target="_blank">Configuring the URL Filtering Policy</a>, <a href="https://help.zscaler.com/zia/adding-rules-bandwidth-control-policy" target="_blank">Adding Rules to the Bandwidth Control Policy</a>, <a href="https://help.zscaler.com/zia/web-insights-logs-filters#Proto" target="_blank">Web Insights Logs: Filters</a>, <a href="https://help.zscaler.com/zia/mobile-insights-logs-filters#Protocol" target="_blank">Mobile Insights Logs: Filters</a>, and <a href="https://help.zscaler.com/zia/configuring-firewall-filtering-policy" target="_blank">Configuring the Firewall Filtering Policy</a>.</p> Feature Available Fri, 28 Aug 2026 07:00:00 GMT feature 1542047 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-26&id=1538464 <div class="sub"><p>The Outbound Email Data Loss Prevention (DLP) policy now supports Microsoft TNEF files. The file type is available when creating Outbound Email DLP policies without content inspection:</p><p><a class="image-icon" href="#email-dlp-tnef-image-rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-data-loss-prevention" target="_blank">Configuring Outbound Email Policy Rules</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="email-dlp-tnef-image-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Outbound-Email-DLP-TNEF-Support-XC-RN.png" alt="Add new file type to Outbound Email DLP rule" title="Adding a TNEF file type to an Outbound Email DLP rule"></p></div> Feature Available Wed, 26 Aug 2026 07:00:00 GMT feature 1538464 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-21&id=1542651 <div class="sub"><p>The Go to File action enables you to easily navigate to the location of a violated file in Salesforce.</p><p><a class="image-icon" href="#go-to-file">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-assets-report-assets-with-incidents" target="_blank" data-entity-type="node" data-entity-uuid="ba2e0644-2d59-4da7-a41b-6b093c87087e" data-entity-substitution="canonical">Understanding the Assets Report: Assets with Incidents</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="go-to-file" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/go-to-file-sf.png" alt="The Go To File remediation action for Salesforce" title="Go To File remediation action"></p></div> Feature Available Fri, 21 Aug 2026 07:00:00 GMT feature 1542651 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-14&id=1542631 <div class="sub"><p class="note">The following update is applicable only to tenants approved for an increased rule limit of up to 4,000 Firewall Filtering rules, based on qualified use cases.</p><p>The Firewall Filtering Policy page includes the following new search filters:</p><ul><li data-list-item-id="eec6ae19a69811082c665557d4b35ba95">Rule Status</li><li data-list-item-id="e9b209d2393d5e548a6564b7970e71b11">Network Application Groups</li><li data-list-item-id="ec457176ff122980c5a4d095a3cd15e96">Application Service Groups</li><li data-list-item-id="ec47f5dc2c68e3a5e9e479b3ab28927a4">Source Country</li><li data-list-item-id="e2c416f861d6d7482e47a16b5c92cb563">Destination Country</li><li data-list-item-id="e350efe65e5e1cd62af1f5506023d9696">Source IPv6 Groups</li><li data-list-item-id="e7d65e7599ffde6207529376a91824d05">Destination IPv6 Groups</li></ul><p>Rule Status, Source Country, and Destination Country filters require you to select from predefined values to filter the associated rules, whereas the remaining new filters support searching by entity names (e.g., Network Application Groups requires manually entering group names to filter the associated rules). Source IPv6 Groups and Destination IPv6 Groups filters appear only when IPv6 configuration is enabled for your organization.</p><p><a class="image-icon" href="#firewall-filtering-policy-page-filters">See image.</a></p><p>To learn more, <a href="https://help.zscaler.com/zia/about-firewall-filtering" target="_blank">About Firewall Filtering</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="firewall-filtering-policy-page-filters" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/firewall-filtering-policy-page-new-filters.png" alt="The Firewall Filtering Policy page with additional search filters" title="Firewall Filtering Policy Page - Search Filters"></p></div> Feature Available Fri, 14 Aug 2026 07:00:00 GMT feature 1542631 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-05&id=1541404 <div class="sub"><p>If an admin configures restrictions to clipboard actions for a user's profile and the user attempts those actions, the user sees a notification appear in the Zero Trust Mode menu. If clicked, the Clipboard sidebar opens and shows the details of the notification for the restriction attempt.</p><p><a class="image-icon" href="#Clipboard-Restrictions">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-zero-trust-mode-menu-native-browser-experience" target="_blank" data-entity-type="node" data-entity-uuid="1d60a59a-f5ef-44aa-9acd-ec9a3fbddd64" data-entity-substitution="canonical">Using the Zero Trust Mode Menu in Native Browser Experience</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Clipboard-Restrictions" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-isolation-bar-native-browser-experience/Clipboard-Restriction-notification_copy-paste-restrictions_isolation-bar.png" alt="The Clipboard notifications show that both actions of copy and pasting were blocked" title="The Zero Trust Mode menu and Clipboard"></p></div> Feature Available Wed, 05 Aug 2026 07:00:00 GMT feature 1541404 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-05&id=1541405 <div class="sub"><p>The following updates have been made to the end user isolation experience for Zero Trust Browser:</p><ul><li data-list-item-id="e1367f0340622606ef68846a5116c35c3">Download Completion: When a user downloads a file while in isolation, a temporary notification appears to confirm when the file has completed downloading. The user can click the View button from the notification to see the file name and location in the Protected Storage. Additionally, they can click the Protected Storage icon from the Zero Trust Mode menu to open the Protected Storage section and view all file transfer notifications. <br><a class="image-icon" href="#Download-Completion">See image.</a></li><li data-list-item-id="e7ae54860b61d073b71924f6d7b14121e">Upload Options: A user can upload a file in multiple different ways while in isolation, such as using the Upload File button in the Protected Storage and uploading files from their local machine to a website.<br><a class="image-icon" href="#Upload-File-button">See image.</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-zero-trust-mode-menu-native-browser-experience" target="_blank" data-entity-type="node" data-entity-uuid="1d60a59a-f5ef-44aa-9acd-ec9a3fbddd64" data-entity-substitution="canonical">Using the Zero Trust Mode Menu in Native Browser Experience</a> and <a href="https://help.zscaler.com/zero-trust-browser/transferring-and-viewing-files-isolation" target="_blank" data-entity-type="node" data-entity-uuid="3cd1a196-5d1b-4247-8024-0173e54895eb" data-entity-substitution="canonical">Transferring and Viewing Files in Isolation</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Download-Completion" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-isolation-bar-native-browser-experience/Download-Completion-notification_Protected-Storage_isolation-bar.png" alt="The notification confirms that a file has finished downloading " title="A view of the download confirmation"></p></div><div class="subc"><p><a class="ck-anchor" id="Upload-File-button" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-isolation-bar-native-browser-experience/Upload-button_Protected-Storage_isolation-bar.png" alt="A view of the Protected Storage and Upload File button" title="The options show the Upload File button and how to access the Protected Storage"></p></div> Feature Available Wed, 05 Aug 2026 07:00:00 GMT feature 1541405 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-08-05&id=1541228 <div class="sub"><p>The Zero Trust Mode icon that indicates a live isolation session for Zero Trust Browser hides an expandable menu for the user to access different functions:</p><ul><li data-list-item-id="ecd29816960f71c69b7f1e4016466cca6">The Protected Storage icon allows users to view all file transfers for the isolation session.</li><li data-list-item-id="ebfc88a5e95f80238a14bde2959f5cab4">The Clipboard icon allows users to view notifications about clipboard functions and restrictions.</li><li data-list-item-id="eed9095342c7537d94ef0ddd6a719acc5">The Print icon allows users to view options and information for printing settings.</li><li data-list-item-id="e1ac44f2cd3a7adaae20c8c49b422cc4d">The Troubleshoot icon allows users to start a debug session, view network latency, access ip.zscaler.com, or export isolation session logs.</li><li data-list-item-id="e9bffd026316e2426d72dfc16856ea20b">The Information icon allows users to view the settings configured by admins for an isolation profile. This includes user restrictions and disabled tools.</li></ul><p>Clicking the checkmark Zero Trust Mode icon at the bottom of the menu collapses the options back under the floating icon.</p><p><a class="image-icon" href="#Isolation-icon-menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-zero-trust-mode-menu-native-browser-experience" target="_blank" data-entity-type="node" data-entity-uuid="1d60a59a-f5ef-44aa-9acd-ec9a3fbddd64" data-entity-substitution="canonical">Using the Zero Trust Mode Menu in Native Browser Experience</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Isolation-icon-menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-isolation-bar-native-browser-experience/Isolation-bar-main-menu_2.png" alt="The Zero Trust Mode menu shows different user options" title="The Zero Trust Mode menu"></p></div> Feature Available Wed, 05 Aug 2026 07:00:00 GMT feature 1541228 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-31&id=1542049 <div class="sub"><p>Canada has been added as an isolation region in Zero Trust Browser. You can select the region when configuring isolation profiles for Internet & SaaS (ZIA).</p><p><a class="image-icon" href="#canada-region">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/creating-isolation-profiles-for-internet-and-saas" target="_blank">Creating Isolation Profiles for Internet & SaaS</a>.</p></div><div class="subc"><a class="ck-anchor" id="canada-region" target="_blank"></a><img src="https://help.zscaler.com/downloads/canada-region-internet-saas-isolation-profile.png" alt="Canada region in isolation profile" title="Canada region in isolation profile"></div><img src=""> Feature Available Fri, 31 Jul 2026 07:00:00 GMT feature 1542049 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-17&id=1539066 <p>You can select all and hide deleted users, departments, and locations when filtering Insights Logs. As part of the enhancement, the following updates are available in the Zscaler Admin Console:</p><div class="sub"><h1>Insights Logs</h1><p>The Select All and Hide Deleted options are added to the Users, Departments, and Locations filter in the following Insights Logs pages:</p><ul><li data-list-item-id="ed6f78a5503b427273ea357e149bfc726"><a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs</a></li><li data-list-item-id="e4ad623d8b4bab942a19cd5759f63dfea"><a href="https://help.zscaler.com/zia/firewall-insights-logs-filters" target="_blank">Firewall Insights Logs</a></li><li data-list-item-id="e6a580fd73b2d751ddaa9bccdc5605fe1"><a href="https://help.zscaler.com/zia/dns-insights-logs-filters" target="_blank">DNS Insights Logs</a></li><li data-list-item-id="e15652b58f1dcf3adf754aa98e6b928fd"><a href="https://help.zscaler.com/zia/tunnel-insights-logs-filters" target="_blank">Tunnel Insights Logs</a></li><li data-list-item-id="ebf494349532de7508992f1a0b153ef46"><a href="https://help.zscaler.com/zia/about-saas-security-insights-logs" target="_blank">SaaS Security Insights Logs</a></li><li data-list-item-id="ecf0bb4e5044a527d88f3abd9f5f757e3"><a href="https://help.zscaler.com/zia/endpoint-dlp-insights-logs-filters" target="_blank">Endpoint DLP Insights Logs</a></li><li data-list-item-id="e1c352d23c3c5ea79e6402b84a1c41f25"><a href="https://help.zscaler.com/zia/email-dlp-insights-logs-filters" target="_blank">Email DLP Insights Logs</a></li></ul><p><a class="image-icon" href="#user-group-filter">See image.</a></p><h1>Nanolog Streaming Service (NSS)</h1><p>The Select All and Hide Deleted options are added to the Users, Departments, and Locations filters in <a href="https://help.zscaler.com/zia/adding-tcp-nss-feeds" target="_blank">TCP NSS</a>, <a href="https://help.zscaler.com/zia/adding-mcas-nss-feeds" target="_blank">MCAS NSS</a>, <a href="https://help.zscaler.com/zia/adding-http-nss-feeds" target="_blank">HTTP NSS</a>, and <a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds" target="_blank">Cloud NSS</a> feeds for the following log types, as applicable:</p><ul><li data-list-item-id="e21d79dbf9a955107ec47831cf219a0c4">Web</li><li data-list-item-id="e06f068817e76cdfcd0e23e483fb8e4f4">Firewall</li><li data-list-item-id="e7ba01c386951ebcb9863eb19432321e7">DNS</li><li data-list-item-id="e548d75040b24092888799dc42b3cc93e">Tunnel</li><li data-list-item-id="e741d60a3691bd08bf964df8b46a4832b">SaaS Security</li><li data-list-item-id="e88572bd0680e474c78bc1fb1e58d242d">Endpoint DLP</li><li data-list-item-id="e22e5a516d9b4dbbd903f94250bff7562">Email DLP</li></ul><p><a class="image-icon" href="#img-nss-departments-filter">See image.</a></p></div><div class="subc"><p><a class="ck-anchor" id="user-group-filter" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/log-streaming-service/understanding-traffic-flow-vpn-log-fields/ZIA-department-filter.png" alt="Department filter in the Insights Logs pages" title="Department Filter with Select All and Hide Deleted Options"></p></div><div class="subc"><a class="ck-anchor" id="img-nss-departments-filter" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/documentation-knowledgebase/analytics/nss/nss-feeds/adding-nss-feeds/adding-nss-feeds-saas-security-logs/nss-departments-filter.png" alt="The Departments filter in the NSS feed configuration window" title="The Departments filter in the NSS feed configuration window"></div> Feature Available Fri, 17 Jul 2026 07:00:00 GMT feature 1539066 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-14&id=1541297 <p>Virtual Service Edge configuration is supported on the Nutanix platform. You can download the Nutanix VM image on the <a href="https://help.zscaler.com/zia/about-virtual-service-edges-internet-saas" target="_blank" data-entity-type="node" data-entity-uuid="3336fdf9-5f75-4a6a-8f57-5db83349c4ec" data-entity-substitution="canonical">Virtual Service Edges</a> page.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-internet-saas-nutanix" target="_blank" data-entity-type="node" data-entity-uuid="7588807b-3d62-4b5f-8492-1ba69bd7d097" data-entity-substitution="canonical">Configuring Virtual Service Edges for Internet & SaaS: Nutanix</a>.</p> Feature Available Tue, 14 Jul 2026 07:00:00 GMT feature 1541297 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-10&id=1538598 <div class="sub"><p>Logs for Zscaler 3rd-Party App Governance and Posture Management are supported by Zscaler's Nanolog Streaming Service (NSS). You can configure NSS and Cloud NSS feeds for both log types to stream their respective data to your security information and event management (SIEM) system, providing a unified view of your organization’s security posture for effective threat management.</p><p class="note">Access to these log types requires a subscription to <a href="https://help.zscaler.com/zia/what-advanced-posture-management" target="_blank">Advanced SaaS Security Posture Management (SSPM)</a>. To subscribe to Advanced SSPM, contact your Zscaler Account team.</p><p><a class="image-icon" href="#img-app-governance-posture-log-types">See image.</a></p><div class="sub"><p>When creating a policy in 3rd-Party App Governance, you can select the Zscaler Nanolog Streaming Service option to receive alerts for the policy through NSS every time the policy is triggered.</p><p><a class="image-icon" href="#Set-Policy-Window">See image.</a></p></div><div class="subc"><p><a class="ck-anchor" id="Set-Policy-Window" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/3rd-party-app-governance-policies-draft-doc-62153/Set_Policy_NSSRN.png" alt="Set Policy Window showing NSS option" title="Set Policy Window"></p></div><p>To learn more, see:</p><ul><li data-list-item-id="e62a4e35f6244b6e11e0a37de859c18c9"><a href="https://help.zscaler.com/zia/adding-nss-feeds-3rd-party-app-governance-logs" target="_blank">Adding NSS Feeds for 3rd-Party App Governance Logs</a></li><li data-list-item-id="e758cc8ff23a7d09bda0703a5c6edbb3d"><a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-3rd-party-app-governance-logs" target="_blank">Adding Cloud NSS Feeds for 3rd-Party App Governance Logs</a></li><li data-list-item-id="e8823ca5cc10c2a402822cb7b73cc6366"><a href="https://help.zscaler.com/zia/nss-feed-output-format-3rd-party-app-governance-logs" target="_blank">NSS Feed Output Format: 3rd-Party App Governance Logs</a></li><li data-list-item-id="e0ac13e3af4e73f6fa520034114254183"><a href="https://help.zscaler.com/zia/adding-nss-feeds-posture-management-logs" target="_blank">Adding NSS Feeds for Posture Management Logs</a></li><li data-list-item-id="e44739d716a30b7af0c94421f845b6dcb"><a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-posture-management-logs" target="_blank">Adding Cloud NSS Feeds for Posture Management Logs</a></li><li data-list-item-id="e75237bb46d9d41ae4965b0b742e9a1a0"><a href="https://help.zscaler.com/zia/nss-feed-output-format-posture-management-logs" target="_blank">NSS Feed Output Format: Posture Management Logs</a></li><li data-list-item-id="e8b2354864a777c08da49326b1ba620f1"><a href="https://help.zscaler.com/zia/3rd-party-app-governance-policies" target="_blank" data-entity-type="node" data-entity-uuid="71678a56-3cb5-4d16-ac52-663866b4b564" data-entity-substitution="canonical">3rd-Party App Governance Policies</a></li></ul></div><div class="subc"><a class="ck-anchor" id="img-app-governance-posture-log-types" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/nss-app-governance-posture-log-type.png" alt="App Governance and Posture log types in the Add Cloud NSS Feed window" title="App Governance and Posture log types in the Add Cloud NSS Feed window"></div><h1>Enhancement to Cloud Nanolog Streaming Service (NSS) API</h1><p>Two new enum values, <code>POSTURE_CONTROL</code> and <code>APP_GOVERNANCE</code> are added to the <code>nssLogType</code> field in the <code>ZmanageNssFeed</code> model referenced by the <code>/nssFeeds</code> APIs</p><p>To learn more, go to the <code>ZmanageNssFeed</code> model from <a href="https://help.zscaler.com/zia/cloud-nanolog-streaming-service-nss" target="_blank">Cloud Nanolog Streaming Service (NSS)</a>.</p> Feature Available Fri, 10 Jul 2026 07:00:00 GMT feature 1538598 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-10&id=1540898 <div class="sub"><p>Advanced SaaS Security Posture Management (SSPM) supports Snowflake as an API-based platform to provide visibility into posture misconfigurations. You can configure Advanced SSPM for Snowflake tenants. Select the SSPM Scan checkbox when onboarding a tenant to enable the Advanced SSPM scan capability for the specific tenant.</p><p><a class="image-icon" href="#Snowflake-Onboarding">See image.</a></p><p class="note">The SSPM Scan checkbox is enabled only when you have Advanced SSPM enabled for your tenant.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/what-advanced-posture-management" target="_blank" data-entity-type="node" data-entity-uuid="048ba914-06ae-4c39-a5cf-fe6f7b8243c0" data-entity-substitution="canonical">What Is Advanced Posture Management?</a> and <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a>.</p></div><div class="subc"><a class="ck-anchor" id="Snowflake-Onboarding" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/internet-saas-service-release-notes/release-upgrade-summary-2026/SSPM_Scan_Checkbox.png" alt="SSPM Checkbox for Snowflake" title="Snowflake Onboarding"></div> Feature Available Fri, 10 Jul 2026 07:00:00 GMT feature 1540898 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-06&id=1541330 <div class="sub"><p>Advanced SaaS Security Posture Management (SSPM) supports new posture controls as part of the Microsoft 365 connector for the following apps:</p><ul><li data-list-item-id="e6f2b65f813fa5e1af1df2f89b64cea3c">Microsoft Power Apps</li><li data-list-item-id="eea72898626f96e4badd845e02672f553">Microsoft Power BI</li><li data-list-item-id="e8ec7c4216f60ec50fefe149f2f9dbaa1">Microsoft Purview</li><li data-list-item-id="e6495fc6e685ae881ea5cbb545bbe2432">Microsoft Viva Engage</li></ul><p>Existing tenants must grant additional permissions and reauthenticate the connector for these additional posture controls.</p><p>Select the SSPM Scan checkbox when onboarding a Microsoft 365 tenant to enable the Advanced SSPM scan capability for the specific tenant.</p><p><a class="image-icon" href="#Microsoft-Power-Apps-Onboarding">See image.</a></p><p class="note">The SSPM Scan checkbox is enabled only when you have Advanced SSPM enabled for your tenant.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/what-advanced-posture-management" target="_blank" data-entity-type="node" data-entity-uuid="048ba914-06ae-4c39-a5cf-fe6f7b8243c0" data-entity-substitution="canonical">What Is Advanced Posture Management?</a>, <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a>, and <a href="https://help.zscaler.com/zia/authorizing-custom-zscaler-connector-microsoft-applications" target="_blank" data-entity-type="node" data-entity-uuid="4b40f052-a254-4186-af22-88f498a8b510" data-entity-substitution="canonical">Authorizing a Custom Zscaler Connector for Microsoft Applications</a>.</p></div><div class="subc"><a class="ck-anchor" id="Microsoft-Power-Apps-Onboarding" target="_blank"></a><img src="https://help.zscaler.com/downloads/SSPM_Scan_Checkbox.png" alt="SSPM Scan Checkbox" title="Onboard SaaS Application"></div> Feature Available Mon, 06 Jul 2026 07:00:00 GMT feature 1541330 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-06&id=1532659 <div class="sub"><p>In Advanced Settings (Policies > Common Configuration > Advanced > Advanced Settings > Domain Fronting), there are two new options available under Block Domain Fronting:</p><ul><li data-list-item-id="e8fcf0992cad5054bae25a0df9b763d35">URL Category Exemptions for Block Domain Fronting: Select the URL categories you want to exempt from domain fronting.</li><li data-list-item-id="ed8c529ed4c1b726fc862decd97472633">Exempted Cloud Applications for Block Domain Fronting: Select the cloud app categories or cloud apps you want to exempt from domain fronting.</li></ul><p><a class="image-icon" href="#domain-fronting-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-advanced-settings#domain-fronting" target="_blank">Configuring Advanced Settings</a>.</p></div><div class="subc"><a class="ck-anchor" id="domain-fronting-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/configuring-advanced-settings/Block%20Domain%20Fronting.png" alt="Domain Fronting Page showing two new drop-downs for Block Domain fronting under Advanced Settings" title="Domain Fronting Page"></div> Feature Available Mon, 06 Jul 2026 07:00:00 GMT feature 1532659 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-06&id=1539621 <div class="sub"><p>You can filter and view logs for DLP policy actions and DLP confirmation messages. As part of the update, the following changes are available in the Zscaler Admin Console:</p><h1>Insights Logs</h1><p>Filters and columns, DLP Policy Action and DLP Confirmation Message, are added to Web Insights Logs and Endpoint DLP Insights Logs.</p><p><a class="image-icon" href="#dlp-filters">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/web-insights-logs-columns" target="_blank">Web Insights Logs: Columns</a>, <a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs: Filters</a>, <a href="https://help.zscaler.com/zia/endpoint-dlp-insights-logs-columns" target="_blank" data-entity-type="external">Endpoint DLP Insights Logs: Columns</a>, and <a href="https://help.zscaler.com/zia/endpoint-dlp-insights-logs-filters" target="_blank">Endpoint DLP Insights Logs: Filters</a>.</p><h1>NSS Feeds</h1><p>The fields <code>%s{dlp_policy_action}</code> and <code>%s{dlp_confirm_justification_msg}</code> can be added to the Feed Output Format when configuring an NSS or Cloud NSS feed for web logs. Additionally, the field <code>%s{dlp_confirm_justification_msg}</code> is available for NSS and Cloud NSS feeds for Endpoint DLP logs.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-web-logs" target="_blank">NSS Feed Output Format: Web Logs</a> and <a href="https://help.zscaler.com/zia/nss-feed-output-format-endpoint-dlp-logs" target="_blank">NSS Feed Output Format: Endpoint DLP Logs</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="dlp-filters" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/documentation-knowledgebase/analytics/dashboards-reports-and-logs/logs/about-saas-security-insights-logs/ZIA-DLP-filters.png" alt="DLP filters in the Insights Logs page" title="DLP Policy Action and DLP Confirmation Message Filter"></p></div> Feature Available Mon, 06 Jul 2026 07:00:00 GMT feature 1539621 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-06&id=1540226 <p>New cloud applications are added to the cloud application categories. You can download the list of newly added cloud applications to the respective categories: <a class="download" href="https://help.zscaler.com/sites/default/files/downloads/zia/documentation-knowledgebase/policies/cloud-apps/cloud-app-control-policies/cloud-app-categories/New_Cloud_Apps_April-2026.xlsx" target="_blank">Download</a></p><p class="note">The risk index and risk attribute values for these new applications are visible only after they are available on all the clouds. Refer to the <a class="url-external" href="https://trust.zscaler.com/zscalerthree.net/notification/452301" target="_blank">trust post</a> for details.</p> Feature Available Mon, 06 Jul 2026 07:00:00 GMT feature 1540226 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-06&id=1541154 <p>As part of a continuous review, Zscaler has updated cloud applications across various cloud application categories. To obtain the list of cloud applications that have been updated, download the list: <a class="download" href="https://help.zscaler.com/sites/default/files/downloads/zia/documentation-knowledgebase/policies/cloud-apps/cloud-app-control-policies/cloud-app-categories/Updated-Cloud-Apps-April-2026.xlsx" target="_blank">Download</a></p><p class="note">Cloud applications are updated in phases. Refer to the <a class="url-external" href="https://trust.zscaler.com/zscaler.net/notification/458921" target="_blank">trust post</a> for details.</p> Feature Available Mon, 06 Jul 2026 07:00:00 GMT feature 1541154 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-07-01&id=1541212 <p>Enterprise Browser for Zero Trust Browser is a dedicated, hardened Chromium browser that protects users from everyday browser-based threats. Users can access private applications for their organization while utilizing browser protection for daily operations such as file transfer, data sharing, and cloud service authentication.</p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/understanding-enterprise-browser" target="_blank" data-entity-type="node" data-entity-uuid="c1125f6f-bbd9-4c85-8e94-0b790dd28aca" data-entity-substitution="canonical">Understanding Enterprise Browser</a>.</p> Feature Available Wed, 01 Jul 2026 07:00:00 GMT feature 1541212 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-29&id=1532056 <div class="sub"><p>The Application Services page has been enhanced to allow you to define your own application service groups. This page contains the following enhancements:</p><ul><li data-list-item-id="ee2f0de59f1d7a62a4a8fcaf482913788">You can add custom application service groups.</li><li data-list-item-id="ee223a4b44fc440dde7851fc6380919df">The Definition column is added.</li><li data-list-item-id="e9eb7b456b83b1a34b4cacd56e71737dc">You can view, edit, and filter the application service groups under a new column.</li></ul><p class="note">The Custom Application Service Group is available if Advanced Firewall is enabled for your organization.</p><p><a class="image-icon" href="#application-group">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-application-service-groups" target="_blank">Configuring Application Service Groups</a> and <a href="https://help.zscaler.com/zia/about-application-service-groups" target="_blank">About Application Service Groups</a>.</p><h1>Update to Forwarding Policy, IPS Control Policy, and Firewall Filtering Policy</h1><p>The Forwarding policy, IPS Control policy, and Firewall Filtering policy allow you to select predefined (AU) and custom (CU) application service groups while configuring these policies.</p><p><a class="image-icon" href="#ips-firewall">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-forwarding-policy" target="_blank" data-entity-type="node" data-entity-uuid="9ae1dcc5-e220-4c59-8dcf-cf1f85a2e90a" data-entity-substitution="canonical">Configuring Forwarding Policy</a>, <a href="https://help.zscaler.com/zia/configuring-ips-control-policy" target="_blank">Configuring IPS Control Policy</a>, and <a href="https://help.zscaler.com/zia/configuring-firewall-filtering-policy" target="_blank">Configuring the Firewall Filtering Policy</a>.</p><h1>Update to Cloud Service API</h1><p>The cloud service API includes the following new endpoints to create, update, and delete custom application service groups, and retrieve configurations for all custom application service groups (predefined and custom):</p><ul><li data-list-item-id="e0177a7708fb5c4f5836b54a451e2d93f"><code>GET /apps-services</code></li><li data-list-item-id="ec5bd8bd6df0ff27cf27165279a1f0557"><code>POST /apps-services</code></li><li data-list-item-id="e447dcb263a6205282bdd36ca8d561e08"><code>GET /apps-services/{appServiceId}</code></li><li data-list-item-id="e2931275d1924068b5574d509fa3f589b"><code>PUT /apps-services/{appServiceId}</code></li><li data-list-item-id="e6e567e586e60e63f3e6e86b107616bfb"><code>DELETE /apps-services/{appServiceId}</code></li></ul><p>To learn more, see the <a href="https://help.zscaler.com/zia/zia-api" target="_blank">API Reference</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="application-group" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/zia/policies/firewall/firewall-policy-resources/configuring-application-service-groups/Application%20Services.png" alt="Application Services Page with Add Application Service Group option" title="Application Services Page"></div><div class="subc"><img src="https://help.zscaler.com/downloads/zia/policies/firewall/firewall-policy-resources/configuring-application-service-groups/Add%20IPS%20Control%20Rule.png" alt="IPS Rule Control Rule with Application Service Groups showing predefined and custom application services" title="Predefined and Custom Application Service Groups"><a class="ck-anchor" id="ips-firewall" target="_blank"></a></div> Feature Available Mon, 29 Jun 2026 07:00:00 GMT feature 1532056 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-26&id=1539664 <div class="sub"><p>Instead of classifying all new applications as Unsanctioned, you can use new Application Status labels Unclassified and Under Review, to classify applications more appropriately. The label Unclassified means the applications haven't been evaluated for risks yet, and Under Review means they are undergoing due diligence.</p><p><a class="image-icon" href="#labels">See image.</a></p><p>Moreover, the SaaS Security Report for each cloud application now displays detailed information about security attributes including their certificate validity, WAF name, CVE ID, breach URL, and so on. More information appears in brackets next to the Yes and No signals.</p><p><a class="image-icon" href="#sec-info">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-saas-security-report" target="_blank" data-entity-type="node" data-entity-uuid="5555eda9-90f3-41c5-afa6-3c8ca91a4af5" data-entity-substitution="canonical">About the SaaS Security Report</a> and <a href="https://help.zscaler.com/zia/about-application-information" target="_blank" data-entity-type="node" data-entity-uuid="87e3aaa3-a0b1-4056-97e2-823ac1b0d324" data-entity-substitution="canonical">About the Application Information</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="labels" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/miscellaneous-draft-articles/about-policy-templates-draft-doc-64063/saas-sec-new-labels-annotated.png" alt="New labels for Application Status in the SaaS Security Report" title="Application Status new labels"></p></div><div class="subc"><p><a class="ck-anchor" id="sec-info" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/saas-security/understanding-assets-report-assets-with-incidents/sec-info-shadow-it.png" alt="The Security Information for each cloud app in the SaaS Security Report" title="Security information in SaaS Security Report"></p></div> Feature Available Fri, 26 Jun 2026 07:00:00 GMT feature 1539664 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-24&id=1532255 <div class="sub"><p>You can set a caution interval per browser EUN template, which allows you to configure different caution intervals for different browser EUNs. As part of this change, in the Administration > End User Notifications > Browser > EUN Templates > Add Custom Message window, the Caution Interval drop-down menu is added.</p><p><a class="image-icon" href="#add-custom-message-caution-interval">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-browser-eun-template" target="_blank" data-entity-type="node" data-entity-uuid="fb631521-10d7-412c-9ed0-74a6e9bc3756" data-entity-substitution="canonical">Configuring Browser EUN Template</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="add-custom-message-caution-interval" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-Add-Custom-Message-Caution-Interval-RN.png" alt="ZIA Add Custom Message with Custom Interval" title="ZIA Add Custom Message with Custom Interval"></p></div> Feature Available Wed, 24 Jun 2026 07:00:00 GMT feature 1532255 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-19&id=1540019 <div class="sub"><p>You can define custom and predefined DLP engines to apply only to specific channels (e.g., Endpoint DLP, DSPM) to reduce the extra noise that can come from engines being on particular channels unnecessarily. This functionality is available when you create, edit, or clone a DLP engine on the DLP Engines page (Policies > Data Protection > Common Resources > DLP Dictionaries & Engines > DLP Engines):</p><p><a class="image-icon" href="#dlp-engine-channel-rn-2604">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/editing-predefined-dlp-engines" target="_blank">Editing Predefined DLP Engines</a>, <a href="https://help.zscaler.com/zia/adding-custom-dlp-engine" target="_blank">Adding Custom DLP Engines</a>, and <a href="https://help.zscaler.com/zia/cloning-dlp-engines" target="_blank">Cloning DLP Engines</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="dlp-engine-channel-rn-2604" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/Edit-DLP-Engine-Select-Channels.png" alt="Channels available for editing a DLP engine" title="Editing a DLP engine with channels available"></p></div> Feature Available Fri, 19 Jun 2026 07:00:00 GMT feature 1540019 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-19&id=1531114 <p>The cloud service API includes the following new endpoints to add, update, and delete domain profiles and to retrieve information about domain profiles:</p><ul><li data-list-item-id="e47b6daf783734c756cfb2d28e98f5014"><code>GET /domainProfiles</code></li><li data-list-item-id="e7a2266232923264b1e5b107c1b688b57"><code>POST /domainProfiles</code></li><li data-list-item-id="ece1cf3887a95ca3374c5bce197a772fe"><code>GET /domainProfiles/{id}</code></li><li data-list-item-id="e23ac0db277a25cf145eb601df4e151a4"><code>PUT /domainProfiles/{id}</code></li><li data-list-item-id="e55be02b6e99416a5c6dd8bcf5530b4c1"><code>DELETE /domainProfiles/{id}</code></li></ul><p>To learn more, see the <a href="https://help.zscaler.com/zia/zia-api/api-developer-reference-guide/reference-guide" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank">API Rate Limit Summary</a>.</p><p>The Postman Collection is also updated to include new and updated resources. To learn more, see <a href="https://help.zscaler.com/zia/configuring-postman-rest-api-client" target="_blank">Configuring the Postman REST API Client</a>.</p> Feature Available Fri, 19 Jun 2026 07:00:00 GMT feature 1531114 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-16&id=1541231 <div class="sub"><p>Advanced SSPM supports a new platform, Databricks. You can onboard a Databricks tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/integrating-databricks" target="_blank" data-entity-type="node" data-entity-uuid="030cd170-38bb-48cb-a2fe-2dcaa8826d3c" data-entity-substitution="canonical">Integrating with Databricks</a> and <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank" data-entity-type="node" data-entity-uuid="ee68e82a-c6b5-47fb-980e-6aa8f2f2e648" data-entity-substitution="canonical">Connecting Your Platforms to Advanced SSPM</a>.</p></div><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/saas-security/posture-management/posture-management-advanced/integrating-databricks/Databricks_Connect.png" alt="Connect Drop-Down Menu showing Databricks option" title="Connect Drop-Down Menu"></div> Feature Available Tue, 16 Jun 2026 07:00:00 GMT feature 1541231 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-16&id=1541239 <div class="sub"><p>Advanced SSPM supports a new platform, OpenAI. You can onboard an OpenAI tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/integrating-openai" target="_blank" data-entity-type="node" data-entity-uuid="d7aaade9-bb03-4ee3-904b-2ba8eb147cfe" data-entity-substitution="canonical">Integrating with OpenAI</a> and <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank" data-entity-type="node" data-entity-uuid="ee68e82a-c6b5-47fb-980e-6aa8f2f2e648" data-entity-substitution="canonical">Connecting Your Platforms to Advanced SSPM</a>.</p></div><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/saas-security/posture-management/posture-management-advanced/integrating-openai/OpenAI_Connect.png" alt="Connect Drop-Down Menu showing OpenAI option" title="Connect Drop-Down Menu"></div> Feature Available Tue, 16 Jun 2026 07:00:00 GMT feature 1541239 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-08&id=1540984 <p>Advanced SaaS Security Posture Management (SSPM) expands its coverage for Box with 4 new SSPM controls, providing deeper visibility and stronger security posture assessment.</p> Feature Available Mon, 08 Jun 2026 07:00:00 GMT feature 1540984 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-04&id=1541092 <div class="sub"><p class="note">To enable Endpoint Context for your organization, contact Zscaler Support.</p><p>Zscaler Endpoint Context extends the Zero Trust Exchange (ZTE) to provide unified cloud-to-endpoint visibility, detection, and dynamic risk-based policy enforcement. This functionality integrates real-time endpoint application data with industry-leading cloud intelligence to help your Security Operations Center (SOC) teams defend your organization from modern, sophisticated, AI-accelerated attacks that often bypass traditional siloed security tools.</p><p>Endpoint Context takes advantage of extensive data available from Zscaler Client Connector to provide an inventory of commonly abused applications that reside on each endpoint, both actively running and at rest, and enumerates a rich data set related to each application, including application name, publisher, total instances of an application, install path, etc.</p><p>The Application Investigation page (Policies > Cybersecurity > Endpoint Context > Application Investigation) provides a dashboard with useful information about the applications installed on endpoints across your organization. From the Application Investigation page, you can see the Overview page (Policies > Cybersecurity > Endpoint Context > Application Investigation > Overview), which contains useful tables and charts that categorize information about all applications:</p><p><a class="image-icon" href="#app-investigation-overview-page-la-rn">See image.</a></p><p>On the Inventory page (Policies > Cybersecurity > Endpoint Context > Application Investigation > Inventory), you can use various criteria (e.g., OS, certificate status, threat type, vulnerabilities) to review the application information most important to your SOC teams:</p><p><a class="image-icon" href="#app-investigation-inventory-page-la-rn">See image.</a></p><p>You can click any of the applications in the list to drill down to more granular detail:</p><p><a class="image-icon" href="#app-granular-detail-la-rn">See image.</a></p><p>Additionally, when you license Endpoint Context for your organization, you have the ability to specify application details for both Windows and macOS endpoints on the DLP & Endpoint Resources page (Policies > Data Protection > Endpoint DLP Resources > Applications):</p><p><a class="image-icon" href="#add-windows-and-mac-app-la-rn">See image.</a></p><p>You can also add Endpoint Application Tags so that you can group applications by category or theme (e.g., browsers or compression utilities):</p><p><a class="image-icon" href="#application-tags-la-rn">See image.</a></p><p class="note">If you have also licensed Endpoint Data Loss Prevention (DLP) for your organization, any <a href="https://help.zscaler.com/zia/adding-dlp-resource-group" target="_blank">resource groups</a> that you have already configured are automatically converted to resource tag groups. All policies that previously used resource groups are automatically updated to use the converted resource tag groups.</p><p>With applications configured, you can apply your custom application configurations, or use the default configurations provided by the Zscaler service, to various policies in the Zscaler Admin Console (e.g., Advanced Firewall, DNS Control, SSL/TLS Inspection):</p><p><a class="image-icon" href="#app-config-firewall-filtering-la-rn">See image.</a></p><h1>Update to Cloud Service API</h1><p>The cloud service API includes new endpoints to create and manage endpoint application resources and updates to existing policy APIs to configure endpoint application-based conditions in policy rules.</p><ul class="triangle"><li data-list-item-id="e784a5665d04607ee2c67488f15083cdd"><a href="#endpoint-apps-api">Endpoint Application Resources</a></li><li data-list-item-id="ef9aef37ab7228069da113de2d5deabf1"><a href="#endpoint-app-tags-api">Endpoint Application Tags</a></li><li data-list-item-id="e3bccfd16d24545ae650ea30d9c86d790"><a href="#policy-api-update-endpoint-app">Policy Rules</a></li></ul></div><div class="subc"><p><a class="ck-anchor" id="endpoint-apps-api" target="_blank"></a>Using the following API endpoints, you can create, update, and delete custom endpoint applications and update and retrieve information about all endpoint applications, including well-known, discovered, and custom applications. You can also retrieve the count of applications available within a specific category and the list of policy rules associated with a specific application.</p><ul><li data-list-item-id="e0768e312acadd2e82331c99aecfe3be5"><code>GET /endPointApplications/customApps</code></li><li data-list-item-id="ed49b10de6da5c837f6926d4631e3f7c1"><code>POST /endPointApplications/customApp</code></li><li data-list-item-id="ec566eccd053ffee0e8e2cef07254d962"><code>PUT /endPointApplications/customApp/{id}</code></li><li data-list-item-id="edefe31f77c07fa696a46d31c198b2593"><code>DELETE /endPointApplications/customApp/{id}</code></li><li data-list-item-id="ef6faf90a66e52a4d9a5e677edd70c6f0"><code>GET /endPointApplications/customApps/{id}</code></li><li data-list-item-id="ece457b4607476c881908453c90099393"><code>GET /endPointApplications/customApps/lite</code></li><li data-list-item-id="e588bca226713fa96b708663c41b837dc"><code>GET /endPointApplications</code></li><li data-list-item-id="eb9e1eb8ffc501d7746663d26476b7ab4"><code>GET /endPointApplications/lite</code></li><li data-list-item-id="e68532aa2e21deca3fce3cc619f325e90"><code>PUT /endPointApplications/{id}</code></li><li data-list-item-id="e757f29eb79a82479be3f5c16ff15f192"><code>GET /endPointApplications/cloudApps</code></li><li data-list-item-id="e8331a58417992dfce0e848602c7e43ff"><code>GET /endPointApplications/policies</code></li><li data-list-item-id="eb381921991d84832362981cd3d820695"><code>GET /endPointApplications/getCategoriesWithNonEmptyApps</code></li><li data-list-item-id="ed2b3a61473e2148ee199ca1f5117b64c"><code>GET /endPointApplications/count</code></li><li data-list-item-id="e94c300286a8737ccbe0674709ce141b3"><code>GET /endPointApplications/cloudApps/count</code></li></ul><p>To learn more, see the <a href="https://help.zscaler.com/legacy-apis/endpoint-data-loss-prevention" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank">API Rate Limit Summary</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="endpoint-app-tags-api" target="_blank"></a>The following API endpoints allow you to create and manage endpoint application tag groups. You can create, update, and delete endpoint application tags and retrieve information about the application tags. You can also manage endpoint applications associated with a tag and retrieve the list of policy rules associated with a tag.</p><ul><li data-list-item-id="e0de13b21218642120bf123acad9b5ed2"><code>GET /endPointApplicationGroups</code></li><li data-list-item-id="eb5025e27137529faddfd8f61b9a5f4d5"><code>POST /endPointApplicationGroups</code></li><li data-list-item-id="e81e990a6887d8cbf620773edde04d659"><code>GET /endPointApplicationGroups/{id}</code></li><li data-list-item-id="e3c7e56a81d1acd8b6e9dee398eb3cbf5"><code>PUT /endPointApplicationGroups/{groupId}</code></li><li data-list-item-id="e7eea0ebc480af4c7c46ac6794615b530"><code>DELETE /endPointApplicationGroups/{id}</code></li><li data-list-item-id="e7f35f9f01773faed129d0f5023b612a9"><code>PUT /endPointApplicationGroups/resources/{groupId}</code></li><li data-list-item-id="ec4bebbcc675fa21d3d174bd640ac44db"><code>GET /endPointApplicationGroups/policies</code></li></ul><p>To learn more, see the <a href="https://help.zscaler.com/legacy-apis/endpoint-data-loss-prevention" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank">API Rate Limit Summary</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="policy-api-update-endpoint-app" target="_blank"></a>The <code>SSLInspectionRule</code>, <code>FirewallFilteringRule</code>, and <code>FirewallDnsRule</code> models include the following attributes to configure policy rule conditions based on endpoint applications, endpoint application tags, and endpoint application threat levels:</p><ul><li data-list-item-id="e119993573d6add9af38f3a33dd3d8b1e"><code>endPointApplications</code></li><li data-list-item-id="e55af166cd399809d24c9f12fbcda900b"><code>endPointApplicationGroups</code></li><li data-list-item-id="eb559eda1c5582b2b625b0dd65cd33cab"><code>endPointApplicationThreatLevels</code></li><li data-list-item-id="ed1869c2e3454bf48a29f21ca6a4ee5bf"><code>excludeContextShieldEndPoint</code> (supported only in <code>FirewallFilteringRule</code> and <code>FirewallDnsRule</code> models)</li></ul></div><div class="subc"><p><a class="ck-anchor" id="app-investigation-overview-page-la-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Endpoint-Context-App-Investigation-Page-RN.png" alt="Viewing application details on the Endpoint Context Overview page" title="The Endpoint Context Overview page"></p></div><div class="subc"><p><a class="ck-anchor" id="app-investigation-inventory-page-la-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Endpoint-Context-App-Inventory-Page-RN.png" alt="Viewing application details on the Endpoint Context Inventory page" title="The Endpoint Context Inventory page"></p></div><div class="subc"><p><a class="ck-anchor" id="app-granular-detail-la-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Endpoint-Context-App-Detail-Page-RN.png" alt="Viewing granular application details from the Endpoint Context Inventory page" title="Application Details in Endpoint Context"></p></div><div class="subc"><p><a class="ck-anchor" id="add-windows-and-mac-app-la-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Endpoint-Context-Add-Windows-Mac-Apps-RN.png" alt="Adding Windows and macOS applications from the DLP & Endpoint Resources page" title="Adding Windows and macOS Applications for Endpoint Context"></p></div><div class="subc"><p><a class="ck-anchor" id="application-tags-la-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Endpoint-Context-Add-Application-Tags-RN.png" alt="Adding Application Tags from the DLP & Endpoint Resources page" title="Adding application tags in Endpoint Context"></p></div><div class="subc"><p><a class="ck-anchor" id="app-config-firewall-filtering-la-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Application-Options-Firewall-Filtering-Rule-RN.png" alt="Application Configuration options in Firewall Filtering rule" title="Adding application configuration options to a Firewall Filtering rule"></p></div> Feature in Limited Availability Thu, 04 Jun 2026 07:00:00 GMT feature 1541092 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-04&id=1530659 <div class="sub"><p>Enhancements to Insights Logs and the Nanolog Streaming Service (NSS) provide real-time visibility into the TLS/SSL server communication by capturing JA4 network fingerprints at the connection level and logging them within the Internet & SaaS (ZIA) web logs. The enhancements enable network security teams to monitor, analyze, and respond to encrypted traffic without waiting for sessions to complete.</p><p class="note">To enable this feature, contact Zscaler Support.</p><p>As part of the update, the following changes are available in the Zscaler Admin Console:</p><h1>Web Insights Logs</h1><p>The following filters and columns are added to Web Insights Logs:</p><ul><li data-list-item-id="e7cb0e9d01fdf677ee59cb9004bdefe9d">JA4 Fingerprint</li><li data-list-item-id="eebda4e975ef9443b40b885f4dd671ded">JA4 Fingerprint A</li><li data-list-item-id="e0a3126da7c5bd4fdd46f529aa130bea4">JA4 Fingerprint B</li><li data-list-item-id="e4fb16a25af1973f9267c019d90d205c6">JA4 Fingerprint C</li></ul><p><a class="image-icon" href="#fingerprint_logs_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/web-insights-logs-columns" target="_blank">Web Insights Logs: Columns</a> and <a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs: Filters</a>.</p><h1>NSS Feeds for Web Logs</h1><p>The field <code>%s{ja4_str}</code> can be added to the Feed Output Format when configuring an NSS or Cloud NSS feed for web logs.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-web-logs" target="_blank">NSS Feed Output Format: Web Logs</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/risk360/step-step-configuration-guide-risk360/ja4_fingerprinting_rn.png" alt="JA4 Fingerprint Filter available in the Web Insights Logs Page." title="JA4 Fingerprint Filter in the Web Insights Logs"><a class="ck-anchor" id="fingerprint_logs_rn" target="_blank"></a></p></div> Feature in Limited Availability Thu, 04 Jun 2026 07:00:00 GMT feature 1530659 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-03&id=1543178 <p>Three new fields, <code>appInventoryAppTypes</code>, <code>appInventoryThreatTypes</code>, and <code>appInventoryThreatCategories</code>, are available for the <code>ZmanageNssFeed</code> model in the <code>/nssFeeds</code> APIs. These fields allow users to filter Application Inventory logs based on the application types, threat types, and threat categories.</p><p>To learn more, go to <code>ZmanageNssFeed</code> from <a href="https://help.zscaler.com/zia/cloud-nanolog-streaming-service-nss" target="_blank">Cloud Nanolog Streaming Service (NSS)</a>.</p> Feature Available Wed, 03 Jun 2026 07:00:00 GMT feature 1543178 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-06-01&id=1530776 <div class="sub"><p>Zero Trust Browser allows admins to enable the redaction of sensitive text data for configured Data Loss Prevention (DLP) engines and dictionaries based on the DLP configuration in an isolation profile.</p><p><a class="image-icon" href="#Redaction">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-redactive-sensitive-text-isolation" target="_blank" data-entity-type="node" data-entity-uuid="ce03a2ba-06b9-4d9b-9683-90b64e23ab8e" data-entity-substitution="canonical">Using Redactive Sensitive Text for Isolation</a> and <a href="https://help.zscaler.com/zero-trust-browser/creating-isolation-profiles-zia" target="_blank" data-entity-type="node" data-entity-uuid="5094bc83-76b3-4b4c-8785-656680065ee1" data-entity-substitution="canonical">Creating Isolation Profiles for Internet & SaaS</a>.</p></div><div class="subc"><a class="ck-anchor" id="Redaction" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-redactive-sensitive-text-isolation/Browser-Isolation_Isolation-Profiles_Add-Isolation-Profile_window_Security_with-REDACTION-ONLY.png" alt="Security panel showing redaction toggle." title="A view of the Redaction section and the options within it."></div> Feature in Limited Availability Mon, 01 Jun 2026 07:00:00 GMT feature 1530776 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-26&id=1541144 <div class="sub"><p>You can update the data center and the Secure Message Processing Center (SMPC) instance details based on a specific data center ID and retrieve the status of all SMPC instances grouped by a data center using the following endpoints:</p><ul><li data-list-item-id="e97defbc9b4a80429824f37fffdb98db3"><code>GET /smpcInstance</code></li><li data-list-item-id="ed42f957344a8668de226868294c3cf86"><code>PUT /smpcInstance/dc</code></li></ul><p>A new Enum value, <code>ZS_BUSINESS_CONTINUITY</code> is available in the <code>permissions</code> field of the <code>AdminRole</code> model used by the <code>/adminRoles</code> APIs. This enum allows administrators to grant permission to update or view the SMPC instance isolation.</p><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Tue, 26 May 2026 07:00:00 GMT feature 1541144 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1539040 <div class="sub"><p>The following updates have been made to the isolation experience for Zero Trust Browser:</p><ul><li data-list-item-id="e07ff643fdaf34a283b92dc47b1453c35">As you enter an isolated session, a static, temporary message appears in the middle of the web page as it loads to confirm you are entering an isolated session. Additionally, an animated green outline appears around the website border as the page loads.<br><a class="image-icon" href="#Entering-Zero-Trust-Mode">See image.</a></li><li data-list-item-id="e8d6614bd18d048789baced05b338589e">When the page has completely rendered, a <a href="https://help.zscaler.com/zero-trust-browser/profiles/profile-notifications" target="_blank">temporary notification banner</a> appears in the upper-right corner that displays a customized notification title. You can click the Show More link in the banner to view a message customized by the admin.<br><a class="image-icon" href="#Zero-Trust-Mode-Icon-and-Notification-Banner-condensed">See image.</a></li><li data-list-item-id="e789fd4ccd47ffee12cacdb01dbde47eb">A floating checkmark icon also appears when the page has completely rendered, and stays visible after the temporary notification banner disappears. This is a visual indicator that the isolation session is persisting and has not expired.<br><a class="image-icon" href="#Zero-Trust-Mode-icon-and-expanded-message">See image.</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/adding-banner-theme-isolation-end-user-notification-zia" target="_blank" data-entity-type="node" data-entity-uuid="2c76eaa4-2a94-484a-9572-cbe06c1af0d5" data-entity-substitution="canonical">Adding a Banner Theme for the Isolation End User Notification in ZIA</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Entering-Zero-Trust-Mode" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/profiles/profile-notifications/adding-banner-theme-isolation-end-user-notification-zia/Entering-Zero-Trust-Mode_message_green-outline.png" alt="A view of a web page entering Zero Trust Mode. " title="A green outline appears around the web page as a notification message temporarily loads."></p></div><div class="subc"><p><a class="ck-anchor" id="Zero-Trust-Mode-Icon-and-Notification-Banner-condensed" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/user-experience-modes-isolation/UX-Phase-0_Notification-Banner-Show-More_squircles.png" alt="A view of a web page after it has completely loaded while in an isolated session." title="The web page shows the temporary notification banner that appears when the user is in Zero Trust Mode and the active session icon at the bottom of the page."></p></div><div class="subc"><a class="ck-anchor" id="Zero-Trust-Mode-icon-and-expanded-message" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/user-experience-modes-isolation/UX-Phase-0_Notification-Banner_Expanded_squircles.png" alt="A view of a web page after it has completely loaded while in an isolated session." title="The web page shows the fully expanded temporary notification banner that appears when the user is in Zero Trust Mode and the active session icon at the bottom of the page."></div> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1539040 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1539626 <p>With the Advanced Detections package for Advanced Sandbox, you can analyze EXE and DLL files with sizes up to 200 MB.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-sandbox" target="_blank">About Sandbox</a>.</p> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1539626 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1540837 <p>Organizations with Advanced Sandbox that use Internet & SaaS (ZIA) to inspect Private Access (ZPA) traffic can sandbox unknown files uploaded to Private Access assets.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-sandbox" target="_blank">About Sandbox</a>.</p> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1540837 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1540717 <div class="sub"><p>The Zscaler Admin Console is enhanced with the ability to view the AI/ML detection source for your Internet & SaaS (ZIA) traffic. The following updates are available:</p><h1>Web Insights Logs</h1><p>The AI/ML Detection Source filter and column are added to the Web Insights Logs page.</p><p><a class="image-icon" href="#detection-web-logs">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/web-insights-logs-columns" target="_blank">Web Insights Logs: Columns</a> and <a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs: Filters</a>.</p><h1>Analytics</h1><p>The Top AI/ML Detection Source by Security Incidents widget and the AI/ML Detection Source field are added to the Threat Incidents table and Details tab.</p><p><a class="image-icon" href="#detection-cybersecurity-insights">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-cybersecurity-insights" target="_blank">About Cybersecurity Insights</a>.</p><h1>Nanolog Streaming Service (NSS)</h1><p>You can use the filter AI/ML Detection Source when configuring an NSS or Cloud NSS feed for web logs.</p><p><a class="image-icon" href="#nss-filter">See image.</a></p><p>Additionally, you can add the field <code>%s{ai_ml_detection_src}</code> to the Feed Output Format.</p><p>To learn more, see:</p><ul><li data-list-item-id="ee6eca018d4d78c94ba6a9780176a601c"><a href="https://help.zscaler.com/zia/adding-nss-feeds-web-logs#Security" target="_blank">Adding NSS Feeds for Web Logs</a></li><li data-list-item-id="ec0d837cefa47943a407765730301058c"><a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-web-logs#Security" target="_blank">Adding Cloud NSS Feeds for Web Logs</a></li><li data-list-item-id="ed7b2f067a5ab5375b3068f5191fba9c5"><a href="https://help.zscaler.com/zia/nss-feed-output-format-web-logs" target="_blank">NSS Feed Output Format: Web Logs</a></li></ul></div><div class="subc"><p><a class="ck-anchor" id="detection-web-logs" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/about-cybersecurity-insights/ZIA-Web%20Insights-AI-MLDetection%20Source%20Column%20and%20Filter.png" alt="AI/ML Dectection Source field in Web Insights Logs" title="AI/ML Dectection Source Filter and Column"></p></div><div class="subc"><p><a class="ck-anchor" id="detection-cybersecurity-insights" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/about-cybersecurity-insights/zia-Cybersecurity%20Insights%20Dashboard-AI-ML%20Detection%20Source.png" alt="AI/ML Detection Source field in Cybersecurity Insights " title="AI/ML Detection Source Field"></p></div><div class="subc"><a class="ck-anchor" id="nss-filter" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/ai-ml-detection-source-filter-nss-web.png" alt="AI/ML Detection Source filter in NSS for web logs" title="AI/ML Detection Source filter in NSS for web logs"></div> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1540717 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1540767 <div class="sub"><p>When creating a site on SharePoint, you can define the site type as Public, Private, or Communication. These site types are displayed for the sites associated with a group on the Manage SaaS Application Tenants > Components page.</p><p><a class="image-icon" href="#sharepoint-site-type">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/manage-saas-application-components" target="_blank" data-entity-type="node" data-entity-uuid="de2ed1e4-4c74-4b00-b754-bff08a70c61c" data-entity-substitution="canonical">Manage SaaS Application Components</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="sharepoint-site-type" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/draft-manage-saas-application-components-doc-61981/Site%20Type.png" alt="The site type that is displayed under the Components tab of Manage SaaS Application Components page." title="SharePoint Site Type"></p></div> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1540767 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1539620 <div class="sub"><p>You can filter and view logs for specific DLP identifiers of transactions that were exempted from policy enforcement due to a scan timeout.</p><p>As part of the update, the following changes are available in the Zscaler Admin Console:</p><h1>Web Insights Logs</h1><p>The filter and column Exempted DLP Identifier is added to the Web Insights Logs.</p><p><a class="image-icon" href="#exempted-dlp-identifier-field" image-icon="">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs: Filters</a> and <a href="https://help.zscaler.com/zia/web-insights-logs-columns" target="_blank">Web Insights Logs: Columns</a>.</p><h1>NSS Feeds</h1><p>The field <code>%d{exempt_dlpidentifier}</code> can be added to the Feed Output Format when configuring NSS or Cloud NSS feeds for web logs.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-web-logs" target="_blank">NSS Feed Output Format: Web Logs</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="exempted-dlp-identifier-field" target="_blank"></a><img src="https://help.zscaler.com/downloads/ZIA-Exempted-dlp-identifier-field.png" alt="Exempted DLP Identifier filter and column in the Web Insights Logs page" title="Exempted DLP Identifier Filter and Column"></p></div> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1539620 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1539802 <div class="sub"><p>You can now restore quarantined Salesforce files to their original location with the Restore remediation action on the SaaS Security Assets page.</p><p><a class="image-icon" href="#restore-action">See image.</a></p><p>This action is available only for files initially quarantined using the Quarantine Malware action within the DLP Malware policy.</p><p class="note">All files quarantined before this feature update are restored to the Salesforce user folder, specifically within Files > Owned by me.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-assets-report-assets-with-incidents" target="_blank" data-entity-type="node" data-entity-uuid="ba2e0644-2d59-4da7-a41b-6b093c87087e" data-entity-substitution="canonical">Understanding the Assets Report: Assets with Incidents</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="restore-action" target="_blank"></a></p><p><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/release-note-xc-zia-2026/restore-action-salesforce.png" alt="Restore remediation Action on SaaS Security Assets page" title="Restore Action on SaaS Security Assets page"></p></div> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1539802 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1535077 <p>You can add up to 255 proxies and proxy gateways for third-party proxy services (Infrastructure > Internet & SaaS > Network Policies > Proxies & Gateways) in the Zscaler Admin Console.</p><p>To learn more, see <a href="https://help.zscaler.com/unified/ranges-limitations" target="_blank" data-entity-type="node" data-entity-uuid="7972a88f-8098-43c7-9e31-f7088a5f219d" data-entity-substitution="canonical">Ranges & Limitations</a>.</p><h1>Update to Cloud Service API</h1><p>You can add a maximum of up to 255 proxies using the <code>POST /proxies</code> API. To increase the limit to a desired value, contact Zscaler Support to request a configuration change for your tenant.</p> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1535077 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1541010 <div class="sub"><p>You can retrieve information about devices registered with Zscaler using the following endpoints:</p><ul><li data-list-item-id="efb78f0e1b4b018d5953ffffd9f3d255a"><code>GET /devices</code></li><li data-list-item-id="e2b3f2f91d3c46ba76f60c8a89391701b"><code>GET /devices/{id}</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1541010 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-22&id=1541007 <div class="sub"><p>You can retrieve a list of partners and services integrated with the Zscaler service, a list of configured CrowdStrike endpoints or device IDs, and detailed endpoint or device data based on the IDs using the following integration endpoints:</p><ul><li data-list-item-id="e604c8fc8f07373ff57d86438223ecb24"><code>GET /integrationPartners</code></li><li data-list-item-id="ef1bc40e1a19857340ce806c8639f5f04"><code>GET /integrationPartners/crowdStrike/endpoints</code></li><li data-list-item-id="edab2915fe6ba4cc875d36daa8c009963"><code>POST /integrationPartners/crowdStrike/endpoints</code></li><li data-list-item-id="ea33ef954b4a55440a0af5ffdd70d39a5"><code>GET /integrationPartners/crowdStrike/whitelistedBaseUrls</code></li></ul><p>You can configure the integration of Microsoft Defender for Endpoint APIs with Zscaler and retrieve the MD5 hash of the file required to view the Sandbox Detail Report using the following endpoints:</p><ul><li data-list-item-id="eb8984b115d3313db0fef6477ac61555a"><code>POST /integrationPartners/microsoftDefender/endpoints</code></li><li data-list-item-id="e5af59e8ce5f7aa0fb9ba6c733e2da1b1"><code>GET /integrationPartners/sandbox/report/{md5}</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1541007 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-18&id=1540826 <div class="sub"><p>The <a class="url-external" href="https://www.zscaler.com/url-categorization" target="_blank">Zscaler URL category test</a> provides a set of standardized, immutable test URLs specifically designed for HTTPS URL policy validation testing. These Zscaler-managed sites maintain persistent categorization, allowing administrators to consistently verify that URL Filtering rules and SSL/TLS Inspection policies are being applied as intended.</p><p class="note">Because these URLs are immutable, they provide a baseline for confirming HTTPS URLs and SSL/TLS policy actions without the risk of external site changes.</p><p><a class="image-icon" href="#zscaler-url-category-test">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-url-categories" target="_blank" data-entity-type="node" data-entity-uuid="5880c889-3efc-480a-9ff0-2377aa73c18b" data-entity-substitution="canonical">About URL Categories</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="zscaler-url-category-test" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/internet-saas-service-release-notes/release-upgrade-summary-2026/Zscaler-URL-Categorization.png" alt="Zscaler URL category test page" title="Zscaler URL category test page"></p></div> Feature Available Mon, 18 May 2026 07:00:00 GMT feature 1540826 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-15&id=1539072 <div class="sub"><p>The cloud application instances feature is extended to new cloud applications. You can create cloud application instances for the following cloud applications:</p><ul style="list-style-type:disc;"><li data-list-item-id="e4cc0ad9f64b80f65966da8d8443ddefb">Google Gemini</li><li data-list-item-id="ec706cfb6df3d60897ee5a3c7e2a08e97">Microsoft Copilot</li></ul><p><a class="image-icon" href="#add-cloud-app-instance">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-cloud-application-instances" target="_blank">About Cloud Application Instances</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="add-cloud-app-instance" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/Zscaler-Add-Cloud-Application-Instance-Window-RN.png" alt="Zscaler Add Cloud Application Instance window with Google Gemini and Microsoft Copilot" title="Zscaler Add Cloud Application Instance window"></p></div> Feature Available Fri, 15 May 2026 07:00:00 GMT feature 1539072 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-15&id=1542044 <div class="subc"><p>A new query parameter, <code>adminScopeSupport</code>, is available for the <code>GET /groups</code> and <code>GET /groups/lite</code> endpoints. <code>adminScopeSupport</code> is also added as a field attribute in the <code>Group</code> model referenced by the groups APIs.</p><p>To learn more, go to <code>/groups</code> from <a href="https://help.zscaler.com/zia/user-management" target="_blank">User Management</a>.</p><p>Additionally, a new Enum value, <code>USER_GROUP</code>, is added to the Enum list in the scope field of the <code>AdminScope</code> and <code>AlertDefinition</code> models. This value is available for all the APIs where scope selection is applicable.</p></div> Feature Available Fri, 15 May 2026 07:00:00 GMT feature 1542044 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-15&id=1540721 <div class="sub"><p>You can use a new filter Last Functionally Updated to easily identify recently modified records when creating custom reports in Workday. Additionally, the prompts Starting Prompt and Ending Prompt fields provide greater control and precision when defining report parameters.</p><p><a class="image-icon" href="#wd_filter">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="wd_filter" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/adding-saas-application-tenants-draft-doc-63745/wd_filter_rn.png" alt="Workday filters and prompts" title="Workday filters and prompts"></div> Feature Available Fri, 15 May 2026 07:00:00 GMT feature 1540721 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-15&id=1539046 <div class="sub"><p>You can update the Malware Protection policy and retrieve the Malware Protection policy for an organization using the following endpoints:</p><ul><li data-list-item-id="e6aad62ac4372618ae918b72bce8561c8"><code>GET /malwarePolicy</code></li><li data-list-item-id="e83742e3c2bff0a63f8fef7e550e49f8d"><code>PUT /malwarePolicy</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 15 May 2026 07:00:00 GMT feature 1539046 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-15&id=1540712 <div class="sub"><p>You can add, update, and delete NSS Collector servers and retrieve a list of all configured NSS Collector servers for an organization using the following endpoints:</p><ul><li data-list-item-id="ea4a2375309433c598cc41ed39521c92d"><code>GET /nssCollectors</code></li><li data-list-item-id="e96631630cc7aca696d56b2f52ccc9422"><code>POST /nssCollectors</code></li><li data-list-item-id="eb56ede91d410dc91b1d8b44106050fc6"><code>PUT /nssCollectors/{id}</code></li><li data-list-item-id="e518c1ce54603c562493db431b23f6c0c"><code>DELETE /nssCollectors/{id}</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 15 May 2026 07:00:00 GMT feature 1540712 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-15&id=1540282 <div class="sub"><p>You can retrieve a list of all supported browsers and their versions and update the Smart Browser Isolation policy settings using the following endpoints:</p><ul><li data-list-item-id="ec64e4c3a012a4039e6c5171a30360c8d"><code>GET /browserControlSettings/supportedBrowserVersions</code></li><li data-list-item-id="e8dd7474ce6a7aea4da10f70d4e20c2f0"><code>PUT /browserControlSettings/smartIsolation</code></li></ul><p>You can update, delete, and retrieve the Votiro CDR authentication credentials and retrieve the Votiro CDR policies configured for a tenant using the following endpoints:</p><ul><li data-list-item-id="ef1444c0815165140b247ce1f0d12dbe3"><code>GET /isolationVotiroCdr/policies</code></li><li data-list-item-id="e4a45e922a381045cee29440028b542aa"><code>GET /isolationVotiroCdr/tokenConfig</code></li><li data-list-item-id="eafd9f4f8fa36dfd7bbf64f8db08b4a31"><code>PUT /isolationVotiroCdr/tokenConfig</code></li><li data-list-item-id="e1a15881e4af1bfc40e0c3a7cbc4f564d"><code>DELETE /isolationVotiroCdr/tokenConfig</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 15 May 2026 07:00:00 GMT feature 1540282 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-15&id=1539656 <div class="sub"><p>You can create, update, delete, and retrieve custom IPS signature rules using the following endpoints:</p><ul><li data-list-item-id="e3d50a4514e24c777f7c7835dd0609387"><code>GET /ipsSignatureRules</code></li><li data-list-item-id="e86e08666272ab795b895748887676bf6"><code>POST /ipsSignatureRules</code></li><li data-list-item-id="eb4022777d24e59ab2a74a66571fe4bdc"><code>GET /ipsSignatureRules/{id}</code></li><li data-list-item-id="e27d2c1748b1b96911493d0dc0fcd8c83"><code>PUT /ipsSignatureRules/{id}</code></li><li data-list-item-id="ed2663a55dc40f121757f508e4644def5"><code>DELETE /ipsSignatureRules/{id}</code></li></ul><p>You can export and import custom IPS signature rules, and validate the rule text for a new custom signature rule using the following endpoints:</p><ul><li data-list-item-id="e8fbc02eed06a95b100f6cf4c8bd1219c"><code>GET /ipsSignatureRules/export</code></li><li data-list-item-id="e3431e85ba596726eb945fc85e3d939e5"><code>GET /ipsSignatureRules/import</code></li><li data-list-item-id="efeb10893b05bf3a34d6aa2d64fad6cec"><code>POST /ipsSignatureRules/import</code></li><li data-list-item-id="e3ba8c4d974275c3d53278f8fa1ebb7d3"><code>POST /ipsSignatureRules/validateRuleText</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 15 May 2026 07:00:00 GMT feature 1539656 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-14&id=1540980 <p>Advanced SaaS Security Posture Management (SSPM) expands its coverage for Bitbucket with 9 new SSPM controls, providing deeper visibility and stronger security posture assessment.</p> Feature Available Thu, 14 May 2026 07:00:00 GMT feature 1540980 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-14&id=1540982 <p>Advanced SaaS Security Posture Management (SSPM) expands its coverage for Confluence with 5 new SSPM controls, providing deeper visibility and stronger security posture assessment.</p> Feature Available Thu, 14 May 2026 07:00:00 GMT feature 1540982 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-14&id=1540981 <p>Advanced SaaS Security Posture Management (SSPM) expands its coverage for Jira with 5 new SSPM controls, providing deeper visibility and stronger security posture assessment.</p> Feature Available Thu, 14 May 2026 07:00:00 GMT feature 1540981 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-08&id=1540303 <div class="sub"><p>The following predefined Data Loss Prevention (DLP) dictionaries are now supported for use in Endpoint DLP policy rules:</p><ul><li data-list-item-id="ee1b01b3b2dce8955506f95c26b8d6f1e">Addresses (Japan)</li><li data-list-item-id="ea340be14fb3c90fc42f070e0ba83b1cf">First Names (Japan)</li><li data-list-item-id="e3ce631bfa46ac57ae93666fe6267d3ca">Full Names (Japan)</li><li data-list-item-id="ec930fe74c94adf439d2808693fd563c0">Last Names (Japan)</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-predefined-dlp-dictionaries" target="_blank">Understanding Predefined DLP Dictionaries</a>.</p></div> Feature Available Fri, 08 May 2026 07:00:00 GMT feature 1540303 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-08&id=1535289 <div class="sub"><p>Zscaler's Gen AI prompt configuration is extended to the QuillBot and Google AI generative AI applications. You can enable prompts for these generative AI applications to categorize and store the prompts for the respective applications.</p><p><a class="image-icon" href="#gen-ai-quillbot-googleAI">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-advanced-policy-settings#gen-AI-prompt" target="_blank">Configuring Advanced Policy Settings</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="gen-ai-quillbot-googleAI" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Advanced-Policy-Settings_Gen-AI-Prompt-Configuration-RN.png" alt="ZIA Advanced Policy Settings Page with QuillBot and Google AI Gen AI Applications" title="ZIA Advanced Policy Settings Page with QuillBot and Google AI Gen AI Applications"></p></div><h1>Added QuillBot and Google AI Capabilities to URL & Cloud App Control Policy Settings Endpoint</h1><p>Two new Boolean fields, <code>enableQuillbotAIPrompt</code> and <code>enableGoogleAIPrompt</code>, are available for the <code>AdvancedUrlFilteringCloudAppOptions</code> model in the <code>/advancedUrlFilterAndCloudAppSettings</code> APIs. These fields allow users to use generative AI prompts with QuillBot and Google AI.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/url-cloud-app-control-policy-settings" target="_blank">URL & Cloud App Control Policy Settings</a>.</p> Feature Available Fri, 08 May 2026 07:00:00 GMT feature 1535289 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-08&id=1538460 <div class="sub"><p>You can capture end user prompts for generative AI applications from the Cloud Application Control policy. This allows granular control of Gen AI prompt configuration. As part of this update, the Capture Prompts option is added to the Add/Edit AI & ML Rule window (Policies > Access Control > Internet & SaaS > Policies > Cloud App Control Policy > Add > AI & ML Applications).</p><p class="note">This is applicable for Gen AI applications that are supported in the <a href="https://help.zscaler.com/zia/configuring-advanced-policy-settings#gen-AI-prompt" target="_blank">Gen AI Prompt Configuration</a> section of the Advanced Policy Settings page.</p><p><a class="image-icon" href="#ai-ml-rule-capture-prompts">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-ai-ml-applications-rule-cloud-app-control" target="_blank" data-entity-type="node" data-entity-uuid="3aeee458-e354-4a56-a327-ad040ee381d0" data-entity-substitution="canonical">Adding an AI & ML Applications Rule for Cloud App Control</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="ai-ml-rule-capture-prompts" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Add-Edit-AI-ML-Rule-Window-Action-RN.png" alt="The Capture Prompts option in the Add/Edit AI & ML Rule window" title="The Add/Edit AI & ML Rule window with the Capture Prompts option"></p></div><h1>Update to the Cloud App Control Policy Endpoint</h1><p>A new Boolean field, <code>promptCaptureEnabled</code>, is available for the <code>WebApplicationRule</code> model in the <code>/webApplicationRules</code> APIs. This field enables users to allow or block the capture of end user prompts for generative AI applications.</p><p>To learn more, go to the <code>WebApplicationRule</code> model from <a href="https://help.zscaler.com/zia/cloud-app-control-policy" target="_blank">Cloud App Control Policy</a>.</p> Feature Available Fri, 08 May 2026 07:00:00 GMT feature 1538460 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-05&id=1539106 <p>Zscaler is now forwarding Slack chat-based DLP policy incidents to the Zscaler Incident Response and Zscaler Workflow Automation along with already supported file-based violations. These incidents are also sent to Web Insights and Logs and to the respective DLP policy's auditor.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-saas-security-apis" target="_blank" data-entity-type="node" data-entity-uuid="e7491b91-bf66-4e60-b00f-7ad556b9e3a0" data-entity-substitution="canonical">Understanding SaaS Security API Supported Capabilities</a>, <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="5735781d-0020-47a8-9a1a-bcf4b475636d" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy with Content Inspection</a> and <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-without-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="c7bb5123-f862-485b-a600-2cb1aabddbe6" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy without Content Inspection</a>.</p> Feature Available Tue, 05 May 2026 07:00:00 GMT feature 1539106 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-05&id=1534097 <p><span class="cf0">Advanced SaaS Security Posture Management (SSPM) expands its coverage for Google Workspace with 24 new SSPM controls, providing deeper visibility and stronger security posture assessment. </span>The Cloud Identity license must be assigned to the Google Workspace Admin onboarding the account. This is critical to ensure appropriate license and compliance with Google Cloud Identity and Workspace policies. Additional API scopes are required for existing tenants to view the new Cloud Identity policies.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a>.</p> Feature Available Tue, 05 May 2026 07:00:00 GMT feature 1534097 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-05-05&id=1540805 <p>Configuring Virtual Service Edge for Internet & SaaS (ZIA) on Amazon Web Services (AWS) requires 64 GB of instance memory.</p><p class="note">Zscaler recommends the r7i.2xlarge instance size.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-internet-saas-amazon-web-services" target="_blank" data-entity-type="node" data-entity-uuid="64393a0c-a634-49f0-a2c2-4a2aac02b006" data-entity-substitution="canonical">Configuring Virtual Service Edge for Internet & SaaS: Amazon Web Services</a> and <a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-internet-saas-amazon-web-services-gwlb" target="_blank" data-entity-type="node" data-entity-uuid="8cab51bd-4abe-49e8-879a-eb4786ca7a80" data-entity-substitution="canonical">Configuring Virtual Service Edge for Internet & SaaS: Amazon Web Services with GWLB</a>.</p> Feature Available Tue, 05 May 2026 07:00:00 GMT feature 1540805 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-20&id=1539687 <p>The following are new predefined DLP dictionaries:</p><ul style="list-style-type:disc;"><li data-list-item-id="ef7badc10f4c4da752181f38c57b5b33d">Argentina Uniform Bank Code: Detect Leakage of CBU</li><li data-list-item-id="e26378ccfb2413350a7a8eeed4d2ba96f">Cambodian National ID: Detect Leakage of Khmer Identification Code (KIdC)</li><li data-list-item-id="ed37f7b51171180f7db69b097b1d3170a">Mexico Business Tax ID: Detect Leakage of BRFC</li><li data-list-item-id="e6e5abf6cfabc790c338a683f134a7d56">Mexico Individual Tax ID: Detect Leakage of IRFC</li><li data-list-item-id="eee82537e3d58a169655886aadbde58c4">Mexico Social Security Number: Detect Leakage of NSS</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-predefined-dlp-dictionaries" target="_blank">Understanding Predefined DLP Dictionaries</a>.</p> Feature Available Mon, 20 Apr 2026 07:00:00 GMT feature 1539687 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-20&id=1533741 <div class="sub"><p>When creating a DLP rule for Microsoft Teams, you can define the collaboration scope as External, Internal, or Any to scan messages and attachments in channels containing external, internal, or any (internal or external) members.</p><p><a class="image-icon" href="#collab-scope-dlp">See image.</a></p><p>On the SaaS Security Analytics page, files from MS Teams that violate the DLP policy now show their collaboration scope, among other details.</p><p><a class="image-icon" href="#collab-scope">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="5735781d-0020-47a8-9a1a-bcf4b475636d" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy with Content Inspection</a> and <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-without-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="c7bb5123-f862-485b-a600-2cb1aabddbe6" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy without Content Inspection</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="collab-scope" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/saas-security/understanding-assets-report-assets-with-incidents/ms-teams-collab-scope-analytics-cropped.png" alt="Collaboration Scope on SaaS Security Analytics page" title="Collaboration Scope on SaaS Security Analytics page"></div><div class="subc"><p><a class="ck-anchor" id="collab-scope-dlp" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/saas-security/understanding-assets-report-assets-with-incidents/image%20(4).png" alt="Collaboration Scope in SaaS Security Data Protection Policy" title="Collaboration Scope in SaaS Security Data Protection Policy"></div> Feature Available Mon, 20 Apr 2026 07:00:00 GMT feature 1533741 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1538624 <div class="sub"><p>You can retrieve a list of Adaptive Access profiles and information about an Adaptive Access profile using the following endpoints:</p><ul><li data-list-item-id="e7cd9ba46a34d3aaf246853bd5c60c829"><code>GET /adaptiveAccessProfiles</code></li><li data-list-item-id="e029fa3818e03d357901e2e563bfe0550"><code>GET /adaptiveAccessProfiles/profiles/rules</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1538624 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1539644 <p>You can add or remove custom NTP servers from the configuration files using CLI commands. This prevents syntax errors and duplicate entries in the configuration files.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-internet-saas-ntp-server-synchronization" target="_blank" data-entity-type="node" data-entity-uuid="bc53902c-b841-413a-81ff-e40f07b64f61" data-entity-substitution="canonical">Configuring Virtual Service Edge for Internet & SaaS and NTP Server Synchronization</a>.</p> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1539644 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1539711 <div class="sub"><p>If your organization is subscribed to the Advanced Sandbox package, the following default rules are available:</p><ul class="triangle"><li><a href="#trusted">Sandbox_Docs_Trusted</a></li><li><a href="#archives">Sandbox_Docs_Archives</a></li><li><a href="#exes-web">Sandbox_Exes_Web</a></li></ul><p>These rules are disabled by default and can be enabled and updated to suit your organization's needs.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-sandbox" target="_blank">About Sandbox</a>.</p></div><div class="subc"><ul><li><a class="ck-anchor" id="trusted" target="_blank"></a>Rule Order: 1</li><li>Admin Rank: 7</li><li>Rule Name: Sandbox_Docs_Trusted</li><li>Rule Status: Disabled</li><li>File Types: Microsoft Office (group) & PDF</li><li>Sandbox Categories: All</li><li>Protocols: FTP over HTTP, HTTP, HTTPS, Native FTP</li><li>First-Time Action: Allow & Scan</li><li>AI Instant Verdict: Enabled</li><li>Action for Subsequent Downloads: Block</li><li>Description: Advanced Sandbox Documents rule created during company creation. This policy rule is intended to be used with a custom user-defined URL Category Trusted Sites (or other applicable name), which after creation needs to be added to the policy via the URL Category control. This policy rule intentionally does not subject documents coming from Trusted Sites to the same level of inspection as untrusted sites.</li></ul></div><div class="subc"><ul><li><a class="ck-anchor" id="archives" target="_blank"></a>Rule Order: 2</li><li>Admin Rank: 7</li><li>Rule Name: Sandbox_Docs_Archives</li><li>Rule Status: Disabled</li><li>File Types: Microsoft Office (group), PDF, and Archives (group)</li><li>Sandbox Categories: All</li><li>Protocols: FTP over HTTP, HTTP, HTTPS, Native FTP</li><li>First-Time Action: Quarantine</li><li>AI Instant Verdict: Enabled</li><li>Action for Subsequent Downloads: Block</li><li>Description: Advanced Sandbox Documents and Archives rule created during company creation. This rule must apply to all URL categories other than the custom user-defined URL Category Trusted Sites.</li></ul></div><div class="subc"><ul><li><a class="ck-anchor" id="exes-web" target="_blank"></a>Rule Order: 3</li><li>Admin Rank: 7</li><li>Rule Name: Sandbox_Exes_Web</li><li>Rule Status: Disabled</li><li>File Types: Executable (group), Web Content (group)</li><li>Sandbox Categories: All</li><li>Protocols: FTP over HTTP, HTTP, HTTPS, Native FTP</li><li>First-Time Action: Quarantine</li><li>AI Instant Verdict: Enabled</li><li>Action for Subsequent Downloads: Block</li><li>Description: Advanced Sandbox Executables and Web Content rule created during company creation.<br> </li></ul></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1539711 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1539595 <div class="sub"><p>Users can schedule Web DLP incident reports by DLP Rule Name to improve visibility and monitor incident counts in the Zscaler Admin Console:</p><p>Data Type DLP Rule Name is introduced in the Interactive Reports widgets and Web Insights.</p><p><a class="image-icon" href="#dlp-rule-name">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/web-data-types-and-filters" target="_blank">Web Data Types and Filters</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="dlp-rule-name" target="_blank"></a><img src="https://help.zscaler.com/downloads/unified/getting-started-experience-center/zscaler-admin-console-access-navigation/signing-zscaler-admin-console/image-2026-03-11-12-12-32-666.png" alt="DLP Rule Name filter in the Data Type field" title="DLP Rule Name filter"></p></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1539595 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1538549 <div class="sub"><p>AI or machine language classification is extended to support around 200 new document types across 10 common document categories.</p><p>As part of this extended support, Email DLP Insights Logs and the Nanolog Streaming Service (NSS) are enhanced to provide enriched auto-classification of documents that are uploaded or downloaded during transactions.</p><p>The following enhancements are available in the Zscaler Admin Console:</p><h1>Updates to Email DLP Insights Logs</h1><p>A new filter and column, Subdocument Type, is added to the Email DLP Insights Logs to capture, categorize, and log document subtypes related to administrative documents, invoices, expense reports, and more.</p><p><a class="image-icon" href="#subdocument_type">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/unified/email-dlp-insights-logs-columns" target="_blank">Email DLP Insights Logs: Columns</a> and <a href="https://help.zscaler.com/unified/email-dlp-insights-logs-filters" target="_blank">Email DLP Insights Logs: Filters</a>.</p><h1>Updates to NSS Feeds</h1><p>The field <code>%s{ac_doc_subtypes}</code> can be added to the Feed Output Format when configuring an NSS or Cloud NSS feed for Email DLP logs.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-email-dlp-logs" target="_blank">NSS Feed Output Format: Email DLP Logs</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/about-microsoft-copilot-readiness-assessment/subdocument_type_email_logs.png" alt="You can filter by Subdocument Type in the Email DLP Insights Logs page." title="Subdocument Type Filter in Email DLP Insights Logs"><a class="ck-anchor" id="subdocument_type" target="_blank"></a></p></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1538549 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1538498 <div class="sub"><p>You can choose Evaluate Other Policies or Bypass Other Policies under the Do Not Inspect action in the O365 One Click predefined rule in the SSL/TLS Inspection Policy. This allows you to configure the predefined O365 One Click rule to either evaluate other policies (i.e., URL Filtering and Cloud App Control) or bypass them.</p><p><a class="image-icon" href="#configurable-predefined-o365-one-click">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-ssltls-inspection-policy" target="_blank" data-entity-type="node" data-entity-uuid="5594b996-58e6-491f-b48d-e50835884454" data-entity-substitution="canonical">Configuring SSL/TLS Inspection Policy</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="configurable-predefined-o365-one-click" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/Zscaler-Edit-SSL-Inspection-Policy-RN.png" alt="Edit SSL Inspection Rule window for the Predefined Office 365 One Click" title="Edit SSL Inspection Rule window for the Predefined Office 365 One Click"></p></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1538498 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1535306 <div class="sub"><p>Filters to include or exclude selected URL classes, URL categories, and URL super categories have been added to NSS and Cloud NSS feeds for web logs. When configuring a feed, you can select the respective URL classes and categories and include them in the logs by default or choose to exclude them from the logs.</p><p><a class="image-icon" href="#img-nss-url-categories-include-exclude-filter">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-nss-feeds-web-logs#Twhere" target="_blank">Adding NSS Feeds for Web Logs</a> and <a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-web-logs#Twhere" target="_blank">Adding Cloud NSS Feeds for Web Logs</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="img-nss-url-categories-include-exclude-filter" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/release-notes-drafts/URL%20Category%20Exclude%20Filter.png" alt="URL Categories filter with Include/Exclude functionality" title="URL Categories Include and Exclude Options"></div><div class="subc"><h1>Enhancement to the Cloud Nanolog Streaming Service (NSS) API</h1><p>New fields <code>urlCategoriesExclude</code>, <code>urlClassesExclude</code>, and <code>urlSuperCategoriesExclude</code> are available for the <code>ZmanageNssFeed</code> model in the <code>/nssFeeds</code> APIs.</p><p>To learn more, go to the <code>ZmanageNssFeed</code> model from <a href="https://help.zscaler.com/zia/cloud-nanolog-streaming-service-nss" target="_blank">Cloud Nanolog Streaming Service (NSS)</a>.</p></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1535306 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1539591 <div class="sub"><p>The Zscaler service extends support to identify two new network applications, namely Kafka (Application Service category) and Zalo (Instant Messaging category). You can view these apps on the Network Applications page and configure them in Firewall Filtering rules to identify and manage associated traffic.</p><p><a class="image-icon" href="#new-network-apps-kafka-zalo">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-network-applications" target="_blank">About Network Applications</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="new-network-apps-kafka-zalo" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/Firewall-filtering-kafka-zalo-network-apps.png" alt="Kafka and Zalo network apps supported in Firewall Filtering rule conditions" title="Kafka and Zalo Network Apps in Firewall Filtering Rules"></p></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1539591 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1535070 <p>The following enhancements are available for the NSS Feeds and Cloud NSS Feeds:</p><ul><li data-list-item-id="e0df7235d5ebd72327637af738d3fc764">New log types, Authentication Service Authentication and Authentication Service SCIM, are added to the NSS for Web type. These log types provide support for the Authentication Service Authentication and Authentication Service SCIM audit log reports.</li><li data-list-item-id="e90f92188734c47051029320193795efb">A new application filter, Authentication Service Admin Audit Log, is added to the Admin Audit Logs.</li></ul><p class="note">To enable these NSS Feeds and Cloud NSS Feeds enhancements, contact <a href="https://help.zscaler.com/contact-support" target="_blank" data-entity-type="node" data-entity-uuid="a96560fe-0344-4052-bcd3-86bae40312ba" data-entity-substitution="canonical">Zscaler Support</a>.</p><p>To learn more, see:</p><ul><li data-list-item-id="e53c4b6bde52745fc84ba0c2031e1d778"><a href="https://help.zscaler.com/zia/adding-nss-feeds-zidentity-logs" target="_blank" class="url-external">Adding NSS Feeds for Authentication Service Authentication Logs</a></li><li data-list-item-id="e19533d6b8eaac8d117d0b7337b3187fc"><a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-zidentity-logs" target="_blank" class="url-external">Adding Cloud NSS Feeds for Authentication Service Authentication Logs</a></li><li data-list-item-id="eff681abee6358109db2e169e6720dafa"><a href="https://help.zscaler.com/zia/adding-nss-feeds-zidentity-scim-logs" target="_blank" class="url-external">Adding NSS Feeds for Authentication Service SCIM Logs</a></li><li data-list-item-id="e265c1c7016e92faa84b9b08dd4165652"><a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-zidentity-scim-logs" target="_blank" class="url-external">Adding Cloud NSS Feeds for Authentication Service SCIM Logs</a></li><li data-list-item-id="e9853a903391ad34564dd813f7d99c43f"><a href="https://help.zscaler.com/zia/adding-nss-feeds-admin-audit-logs" target="_blank">Adding NSS Feeds for Admin Audit Logs</a></li><li data-list-item-id="eeee27b811ee006450390d51e65289b03"><a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-admin-audit-logs" target="_blank">Adding Cloud NSS Feeds for Admin Audit Logs</a></li></ul> Feature in Limited Availability Fri, 17 Apr 2026 07:00:00 GMT feature 1535070 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1539618 <div class="sub"><p>You can configure a separate Cloud NSS feed for alerts, enabling you to monitor your Cloud NSS feeds for data lag, data loss, and the connection to your cloud-based security information and event management (SIEM) system.</p><p><a class="image-icon" href="#img-cloud-nss-alert-feed">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-alerts" target="_blank" data-entity-type="external">Adding Cloud NSS Feeds for Alerts</a>.</p></div><div class="subc"><a class="ck-anchor" id="img-cloud-nss-alert-feed" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/internet-saas-service-release-notes/release-upgrade-summary-2026/cloud-nss-alert-feed.png" alt="Add Cloud NSS feed for Alerts " title="Add Cloud NSS feed for Alerts "></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1539618 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1538486 <p>You can retrieve the progress summary of the VPN connection refresh process and start a new asynchronous process to refresh the VPN connection status using the following endpoints:</p><ul><li data-list-item-id="e8a449c39fc38e8673049df904308be54"><code>GET /azure/refreshConnectionStatus</code></li><li data-list-item-id="e6eb876661ae33c1888d3d28b903c1711"><code>POST azure/refreshConnectionStatus</code></li></ul><p>You can retrieve the tunnel configuration status, start the tunnel configuration process, remove the tunnel configuration, and retrieve the status of the tunnel configuration removal process for a specified Azure hub using the following endpoints:</p><ul><li data-list-item-id="ed1e2f4ac6f2c5a41844b5015dad287e8"><code>GET /azure/tunnelConfiguration</code></li><li data-list-item-id="e8889dc0ec95d33a78ab2fec3d8dd17ba"><code>POST /azure/tunnelConfiguration</code></li><li data-list-item-id="e634a8c3b75de258498a1d9f0ac28c91c"><code>DELETE /azure/unConfigureTunnel/{hubId}</code></li><li data-list-item-id="ee4c7f437fb3851f68fd83b5667ee51a0"><code>GET /azure/unConfigureTunnelStatus</code></li></ul><p>You can retrieve the Azure hub sync process details and start a process to sync the hubs using the following endpoints:</p><ul><li data-list-item-id="e0021891f13489e611d1e2dce86aa37f7"><code>GET /azure/virtualHubs</code></li><li data-list-item-id="e7a552506e03f8f68f3474f2946ec5010"><code>GET /azure/virtualHubSync</code></li><li data-list-item-id="e0e2ae94a4e88492f327e1e348f701b2f"><code>POST azure/virtualHubSync</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1538486 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-17&id=1535178 <div class="sub"><p>You can create, update, and delete alert definitions, and retrieve a list of all configured alert definitions for an organization using the following endpoints:</p><ul><li data-list-item-id="ef2d014d9a5278b2cd6946aa7c8701866"><code>GET /alertDefinitions</code></li><li data-list-item-id="ecb26012473bc0b151d8ef5caf0b79c89"><code>POST /alertDefinitions</code></li><li data-list-item-id="e1422b2ae16964e46b8395b0296d2464b"><code>GET /alertDefinitions/{alertDefinitionId}</code></li><li data-list-item-id="e1d73d705427da8a62229c2e047555607"><code>PUT /alertDefinitions/{alertDefinitionId}</code></li><li data-list-item-id="e1c18ea4f082cfc15ef1fa52e0d41009e"><code>DELETE /alertDefinitions/{alertDefinitionId}</code></li></ul><p>You can create, update, and delete Security alert rules, and retrieve a list of all configured Security alert rules for an organization and their statuses using the following endpoints:</p><ul><li data-list-item-id="eb67ea1930a5b56a787d23a6fbc458174"><code>GET /alertRuleConfiguration/rules</code></li><li data-list-item-id="e06a62ed57c6478f634082b878b73db03"><code>POST /alertRuleConfiguration/rules</code></li><li data-list-item-id="e1e2c92abf7bd552734eda01d7b8a1107"><code>GET /alertRuleConfiguration/rules/{ruleId}</code></li><li data-list-item-id="e2203c36b84a7f8b8c46e7b1291fb1f6b"><code>PUT /alertRuleConfiguration/rules/{id}</code></li><li data-list-item-id="e1630924cffdf427622e2b0421d02c752"><code>DELETE /alertRuleConfiguration/rules/{id}</code></li><li data-list-item-id="eabaa209868dcdb1ce7e87701ffab4216"><code>GET /alertRuleConfiguration/rules/rulestatus</code></li></ul><p>You can create, update, and delete User and Entity Behavior Analytics (UEBA) alert rules, and retrieve a list of all configured UEBA alert rules using the following endpoints:</p><ul><li data-list-item-id="ed737ce4478ffc6418569e901e2e58bb3"><code>GET /alertRuleConfiguration/uebaRules</code></li><li data-list-item-id="e12905a91867d5c511e0d9b590587cdaa"><code>POST /alertRuleConfiguration/uebaRules</code></li><li data-list-item-id="ed4396f24d0d179b88026629e6db0ab71"><code>GET /alertRuleConfiguration/uebaRules/{ruleId}</code></li><li data-list-item-id="e605678f932352178260f8fe7fe75a8be"><code>PUT /alertRuleConfiguration/uebaRules/{id}</code></li><li data-list-item-id="e8bee0f07120b9b32fe6191af2e2db74f"><code>DELETE /alertRuleConfiguration/uebaRules/{id}</code></li></ul><p>You can create, update, and delete webhooks, retrieve a list of all configured webhooks for an organization, and test a webhook configuration using the following endpoints:</p><ul><li data-list-item-id="e914b30aed79258fb6f46bd0ddd13d69a"><code>GET /alertRuleConfiguration/webhooks</code></li><li data-list-item-id="e2d3b73b066bd78527b960163afaacdd2"><code>POST /alertRuleConfiguration/webhooks</code></li><li data-list-item-id="e06e0b3e066f531411cdc733a64ed940d"><code>PUT /alertRuleConfiguration/webhooks/{id}</code></li><li data-list-item-id="e1f30a4552b54174cc6ca603be3aa30a6"><code>DELETE /alertRuleConfiguration/webhooks/{id}</code></li><li data-list-item-id="eed49a413d57a022c3fbb67bb9cc58357"><code>POST /alertRuleConfiguration/webhooks/test</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 17 Apr 2026 07:00:00 GMT feature 1535178 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-15&id=1539854 <div class="sub"><p>Advanced SSPM supports Smartsheet as an API-based platform to provide visibility into posture misconfigurations. You can onboard a Smartsheet tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/integrating-smartsheet" target="_blank" data-entity-type="node" data-entity-uuid="dd918c65-470b-4b3a-be13-d766ddd5892f" data-entity-substitution="canonical">Integrating with Smartsheet</a> and <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank" data-entity-type="node" data-entity-uuid="ee68e82a-c6b5-47fb-980e-6aa8f2f2e648" data-entity-substitution="canonical">Connecting Your Platforms to Advanced SSPM</a>.</p><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/Smartsheet_Connect_Dropdown.png" alt="Connect Drop-Down Menu showing the Smartsheet option" title="Connect Drop-Down Menu"></div></div> Feature Available Wed, 15 Apr 2026 07:00:00 GMT feature 1539854 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-14&id=1539867 <div class="sub"><p>The Add Integration window for Atlassian in 3rd-Party App Governance is enhanced to allow you to enter the Atlassian subdomain and API token while adding the integration. This reduces the number of steps and simplifies the integration process to improve the user experience.</p><p><a class="image-icon" href="#Add-Integration-Window">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/integrating-with-atlassian" target="_blank" data-entity-type="node" data-entity-uuid="d43f04f4-6051-4658-b2fc-3d397c799d51" data-entity-substitution="canonical">Integrating with Atlassian.</a></p></div><div class="subc"><a class="ck-anchor" id="Add-Integration-Window" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/integrating-atlassian-draft-doc-63584/Atlassian_AddIntegration_Window_New.png" alt="Atlassian Integration Window showing API token" title="Add Integration Window"></div> Feature Available Tue, 14 Apr 2026 07:00:00 GMT feature 1539867 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-10&id=1539485 <div class="sub"><p>When configuring advanced settings (Policies > Common Configuration > Advanced > Advanced Settings), you can specify how long API-initiated sessions can be inactive before they are forced to reauthenticate. The timeout duration can range from 5 to 20 minutes.</p><p><a class="image-icon" href="#api-timeout">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-advanced-settings#auth-exemption" target="_blank">Configuring Advanced Settings</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="api-timeout" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/API-session-timeout.png" alt="API Session Timeout Duration in the Advanced Settings" title="API Session Timeout Duration in the Advanced Settings"></p></div><div class="subc"><h1>Enhancement to the Advanced Settings API</h1><p>A new field, <code>apiSessionTimeout</code>, is available for the <code>AdvancedSettings</code> model in the <code>/advancedSettings</code> APIs.</p><p>To learn more, go to the <code>AdvancedSettings</code> model from <a href="https://help.zscaler.com/zia/advanced-settings" target="_blank">Advanced Settings</a>.</p></div> Feature Available Fri, 10 Apr 2026 07:00:00 GMT feature 1539485 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-10&id=1539074 <div class="sub"><p>The Data Discovery Report is enhanced to include subdocument type support, providing enhanced visibility via an interactive bubble chart for ML categories. This chart utilizes nested bubbles to represent granular subdocument types, such as tax forms and legal contracts. By drilling down, users can access an expanded 4-column view where a new Subcategory column displays these specific subdocument classifications.</p><p><a class="image-icon" href="#data_discovery_rn">See image.</a></p><p>To learn more see, <a href="https://help.zscaler.com/zia/about-data-discovery-report" target="_blank">About the Data Discovery Report</a> and <a href="https://help.zscaler.com/zia/viewing-data-discovery-details" target="_blank">Viewing Data Discovery Details</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/miscellaneous-draft-articles/about-probe-overview/Subdocument_Type_Data_Discovery_RN.png" alt="The Data Discovery Report shows interactive bubble chart for various content types." title="Data Discovery Report"><a class="ck-anchor" id="data_discovery_rn" target="_blank"></a></p></div> Feature Available Fri, 10 Apr 2026 07:00:00 GMT feature 1539074 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-10&id=1538647 <p>You can delete a list of workload groups for an organization using the <code>DELETE /workloadGroups</code> endpoint. To learn more, go to <code>DELETE /workloadGroups</code> from <a href="https://help.zscaler.com/zia/workload-groups" target="_blank">Workload Groups</a>.</p><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p> Feature Available Fri, 10 Apr 2026 07:00:00 GMT feature 1538647 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-04-02&id=1538470 <p>Browser Extension for Zero Trust Browser is a lightweight solution providing seamless and secure enterprise access from any browser. The extension enhances existing browsers with browser detection and response (BDR) and browser-native data loss prevention (DLP) capabilities as well as posture-based application access.</p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/understanding-browser-extension" data-entity-type="node" data-entity-uuid="a5d784b6-8079-440f-a8db-8b3548efd0b8" data-entity-substitution="canonical" target="_blank">Understanding Browser Extension</a>.</p> Feature Available Thu, 02 Apr 2026 07:00:00 GMT feature 1538470 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-31&id=1538658 <p>Advanced Threat Protection now enables users to allow the Web Proxy Auto-Discovery (WPAD) protocol from external sources to automatically discover proxy settings by locating PAC files via DHCP or DNS queries. To learn more, see <a href="https://help.zscaler.com/zia/configuring-advanced-threat-protection-policy" target="_blank" data-entity-type="node" data-entity-uuid="a86b7229-d82e-48d1-b812-e5eb8eea66b0" data-entity-substitution="canonical">Configuring the Advanced Threat Protection Policy</a>.</p> Feature Available Tue, 31 Mar 2026 07:00:00 GMT feature 1538658 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-26&id=1539752 <p>A stand-alone deployment of Virtual Service Edges for Internet & SaaS (ZIA) on all platforms (i.e., VMware ESXi, Microsoft Azure, AWS EC2, Microsoft Hyper-V, and GCP) requires a minimum of 48 GB of memory.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-virtual-service-edges" target="_blank" data-entity-type="node" data-entity-uuid="3336fdf9-5f75-4a6a-8f57-5db83349c4ec" data-entity-substitution="canonical">About Virtual Service Edges for Internet & SaaS</a>.</p> Feature Available Thu, 26 Mar 2026 07:00:00 GMT feature 1539752 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-20&id=1533702 <div class="sub"><p>Organizations face a significant security risk when users inadvertently overshare or mishandle sensitive internal files. The integration of AI tools, such as Microsoft Copilot, intensifies this risk, as these tools can access information within the improperly shared files, leading to the potential exposure of sensitive data to unauthorized parties. Therefore, implementing proactive monitoring and control measures is crucial to safeguard organizational security and prevent accidental data leaks.</p><p>As part of this feature, the following enhancements are available in the Zscaler Admin Console:</p><h1>SaaS Workflows: Microsoft Copilot Readiness Assessment</h1><p>SaaS Workflows is introduced to streamline data protection and compliance, which is designed to automate processes and enable bulk remediation actions. A significant current capability within these workflows is the new Microsoft Copilot Readiness Assessment page. This is crucial in helping organizations mitigate risks and guarantee a secure and prepared onboarding experience for Microsoft applications.</p><p>You can access the dashboard from Analytics > Internet & SaaS > Analytics > SaaS Workflows > Microsoft Copilot Readiness Assessment.</p><p><a class="image-icon" href="#ms_copilot_readiness_dashboard_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-saas-workflows" target="_blank">About SaaS Workflows</a>, <a href="https://help.zscaler.com/zia/about-microsoft-copilot-readiness-assessment" target="_blank">About Microsoft Copilot Readiness Assessment</a>, and <a href="https://help.zscaler.com/zia/viewing-drill-down-all-assets" target="_blank">Viewing Drill Down of All Assets</a>.</p><h1>SaaS Security Insights Logs and SaaS Security Assets Logs</h1><p>Filters and columns, Accessibility Flags and Label, are added to the SaaS Security Insights Logs page and SaaS Security Assets with Incidents page (Analytics > Internet & SaaS > Analytics > SaaS Security > Assets) for collaboration applications, email applications, and file sharing applications.</p><p><a class="image-icon" href="#saas_sec_insights_logs_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-saas-security-insights-logs" target="_blank">About SaaS Security Insights Logs</a> and <a href="https://help.zscaler.com/zia/understanding-assets-report-assets-with-incidents" target="_blank">Understanding the Assets Report: Assets with Incidents</a>.</p><h1>NSS Feeds</h1><p>You can add the following fields for the Microsoft Copilot Readiness Assessment when configuring SaaS Security NSS or Cloud NSS Feed Output Format. These fields apply to collaboration, email, and file applications:</p><ul><li><code>%s{labelname}</code></li><li><code>%s{accessibility_flags}</code></li><li><code>%s{copilot_accessible}</code></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-saas-security-logs" target="_blank" data-entity-type="node" data-entity-uuid="44c4159b-a8e0-4f04-8946-afa4c807a74b" data-entity-substitution="canonical">NSS Feed Output Format: SaaS Security Logs</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/MS_copilot_readiness_dashboard_new.png" alt="The Microsoft Copilot Readiness Assessment Dashboard allows you to view your organization's readiness to handle any exposure of sensitive assets." title="Microsoft Copilot Readiness Assessment Dashboard"><a class="ck-anchor" id="ms_copilot_readiness_dashboard_rn" target="_blank"></a></p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/legacy-zia/policies/endpoint-data-loss-prevention/endpoint-data-scan/sensitive-information/understanding-exact-data-match/Accessilibity_Flags_xc_rn.png" alt="Set Accessibility Flags and Label filters to evaluate the Microsoft Copilot Readiness for your organization SaaS Security Insights Logs " title="Accessibility Flags and Label Filters in SaaS Security Insights Logs "><a class="ck-anchor" id="saas_sec_insights_logs_rn" target="_blank"></a></p></div> Feature Available Fri, 20 Mar 2026 07:00:00 GMT feature 1533702 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-20&id=1535156 <div class="sub"><p>You can update and retrieve information about the DLP Advanced Settings using the following endpoints:</p><ul><li data-list-item-id="e71e78f5067e0209649e6dc32e57b2eb7"><code>GET /webDlpGlobalOptions</code></li><li data-list-item-id="ee2c965c2164691ceeb09c7c49bcbc15a"><code>PUT /webDlpGlobalOptions</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 20 Mar 2026 07:00:00 GMT feature 1535156 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-20&id=1535213 <div class="sub"><p>You can create, update, and delete HTTP header profiles, and retrieve a list of all HTTP header profiles using the following endpoints:</p><ul><li data-list-item-id="e1ec87712caa6fe58ca5f31b12f93e1ed"><code>GET /httpHeaderProfile</code></li><li data-list-item-id="e7ccbdbfd43978f4b2a867b711b07c3c6"><code>POST /httpHeaderProfile</code></li><li data-list-item-id="ee91ae0a693351e24cbcb48f49f92f9ca"><code>PUT /httpHeaderProfile/{id}</code></li><li data-list-item-id="e47c719a45d908109a6fa5b180147b23f"><code>DELETE /httpHeaderProfile/{id}</code></li></ul><p>You can create, update, and delete HTTP header insertion profiles, and retrieve a list of all HTTP header insertion profiles using the following endpoints:</p><ul><li data-list-item-id="e0217941db9f90052c3134a49737ffffe"><code>GET /httpHeaderActionProfile</code></li><li data-list-item-id="e9a7fe5a7be4b5005ed991725bce53695"><code>POST /httpHeaderActionProfile</code></li><li data-list-item-id="e7e5849887aa52c4b0a743be95a4ec40b"><code>PUT /httpHeaderActionProfile/{id}</code></li><li data-list-item-id="e5fcd88c74eed1ec924fd4ad58dd9c881"><code>DELETE /httpHeaderActionProfile/{id}</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 20 Mar 2026 07:00:00 GMT feature 1535213 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-20&id=1538435 <p>You can create, update, and delete root certificates and retrieve information about the root certificates for third-party proxy-chaining services or isolation profiles using the following endpoints:</p><ul><li data-list-item-id="e8c70921b078b403931629c9b9bba0a73"><code>GET /rootCertificates</code></li><li data-list-item-id="e68b536dd807700cb28628b9a21e89f05"><code>POST /rootCertificates</code></li><li data-list-item-id="e1c3ac59404c61cf328b7bd4e42462562"><code>GET /rootCertificates/{rootCertId}</code></li><li data-list-item-id="ed3267b81ec4cefcc5be1f233c56c0fdc"><code>PUT /rootCertificates/{rootCertId}</code></li><li data-list-item-id="e3fa0c73cc2014c2ef159731786b627ef"><code>DELETE /rootCertificates/{rootCertId}</code></li></ul><p>You can delete an intermediate Certificate Authority (CA) certificate, retrieve a list of all intermediate CA certificates for SSL Inspection, and download an intermediate CA certificate using the following endpoints:</p><ul><li data-list-item-id="e10c7015a3b71a911810001d7996f7263"><code>GET /sslCertificates</code></li><li data-list-item-id="e3c9be6d1a0847ad2b4a0af12f0e50d5b"><code>GET /sslCertificates/certDetail/{certId}</code></li><li data-list-item-id="eac2aaf8858a7949fd57f30f32cf0f3e9"><code>DELETE /sslCertificates/{certId}</code></li><li data-list-item-id="e53232c8399ba50b50d32d71199682e2b"><code>GET /sslCertificates/download/{certId}</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p> Feature Available Fri, 20 Mar 2026 07:00:00 GMT feature 1538435 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-18&id=1533635 <div class="sub"><p>Custom IPS is supported on Zscaler's public cloud, allowing you to create and deploy custom IPS signature rules without requiring any additional infrastructure (previously required a Private Service Edge deployment). You can inspect traffic transiting the Zscaler cloud against your custom signatures, irrespective of whether it is forwarded to a Public, Private, or Virtual Service Edge.</p><p class="note">To enable Custom IPS with your Advanced Firewall subscription, contact your Zscaler Account team.</p><p>With this upgrade, the following enhancements are also made to Custom IPS:</p><ul><li data-list-item-id="e93b8507b46fcb43b2b5f8a5fe93f377b">Applicable to decrypted web traffic (decrypted via SSL Inspection) in addition to non-web traffic.</li><li data-list-item-id="e4c98708a41742fc19d6774a3ce813412">Extended support for HTTP protocol-aware signatures, so signature rules can include HTTP-specific options.</li><li data-list-item-id="ec691f380079de029aafd99ce1d12ec74"><p>Signature rule validation occurs in two stages before deployment: static validation (currently supported) that checks rules for syntax errors, duplication, and based on other predefined conditions; dynamic validation (newly added) that runs signatures against designated packet captures to ensure efficient resource usage and optimal performance. The signature is enabled after both validations are completed. These transitions are indicated by new statuses.</p><p class="triangle"><a href="#custom-ips-signature-rules-new-actions">View the newly added actions to initiate dynamic validation of signature rules.</a></p></li><li data-list-item-id="ec25af4c3941104db650cf3977fc41f2b">Logs showing custom signature matches for better visibility and easier troubleshooting.</li><li data-list-item-id="ea78428666780ab41ba292b08c9d066db">Increased the custom signature rule limit to 1,000 (previously 500).</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/about-custom-ips-signature-rules" target="_blank">About Custom IPS Signature Rules</a>, <a href="https://help.zscaler.com/zia/configuring-custom-ips-signature-rules" target="_blank">Configuring Custom IPS Signature Rules</a>, and <a href="https://help.zscaler.com/zia/specifications-limitations-custom-ips-signature-rules" target="_blank">Specifications & Limitations for Custom IPS Signature Rules</a>.</p></div><div class="subc"><ul><li data-list-item-id="e07eca9c55947931cc903415591fe8b47"><p><a class="ck-anchor" id="custom-ips-signature-rules-new-actions" target="_blank"></a>In the Add Signature Rule (and Edit Signature Rule) window, a Save & Promote button is added to trigger dynamic validation of the rule.</p><p><a class="image-icon" href="#custom-signature-rule-save-promote">Save image.</a></p><p>The Enable Signature Rule toggle button is not accessible until the rule moves to the Enable Ready state with the successful completion of dynamic validation. There is no change to the existing Save option, which continues to save the rule after successful static validation.</p></li><li data-list-item-id="ec1ed78bf7dbfb22496c4f62bf36a1018"><p>On the Custom Signature Rules page, a Promote All button is added to initiate dynamic validation of all rules at once.</p><p><a class="image-icon" href="#custom-signature-rule-promote-all">See image.</a></p></li></ul></div><div class="subc"><p><a class="ck-anchor" id="custom-signature-rule-save-promote" target="_blank"></a><img src="/downloads/zia/release-notes/release-upgrade-summary-2025/custom-signature-rules-save-promote-button.png" data-entity-uuid="0" data-entity-type="image" alt="Adding a custom IPS signature rule and promoting it for dynamic validation" title="Custom IPS Signature Rule - Save and Promote"></p></div><div class="subc"><p><a class="ck-anchor" id="custom-signature-rule-promote-all" target="_blank"></a><img src="/downloads/zia/release-notes/release-upgrade-summary-2025/custom-signature-rules-promote-all-button.png" data-entity-uuid="0" data-entity-type="image" alt="Promoting all custom IPS signature rules for dynamic validation" title="Custom IPS Signature Rule - Promote All"></p></div> Feature in Limited Availability Wed, 18 Mar 2026 07:00:00 GMT feature 1533635 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-18&id=1538540 <p>Workday tenants now support RaaS-based API access which enables secure, programmatic retrieval of data and management through web services. Existing Workday tenants need to be reauthenticated by editing the tenant and revalidating.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a> and <a href="https://help.zscaler.com/zia/about-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="7ed23209-15c6-4343-9443-876296cca3cb" data-entity-substitution="canonical">About SaaS Application Tenants</a>.</p> Feature Available Wed, 18 Mar 2026 07:00:00 GMT feature 1538540 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-18&id=1468211 <div class="sub"><p>The SaaS Security Data at Rest Scanning policy supports a new option to quarantine sensitive content in Microsoft Teams. You can specify a tombstone message that end users see when messages or files in Microsoft Teams are quarantined.</p><p><a class="image-icon" href="#ZIA-Webex-CASB-Quarantine">See image.</a></p><p>After a message or file has been quarantined in Microsoft Teams, admins can use the SaaS Assets Report to review and remove the quarantined content.</p><p><a class="image-icon" href="#ZIA-Webex-SaaS-Assets-Report-Quarantine">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="5735781d-0020-47a8-9a1a-bcf4b475636d" data-entity-substitution="canonical">Configuring the SaaS Security API DLP Policy</a>, <a href="https://help.zscaler.com/zia/about-quarantine-tombstone-file-templates" target="_blank" data-entity-type="node" data-entity-uuid="beed77ab-3895-45e8-9b53-dce3480e275c" data-entity-substitution="canonical">About Quarantine Tombstone File Templates</a>, and <a href="https://help.zscaler.com/zia/understanding-assets-report-assets-with-incidents" target="_blank" data-entity-type="node" data-entity-uuid="ba2e0644-2d59-4da7-a41b-6b093c87087e" data-entity-substitution="canonical">SaaS Assets Report: Assets with Incidents</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="ZIA-Webex-CASB-Quarantine" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/about-saas-security-api-dlp/ZIA-Webex-CASB-Quarantine-RN.png" data-entity-uuid="0" data-entity-type="image" alt="Webex Teams Quarantine feature in SaaS Security DLP Rules" title="Webex Teams Quarantine feature in SaaS Security DLP Rules"></p></div><div class="subc"><p><a class="ck-anchor" id="ZIA-Webex-SaaS-Assets-Report-Quarantine" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/data-loss-prevention/dlp-index-tool/configuring-index-tool-vmware/ZIA-Webex-SaaS-Assets-Report-Quarantine-RN02.png" data-entity-uuid="0" data-entity-type="image" alt="SaaS Asset report removal of quarantine item" title="SaaS Asset report removal of quarantine item"></p></div> Feature Available Wed, 18 Mar 2026 07:00:00 GMT feature 1468211 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-17&id=1532184 <div class="sub"><p>The generative AI prompt configuration is extended to the Grammarly application, and it supports WebSocket decompression. As part of this change, the Grammarly option is added to the Policy > URL & Cloud App Control > Advanced Policy Settings page.</p><p><a class="image-icon" href="#gen-ai-prompt-grammarly">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-advanced-policy-settings" target="_blank" data-entity-type="node" data-entity-uuid="b5291e3f-4520-4833-a3ff-8fbb01291de0" data-entity-substitution="canonical">Configuring Advanced Policy Settings</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="gen-ai-prompt-grammarly" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-Advanced-Settings-Page-with-Grammarly-RN.png" alt="ZIA Advanced Policy Settings Page with Grammarly" title="ZIA Advanced Policy Settings Page with Grammarly"></p></div><div class="subc"><h1>Added Grammarly Capability to URL & Cloud App Control Policy Settings Endpoint</h1><p>A new Boolean field, <code>enableGrammarlyPrompt</code>, is available for the <code>AdvancedUrlFilteringCloudAppOptions</code> model in the <code>/advancedUrlFilterAndCloudAppSettings</code> APIs. This field allows users to use generative AI prompts with Grammarly.</p><p>To learn more, go to <code>AdvancedUrlFilteringCloudAppOptions</code> from <a href="https://help.zscaler.com/zia/url-cloud-app-control-policy-settings" target="_blank">URL & Cloud App Control Policy Settings</a>.</p></div> Feature Available Tue, 17 Mar 2026 07:00:00 GMT feature 1532184 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-17&id=1534291 <div class="sub"><p>Zscaler now supports the Quarantine action when configuring Outbound Email DLP policies for Microsoft Exchange. When Quarantine is selected, emails that match policy criteria are quarantined directly in Microsoft Exchange. To use the Quarantine feature, go to Policy > Email DLP and then select Quarantine under Action in the applicable policy rule.</p><p><a class="image-icon" href="#enable-quarantine-1534921">See image.</a></p><p>Email Data Loss Prevention (DLP) incidents that Microsoft has quarantined are displayed in Workflow Automation. In Workflow Automation, you can release or delete the email to one or more of its recipients using one of the following methods:</p><ul><li><p>On the Incident Details page, an admin can select the Release Email Quarantine action from the Actions drop-down menu and select the recipients to release the email to or delete the email.</p><p><a class="image-icon" href="#WA-quarantine-incidents-1534291">See image.</a></p></li><li>When an end user responds to a user notification or escalation notification that is associated with a quarantined email incident, the notifications are enhanced to include a new Release Email to Recipients section that includes release quarantine options.</li></ul><p class="note">To enable this feature for Workflow Automation, contact Zscaler Support.</p><p>To learn more, see:</p><ul><li><a href="https://help.zscaler.com/zia/about-outbound-email-policy" target="_blank" data-entity-type="node" data-entity-uuid="430e602c-032d-4d76-a9f5-4bc849c20891" data-entity-substitution="canonical">About Outbound Email Policy</a></li><li><a href="https://help.zscaler.com/zia/configuring-outbound-email-policy-rules" target="_blank" data-entity-type="node" data-entity-uuid="76ec614d-5582-425f-9b77-2b84a123edd6" data-entity-substitution="canonical">Configuring Outbound Email Policy Rules</a></li><li><a href="https://help.zscaler.com/zia/step-step-configuration-guide-zscaler-outbound-email-dlp" target="_blank" data-entity-type="node" data-entity-uuid="eaf3330b-49f7-4972-83ff-f1c590778c86" data-entity-substitution="canonical">Step-by-Step Configuration Guide for Zscaler Outbound Email DLP</a></li><li><a href="https://help.zscaler.com/zia/configuring-microsoft-exchange-zscaler-outbound-email-dlp" target="_blank" data-entity-type="node" data-entity-uuid="608c4200-e927-4ec5-ae92-65d555b5241e" data-entity-substitution="canonical">Configuring Microsoft Exchange for Zscaler Outbound Email DLP</a></li><li><a href="https://help.zscaler.com/zia/adding-email-tenants" target="_blank" data-entity-type="node" data-entity-uuid="87b77398-9d9f-4afc-aaa6-908388c1a1b5" data-entity-substitution="canonical">Adding Email Tenants</a></li><li><a href="https://help.zscaler.com/workflow-automation/managing-incidents" target="_blank" data-entity-type="node" data-entity-uuid="0c869339-80cf-4874-b29b-ee801a413f75" data-entity-substitution="canonical">Managing Incidents</a></li><li><a href="https://help.zscaler.com/workflow-automation/viewing-managing-incident-details" target="_blank" data-entity-type="node" data-entity-uuid="712fad3b-06b4-4353-9903-e39296c3fcd8" data-entity-substitution="canonical">Viewing & Managing Incident Details</a></li></ul></div><div class="subc"><a class="ck-anchor" id="enable-quarantine-1534921" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/enable-quarantine_0.png" alt="Enable Quarantine in Outbound Email DLP Policy" title="Enable Quarantine in Outbound Email DLP Policy"></div><div class="subc"><a class="ck-anchor" id="WA-quarantine-incidents-1534291" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/WA-Incident-Details-Page-Release-Email-Quarantine.png" alt="Select Release Email Quarantine in Workflow Automation" title="Select Release Email Quarantine in Workflow Automation"><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/WA-Release-Email-Window.png" alt="Select emails to be released on the Incidents page in Workflow Automation" title="Select emails to be released on the Incidents page in Workflow Automation"></div> Feature in Limited Availability Tue, 17 Mar 2026 07:00:00 GMT feature 1534291 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-16&id=1538861 <div class="sub"><p>Advanced SSPM supports a new platform, Lucidchart. You can onboard a Lucidchart tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank">Connecting Your Platforms to Advanced SSPM</a>.</p><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/Lucid_Dropdown.png" alt="Connect Drop-Down Menu showing Lucid option" title="Connect Drop-Down Menu"></div></div> Feature Available Mon, 16 Mar 2026 07:00:00 GMT feature 1538861 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-16&id=1541839 <div class="sub"><p>The File Type Control and Data Loss Prevention (DLP) policies now support RPM files in the Archive category.</p><ul class="triangle"><li data-list-item-id="e9cabf2f7f9edb54e54621188105c703c"><a href="#rpm-files-1533958">File Type Control</a></li><li data-list-item-id="eb3c6fe039d76da6cbd02b1d607a5386d"><a href="#rpm-without-content-matching-1533958">DLP - Rule without Content Matching</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/about-file-type-control" target="_blank" data-entity-type="node" data-entity-uuid="5a16b52b-de4b-4986-abea-8be790f9c257" data-entity-substitution="canonical">About File Type Control</a> and <a href="https://help.zscaler.com/zia/about-data-loss-prevention" target="_blank" data-entity-type="node" data-entity-uuid="e9458898-bb84-4c4e-a843-1fd0a2ab042e" data-entity-substitution="canonical">About Data Loss Prevention</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="rpm-files-1533958" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/rpm-ftc-file-types.png" alt="Select RPM files in the Add File Type Control Rule window" title="File Type Control Rule - RPM"></p></div><div class="subc"><p><a class="ck-anchor" id="rpm-without-content-matching-1533958" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/rpm-dlp-no-matching.png" alt="Select RPM files in the Archive category when configuring DLP policies without content matching" title="DLP Rule without Content Matching - RPM"></p></div> Feature Available Mon, 16 Mar 2026 07:00:00 GMT feature 1541839 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-16&id=1538859 <div class="sub"><p>Advanced SSPM supports Zendesk as an API-based platform. You can onboard a Zendesk tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank">Connecting Your Platforms to Advanced SSPM</a>.</p></div><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/Zendesk_Dropdown.png" alt="Connect Drop-Down Menu showing Zendesk option" title="Connect Drop-Down Menu"></div> Feature Available Mon, 16 Mar 2026 07:00:00 GMT feature 1538859 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-13&id=1535269 <div class="sub"><p>You can configure Advanced SaaS Security Posture Management (SSPM) for Oracle Financials Cloud tenants. Select the SSPM Scan checkbox when onboarding a tenant to enable the Advanced SSPM scan capability for the specific tenant.</p><p><a class="image-icon" href="#Oracle-sspm-onboarding">See image.</a></p><p class="note">The SSPM Scan checkbox is enabled only when you have Advanced SSPM enabled for your tenant.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/what-advanced-posture-management" target="_blank" data-entity-type="node" data-entity-uuid="048ba914-06ae-4c39-a5cf-fe6f7b8243c0" data-entity-substitution="canonical">What Is Advanced Posture Management?</a> and <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank">Adding SaaS Application Tenants</a>.</p></div><div class="subc"><a class="ck-anchor" id="Oracle-sspm-onboarding" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/saas-security/posture-management/posture-management-advanced/about-control-panel/Adavanced%20SSPM-Workday2.png" alt="Oracle Onboarding Section showing the SSPM Scan Checkbox" title="Oracle SaaS Application Onboarding"></div> Feature Available Fri, 13 Mar 2026 07:00:00 GMT feature 1535269 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-13&id=1531109 <div class="sub"><p>AI or machine language classification is extended to support around 200 new document types across 10 common document categories.</p><p>As part of this extended support, Insights Logs and the Nanolog Streaming Service (NSS) are enhanced to provide enriched auto-classification of documents that are uploaded or downloaded during transactions.</p><p>The following enhancements are available in the ZIA Admin Portal:</p><h1>Updates to Insights Logs</h1><p>A new filter and column, Subdocument Type, is added to the Endpoint DLP Insights Logs and SaaS Security Insights Logs pages for email applications (e.g., Gmail) to capture, categorize, and log document subtypes related to administrative documents, invoices, expense reports, and more.</p><p><a class="image-icon" href="#insights_logs">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/endpoint-dlp-insights-logs-filters" target="_blank">Endpoint DLP Insights Logs: Filters</a>, <a href="https://help.zscaler.com/zia/endpoint-dlp-insights-logs-columns" target="_blank">Endpoint DLP Insights Logs: Columns</a>, and <a href="https://help.zscaler.com/zia/about-saas-security-insights-logs" target="_blank">About SaaS Security Insights Logs</a>.</p><h1>Updates to NSS Feeds</h1><p>The field <code>%s{doc_subtype}</code> can be added to the Feed Output Format when configuring an NSS or Cloud NSS feed for Endpoint DLP logs. Additionally, the field <code>%s{upload_doc_subtype}</code> is available for SaaS Security feeds configured for email applications (e.g., Gmail). Both fields log the subtype (e.g., Financial Statements: Income Statements (Profit and Loss Statements)) of uploaded or downloaded documents.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-endpoint-dlp-logs" target="_blank">NSS Feed Output Format: Endpoint DLP Logs</a> ​​​​​​and <a href="https://help.zscaler.com/zia/nss-feed-output-format-saas-security-logs" target="_blank">NSS Feed Output Format: SaaS Security Logs</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/authentication-administration/api-security/about-sandbox-api-token/Subdocument_type_Saas_Insights.png" alt="Subdocument Type Filter is available in Endpoint DLP Insights Logs Page and SaaS Security Insights Logs Page." title="Subdocument Type filter in Endpoint DLP Insights Logs and SaaS Security Insights Logs"><a class="ck-anchor" id="insights_logs" target="_blank"></a></p></div> Feature Available Fri, 13 Mar 2026 07:00:00 GMT feature 1531109 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-13&id=1538493 <div class="sub"><p>Workload groups allow users to search for and select tag keys discovered by the Workload Discovery Service. You must configure filters such as Source (cloud service provider), Account, Subscription, etc., to retrieve the tag keys associated with the filters. You can also manually enter custom tag keys and values for the workload groups.</p><p><a class="image-icon" href="#RN-tag-keys-search-tab-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-workload-groups" target="_blank" data-entity-type="node" data-entity-uuid="af0ff728-72c4-4629-bbfd-bb9164740eba" data-entity-substitution="canonical">Configuring Workload Groups</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-RN-configuring-workload-groups.png" data-entity-uuid="0" data-entity-type="image" alt="Searching for and selecting tag keys in the Search Keys tab for the workload group" title="Search Keys tab for adding tag keys "></p><p><a class="ck-anchor" id="RN-tag-keys-search-tab-image" target="_blank"></a></p></div> Feature Available Fri, 13 Mar 2026 07:00:00 GMT feature 1538493 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-13&id=1535268 <p>Advanced SaaS Security Posture Management (SSPM) expands its coverage for Microsoft Copilot with 15 new SSPM controls, providing deeper visibility and stronger security posture assessment.</p> Feature Available Fri, 13 Mar 2026 07:00:00 GMT feature 1535268 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-13&id=1538601 <div class="sub"><p>The Nanolog Streaming Service (NSS) supports streaming encrypted and load-balanced NSS feeds over an HTTP connection between the NSS and your SIEM. The HTTP NSS feed uses the HTTP API to stream logs from the Zscaler nanolog cluster to your SIEM. You can configure up to 8 HTTP NSS feeds for each log type in the Zscaler Admin Console.</p><p>Also, a new action to copy your NSS feeds is added.</p><p><a class="image-icon" href="#rn-http-nss-feed">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-nanolog-streaming-service" target="_blank">Understanding Nanolog Streaming Service (NSS)</a>, <a href="https://help.zscaler.com/zia/about-nss-feeds" target="_blank" data-entity-type="node" data-entity-uuid="ac458c06-4673-4826-9160-f70787ba5962" data-entity-substitution="canonical">About NSS Feeds</a>, and <a href="https://help.zscaler.com/zia/adding-http-nss-feeds" target="_blank">Adding HTTP NSS Feeds</a>.</p></div><div class="subc"><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/zia-rn-http-nss-feeds.png" alt="The Add HTTP NSS Feed button in the NSS Feeds tab to stream NSS feed over HTTP connection" title="Add HTTP NSS Feed button in the NSS Feeds tab"><p><a class="ck-anchor" id="rn-http-nss-feed" target="_blank"></a></p></div> Feature Available Fri, 13 Mar 2026 07:00:00 GMT feature 1538601 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-13&id=1534095 <div class="sub"><p>Web Insights are enhanced to allow users to view the latency caused by bandwidth control on transactions in the ZIA Admin Portal.</p><h1>Web Insights Logs</h1><p>The following new columns and filters are available in the Web Insights Logs:</p><ul><li>Request Latency Due to Bandwidth Control (ms)</li><li>Response Latency Due to Bandwidth Control (ms)</li><li>Total Latency Due to Bandwidth Control (ms)</li></ul><p><a class="image-icon" href="#latency_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/web-insights-logs-columns" target="_blank">Web Insights Logs: Columns</a> and <a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs: Filters</a>.</p><h1>NSS Feeds</h1><p>The fields <code>%d{txn_delay_req}</code> and <code>%d{txn_delay_resp}</code> can be added to the Feed Output Format when configuring an NSS or Cloud NSS feed for web logs. These fields display the bandwidth transaction request delay and the bandwidth transaction response delay in milliseconds, respectively.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-web-logs" target="_blank">NSS Feed Output Format: Web Logs</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/bw_latency_rn_updated.png" alt="Request, Response, and Total Latency Due to Bandwidth Control Filters are available in Web Insights Logs." title="Request, Response, and Total Latency Due to Bandwidth Control"><a class="ck-anchor" id="latency_rn" target="_blank"></a></p></div> Feature Available Fri, 13 Mar 2026 07:00:00 GMT feature 1534095 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1538847 <div class="sub"><p>Zscaler's Application Investigation is a solution that provides comprehensive visibility and automated risk management for an organization's application ecosystem by delivering a clear view of all software in use, including unauthorized AI tools and unapproved browsers. By automatically identifying vulnerable or suspicious applications, Application Investigation enables administrators to prioritize security efforts and focus on the highest-threat categories and vulnerabilities across the organization.</p><p>The Application Investigation page (Analytics > Endpoint Data Scan > Application Investigation) provides insights into executable files and applications stored on endpoints, gathering data on installed software, running processes, and libraries. This is crucial not only for compliance, but also for monitoring, auditing, and identifying vulnerabilities or unauthorized software.</p><p>As part of this change, the Inventory > Applications tab is now moved to Application Investigation > Inventory tab.</p><p><a class="image-icon" href="#app_investigation_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/legacy-zia/about-application-investigation-overview" target="_blank">About the Application Investigation Overview</a>, <a href="https://help.zscaler.com/legacy-zia/about-end-point-data-scan-application-investigation-inventory" target="_blank">About the Application Investigation Inventory</a>, <a href="https://help.zscaler.com/legacy-zia/analyzing-application-details" target="_blank">Analyzing Applications Details</a>, and <a href="https://help.zscaler.com/legacy-zia/about-end-point-data-scan-application-investigation-inventory" target="_blank">Accessing and Navigating the Endpoint Data Scan Report</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/legacy-zia/policies/endpoint-data-loss-prevention/endpoint-data-scan/sensitive-information/about-endpoint-data-scan-sensitive-information-share-files-externally/application_investigation_rn.png" alt="The Application Investigation Overview page summarizes detected apps, certificate status, and threat types." title="Application Investigation Page"><a class="ck-anchor" id="app_investigation_rn" target="_blank"></a></p></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1538847 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1529176 <p> </p><div class="sub"><p>The Zscaler DLP Operational page (Analytics > Endpoint Data Scan > DLP Operational) provides insights into the endpoint's status, thereby ensuring that the system functions properly and as designed to avoid sensitive data leakage.</p><p><a class="image-icon" href="#DLP_operational_img">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-dlp-operational-dashboard" target="_blank">About DLP Operational Dashboard</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/legacy-zia/policies/endpoint-data-loss-prevention/endpoint-data-scan/about-endpoint-data-scan/Operational_DLP_latest_updated_RN.png" alt="DLP Operational shows the overall health of the endpoints" title="DLP Operational Page"><a class="ck-anchor" id="DLP_operational_img" target="_blank"></a></p></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1529176 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1538490 <p>A new query parameter, <code>ruleLabelId</code>, is available for the <code>GET /firewallFilteringRules</code> and <code>GET /firewallFilteringRules/count</code> endpoints. The <code>ruleLabelId</code> query parameter allows you to filter Firewall Filtering rules based on the rule label ID. To learn more, go to <code>GET /firewallFilteringRules</code> and <code>GET /firewallFilteringRules/count</code> from <a href="https://help.zscaler.com/zia/firewall-policies" target="_blank">Firewall Policies</a>.</p><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1538490 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1538491 <div class="sub"><p>On the<strong> </strong>Internet & SaaS > Role Management page, in the Policy & Components > Access Control tab, the URL Filtering and Cloud App Control policy permissions are separated to provide admins more granular control over those features.</p><p><a class="image-icon" href="#RN-access-control-url-cloud-app">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-admin-roles" target="_blank" data-entity-type="node" data-entity-uuid="0f416847-6871-44db-a7ec-74e1b925b712" data-entity-substitution="canonical">Adding Admin Roles</a>.</p></div><div class="subc"><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-RN-admin-roles-pc-access-control-url-filtering-cloud-app.png" alt="The Policy & Components > Access Control tab displaying the URL Filtering Policy and Cloud App Control fields" title="The Access Control tab in the Policy & Components section"><p><a class="ck-anchor" id="RN-access-control-url-cloud-app" target="_blank"></a></p></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1538491 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1538833 <div class="sub"><p>Zscaler has introduced Exact Data Matching (EDM) for Endpoint Data Loss Prevention (DLP) which provides protection for structured sensitive data. This feature utilizes a unique hybrid architecture where the endpoint performs local prefiltering to identify candidate files for cloud inspection, ensuring maximum accuracy without compromising device performance or bandwidth.</p><p>You can access Exact Data Matching (EDM) page from Analytics > Endpoint Data Scan > Sensitive Information.</p><p class="note">To enable this feature, contact your Zscaler Account team.</p><p><a class="image-icon" href="#edm_page_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/legacy-zia/understanding-exact-data-match" target="_blank">Understanding Exact Data Matching (EDM)</a> and <a href="https://help.zscaler.com/legacy-zia/about-endpoint-data-scan-sensitive-information-exact-data-match" target="_blank">About Endpoint Data Scan Sensitive Information: Exact Data Matching</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/EDM_main_page_rn.png" alt="The Exact Data Matching (EDM) page displays prefiltered file details and EDM Optimizer access settings." title="Exact Data Matching (EDM) Page"><a class="ck-anchor" id="edm_page_rn" target="_blank"></a></p></div> Feature in Limited Availability Fri, 06 Mar 2026 08:00:00 GMT feature 1538833 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1538625 <p>Advanced SaaS Security Posture Management (SSPM) expands its coverage for Salesforce with three new SSPM controls, providing deeper visibility and stronger security posture assessment.</p> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1538625 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1538854 <div class="sub"><p>Administrators can filter data on the Endpoint Data Scan page (Analytics > Endpoint Data Scan > Endpoint Data Scan) by a specific user group.</p><p><a class="image-icon" href="#user_group_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/legacy-zia/about-endpoint-data-scan" target="_blank">About Endpoint Data Scan</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/legacy-zia/policies/endpoint-data-loss-prevention/endpoint-data-scan/sensitive-information/about-endpoint-data-scan-sensitive-information-share-files-externally/User_group_rn.png" alt="You can filter data by User Group on the Endpoint Data Scan page." title="Endpoint Data Scan Page"><a class="ck-anchor" id="user_group_rn" target="_blank"></a></p></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1538854 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1538835 <div class="sub"><p>Share Files Externally provides a capability for Endpoint DLP that allows authorized users to securely share sensitive files with external partners by encrypting the data into a secure HTML format, ensuring that only verified recipients can access the content.</p><p>You can access the Share Files Externally page from Analytics > Endpoint Data Scan > Sensitive Information.</p><p><a class="image-icon" href="#share_files_externally_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/legacy-zia/about-endpoint-data-scan-sensitive-information-share-files-externally" target="_blank">About Endpoint Data Scan Sensitive Information: Share Files Externally</a>, <a href="https://help.zscaler.com/legacy-zia/configuring-share-file-externally-settings" target="_blank">Configuring Share File Externally Settings</a>, and <a href="https://help.zscaler.com/legacy-zia/understanding-sharing-files-externally" target="_blank">Understanding Share Files Externally</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/legacy-zia/policies/endpoint-data-loss-prevention/endpoint-data-scan/sensitive-information/about-endpoint-data-scan-sensitive-information-exact-data-match/share_files_externally_rn.png" alt="The Share Files Externally page displays shared file details and domain and user configuration settings." title="Share Files Externally Page"><a class="ck-anchor" id="share_files_externally_rn" target="_blank"></a></p></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1538835 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1528476 <div class="sub"><p>The labels SSL Inspection and SSL policy are renamed to SSL/TLS Inspection and SSL/TLS policy.</p><p><a class="image-icon" href="#image">See image.</a></p></div><p>Refer to the following table for a list of updated labels:</p><table class="table"><thead><tr><th>Old UI Labels</th><th>New UI Labels</th></tr></thead><tbody><tr><td>SSL Inspection (Policy > SSL Inspection)</td><td>SSL/TLS Inspection (Policy > SSL/TLS Inspection)</td></tr><tr><td>SSL Inspection Policy (Policy > SSL Inspection > SSL Inspection Policy)</td><td>SSL/TLS Inspection Policy (Policy > SSL/TLS Inspection > SSL/TLS Inspection Policy)</td></tr><tr><td>Configure SSL Inspection Policy (Policy > SSL Inspection > Configure SSL Inspection Policy)</td><td>Configure SSL/TLS Inspection Policy (Policy > SSL/TLS Inspection > Configure SSL/TLS Inspection Policy)</td></tr><tr><td>Add SSL Inspection Rule (Policy > SSL Inspection > Add SSL Inspection Rule)</td><td>Add SSL/TLS Inspection Rule (Policy > SSL/TLS Inspection > Add SSL/TLS Inspection Rule)</td></tr><tr><td>Edit SSL Inspection Rule (Policy > SSL Inspection > Edit SSL Inspection Rule)</td><td>Edit SSL/TLS Inspection Rule (Policy > SSL/TLS Inspection > Edit SSL/TLS Inspection Rule)</td></tr></tbody></table><div class="subc"><a class="ck-anchor" id="image" target="_blank"></a><img src="https://help.zscaler.com/downloads/zscm/customers/editing-tenants/Policy%20Page.png" alt="The left-side navigation of the ZIA Admin Portal with Policy selected" title="Policy Page"></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1528476 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1538740 <div class="sub"><p>When you create a custom Zscaler connector for a Microsoft application, you have the option to choose whether you want to provide a client secret or a private key in the Zscaler Admin Console so that the Zscaler service can access the application. SharePoint, Copilot, and Microsoft 365 require a private key for onboarding, but all other supported Microsoft applications support both options.</p><p><a class="image-icon" href="#onboard_opt">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a> and <a href="https://help.zscaler.com/zia/authorizing-custom-zscaler-connector-microsoft-applications" target="_blank" data-entity-type="node" data-entity-uuid="4b40f052-a254-4186-af22-88f498a8b510" data-entity-substitution="canonical">Authorizing a Custom Zscaler Connector for Microsoft Applications</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="onboard_opt" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/Authorize_MS_Client%20Secret%20Option.png" alt="Authorize the SaaS Application step in ZIA showing the Client Secret option selected and displaying the Client ID, Client Secret, and Tenant ID fields" title="Authorize the SaaS Application step in ZIA showing the Client Secret option selected"><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/Authorize_MS_Private%20Key%20Option.png" alt="Authorize the SaaS Application step in ZIA showing the Private Key option selected and displaying the Client ID, Tenant ID, and Upload PEM File fields" title="Authorize the SaaS Application step in ZIA showing the Private Key option selected"></p></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1538740 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1535415 <div class="sub"><p>The Zscaler service supports using Classless Inter-Domain Routing (CIDR) ranges and regular expressions for advanced matching when creating or editing network shares for Endpoint Data Loss Prevention (DLP) resources. The following image shows a regular expression that matches all network servers that start with "srv" and the match is case insensitive:</p><p><a class="image-icon" href="#endpoint-dlp-printing-block-rule">See Image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-dlp-resources" target="_blank">Adding DLP Resources</a> and <a href="https://help.zscaler.com/zia/editing-dlp-resources" target="_blank">Editing DLP Resources</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="endpoint-dlp-printing-block-rule" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Endpoint-DLP-Resources-RegExSupport-RN.png" alt="The Server Name field for a network share DLP resource" title="Using a Regular Expression in the Server Name Field for a Network Share DLP Resource"></p></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1535415 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1535432 <div class="sub"><p>The Zscaler service supports specifying a network type (e.g., Trusted, Off-Trusted, VPN) for the Network Share, Printing, and Device Control channels when creating policy rules for Endpoint Data Loss Prevention (DLP).</p><div class="note"><ul><li>Endpoints must be running Zscaler Client Connector version 4.8.600 or later (Windows) or version 4.7.1 or later (macOS) for policy rules to enforce the network type.</li><li>To enable this feature, contact your Zscaler Account team.</li></ul></div><div class="sub"><p><a class="image-icon" href="#endpoint-dlp-rule-network-type-RN">See Image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-endpoint-dlp-policy-rules" target="_blank">Configuring Endpoint DLP Policy Rules</a> and <a href="https://help.zscaler.com/zscaler-client-connector/about-trusted-networks" target="_blank">About Trusted Networks</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="endpoint-dlp-rule-network-type-RN" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Endpoint-DLP-Rules-Network-Type-RN.png" alt="The Network Type Toggle for an Endpoint DLP Rule" title="Setting the Network Type for an Endpoint DLP rule"></p></div></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1535432 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-06&id=1534042 <div class="sub"><p>You can create, update, and delete recipient email profiles, retrieve a list of all recipient email profiles, and obtain the count of recipient email profiles for an organization using the following endpoints:</p><ul><li><code>GET /emailRecipientProfile</code></li><li><code>POST /emailRecipientProfile</code></li><li><code>GET /emailRecipientProfile/{profileId}</code></li><li><code>PUT /emailRecipientProfile/{profileId}</code></li><li><code>DELETE /emailRecipientProfile/{profileId}</code></li><li><code>GET /emailRecipientProfile/count</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1534042 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-03-02&id=1535157 <div class="sub"><p>You can create, update, and delete DNS application groups, and retrieve a list of all DNS application groups using the following endpoints:</p><ul><li data-list-item-id="e94d2b31fce551a530e57101ed1566b77"><code>GET /dnsApplicationGroups</code></li><li data-list-item-id="e256dc65133e3cf54d75c7530831be6c3"><code>POST /dnsApplicationGroups</code></li><li data-list-item-id="ecd25675f1bc84f4e1e377ddd0604ce45"><code>GET /dnsApplicationGroups/{groupId}</code></li><li data-list-item-id="ebb3d55ecbb80dd48a4b38473588bb2bf"><code>PUT /dnsApplicationGroups/{groupId}</code></li><li data-list-item-id="e9daeb6025ce12707a8be4efbe77e7052"><code>DELETE /dnsApplicationGroups/{groupId}</code></li><li data-list-item-id="e1f7f076c9f47637587514a7b60e0fecd"><code>GET /dnsApplicationGroups/lite</code></li></ul><p>To learn more about each endpoint, see the <a href="https://help.zscaler.com/zia/about-api" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/zia/api-rate-limit-summary" target="_blank" data-entity-type="node" data-entity-uuid="8bbe3c7b-e906-4cf8-838e-3238a4032780" data-entity-substitution="canonical">API Rate Limit Summary</a>.</p></div> Feature Available Mon, 02 Mar 2026 08:00:00 GMT feature 1535157 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-20&id=1533929 <div class="sub"><p>The SaaS application tenants GitHub, Jira, Okta, Confluence, Trello, Webex Teams, and Google Workspace now have the option to onboard for <span class="cf0">SaaS Security Posture Management (SSPM) scan</span> by choosing Read-only or Read/Write (full access) for the connector role. The Read/Write connector role is the default option.</p><p>This enhancement removes the friction caused by shared DLP and SSPM connectors that previously required elevated permissions for posture-only use cases. Administrators can onboard applications with minimal, least-privilege access for SSPM posture assessments and later upgrade to full permissions only if they choose to enable DLP content scanning or posture remediation. This provides a more secure, flexible, and customer-friendly onboarding experience.</p><p><a class="image-icon" href="#conrole">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank" data-entity-type="node" data-entity-uuid="05c668bb-35fc-43a4-98dd-ac2ff39dc6e8" data-entity-substitution="canonical">Adding SaaS Application Tenants</a> <span class="cf0">and </span><a href="https://help.zscaler.com/zia/permissions-onboarding-saas-apps-SSPM" target="_blank" data-entity-type="node" data-entity-uuid="27289599-bf34-47c5-ae32-4c479387fef7" data-entity-substitution="canonical"><span class="cf0">Permissions for Onboarding SaaS Apps for SSPM</span></a><span class="cf0">.</span></p></div><div class="subc"><p><a class="ck-anchor" id="conrole" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/about-saas-application-tenants/Read.ReadWrite%20Authorize.png" alt="Authorize the SaaS Application step showing the Connector Role with Read/Write selected by default" title="Authorize the SaaS Application step showing the Connector Role"></p></div> Feature Available Fri, 20 Feb 2026 08:00:00 GMT feature 1533929 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-16&id=1538589 <p>The following enhancements are available in Zscaler Endpoint Data Loss Prevention (DLP) for macOS:</p><div class="sub"><h1>Support for Endpoint DLP Block Action for Printing on macOS</h1><p>The Zscaler service supports the Block action for printing from macOS devices in Endpoint DLP rules with content inspection.</p><p><a class="image-icon" href="#endpoint-dlp-printing-block-rule">See Image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-endpoint-dlp-policy-rules" target="_blank">Configuring Endpoint DLP Policy Rules</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="endpoint-dlp-printing-block-rule" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-Endpoint-DLP-Rule-Printing-Block-macOS-RN.png" alt="The Block Action on an Endpoint DLP Printing Rule" title="Setting the Action to Block on an Endpoint DLP Printing Rule"></p></div><div class="sub"><h1>Endpoint DLP Support for Clipboard and Application File Access</h1><p class="note">To access this feature, contact your Zscaler Account team.</p><p>Endpoint DLP supports monitoring and blocking sensitive information when specific applications access files, as well as when content is pasted into those applications.</p><p>To get started, configure the relevant applications to prevent sensitive data loss on the DLP Resources page (Policies > Data Protection > Policy > Endpoint Controls > Endpoint DLP Resources):</p><p><a class="image-icon" href="#application-dlp-resources">See Image.</a></p><p>After applications are defined, you can create Endpoint DLP policy rules that:</p><ul><li>Protect file access: Use Application File Access as the channel to detect and block sensitive data exposed when applications read files.</li><li>Protect clipboard activity: Use Clipboard as the channel to detect and block sensitive data pasted into applications.</li></ul><p><a class="image-icon" href="#endpoint-dlprule-apps-clipboard">See Image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-dlp-resources" target="_blank">About DLP Resources</a>, <a href="https://help.zscaler.com/zia/adding-dlp-resources" target="_blank">Adding DLP Resources</a> and <a href="https://help.zscaler.com/zia/configuring-endpoint-dlp-policy-rules" target="_blank">Configuring Endpoint DLP Policy Rules</a>.</p><h1>Removable Storage Rule: Device Per User Pair</h1><p>Streamline management of the Device Control Removable Storage rules by defining multiple removable storage devices and mapping them to specific users or endpoints within a single rule. This rule also supports CSV file import for bulk operations.</p><p><a class="image-icon" href="#device_per_user_rn">See Image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/managing-removable-storage-rule" target="_blank">Managing a Removable Storage Rule</a>.</p><h1>Endpoint Data Scan: End User Report</h1><p>This feature introduces configurable reports to increase transparency for end users. These reports aim at providing users with best practices and show them where sensitive data is stored locally on their endpoints. This feature aims at making endpoint data scanning more efficient, transparent, and collaborative, improving how administrators and end users work together to manage sensitive data.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-end-user-report" target="_blank">Understanding End User Reports</a>, <a href="https://help.zscaler.com/zia/about-endpoint-data-scan" target="_blank">About Endpoint Data Scan</a>, and <a href="https://help.zscaler.com/zia/analyzing-endpoint-dlp-scan-user" target="_blank">Analyzing Endpoint DLP Scan for a User</a>.</p><h1>Endpoint DLP Configurations</h1><p>This feature introduces the following expanded configuration options across Endpoint Data Scan, Classification, and DLP inspection to improve performance, control, and flexibility:</p><ul><li>Endpoint Data Scan<ul><li>Granular controls for End User report visibility, scheduling, sensitive data exposure, and custom messages.</li><li>Ability to exclude specific file systems, folders, and entities.</li></ul></li><li>Classification Settings<ul><li>Configurable maximum file size and timeout strategies with Allow or Block fallback actions.</li></ul></li><li>Other Enhancements<ul><li>Option to hide the Protect action for end users.</li><li>Controls for Application Inventory Scan.</li></ul></li></ul><p><a class="image-icon" href="#config_settings_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-endpoint-data-scan-endpoint-settings" target="_blank">Configuring Endpoint Data Scan and Endpoint Settings</a> and <a href="https://help.zscaler.com/zia/activating-device-control-policy-rules-configuration-changes" target="_blank">Activating Device Control Policy Rules and Configuration Changes</a>.</p><h1>Sensitive Information Index Document Match</h1><p class="note">To access this feature, contact your Zscaler Account team.</p><p>This new capability allows for the detection of data exfiltration on Endpoint DLP channels by matching full or partial content against indexed documents. A secure, endpoint-based workflow has been introduced in this release, enabling authorized users to index sensitive documents directly from their endpoints using the Endpoint DLP context menu. The Endpoint Index Document Match (IDM) operates in parallel to the Inline DLP IDM. Enforcement and detection are independent and require reindexing of IDM files using the Endpoint DLP. This feature is currently in limited availability. You can access the Sensitive Information page from Analytics > Data Security > Endpoint.</p><p><a class="image-icon" href="#sensitive_info_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-sensitive-information" target="_blank">About Sensitive Information</a> and <a href="https://help.zscaler.com/zia/configuring-sensitive-information-settings" target="_blank">Configuring Sensitive Information Settings</a>.</p><h1>Additional Support for Predefined DLP Dictionaries in Endpoint DLP</h1><p>The following predefined DLP dictionaries are supported for use in Endpoint DLP policy rules:</p><ul><li>CNPJ Number (Brazil)</li><li>International Bank Account Number (IBAN)</li><li>National Economic Registry Number (Poland)</li><li>Passport Number (Asia)</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-predefined-dlp-dictionaries" target="_blank">Understanding Predefined DLP Dictionaries</a>.</p><h1>Added Context for Endpoint DLP Triggers</h1><p>You can see an additional 15-byte prefix and suffix to the left and right of the Endpoint DLP trigger that provides more information about the Endpoint DLP incident. The additional context can be seen in the Incident Receiver, Zscaler Workflow Automation, and Email Notifications.</p><p>The following image shows an example of trigger context in Zscaler Workflow Automation:</p><p><a class="image-icon" href="#zwa-edlp-added-context-rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-dlp-notification-templates" target="_blank" data-entity-type="node" data-entity-uuid="410566e8-4022-4ab4-b2cb-e9982642a69b" data-entity-substitution="canonical">Configuring DLP Notification Templates</a>, <a href="https://help.zscaler.com/zia/configuring-zscaler-incident-receiver" target="_blank" data-entity-type="node" data-entity-uuid="1b3f21b1-0d52-4d5a-911b-61d5deeca357" data-entity-substitution="canonical">Configuring the Zscaler Incident Receiver for On-Premises VMs</a>, <a href="https://help.zscaler.com/zia/configuring-zscaler-incident-receiver-for-ec2" target="_blank" data-entity-type="node" data-entity-uuid="bf20caf6-e5a1-41e1-9d46-34aa019fe194" data-entity-substitution="canonical">Configuring the Zscaler Incident Receiver for Amazon Web Services EC2 VMs</a>, and <a href="https://help.zscaler.com/zia/configuring-zscaler-incident-receiver-azure-vms" target="_blank" data-entity-type="node" data-entity-uuid="1934bb22-5abf-4a1a-b0c2-a9bda3bbcff4" data-entity-substitution="canonical">Configuring the Zscaler Incident Receiver for Azure VMs</a>.</p><h1>Endpoint DLP Support for Proximity Length in Predefined Dictionaries</h1><p>The Zscaler service supports the Proximity Length field on applicable predefined DLP dictionaries when used in engines associated with Endpoint DLP rules. The proximity length defines how close a high confidence phrase must be to an instance of the pattern (that the dictionary detects) to count as a match. For certain predefined DLP dictionaries, the Proximity Length field appears when the dictionary’s Confidence Score Threshold is High.</p><p><a class="image-icon" href="#zwa-1504516">See Image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-predefined-dlp-dictionaries" target="_blank">Understanding Predefined DLP Dictionaries</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="application-dlp-resources" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-Endpoint-DLP-Resources-Applications-RN.png" alt="The Applications Tab on the DLP Resources Page" title="Adding an Application on the DLP Resources Page"></p></div><div class="subc"><p><a class="ck-anchor" id="endpoint-dlprule-apps-clipboard" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-Endpoint-DLP-Rule-Applications-Clipboard-RN.png" alt="Application File Access and Clipboard as a Channel for an Endpoint DLP Rule" title="An Endpoint DLP Rule with Application File Access as the Channel"></p></div><div class="subc"><p><a class="ck-anchor" id="zwa-edlp-added-context-rn" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-Endpoint-DLP-trigger-context-zwa-RN.png" alt="DLP Incident Trigger Context in Workflow Automation" title="DLP Incident Trigger Context in Workflow Automation"></p></div><div class="subc"><p><a class="ck-anchor" id="zwa-1504516" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-Endpoint-DLP-US_EnhancedDriversLicense-RN.png" alt="Proximity Length in a Predefined DLP Dictionary" title="The Proximity Length Setting in an Enhanced US Driver's License Predefined Dictionary"></p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/configurations_tab_rn.png" alt="Endpoint Data Scan Configurations allow configuration of Endpoint Data Scan Report, End User Reports, Endpoint Settings, and Channels." title="Endpoint Data Scan Configurations"><a class="ck-anchor" id="config_settings_rn" target="_blank"></a></p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/policies/endpoint-data-loss-prevention/endpoint-data-scan/about-end-user-report/Device_per_user_Rn.png" alt="Adding Removable Storage Rule for Device Per User" title="Adding Device Per User Rule - Removable Storage"><a class="ck-anchor" id="device_per_user_rn" target="_blank"></a></p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/policies/endpoint-data-loss-prevention/endpoint-data-scan/about-sensitive-information/sensitive_info_rn.png" alt="The Sensitive Information page allows you to create templates and assign them to users who can perform indexing of sensitive documents" title="Sensitive Information Page"><a class="ck-anchor" id="sensitive_info_rn" target="_blank"></a></p></div> Feature Available Mon, 16 Feb 2026 08:00:00 GMT feature 1538589 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-13&id=1526671 <div class="sub"><p>You can configure Advanced SaaS Security Posture Management (SSPM) for JumpCloud tenants. Select the SSPM Scan checkbox when onboarding a JumpCloud tenant to enable the Advanced SSPM scan capability for the specific tenant.</p><p><a class="image-icon" href="#JumpCloud-sspm-onboarding">See image.</a></p><p class="note">The SSPM Scan checkbox is enabled only when you have Advanced SSPM enabled for your tenant.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/what-advanced-posture-management" target="_blank" data-entity-type="node" data-entity-uuid="048ba914-06ae-4c39-a5cf-fe6f7b8243c0" data-entity-substitution="canonical">What Is Advanced Posture Management?</a> and <a href="https://help.zscaler.com/zia/adding-saas-application-tenants" target="_blank">Adding SaaS Application Tenants</a>.</p></div><div class="subc"><a class="ck-anchor" id="JumpCloud-sspm-onboarding" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/saas-security/posture-management/posture-management-advanced/about-control-panel/Adavanced%20SSPM-Workday2.png" alt="JumpCloud Onboarding Section showing the SSPM Scan Checkbox" title="JumpCloud SaaS Application Onboarding"></div> Feature Available Fri, 13 Feb 2026 08:00:00 GMT feature 1526671 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-13&id=1535344 <div class="sub"><p>The Insights Logs pages now feature asynchronous log retrieval. This enhancement allows users to continue working without interruption while queries are executed in the background, significantly improving their user experience.</p><p>The following enhancements are available for Insights Logs in the ZIA Admin Portal:</p><ul><li>You can initiate log queries or move active searches to the background with Export in Background option, so you can continue other administrative tasks without interruption. The query is not terminated while running in the background, and a progress bar is displayed. During this process, you can choose to keep the query active, move it to the background, or stop the execution entirely.</li><li>The Apply Filters button is renamed to Run Query to better reflect the action.</li><li>You can export up to 1 million records to a CSV file and view up to 25,000 records directly in the portal.</li><li>You can specify a custom name for the downloaded CSV file for better organization.</li><li>Each admin can only run one asynchronous query at a time.</li><li>Only the user who initiated the query can view the results on-screen or access the downloaded file.</li></ul><p><a class="image-icon" href="#download_display_option">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-insights-logs" target="_blank">About Insights Logs</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/about-saas-workflows/display_option.png" alt="Insights Logs Page with Display option" title="Insights Logs Page - Display Option"><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/about-saas-workflows/download_option.png" alt="Insights Logs Page with Download option." title="Insights Logs Page - Download Option"><a class="ck-anchor" id="download_display_option" target="_blank"></a></p></div> Feature Available Fri, 13 Feb 2026 08:00:00 GMT feature 1535344 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-12&id=1538576 <p>Proper neutralization of user input in specific input fields in the ZIA Admin Portal no longer allows an authenticated administrator to access unauthorized internal information in rare conditions (CVE-2026-22568).</p> Feature Available Thu, 12 Feb 2026 08:00:00 GMT feature 1538576 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-06&id=1532531 <p>You can add up to 512 account IDs per tenant profile for AWS and there can be a maximum of 4,096 account IDs across all profiles.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-tenant-profiles#AWS" target="_blank">Adding Tenant Profiles</a> and <a href="https://help.zscaler.com/zia/ranges-limitations" target="_blank">Ranges & Limitations</a>.</p> Feature Available Fri, 06 Feb 2026 08:00:00 GMT feature 1532531 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-03&id=1533760 <div class="sub"><p>The application activity MCP is added to the Web Insights Logs to log Model Context Protocol (MCP) transactions in the ZIA Admin Portal.</p><p><a class="image-icon" href="#mcp_logs_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs: Filters</a>.</p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/dashboard-analytics/reports/viewing-microsoft-copilot-readiness-assessment-report/MCP_logs_rn.png" alt="Application Activity MCP is available in Web Insights Logs page to track Model Context Protocol transactions." title="Application Activity MCP in Web Insights Logs"><a class="ck-anchor" id="mcp_logs_rn" target="_blank"></a></p></div> Feature Available Tue, 03 Feb 2026 08:00:00 GMT feature 1533760 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-02&id=1535305 <div class="sub"><p>Advanced SSPM supports a new platform, Airtable. You can onboard an Airtable tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/integrating-airtable" target="_blank" data-entity-type="node" data-entity-uuid="19c8c212-11f0-45ed-b817-5eef4689d657" data-entity-substitution="canonical">Integrating with Airtable</a> and <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank" data-entity-type="node" data-entity-uuid="ee68e82a-c6b5-47fb-980e-6aa8f2f2e648" data-entity-substitution="canonical">Connecting Your Platforms to Advanced SSPM</a>.</p><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/Airtable_Drop_Down.png" alt="Connect Drop-Down Menu showing the Airtable option" title="Connect Drop-Down Menu"></div></div> Feature Available Mon, 02 Feb 2026 08:00:00 GMT feature 1535305 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-02&id=1535304 <div class="sub"><p>Advanced SSPM supports a new platform, Bitwarden. You can onboard a Bitwarden tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/integrating-bitwarden" target="_blank" data-entity-type="node" data-entity-uuid="d1983371-641f-4ad9-b9ec-b5518363368e" data-entity-substitution="canonical">Integrating with Bitwarden</a> and <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank" data-entity-type="node" data-entity-uuid="ee68e82a-c6b5-47fb-980e-6aa8f2f2e648" data-entity-substitution="canonical">Connecting Your Platforms to Advanced SSPM</a>.</p><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/Bitwarden_Drop_Down.png" alt="Connect Drop-Down Menu showing the Bitwarden option" title="Connect Drop-Down Menu"></div></div> Feature Available Mon, 02 Feb 2026 08:00:00 GMT feature 1535304 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-02&id=1535293 <div class="sub"><p>Advanced SSPM supports a new platform, Sentry. You can onboard a Sentry tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/integrating-sentry" target="_blank" data-entity-type="node" data-entity-uuid="556f4a63-91e2-4b63-8383-e6eb72b8e488" data-entity-substitution="canonical">Integrating with Sentry</a> and <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank" data-entity-type="node" data-entity-uuid="ee68e82a-c6b5-47fb-980e-6aa8f2f2e648" data-entity-substitution="canonical">Connecting Your Platforms to Advanced SSPM</a>.</p><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/what-advanced-posture-management-draft-doc-62100/Sentry_Drop_Down.png" alt="Connect Drop-Down Menu showing the Sentry option" title="Connect Drop-Down Menu"></div></div> Feature Available Mon, 02 Feb 2026 08:00:00 GMT feature 1535293 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-02&id=1534201 <p>New cloud applications are added to the cloud application categories. You can download the list of newly added cloud applications to the respective categories: <a class="download" href="https://help.zscaler.com/sites/default/files/downloads/zia/documentation-knowledgebase/policies/cloud-apps/cloud-app-control-policies/cloud-app-categories/New_Cloud_Apps_Dec_2025.xlsx" target="_blank">Download</a></p><p class="note">The risk index and risk attribute values for these new applications are visible only after they are available on all the clouds.</p> Feature Available Mon, 02 Feb 2026 08:00:00 GMT feature 1534201 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-02-02&id=1535301 <div class="sub"><p>Advanced SSPM supports OneLogin as an API-based platform. You can onboard a OneLogin tenant from the 3rd-Party App Governance Admin Portal.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/integrating-onelogin" target="_blank" data-entity-type="node" data-entity-uuid="da849c26-3578-4203-88fe-aadd7f333d69" data-entity-substitution="canonical">Integrating with OneLogin</a> and <a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank" data-entity-type="node" data-entity-uuid="ee68e82a-c6b5-47fb-980e-6aa8f2f2e648" data-entity-substitution="canonical">Connecting Your Platforms to Advanced SSPM</a>.</p><div class="subc"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/OneLogin_Drop_Down.png" alt="Connect Drop-Down Menu showing the OneLogin option" title="Connect Drop-Down Menu"></div></div> Feature Available Mon, 02 Feb 2026 08:00:00 GMT feature 1535301 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-21&id=1533958 <div class="sub"><p>The File Type Control and Data Loss Prevention (DLP) policies now support MSIX files in the Executable category.</p><ul class="triangle"><li><a href="#msix-files-1533958">File Type Control</a></li><li><a href="#dlp-msix-1533958">DLP - Rule without Content Matching</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/about-file-type-control" target="_blank" data-entity-type="node" data-entity-uuid="5a16b52b-de4b-4986-abea-8be790f9c257" data-entity-substitution="canonical">About File Type Control</a> and <a href="https://help.zscaler.com/zia/about-data-loss-prevention" target="_blank" data-entity-type="node" data-entity-uuid="e9458898-bb84-4c4e-a843-1fd0a2ab042e" data-entity-substitution="canonical">About Data Loss Prevention</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="msix-files-1533958" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ftc-msix.png" alt="Select MSIX files in the Add File Type Control Rule window" title="File Type Control Rule - MSIX"></p></div><div class="subc"><p><a class="ck-anchor" id="dlp-msix-1533958" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/dlp-msix.png" alt="Select MSIX files in the Executable category when configuring DLP policies without content matching" title="DLP Rule without Content Matching - MSIX"></p></div> Feature Available Wed, 21 Jan 2026 08:00:00 GMT feature 1533958 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-21&id=1532507 <div class="sub"><p>You can allow or block the use of embedded AI applications on Atlassian sites and enable or disable Zscaler to store the generative AI prompts entered in these embedded AI applications per cloud app control rule. As part of this feature, the following fields appear in the Add/Edit Productivity and CRM Tools Rule window only for the Atlassian application:</p><ul><li>Embedded AI</li><li>Embedded AI Prompts</li></ul><p><a class="image-icon" href="#prod-crm-embedded-ai">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-productivity-crm-tools-rule-cloud-app-control" target="_blank" data-entity-type="node" data-entity-uuid="6f11cb62-cf64-4d10-9d1c-ac6e0b7b4d54" data-entity-substitution="canonical">Adding a Productivity & CRM Tools Rule for Cloud App Control</a>.</p><h1>Web Insights Logs</h1><p>An Application Activity, Embedded AI, is added to the Web Insights Logs for Atlassian applications only.</p><p><a class="image-icon" href="#embedded_ai_weblogs">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs: Filters</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="prod-crm-embedded-ai" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-Add-Productivity-and-CRM-Tools-Rule-Window-RN.png" alt="ZIA Add Productivity and CRM Tools Rule window with Embedded AI and Embedded AI Prompts" title="ZIA Add Productivity and CRM Tools Rule window with Embedded AI and Embedded AI Prompts"></p></div><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/documentation-knowledgebase/analytics/dashboards-reports-and-logs/logs/web-insights-logs-filters/embedded_AI_weblogs.png" alt="Embedded AI is available as an action in Application Activity in the Web Insights Logs" title="Application Activity - Embedded AI in the Web Insights Logs"><a class="ck-anchor" id="embedded_ai_weblogs" target="_blank"></a></p></div> Feature Available Wed, 21 Jan 2026 08:00:00 GMT feature 1532507 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-21&id=1529537 <div class="sub"><p>When scheduling a scan for SaaS applications tenants (Policy > SaaS Security > Scan Configuration > Add Scan Schedule), you can also configure the polling interval based on how often you want the system to scan the application.</p><p><a class="image-icon" href="#polling-intervals">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-saas-security-scan-schedules" target="_blank" data-entity-type="node" data-entity-uuid="724cc219-efbf-44a8-8407-c06d16c43678" data-entity-substitution="canonical">Configuring SaaS Security Scan Schedules</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="polling-intervals" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/configuring-saas-security-scan-schedules-draft-doc-57304/polling-intervals-casb.png" alt="Adjustable Polling Intervals in SaaS Security Scan Schedules" title="Adjustable Polling Intervals in SaaS Security Scan Schedules"></p></div> Feature Available Wed, 21 Jan 2026 08:00:00 GMT feature 1529537 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-21&id=1529042 <div class="sub"><p>The SaaS Security Data at Rest Scanning Data Loss Prevention (DLP) policy supports the number of internal and external collaborators as scoping criteria for all file sharing applications, including Box, Dropbox, Confluence, ShareFile, and Smartsheet. Administrators can monitor file sharing among collaborators by applying the scope to a number of internal and external collaborators.</p><p><a class="image-icon" href="#collaborators-count-for-gdrive">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy" target="_blank" data-entity-type="node" data-entity-uuid="43d9da7b-6280-4b7e-a9b5-8b8071380cfc" data-entity-substitution="canonical">Configuring the Data At Rest Scanning DLP Policy</a> and <a href="https://help.zscaler.com/zia/about-data-rest-scanning-dlp" target="_blank" data-entity-type="node" data-entity-uuid="accb5dff-d82b-48c4-9b2a-fc6369f2271e" data-entity-substitution="canonical">About Data at Rest Scanning DLP</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="collaborators-count-for-gdrive" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zia-draft-articles/configuring-data-rest-scanning-dlp-policy-draft/collaborator-count-dlp.png" alt="Number of internal and external collaborators" title="Number of internal and external collaborators"></p></div> Feature Available Wed, 21 Jan 2026 08:00:00 GMT feature 1529042 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-21&id=1532316 <div class="sub"><p>The support for quarantining files in a desired location has been extended to all file sharing apps, including Box, Dropbox, Confluence, ShareFile, and Smartsheet. This feature was already available for Google Drive, OneDrive, and SharePoint apps. You can specify a quarantine location for files violating DLP policy rules at the time of onboarding the tenant.</p><p>On the Edit DLP Rule window, a new action called Admin Quarantine is available for all tenants with a defined quarantine location.</p><p><a class="image-icon" href="#admin-quarantine">See image.</a></p></div><div class="subc"><p><a class="ck-anchor" id="admin-quarantine" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/admin-quarantine-dlp-RN-2.png" alt="Showing Admin Quarantine action for all file sharing apps." title=" Admin Quarantine action for all file sharing apps."></div><p>To learn more, see <a href="https://help.zscaler.com/zia/about-data-rest-scanning-dlp" target="_blank" data-entity-type="node" data-entity-uuid="accb5dff-d82b-48c4-9b2a-fc6369f2271e" data-entity-substitution="canonical">About Data at Rest Scanning DLP</a>, <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="5735781d-0020-47a8-9a1a-bcf4b475636d" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy with Content Inspection</a>, and <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-without-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="c7bb5123-f862-485b-a600-2cb1aabddbe6" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy without Content Inspection</a>.</p> Feature Available Wed, 21 Jan 2026 08:00:00 GMT feature 1532316 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-20&id=1535125 <div class="sub"><p>You can apply either <code>OR</code> or <code>AND</code> logical operator between the Users, Groups, and Departments criteria in the URL Filtering Policy rules. This allows you to create granular policy rules using a combination of logical operators (i.e., <code>OR</code> or <code>AND</code>) between these criteria. As part of this update, up and down arrows are added to the logical operators between these criteria in the Add/Edit URL Filtering Rule window.</p><p class="note">To enable this feature, contact Zscaler Support.</p><p>You can also add up to three Groups fields by clicking the Add icon next to the Groups field, and they are connected with a logical <code>AND</code> operator. This allows you to create rules that are triggered when they match the selected groups in all the Groups fields.</p><p><a class="image-icon" href="#url-filtering-policy-flexible-logical-operator">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-url-filtering-policy" target="_blank" data-entity-type="node" data-entity-uuid="9a4bac09-0387-4fd6-b770-d30c2398c8ae" data-entity-substitution="canonical">Configuring the URL Filtering Policy</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="url-filtering-policy-flexible-logical-operator" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-URL-Filtering-Policy-Page-Add-URL-Filtering-Rule-RN.png" alt="ZIA Add URL Filtering Rule Window with Flexible Logical Operator" title="ZIA Add URL Filtering Rule Window"><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Add-URL-Filtering-Rule-Groups-Add-Icon.png" alt="ZIA Add URL Filtering Rule Window with Add icon next to the Groups criteria." title="ZIA Add URL Filtering Rule Window."><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-Add-URL-Filtering-Rule-Groups-Fields.png" alt="ZIA Add URL Filtering Rule Window with the support for three Groups fields." title="ZIA Add URL Filtering Rule Window."></p></div><div class="subc"><h1>Enhancement to URL Filtering Policy Endpoints</h1><p>New fields, <code>usersAndGroupsSet</code>, <code>groupsAndDepartmentsSet</code>, <code>groups2</code>, and <code>groups3</code> are available for the <code>UrlFilteringRule</code> model in the <code>/urlFilteringRules</code> APIs.</p><p>To learn more, go to the <code>UrlFilteringRule</code> model from <a href="https://help.zscaler.com/zia/url-filtering-policy" target="_blank">URL Filtering Policy</a>.</p></div> Feature Available Tue, 20 Jan 2026 08:00:00 GMT feature 1535125 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-20&id=1531147 <p><a href="https://help.zscaler.com/isolation" target="_blank">Zscaler Isolation</a> now supports password-protected PDF files to be <a href="https://help.zscaler.com/zia/about-sandbox" target="_blank" data-entity-type="node" data-entity-uuid="b6501cfa-e4fc-40ad-9568-c79e8ff2240e" data-entity-substitution="canonical">sandboxed for Zscaler Internet Access (ZIA)</a>. If ZIA Sandbox determines that the file is safe, users can download the original PDF. If ZIA Sandbox determines that the file is malicious, users cannot download the original PDF to their local device, and Zscaler stores the password for the duration of the isolated session. If the PDF can be rendered within the isolated browser, users can download the sanitized version of the PDF.</p><p>After the PDF is downloaded into the Isolation container, it opens on the user's device automatically, and they are prompted for the file password. Users are allowed unlimited incorrect password attempts.</p><p>To learn more, see <a href="https://help.zscaler.com/isolation/about-sandbox-integration-isolation" target="_blank" data-entity-type="node" data-entity-uuid="bff44a1f-ed47-442a-96cf-cbd57a6cd561" data-entity-substitution="canonical">About Sandbox Integration with Isolation</a> and <a href="https://help.zscaler.com/isolation/transferring-and-viewing-files-isolation" target="_blank" data-entity-type="node" data-entity-uuid="3cd1a196-5d1b-4247-8024-0173e54895eb" data-entity-substitution="canonical">Transferring and Viewing Files in Isolation</a>.</p> Feature Available Tue, 20 Jan 2026 08:00:00 GMT feature 1531147 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-19&id=1535361 <div class="sub"><p>The Zscaler Cloud Performance Test Tool allows you to view only the domain part of the traffic or email, and the user name is hidden. For example, johndoe@zscaler.com is visible as xxxxxxx@zscaler.com.</p><p><a class="image-icon" href="#speed-test">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/using-zscaler-cloud-performance-test-tool" target="_blank">Using the Zscaler Cloud Performance Test Tool</a>.</p></div><div class="subc"><a class="ck-anchor" id="speed-test" target="_blank"></a><img src="https://help.zscaler.com/downloads/Zscaler%20Cloud%20Performance%20Test_0.png" alt="User Name is hidden in the Zscaler Cloud Performance Test" title="User Name is hidden"></div> Feature Available Mon, 19 Jan 2026 08:00:00 GMT feature 1535361 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-16&id=1531095 <p>The following policies are deprecated for Microsoft 365 in both SaaS Security Posture Management (SSPM) Essentials and Advanced SSPM:</p><ul><li data-list-item-id="ebb24433438c1c3efd0adac4b625da6fd">Set Automated Notifications for New and Trending Cloud Applications in Our Organization</li><li data-list-item-id="e53d623dc5461fccf3314fa87a80bb03e">Set Automated Notification for New OAuth Applications Connected to Your Corporate Environment</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/viewing-and-managing-supported-sspm-policies" target="_blank">Viewing and Managing the Supported SSPM Policies</a> and <a href="https://help.zscaler.com/zia/what-advanced-posture-management" target="_blank" data-entity-type="node" data-entity-uuid="048ba914-06ae-4c39-a5cf-fe6f7b8243c0" data-entity-substitution="canonical">What Is Advanced Posture Management?</a></p> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1531095 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-16&id=1530740 <p>This enhancement allows you to view logs for individual members within a collaborator group. As part of the update, the following changes are available in the ZIA Admin Portal:</p><h1>SaaS Security Insights Logs and SaaS Security Assets with Incidents</h1><p>When an individual file is shared with a group, you can view logs for individual members of a group who are either internal collaborators or external collaborators, depending upon the type of domain they belong to in the SaaS Security Insights Logs page and the Assets Report: Assets with Incidents page (Analytics > SaaS Security > Assets > click an application or tenant).</p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-saas-security-insights-logs" target="_blank">About SaaS Security Insights Logs</a> and <a href="https://help.zscaler.com/zia/understanding-assets-report-assets-with-incidents" target="_blank">Understanding the Assets Report: Assets with Incidents</a>.</p><h1>SaaS Security Data at Rest Scanning DLP Actions</h1><p>For file sharing applications, the DLP actions Remove Internal Collaborators, Remove External Collaborators, and Remove External Collaborators and Shareable Link also remove internal and external collaborator groups along with all individual internal and external collaborators. To remove an individual collaborator from an external group, you can use the Remove External Collaborators action on the Remediation page to manually remove the collaborator.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="5735781d-0020-47a8-9a1a-bcf4b475636d" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy with Content Inspection</a> and <a href="https://help.zscaler.com/zia/configuring-data-rest-scanning-dlp-policy-without-content-inspection" target="_blank" data-entity-type="node" data-entity-uuid="c7bb5123-f862-485b-a600-2cb1aabddbe6" data-entity-substitution="canonical">Configuring the Data at Rest Scanning DLP Policy without Content Inspection</a>.</p> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1530740 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-16&id=1532058 <p>The following platforms support 64 GB of RAM and 3 antivirus (AV) engines per Virtual Service Edge:</p><ul><li><a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-clusters" target="_blank" data-entity-type="node" data-entity-uuid="0f1a169d-6547-4d25-a778-b2f20da57fa4" data-entity-substitution="canonical">VMware ESXi</a></li><li><a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-microsoft-azure" target="_blank" data-entity-type="node" data-entity-uuid="1c99f0b4-e33c-4d56-a9ea-7c34c33582bf" data-entity-substitution="canonical">Microsoft Azure</a></li><li><a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-google-cloud-platform" target="_blank" data-entity-type="node" data-entity-uuid="59702099-055e-49ad-8152-2e0a513a4706" data-entity-substitution="canonical">Google Cloud Platform</a></li><li><a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-microsoft-hyper-v" target="_blank" data-entity-type="node" data-entity-uuid="3e5e0563-9de3-4465-b27a-3806fbacbb4a" data-entity-substitution="canonical">Microsoft Hyper-V</a></li><li><a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-amazon-web-services" target="_blank" data-entity-type="node" data-entity-uuid="64393a0c-a634-49f0-a2c2-4a2aac02b006" data-entity-substitution="canonical">Amazon Web Services</a></li><li><a href="https://help.zscaler.com/zia/configuring-virtual-service-edge-amazon-web-services-gwlb" target="_blank" data-entity-type="node" data-entity-uuid="8cab51bd-4abe-49e8-879a-eb4786ca7a80" data-entity-substitution="canonical">Amazon Web Services with GWLB</a></li></ul><p>This allows you to scan large files and maintain Virtual Service Edge performance. You can deploy Virtual Service Edge either in standalone or cluster mode.</p> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1532058 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-16&id=1532065 <div class="sub"><p>Generative AI (Gen AI) prompts that are displayed in the <a href="https://help.zscaler.com/zia/about-insights-logs" target="_blank">Web Insights Logs</a> can be obfuscated when <a href="https://help.zscaler.com/zia/adding-admin-roles" target="_blank">adding admin roles</a>.</p><p><a class="image-icon" href="#gen-ai-prompts-obfuscation">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-generative-ai-security-report" target="_blank">About the Gen AI Security Report</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="gen-ai-prompts-obfuscation" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/ZIA-add-admin-role-gen-ai-prompts.png" alt="The obfuscation option for Gen AI Prompts" title="Obfuscation Option for Gen AI Prompts"></p></div> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1532065 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-16&id=1532121 <div class="sub"><p>The following enhancements are available for Insights and NSS Feeds in the ZIA Admin Portal to record the time Zscaler either received or sent an email response.</p><h1>Insights Logs</h1><p>New columns Zscaler Sent Time and Zscaler Received Time are added to Email DLP Insights Logs. The Scan Time field is enhanced to reflect the duration of time (milliseconds) from when Zscaler receives an email until the Data Loss Prevention (DLP) policy evaluation is complete.</p><p><a class="image-icon" href="#email_dlp_insights_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/email-dlp-insights-logs-columns" target="_blank">Email DLP Insights Logs: Columns</a>.</p></div><h1>NSS Feeds</h1><p>The fields <code>%s{zs_rcv_time}</code> and <code>%s{zs_sent_time}</code> can be added to the Feed Output Format when configuring NSS or Cloud NSS feeds for Email DLP logs. The <code>%llu{scan_time}</code> field is enhanced to reflect the duration of time (milliseconds) from when Zscaler receives an email until the DLP policy evaluation is complete.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-email-dlp-logs" target="_blank" data-entity-type="node" data-entity-uuid="37c258c4-6c12-403d-aa1d-71146a560548" data-entity-substitution="canonical">NSS Feed Output Format: Email DLP Logs</a>.</p><div class="subc"><p><img src="https://help.zscaler.com/downloads/Sent_received_time.png" alt="Zscaler Sent Time and Received Time is now available in the Email DLP Insights Logs Page. " title="Email DLP Insights Logs Page"><a class="ck-anchor" id="email_dlp_insights_rn" target="_blank"></a></p></div> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1532121 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-16&id=1532297 <div class="sub"><p>For custom Data Loss Prevention (DLP) dictionaries that use patterns with lookaround constructs (also known as zero-length assertions), the Zscaler service now enforces the following restrictions:</p><ul><li>You must select Match Any Patterns and Any Phrases as the Match Type.</li><li>You must configure at least one phrase.</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-custom-dlp-dictionary" target="_blank">Adding Custom DLP Dictionaries</a>.</p></div> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1532297 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-16&id=1529509 <p>Zscaler supports comprehensive logging of Sandbox analysis activities through Insights Logs and the Nanolog Streaming Service (NSS). You can log and view details of all files that went through behavioral analysis regardless of the verdict (e.g., Suspicious Content, Benign). With the following enhancements in the ZIA Admin Portal, you can find the relevant details quickly in order to triage and address the event appropriately:</p><div class="sub"><h1>Sandbox Verdict Insights Logs</h1><p>With the new Sandbox Verdict Insights page (Analytics > Sandbox Verdict Insights), you can view recent sandbox analysis activity logs.</p><p><a class="image-icon" href="#verdict_log">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-insights" target="_blank">About Insights</a>,<a href="https://help.zscaler.com/zia/about-insights-logs" target="_blank"> About Insights Logs</a>, <a href="https://help.zscaler.com/zia/sandbox-verdict-insights-logs-filters" target="_blank">Sandbox Verdict Insights Logs: Filters</a>, and <a href="https://help.zscaler.com/zia/sandbox-verdict-insights-logs-columns" target="_blank">Sandbox Verdict Insights Logs: Columns</a>.</p><h1>NSS Feeds</h1><p>A new log type, Sandbox Verdict, is available for NSS. You can configure an NSS feed or Cloud NSS feed to stream Sandbox analysis data from Zscaler to your security information and event management (SIEM) system.</p><p><a class="image-icon" href="#addnss">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-nss-feeds-sandbox-verdict-logs" target="_blank" data-entity-type="node" data-entity-uuid="081a87c4-d078-4aec-ba97-bd12d9bd5c70" data-entity-substitution="canonical">Adding NSS Feeds for Sandbox Verdict Logs</a>, <a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-sandbox-verdict-logs" target="_blank" data-entity-type="node" data-entity-uuid="2867736f-2725-4f9c-a383-d3ab8dfdc044" data-entity-substitution="canonical">Adding Cloud NSS Feeds for Sandbox Verdict Logs</a>, and <a href="https://help.zscaler.com/zia/nss-feed-output-format-sandbox-verdict-logs" target="_blank" data-entity-type="node" data-entity-uuid="8ee53019-f302-4a12-af64-6bd006dd394f" data-entity-substitution="canonical">NSS Feed Output Format: Sandbox Verdict Logs</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="verdict_log" target="_blank"></a><img src="https://help.zscaler.com/downloads/Sandbox_verdict_logging_rn_updated.png" alt="Sandbox Verdict Insights Logs page" title="Sandbox Verdict Insights Logs page"></p></div><div class="subc"><p><a class="ck-anchor" id="addnss" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/nss-feed-sandbox-verdict.png" alt="Add NSS Feed window open with Log Type dropdown and Sandbox Log annotated" title="Add NSS Feed window"></p></div> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1529509 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-16&id=1535426 <div class="sub"><p>On the Firewall Insights page (Analytics > Firewall Insights), the maximum number of rules displayed for the Rule Name data type has been increased. When using bar or table charts, you can view up to the top 4,000 rules (in increments of 500, 1,000, 2,000, and 4,000) by selecting the value from the drop-down menu.</p><p>In addition, the charts explicitly show rules that were not triggered during the selected time frame, displaying them with a zero hit count if they fall within the specified rule limit.</p><p><a class="image-icon" href="#firewall-inisghts-rule-name-increased-rule-limit">See image.</a></p><p>The Firewall Overview dashboard includes additional time filters, allowing you to view data over 48-hour, 3-day, 5-day, and 7-day intervals. Additionally, widgets using the Rule Name data type display hit counts for all rules when viewed as bar and table charts.</p><p>In addition, the charts explicitly show rules that were not triggered during the selected time frame, displaying them with a zero hit count if they fall within the specified rule limit.</p><p><a class="image-icon" href="#firewall-overview-dashboard-new-filters">See image.</a></p><p>These time and value filter enhancements allow you to track rule hit counts over extended time periods, helping you analyze rule utilization and optimize or refine your firewall rule configurations based on real-world traffic patterns.</p></div><div class="subc"><p><a class="ck-anchor" id="firewall-inisghts-rule-name-increased-rule-limit" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-firewall-insights-additional-value-filters_0.png" alt="Viewing Firewall Insights data based on Rule Name with an increased rule limit of up 4,000 rules" title="Firewall Insights - Data Based on Rule Name"></p></div><div class="subc"><p><a class="ck-anchor" id="firewall-overview-dashboard-new-filters" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/ZIA-firewall-dashboard-additional-time-filters_1.png" alt="Additional time filters in Firewall Overview dashboard" title="Firewall Overview Dashboard - New Time Filters"></p></div> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1535426 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-15&id=1528566 <div class="sub"><p>The Zscaler Sandbox now supports the Optical Disc Image (iso) file type.</p><p><a class="image-icon" href="#file_type">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-sandbox" target="_blank" data-entity-type="node" data-entity-uuid="b6501cfa-e4fc-40ad-9568-c79e8ff2240e" data-entity-substitution="canonical">About Sandbox</a> and <a href="https://help.zscaler.com/zia/configuring-sandbox-policy" target="_blank" data-entity-type="node" data-entity-uuid="f16fd822-1b36-4209-8bc5-de8e70215e75" data-entity-substitution="canonical">Configuring the Sandbox Policy</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="file_type" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/sandbox/about-sandbox/Sandbox%20file%20types02.png" alt="Sandbox Rules, file types" title="Sandbox Rules, file types"></p></div> Feature Available Thu, 15 Jan 2026 08:00:00 GMT feature 1528566 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-13&id=1532343 <div class="sub"><p>Extranet Application Support can be configured bidirectionally, allowing partners to access your organization's resources securely.</p><p class="note">Extranet Application Support is a feature in limited availability. To access Extranet Application Support, contact your Zscaler Account team.</p><p>As part of this enhancement:</p><ul><li><p><a href="https://help.zscaler.com/zia/adding-ip-pool" target="_blank">Custom IP pools</a> can be configured for Extranet Application Support.</p><p><a class="image-icon" href="#add-ip-pool">See image.</a></p></li><li><a href="https://help.zscaler.com/zia/about-static-ip" target="_blank">Static IP addresses</a>, <a href="https://help.zscaler.com/zia/about-gre-tunnels" target="_blank">GRE tunnels</a>, and <a href="https://help.zscaler.com/zia/understanding-sublocations" target="_blank">sublocations</a> are configurable for extranet locations.</li><li><a href="https://help.zscaler.com/zia/about-firewall-filtering" target="_blank">Firewall Control</a> is automatically enabled for extranet locations.</li><li><a href="https://help.zscaler.com/zia/about-ips-control" target="_blank">IPS Control</a> is available for extranet locations.</li><li><p>Three default policy rules are added to the <a href="https://help.zscaler.com/zia/about-forwarding-policies" target="_blank">Forwarding Control policy</a> when Extranet Application Support is enabled.</p><p><a class="image-icon" href="#default-forwarding-control-policies">See image.</a></p></li><li><p>One predefined policy rule is added to the <a href="https://help.zscaler.com/zia/about-dns-control" target="_blank">DNS Control policy</a> when Extranet Application Support is enabled.</p><p><a class="image-icon" href="#default-dns-control-policy">See image.</a></p></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zia/understanding-extranet-application-support" target="_blank">Understanding Extranet Application Support</a>.</p><h1>Insights Logs</h1><p>A filter and column, Extranet Resource, is added to DNS Insights Logs, Firewall Insights Logs, and Web Insights Logs.</p><p><a class="image-icon" href="#extranet_resource_rn">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/dns-insights-logs-columns" target="_blank">DNS Insights Logs: Columns</a>, <a href="https://help.zscaler.com/zia/dns-insights-logs-filters" target="_blank">DNS Insights Logs: Filters</a>, <a href="https://help.zscaler.com/zia/firewall-insights-logs-columns" target="_blank">Firewall Insights Logs: Columns</a>, <a href="https://help.zscaler.com/zia/firewall-insights-logs-filters" target="_blank">Firewall Insights Logs: Filters</a>, <a href="https://help.zscaler.com/zia/web-insights-logs-columns" target="_blank">Web Insights Logs: Columns</a>, and <a href="https://help.zscaler.com/zia/web-insights-logs-filters" target="_blank">Web Insights Logs: Filters</a>.<meta charset="utf-8"></p><h1>NSS Logs</h1><ul><li><p>The field <code>%s{extranet_name}</code> is available when adding an NSS feed or Cloud NSS feed for Web, Firewall, and DNS logs.</p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-feed-output-format-web-logs" target="_blank">NSS Feed Output Format: Web Logs</a>, <a href="https://help.zscaler.com/zia/nss-feed-output-format-firewall-logs" target="_blank">NSS Feed Output Format: Firewall Logs</a>, and <a href="https://help.zscaler.com/zia/nss-feed-output-format-dns-logs" target="_blank">NSS Feed Output Format: DNS Logs</a>.</p></li><li><p>For NSS or Cloud NSS feed Tunnel logs, when configuring the Tunnel Type filter, you can select EAS Client Tunnel to limit the logs based on this tunnel type.</p><p><a class="image-icon" href="#RN-eas-tunnel-filter">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/adding-nss-feeds-tunnel-logs" target="_blank">Adding NSS Feeds for Tunnel Logs</a> and <a href="https://help.zscaler.com/zia/adding-cloud-nss-feeds-tunnel-logs" target="_blank">Adding Cloud NSS Feeds for Tunnel Logs</a>.</p></li></ul></div><div class="subc"><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2026/zia-RN-nss-feeds-eas-tunnel-filter.png" alt="The EAS Client Tunnel selected as the Tunnel Type filter to limit the logs for NSS Feeds" title="The EAS Client Tunnel selected as the Tunnel Type filter"><p><a class="ck-anchor" id="RN-eas-tunnel-filter" target="_blank"></a></p></div><div class="subc"><p><a class="ck-anchor" id="add-ip-pool" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/forwarding-control/dedicated-ip/zscaler-managed-dedicated-ip/geolocalization-ip/understanding-geolocalization-ip/ZIA-add-ip-pool.png" alt="The Add IP pool window on the IP Pool page" title="Add IP pool Window"></p></div><div class="subc"><p><a class="ck-anchor" id="default-forwarding-control-policies" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/forwarding-control/dedicated-ip/zscaler-managed-dedicated-ip/geolocalization-ip/understanding-geolocalization-ip/ZIA-forwarding-control-extranet-defaults.png" alt="Allow Extranet DNS Traffic, Extranet Traffic to ZPA. and Stray Extranet Traffic from ZPA default Forwarding Control policy rules" title="Default Forwarding Control Rules for Extranet"></p></div><div class="subc"><p><a class="ck-anchor" id="default-dns-control-policy" target="_blank"></a><img src="https://help.zscaler.com/downloads/zia/policies/forwarding-control/dedicated-ip/zscaler-managed-dedicated-ip/geolocalization-ip/understanding-geolocalization-ip/ZIA-dns-control-extranet-default.png" alt="ZPA Resolver for Extranet Locations default DNS Control policy rule" title="Default DNS Control Policy Rule for Extranet"></p></div><p> </p><div class="subc"><p><img src="https://help.zscaler.com/downloads/zia/policies/endpoint-data-loss-prevention/endpoint-data-scan/analyzing-device-investigation-details/Extranet_Resource_RN.png" alt="Extranet Resource Filter and Columns are available in DNS Insights Logs, Firewall Insights Logs, and Web Insights Logs." title="Extranet Resource Filter"><a class="ck-anchor" id="extranet_resource_rn" target="_blank"></a></p></div> Feature in Limited Availability Tue, 13 Jan 2026 08:00:00 GMT feature 1532343 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-12&id=1541730 <p>The Zscaler service supports Authentication Service Single Sign-On (SSO) for partner logins to the Zscaler Management Portal for Partners. Following the migration, all partner logins route through the Authentication Service SSO framework, offering a secure and unified authentication experience.</p><div class="sub"><p>For partners migrated to Authentication Service, the following features move under Authentication Service:</p><ul><li data-list-item-id="e3549e67fa2228f06ed697c3f0a0d25a2">Role and Scope Assignments: To assign a role or scope to admins, go to Authentication Service Admin Portal > Administration > Entitlements.</li><li data-list-item-id="e64a12a9be8dfff84642b09a8030cb6ff">Password Resets: To reset a password, go to Authentication Service Admin Portal > Administration.</li></ul><p><a class="image-icon" href="#scopes-rn">See image.</a></p><p>Further, we are also introducing a new way to manage tenants and admins: scopes. Scopes are multi-tenant, multi-cloud setups that you can assign to one or more admins, as required.</p></div><div class="subc"><p><a class="ck-anchor" id="scopes-rn" target="_blank"></a></p><img src="https://help.zscaler.com/downloads/zia/zscaler-management-portal-partners/getting-started/management-portal/modifying-your-account-settings/scopes-zidentity-mpp.png" alt="Introducing ZIdentity integration and scopes" title="Introducing ZIdentity integration and scopes"></div><p>To learn more, see <a href="https://help.zscaler.com/multitenant-partner-portal/about-scopes" target="_blank" data-entity-type="node" data-entity-uuid="b73f8ccc-01d7-483b-afbf-fc0ea3c0ead5" data-entity-substitution="canonical">About Scopes</a>, <a href="https://help.zscaler.com/multitenant-partner-portal/adding-new-scope" target="_blank" data-entity-type="node" data-entity-uuid="9f2d6b05-e47d-44a3-9ea5-1ef9676f08b6" data-entity-substitution="canonical">Adding a New Scope</a>, and <a href="https://help.zscaler.com/zidentity/assigning-entitlements-users-and-user-groups" target="_blank" data-entity-type="node" data-entity-uuid="b5b90a5a-46f4-4afa-83ad-777572466aee" data-entity-substitution="canonical">Assigning Entitlements to Users and User Groups</a>.</p> Feature Available Mon, 12 Jan 2026 08:00:00 GMT feature 1541730 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-09&id=1532897 <div class="sub"><p>Zscaler’s Nanolog Streaming Service (NSS) supports the configuration and deployment of an NSS virtual machine (VM) on Hyper-V.</p><p>After deploying an NSS VM, you can stream your organization’s web or firewall logs from the Zscaler cloud to your security information and event management (SIEM) system.</p><p><a class="image-icon" href="#RN-hyper-v-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-deployment-guide-hyper-v" target="_blank">NSS Deployment Guide for Hyper-V</a>.</p></div><div class="subc"><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/RN-zia-hyperv-nss-deployment-guide.png" alt="The Hyper-V VM platform option in the NSS Virtual Appliance Deployment window" title="Hyper-V VM platform option"><p><a class="ck-anchor" id="RN-hyper-v-image" target="_blank"></a></p></div> Feature Available Fri, 09 Jan 2026 08:00:00 GMT feature 1532897 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-09&id=1530974 <div class="sub"><p>Zscaler’s Nanolog Streaming Service (NSS) supports the configuration and deployment of an NSS virtual machine (VM) on Nutanix.</p><p>After deploying an NSS VM, you can stream your organization’s Web or Firewall logs from the Zscaler cloud to your security information and event management system.</p><p><a class="image-icon" href="#img-nss-nutanix">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/nss-deployment-guide-nutanix" target="_blank">NSS Deployment Guide for Nutanix</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="img-nss-nutanix" target="_blank"></a></p><p><img src="https://help.zscaler.com/downloads/zia/release-notes/release-upgrade-summary-2025/nss-virtual-appliance-nutanix.png" alt="Nutanix NSS Virtual Appliance Deployment" title="Nutanix NSS Virtual Appliance Deployment"></p></div> Feature Available Fri, 09 Jan 2026 08:00:00 GMT feature 1530974 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-09&id=1539109 <p>When you request report generation using <code>POST /auditlogEntryReport</code> or <code>POST /eventlogEntryReport</code>, it returns an HTTP <code>200 OK</code> status code with the <code>statusId</code> in the response (previously returned <code>204</code> status code). This <code>statusId</code> must be captured and sent as a query parameter in the following requests that are subsequently made to check the report status, download the report, or cancel the report request:</p><ul><li><code>GET /auditlogEntryReport</code></li><li><code>GET /auditlogEntryReport/download</code></li><li><code>DELETE /auditlogEntryReport</code></li><li><code>GET /eventlogEntryReport</code></li><li><code>GET /eventlogEntryReport/download</code></li><li><code>DELETE /eventlogEntryReport</code></li></ul><p class="caution">This API workflow change requires you to update your existing scripts immediately to ensure that your automated integrations for downloading audit and event logs continue to function correctly. Modify your scripts to parse the <code>statusId</code> from the initial report generation response and ensure that your API requests to check status, download, or cancel are updated to pass the <code>statusId</code> parameter.</p><p>To learn more, see the <a href="https://help.zscaler.com/zia/zia-api/api-developer-reference-guide/reference-guide" target="_blank">API Reference</a> and <a href="https://help.zscaler.com/legacy-apis/downloading-audit-logs-event-logs-using-api" target="_blank">Downloading Audit Logs and Event Logs Using API</a>.</p> Feature Available Fri, 09 Jan 2026 08:00:00 GMT feature 1539109 at https://help.zscaler.com https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscalertwo.net&deployment_date=2026-01-07&id=1535107 <div class="sub"><p>The following enhancements are available in 3rd-Party App Governance and Advanced SSPM:</p><h2>Settings</h2><p>The SaaS Tenants and Notifications tabs are added to the Settings page. These tabs allow you to view and manage the onboarded SaaS tenants and also configure Slack and email notifications.</p><p><a class="image-icon" href="#Settings-Page">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zia/about-settings-3rd-party-app-governance" target="_blank" data-entity-type="node" data-entity-uuid="776f333a-f4c1-4113-949b-07e97236f575" data-entity-substitution="canonical"><span class="cf0">About Settings in 3rd-Party App Governance</span></a>.</p><h2>Connect Drop-Down Menu</h2><p>A drop-down menu is added under the Connect button on the App Dashboard. From this drop-down menu, you can select the platform you want to connect to 3rd-Party App Governance or Advanced SSPM.</p><p><a class="image-icon" href="#Connect-Drop-Down-Menu">See image.</a></p><p><span class="cf0">To learn more, see </span><a href="https://help.zscaler.com/zia/connecting-your-platforms-3rd-party-app-governance" target="_blank" data-entity-type="node" data-entity-uuid="53f16e2c-c348-4fe7-924f-a74d711871e9" data-entity-substitution="canonical"><span class="cf0">Connecting Your Platforms to 3rd-Party App Governance</span></a><span class="cf0"> and </span><a href="https://help.zscaler.com/zia/connecting-your-platforms-advanced-sspm" target="_blank" data-entity-type="node" data-entity-uuid="ee68e82a-c6b5-47fb-980e-6aa8f2f2e648" data-entity-substitution="canonical"><span class="cf0">Connecting Your Platforms to Advanced SSPM</span></a><span class="cf0">.</span></p></div><div class="subc"><img src="https://help.zscaler.com/downloads/zia/release-notes/Settings_Page_RNotes.png" alt="Settings Page showing SaaS Tenants and Notifications Tabs" title="Settings Page"><a class="ck-anchor" id="Settings-Page" target="_blank"></a></div><div class="subc"><img src="https://help.zscaler.com/downloads/zia/release-notes/Connect_Drop_Down.png" alt="Connect Drop-Down Menu showing integration options" title="Connect Drop-Down Menu"><a class="ck-anchor" id="Connect-Drop-Down-Menu" target="_blank"></a></div> Feature Available Wed, 07 Jan 2026 08:00:00 GMT feature 1535107 at https://help.zscaler.com