https://help.zscaler.com/rss-feed/zpa/release-upgrade-summary-2026/private.zscaler.com Zscaler Private Access (ZPA) Release Upgrade Summary for service updates deployed per cloud in 2026. Thu, 08 Oct 2026 21:48:08 +0000 en-us https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-10-06&id=1542901 <div class="sub"><p>Zero Trust Browser supports the use of browser extensions, such as Okta Browser Plugin, 1Password, and Grammarly, during an isolation session. Administrators can enable browser extensions for users when configuring isolation profiles for Private Access in the Zscaler Admin Console. Admins can configure up to five browser extensions for a single isolation profile.</p><p><a class="image-icon" href="#enable-extensions">See image.</a></p><p>When enabled, users can access their configured browser extensions in the Zero Trust Mode menu while in an isolation session.</p><p><a class="image-icon" href="#extensions-icons">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-browser-extensions-isolation" target="_blank">Using Browser Extensions in Isolation</a>, <a href="https://help.zscaler.com/zero-trust-browser/creating-isolation-profiles-for-private-access" target="_blank" data-entity-type="node" data-entity-uuid="1d60a59a-f5ef-44aa-9acd-ec9a3fbddd64" data-entity-substitution="canonical">Creating Isolation Profiles for Private Access</a>, and <a href="https://help.zscaler.com/zero-trust-browser/using-isolation-menu-native-browser-experience" target="_blank">Using the Zero Trust Mode Menu in Native Browser Experience</a>.</p></div><div class="subc"><a class="ck-anchor" id="enable-extensions" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-browser-extensions-isolation/extensions.png" alt="Enabled Extensions for an isolation profile" title="Enabled Extensions for an isolation profile"></div><div class="subc"><a class="ck-anchor" id="extensions-icons" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/what-is-zero-trust-browser/zero-trust-mode-menu-extensions-options.png" alt="The Extensions icons in the Zero Trust Mode menu" title="The Extensions icons in the Zero Trust Mode menu"></div> Feature in Limited Availability Tue, 06 Oct 2026 07:00:00 GMT feature 1542901 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-10-05&id=1539735 <div class="sub"><p>Application segments that use User Datagram Protocol (UDP) can select an App Connector that is closest to the application. Contact Zscaler Support to enable this feature for your organization.</p><p><a class="image-icon" href="#image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-defined-application-segments" target="_blank">Configuring Defined Application Segments</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="image" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zpa-draft-articles/private-access-vm-password-requirements-stig-compliance-draft-doc-63073/zpa-app-segment-udp-w-closer-to-app.png" alt="Add Application Segment window" title="Add Application Segment window"></p></div> Feature in Limited Availability Mon, 05 Oct 2026 07:00:00 GMT feature 1539735 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-10-05&id=1542048 <p>Private Access (ZPA) supports global rules and policy groups to simplify the management of application access policies.</p><p>Global rules let you define common rule logic once and apply it consistently across application access policies, reducing repetitive configuration and helping maintain consistent policy enforcement.</p><div class="sub"><p><a class="image-icon" href="#global-rules">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-access-policies-global-rules" data-entity-type="node" data-entity-uuid="d8a127d5-0a61-4a85-b703-c7f35f3942a3" data-entity-substitution="canonical" target="_blank">About Access Policies for Global Rules</a>.</p></div><p>Policy groups provide a logical way to organize related application access policies by grouping rules that share common access requirements. Common criteria configured at the policy group level are automatically applied to every rule in the group and combined with each rule's criteria. This simplifies policy management, reduces repetitive configuration, and improves scalability as your deployment grows.</p><div class="sub"><p><a class="image-icon" href="#policy-groups">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-access-policies-policy-groups" data-entity-type="node" data-entity-uuid="a44adb22-b50a-441d-aa3b-1119a6d60c24" data-entity-substitution="canonical" target="_blank">About Access Policies for Policy Groups</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="global-rules" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/policies/access-policy/global-rules-rn.png" alt="Global Rules page" title="Global Rules page"></p></div><div class="subc"><p><a class="ck-anchor" id="policy-groups" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/policies/access-policy/policy-groups-rn.png" alt="Policy Groups page" title="Policy Groups page"></p></div> Feature in Limited Availability Mon, 05 Oct 2026 07:00:00 GMT feature 1542048 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-10-01&id=1541320 <div class="sub"><p>The access policy in VPN (for Legacy Apps) supports SAML and SCIM attributes for identity providers (IdP).</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-30&id=1541379" target="_blank">Support for IdP Attribute-Based VPN Access Policy</a>.</p></div> Feature in Limited Availability Thu, 01 Oct 2026 07:00:00 GMT feature 1541320 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-30&id=1541379 <p>Attribute objects distinguish between network-based IP address objects and identity provider (IdP) attribute objects. This allows you to create more powerful, identity-aware access policies by using SAML and SCIM attributes from your IdP directly in your rules.</p><div class="sub"><p><a class="image-icon" href="#add-idp-attribute">See image.</a></p></div><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-address-book" target="_blank" data-entity-type="node" data-entity-uuid="af25e9c4-2881-4016-a990-2e160990f59f" data-entity-substitution="canonical">About IP Address Objects</a> and <a href="https://help.zscaler.com/zpa/about-idp-attribute-objects" target="_blank" data-entity-type="node" data-entity-uuid="f57d8be1-ce46-4348-a838-ea4c87826fd3" data-entity-substitution="canonical">About IdP Attribute Objects</a>.</p><div class="subc"><p><a class="ck-anchor" id="add-idp-attribute" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/vpn-legacy-apps/idp-attribute-rn.png" data-entity-uuid="0" data-entity-type="image" alt="Adding an IdP attribute object on the add page" title="Add IdP Attribute Object"></p></div> Feature in Limited Availability Wed, 30 Sep 2026 07:00:00 GMT feature 1541379 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-21&id=1543202 <div class="sub"><p>Private Access (ZPA) supports Unified Role-Based Access Control (RBAC). Administrators can now view, create, and manage Private Access roles centrally on the Role Management page (Administration > Role Management > Role Management).</p><p><a class="image-icon" href="#role-management-page">See image.</a></p><p class="note">The existing Private Access Role Management page is deprecated if you use Unified RBAC.</p><p>To access Unified RBAC, contact your Zscaler Account team.</p><p>To learn more, see:</p><ul><li data-list-item-id="e7729781484d517d66ec169dc5fcb6851"><a href="https://help.zscaler.com/unified/about-role-management" target="_blank">About Role Management</a></li><li data-list-item-id="e1553decf5891c0c4d4c9500e5d35db9d"><a href="https://help.zscaler.com/zpa/about-private-access-roles" target="_blank">About Private Access Roles</a></li><li data-list-item-id="ef3ab17719cbe740cdc5091849cd7dde4"><a href="https://help.zscaler.com/zpa/configuring-administrator-roles" target="_blank">Configuring Administrator Roles</a></li></ul></div><div class="subc"><p><a class="ck-anchor" id="role-management-page" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/xc-role-management-page.png" alt="Role Management page" title="Role Management page within Zscaler Admin Console"></p></div> Feature in Limited Availability Mon, 21 Sep 2026 07:00:00 GMT feature 1543202 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-18&id=1543148 <div class="sub"><p>You can take the following actions when upgrading virtual machine (VM) agent groups for Microsegmentation in the Zscaler Admin Console:</p><ul><li data-list-item-id="e1a844b0b552b68f9cf27f27e10f2561d"><p>Halt an upgrade that is in progress from the Upgrade Status column on the Agent Groups page.</p><p><a class="image-icon" href="#halted-by-user">See image.</a></p></li><li data-list-item-id="eb86ad550ddf05944bb308eb08ee3a834"><p>Set the upgrade window when configuring an agent group. For example, if you start the upgrade at 8:00 AM and set the upgrade window to 12 hours, then the final agent upgrade required for the group starts no later than 8:00 PM.</p><p><a class="image-icon" href="#upgrade-window">See image.</a></p></li><li data-list-item-id="e8d142787993b0eac2e856e4749642df3"><p>Select the upgrade sequence (Serial or Parallel) and strategy (Halt next agent upgrade or Skip to next agent) when initiating an on-demand upgrade.</p><p><a class="image-icon" href="#on-demand-upgrade">See image.</a></p></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-agent-groups" target="_blank">About Agent Groups</a>, <a href="https://help.zscaler.com/zpa/configuring-agent-groups" target="_blank">Configuring Agent Groups</a>, and <a href="https://help.zscaler.com/zpa/managing-agent-groups" target="_blank">Managing Agent Groups</a>.</p></div><div class="subc"><a class="ck-anchor" id="halted-by-user" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/upgrade-status-halted-by-user.png" alt="Agent group with Halted By User upgrade status" title="Halted By User Upgrade Status"></div><div class="subc"><a class="ck-anchor" id="upgrade-window" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/upgrade-window.png" alt="Select the Window for the upgrade in hours" title="Select the upgrade window"></div><div class="subc"><a class="ck-anchor" id="on-demand-upgrade" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/upgrade-now-window.png" alt="Select the update sequence and strategy when initiating an on-demand upgrade" title="On-demand upgrade options"></div> Feature Available Fri, 18 Sep 2026 07:00:00 GMT feature 1543148 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-18&id=1543152 <div class="sub"><p>You can filter user-defined resource groups in Microsegmentation by type (i.e., managed or unmanaged) on the Resource Groups page in the Zscaler Admin Console.</p><p><a class="image-icon" href="#type-filter">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-resource-groups" target="_blank">About Resource Groups</a>.</p></div><div class="subc"><a class="ck-anchor" id="type-filter" target="_blank"></a><img src="https://help.zscaler.com/downloads/resource-groups-type-filter.png" alt="Type filter on Resource Groups page" title="Type filter on Resource Groups page"></div> Feature Available Fri, 18 Sep 2026 07:00:00 GMT feature 1543152 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-18&id=1545409 <div class="sub"><p>The Flow Log Aggregations page for Microsegmentation in the Zscaler Admin Console provides insight into your organization's aggregated network flows. You can view flows within a specific time period (up to the last 14 days) and filter the flows by AppZone and further by the source and destination resource groups within that AppZone.</p><p><a class="image-icon" href="#flow-log-aggregations">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-flow-log-aggregations" target="_blank">About Flow Log Aggregations</a>.</p></div><div class="subc"><a class="ck-anchor" id="flow-log-aggregations" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/microsegmentation/analytics/about-flow-log-aggregations/flow-log-aggregations-rn.png" alt="The Flow Log Aggregations page" title="The Flow Log Aggregations page"></div> Feature Available Fri, 18 Sep 2026 07:00:00 GMT feature 1545409 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-18&id=1545410 <div class="sub"><p>Perimeter policies allow you to systematically secure managed resource groups in Microsegmentation. You can create perimeter policies to easily define how Microsegmentation handles the resource group's inbound, outbound, and internal traffic (e.g., Block, Sim Block, Allow).</p><p>You can create a perimeter policy from the new Perimeter Policies page in the Zscaler Admin Console or from the Resource Groups page when creating a resource group.</p><p><a class="image-icon" href="#perimeter-policies">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-perimeter-policies" target="_blank">About Perimeter Policies</a>, <a href="https://help.zscaler.com/zpa/adding-perimeter-policy" target="_blank">Adding a Perimeter Policy</a>, and <a href="https://help.zscaler.com/zpa/configuring-resource-groups" target="_blank">Configuring Resource Groups</a>.</p></div><div class="subc"><a class="ck-anchor" id="perimeter-policies" target="_blank"></a><img src="https://help.zscaler.com/downloads/microsegmentation-perimeter-policies.png" alt="Perimeter Policies page" title="Perimeter Policies page"></div> Feature Available Fri, 18 Sep 2026 07:00:00 GMT feature 1545410 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-18&id=1542885 <div class="sub"><p>Microsegmentation provides policy recommendations for resource groups based on historical network flows. When selecting a resource group on the Application Map in the Zscaler Admin Console, you can view managed and unmanaged flows in a table. At the same time, a drawer opens with the option to review policy recommendations based on these flows.</p><p><a class="image-icon" href="#application-map">See image.</a></p><p>Recommendations are listed on a page within the resource group. You can filter managed and unmanaged flows by direction (i.e., inbound and outbound). You can review and accept a recommendation as is, quickly applying the new policy and protecting flows. Alternatively, you can edit the recommendation, resolving conflicts as required, before applying it as a new policy or merging it with an existing policy for your organization.</p><p><a class="image-icon" href="#policy-recommendations">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/viewing-application-map" target="_blank">Viewing the Application Map</a>, <a href="https://help.zscaler.com/zpa/about-policy-recommendations-resource-groups" target="_blank">About Policy Recommendations for Resource Groups</a>, and <a href="https://help.zscaler.com/zpa/reviewing-policy-recommendations-resource-groups" target="_blank">Reviewing Policy Recommendations for Resource Groups</a>.</p></div><div class="subc"><a class="ck-anchor" id="application-map" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/profiles/private-access-profiles/creating-isolation-profiles-for-private-access/application-map.png" alt="The Application Map displays a resource group's traffic flows and provides an option to review recommended policies" title="Information for a resource group on the Application Map"></div><div class="subc"><a class="ck-anchor" id="policy-recommendations" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/profiles/private-access-profiles/creating-isolation-profiles-for-private-access/policy-recommendation.png" alt="Policy recommendations for a resource group" title="Policy recommendations for a resource group"></div> Feature Available Fri, 18 Sep 2026 07:00:00 GMT feature 1542885 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-15&id=1542993 <p>A recommended update was released that includes updated App Connector and Private Service Edge for Private Access (ZPA) RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.57.3.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Tue, 15 Sep 2026 07:00:00 GMT feature 1542993 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-04&id=1543179 <div class="sub"><p>Host partners can apply AppProtection policies to federated applications to enforce protection controls on guest partner users who are accessing those applications.</p><p><a class="image-icon" href="#federated-applications-appprotection-policy">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-appprotection-policies" target="_blank">Configuring AppProtection Policies</a> and <a href="https://help.zscaler.com/zpa/understanding-business-business-b2b-federation" target="_blank">Understanding Business-to-Business (B2B) Federation</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="federated-applications-appprotection-policy" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/xc-appprotection-policy-add-rule-federated-applications.png" alt="Selecting the Federated Applications criteria" title="Federated Applications criteria when configuring an AppProtection Policy Rule"></p></div> Feature in Limited Availability Fri, 04 Sep 2026 07:00:00 GMT feature 1543179 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-03&id=1543245 <p>A recommended update was released that includes updated App Connector and Private Service Edge for Private Access (ZPA) RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.56.9.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature In Deployment Thu, 03 Sep 2026 07:00:00 GMT feature 1543245 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-01&id=1538918 <div class="sub"><p>Log Streaming Service (LSS) support is available for the following data types to enable end-to-end tracing of user connectivity, provide per-session flow details with policy decisions, and ensure log streaming to centralized systems for the VPN (for Legacy Apps) service:</p><ul><li data-list-item-id="ec4afb76fddc0aeef7825c052b0eef190">User Status - VPN Service Edge (IP Address Reservation)</li><li data-list-item-id="ea0e18a590b6e52c00b6751fec0242dc4">User Status - VPN Service Edge</li><li data-list-item-id="ecedd58d89f362fa59396d6fa3002115f">Traffic Flow - VPN</li></ul><p>You can allow your SIEM servers to link and correlate user status logs generated from User Status - VPN Service Edge (IP Address Reservation) and User Status - VPN Service Edge by using the shared <code>ConnectionID</code> key field to merge and integrate the data.</p><p><a class="image-icon" href="#lss">See image.</a></p></div><p>To learn more, see:</p><ul><li data-list-item-id="e7844d5f2533ac8b6903112ca9ab0ed09"><a href="https://help.zscaler.com/zpa/about-log-streaming-service" target="_blank">About the Log Streaming Service</a></li><li data-list-item-id="e19723c692aa7e9eccaea113ee3a477c2"><a href="https://help.zscaler.com/zpa/configuring-log-receiver" target="_blank">Configuring a Log Receiver</a></li><li data-list-item-id="eb8ea40efa96805e8add014df63cece82"><a href="https://help.zscaler.com/zpa/understanding-user-status-vpn-service-edge-ip-address-reservation-log-fields" target="_blank">Understanding User Status - VPN Service Edge (IP Address Reservation) Log Fields</a></li><li data-list-item-id="e4f97cfd598c70e12eb37a6e03dc69eb6"><a href="https://help.zscaler.com/zpa/understanding-user-status-vpn-service-edge-log-fields" target="_blank">Understanding User Status - VPN Service Edge Log Fields</a></li><li data-list-item-id="ebdec0f4df457ef574c7226b489d1053b"><a href="https://help.zscaler.com/zpa/understanding-traffic-flow-log-fields-vpn-legacy-apps" target="_blank" data-entity-type="external">Understanding Traffic Flow Log Fields - VPN for Legacy Apps</a></li></ul><div class="subc"><p><a class="ck-anchor" id="lss" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/log-streaming-service/understanding-user-status-vpn-service-edge-log-fields/ZPA-log-receiever-vpn-data-type%20(1).png" alt="Add Log Receiver window showing the VPN related data types" title="VPN Data Types in Add Log Receiver Window"></p></div> Feature in Limited Availability Tue, 01 Sep 2026 07:00:00 GMT feature 1538918 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-01&id=1532498 <div class="sub"><p>Administrators can create Microtenants based on SAML attributes, SCIM attributes, or SCIM group criteria. Microtenants can be created using logical operators (i.e., AND and OR) to combine SAML and SCIM criteria. The same functionality is also supported via the cloud service API.</p><p><a class="image-icon" href="#configuring-a-microtenant">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-microtenants" target="_blank">About Microtenants</a> and <a href="https://help.zscaler.com/zpa/configuring-microtenants" target="_blank">Configuring Microtenants</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="configuring-a-microtenant" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/zpa-add-microtenant-drawer-saml-scim.png" alt="Add Microtenant drawer in the ZPA Admin Portal" title="Adding a Microtenant"></p></div> Feature in Limited Availability Tue, 01 Sep 2026 07:00:00 GMT feature 1532498 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-31&id=1539624 <p>Chrome Enterprise browser is supported for Privileged Remote Access (PRA).</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-chrome-enterprise-browser-connector-settings" target="_blank" data-entity-type="node" data-entity-uuid="5c19692a-c0ca-4b08-aadf-6aa680cbfe15" data-entity-substitution="canonical">Configuring Chrome Enterprise Browser Connector Settings</a>.</p> Feature Available Mon, 31 Aug 2026 07:00:00 GMT feature 1539624 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-31&id=1543122 <p>A recommended update was released that includes an updated Network Connector RPM package for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version for Network Connector is 26.56.8. </p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Mon, 31 Aug 2026 07:00:00 GMT feature 1543122 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-27&id=1529597 <p>Emergency access for Privileged Remote Access (PRA) is supported for tenants subscribed to Authentication Service for users. As part of this change, the IdP API Token field is hidden, and the User Group Name field is disabled on the Emergency Access page.</p><p class="note">Authentication Service must be used as an identity provider (IdP) instead of Okta after migrating Private Access (ZPA) tenants to Authentication Service. Additionally, tenants subscribed to Authentication Service must add a guest domain with Arbitrary Guest Domains enabled, and must ensure that the guest user is assigned to the Zscaler Emergency Access User Group in Authentication Service.</p><p>To learn more, see:</p><ul><li data-list-item-id="eba589e5d27fb63e3b80d7bb0750f5054"><a href="https://help.zscaler.com/zpa/configuring-emergency-access" target="_blank">Configuring Emergency Access</a></li><li data-list-item-id="e99aac05524a75687d760c1bb4f8d2723"><a href="https://help.zscaler.com/authentication-service/adding-guest-domains" target="_blank">Adding Guest Domains</a></li><li data-list-item-id="e8b73568e62a8061a481cab20500de4d7"><a href="https://help.zscaler.com/authentication-service/adding-users" target="_blank">Adding Users</a></li><li data-list-item-id="e90ae2d21f90319e951adbc6e8c7e3135"><a href="https://help.zscaler.com/authentication-service/assigning-entitlements-users-and-user-groups" target="_blank">Assigning Entitlements to Users and Groups</a></li><li data-list-item-id="e9ef128cdb3a605bff358bcb804dac4a3"><a href="https://help.zscaler.com/authentication-service/what-authentication-service" target="_blank">What Is Authentication Service?</a></li></ul> Feature Available Thu, 27 Aug 2026 07:00:00 GMT feature 1529597 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-25&id=1532251 <p>A new log type (<code>zpn_siem_type_bc_event_log</code>) for Business Continuity Events is returned when sending a <code>GET</code> request to <code>/mgmtconfig/v2/admin/customers/{customerId}/lssConfig</code> using the cloud service API.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/managing-log-streaming-service-configurations-using-api" target="_blank">Managing Log Streaming Service Configurations Using API</a>.</p> Feature in Limited Availability Tue, 25 Aug 2026 07:00:00 GMT feature 1532251 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-25&id=1535406 <p>This Business Continuity version supports streaming logs directly to the SIEM log receiver using the Log Streaming Service (LSS) App Connectors.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-25&id=1532408" target="_blank">Log Streaming Service (LSS) Support for Business Continuity events</a>.</p> Feature Available Tue, 25 Aug 2026 07:00:00 GMT feature 1535406 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-25&id=1532408 <p>An update was released in the LSS to provide unique logs for Business Continuity events. The new log type can be selected when <a href="https://help.zscaler.com/zpa/configuring-log-receiver" target="_blank" data-entity-type="node" data-entity-uuid="fc52b4d8-3236-49b0-be4e-aaa16c117e51" data-entity-substitution="canonical">configuring a log receiver</a>.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/understanding-business-continuity-event-log-fields" target="_blank" data-entity-type="node" data-entity-uuid="d98025d7-1eb4-4b00-8562-f44437cb5cc2" data-entity-substitution="canonical">Understanding Business Continuity Event Log Fields</a>.</p> Feature Available Tue, 25 Aug 2026 07:00:00 GMT feature 1532408 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-25&id=1542109 <div class="sub"><p>The following enhancements have been made to the Privileged Remote Access (PRA) File Transfer System My Files feature in the PRA Portal:</p></div><div class="sub"><ul><li data-list-item-id="ee2ec93576d80690f3d197afcb1fff057"><p>You can upload up to 10 files at once, up to the 10 GB storage limit. This helps reduce wait time when staging files across both destinations.</p><p><a class="image-icon" href="#Upload" target="_blank">See image.</a></p></li></ul></div><div class="sub"><ul><li data-list-item-id="eb36c67822d5c1c797af652242625318c"><p>Stats on used storage and total storage are available to view on the My Files page.</p><p><a class="image-icon" href="#Storage" target="_blank">See image.</a></p></li></ul></div><div class="sub"><ul><li data-list-item-id="e10d385865cf15ffa91c4abc41f8ba20e"><p>You can select and delete multiple files at once.</p><p><a class="image-icon" href="#Delete" target="_blank">See image.</a></p></li></ul></div><div class="sub"><p class="note">This feature is only available with the PRA Advanced subscription. Contact your Zscaler Account team for more information.</p><p>To learn more, see:</p><ul><li data-list-item-id="eab16a31f2714b63178345eff7161c9f5"><a class="url-internal" href="https://help.zscaler.com/zpa/about-privileged-remote-access-pra-file-transfer-system" target="_blank">About the Privileged Remote Access (PRA) File Transfer System</a></li><li data-list-item-id="e2c0a752a65e237b01cce670c59fbc238"><a class="url-internal" href="https://help.zscaler.com/zpa/about-privileged-remote-access-pra-file-transfer-system" target="_blank">Accessing Privileged Remote Access Files</a></li><li data-list-item-id="e8dbf42f28e2dad27239fcb1dfcabab58"><a class="url-internal" href="https://help.zscaler.com/zpa/uploading-and-transferring-files-pra-file-transfer-system" target="_blank">Uploading and Transferring Files for the PRA File Transfer System</a></li></ul></div><div class="subc"><p><a class="ck-anchor" id="Upload" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/MyFilesMultipleFileUploadFromPC.png" alt="Uploading multiple files to My Files" title="Uploading multiple files to My Files"></p></div><div class="subc"><p><a class="ck-anchor" id="Delete" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/MyFilesMultipleFileDelete.png" alt="Selecting multiple files for deletion in My Files" title="Select multiple files for deletion in My Files"></p></div><div class="subc"><p><a class="ck-anchor" id="Storage" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/MyFilesStorageLimit.png" alt="Storage limit in My Files" title="Storage limit location in My Files"></p></div> Feature Available Tue, 25 Aug 2026 07:00:00 GMT feature 1542109 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-21&id=1538863 <p>You can configure application segments to inspect traffic with Internet & SaaS (ZIA) and Multimatch.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-application-segments" target="_blank">Configuring Defined Application Segments</a> and <a href="https://help.zscaler.com/zpa/using-app-segment-multimatch" target="_blank">Using Application Segment Multimatch</a>.</p> Feature in Limited Availability Fri, 21 Aug 2026 07:00:00 GMT feature 1538863 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-14&id=1542051 <p>Microsegmentation supports Red Hat Enterprise Linux (RHEL) distribution version 10.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/supported-versions-os-compatibility-microsegmentation" target="_blank">Supported Versions & OS Compatibility for Microsegmentation</a>.</p> Feature Available Fri, 14 Aug 2026 07:00:00 GMT feature 1542051 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-14&id=1542241 <p>Microsegmentation supports SUSE Linux Enterprise Server (SLES) 16.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/supported-versions-os-compatibility-microsegmentation" target="_blank">Supported Versions & OS Compatibility for Microsegmentation</a>.</p> Feature Available Fri, 14 Aug 2026 07:00:00 GMT feature 1542241 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-10&id=1541812 <div class="sub"><p>An update was released to support Log Streaming Service (LSS) App Connector-based log streaming to SIEM servers during Business Continuity.</p><p><a class="image-icon" href="#lss-siem-business_continuity-log-1541812">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-private-clouds" target="_blank" data-entity-type="node" data-entity-uuid="7b9a87aa-d09f-417e-b70a-60917dfdc275" data-entity-substitution="canonical">Configuring Private Clouds</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="lss-siem-business_continuity-log-1541812" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/zpa-bc-remote-lss_1.png" alt="Viewing the Remote LSS option" title="The Private Cloud page"></p></div> Feature Available Mon, 10 Aug 2026 07:00:00 GMT feature 1541812 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-10&id=1542181 <p>A recommended update was released that includes updated App Connector and Private Service Edge for Private Access (ZPA) RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.56.5.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Mon, 10 Aug 2026 07:00:00 GMT feature 1542181 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-07&id=1542022 <p>You can export diagnostics logs as CSV files for offline troubleshooting, auditing, and reporting.</p><div class="sub"><p><a class="image-icon" href="#diagnostics-page">See image.</a></p></div><p>For smaller exports, the CSV file is generated immediately. Larger exports are processed as background jobs and become available for download after processing completes.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/exporting-diagnostics-logs" target="_blank" data-entity-type="node" data-entity-uuid="9a9ee71c-1ff3-495f-b882-1e7ac6e1fb07" data-entity-substitution="canonical">Exporting Diagnostics Logs</a>.</p><div class="subc"><p><a class="ck-anchor" id="diagnostics-page" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/export_diagnostics_logs.png" alt="Diagnostics page" title="Diagnostics page"></p></div> Feature Available Fri, 07 Aug 2026 07:00:00 GMT feature 1542022 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-06&id=1541584 <p>Updated Red Hat Enterprise Linux 9 Network Connector images are available for VMware. This image update includes a 4 GB boot partition that exceeds Red Hat's recommendations to help support seamless updates.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/network-connector-software-platform" target="_blank">Network Connector Software by Platform</a>.</p> Feature Available Thu, 06 Aug 2026 07:00:00 GMT feature 1541584 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-05&id=1541796 <div class="sub"><p>If an admin configures restrictions to clipboard actions for a user's profile and the user attempts those actions, the user sees a notification appear in the Zero Trust Mode menu. If clicked, the Clipboard sidebar opens and shows the details of the notification for the restriction attempt.</p><p><a class="image-icon" href="#Clipboard-Restrictions">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-zero-trust-mode-menu-native-browser-experience" target="_blank" data-entity-type="node" data-entity-uuid="1d60a59a-f5ef-44aa-9acd-ec9a3fbddd64" data-entity-substitution="canonical">Using the Zero Trust Mode Menu in Native Browser Experience</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Clipboard-Restrictions" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-isolation-bar-native-browser-experience/Clipboard-Restriction-notification_copy-paste-restrictions_isolation-bar.png" alt="The Clipboard notifications show that both actions of copy and pasting were blocked" title="The Zero Trust Mode menu and Clipboard"></p></div> Feature Available Wed, 05 Aug 2026 07:00:00 GMT feature 1541796 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-05&id=1541797 <div class="sub"><p>The following updates have been made to the end user isolation experience for Zero Trust Browser:</p><ul><li data-list-item-id="e1367f0340622606ef68846a5116c35c3">Download Completion: When a user downloads a file while in isolation, a temporary notification appears to confirm when the file has completed downloading. The user can click the View button from the notification to see the file name and location in the Protected Storage. Additionally, they can click the Protected Storage icon from the Zero Trust Mode menu to open the Protected Storage section and view all file transfer notifications. <br><a class="image-icon" href="#Download-Completion">See image.</a></li><li data-list-item-id="e7ae54860b61d073b71924f6d7b14121e">Upload Options: A user can upload a file in multiple different ways while in isolation, such as using the Upload File button in the Protected Storage and uploading files from their local machine to a website.<br><a class="image-icon" href="#Upload-File-button">See image.</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-zero-trust-mode-menu-native-browser-experience" target="_blank" data-entity-type="node" data-entity-uuid="1d60a59a-f5ef-44aa-9acd-ec9a3fbddd64" data-entity-substitution="canonical">Using the Zero Trust Mode Menu in Native Browser Experience</a> and <a href="https://help.zscaler.com/zero-trust-browser/transferring-and-viewing-files-isolation" target="_blank" data-entity-type="node" data-entity-uuid="3cd1a196-5d1b-4247-8024-0173e54895eb" data-entity-substitution="canonical">Transferring and Viewing Files in Isolation</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Download-Completion" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-isolation-bar-native-browser-experience/Download-Completion-notification_Protected-Storage_isolation-bar.png" alt="The notification confirms that a file has finished downloading " title="A view of the download confirmation"></p></div><div class="subc"><p><a class="ck-anchor" id="Upload-File-button" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-isolation-bar-native-browser-experience/Upload-button_Protected-Storage_isolation-bar.png" alt="A view of the Protected Storage and Upload File button" title="The options show the Upload File button and how to access the Protected Storage"></p></div> Feature Available Wed, 05 Aug 2026 07:00:00 GMT feature 1541797 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-05&id=1541795 <div class="sub"><p>The Zero Trust Mode icon that indicates a live isolation session for Zero Trust Browser hides an expandable menu for the user to access different functions:</p><ul><li data-list-item-id="ecd29816960f71c69b7f1e4016466cca6">The Protected Storage icon allows users to view all file transfers for the isolation session.</li><li data-list-item-id="ebfc88a5e95f80238a14bde2959f5cab4">The Clipboard icon allows users to view notifications about clipboard functions and restrictions.</li><li data-list-item-id="eed9095342c7537d94ef0ddd6a719acc5">The Print icon allows users to view options and information for printing settings.</li><li data-list-item-id="e1ac44f2cd3a7adaae20c8c49b422cc4d">The Troubleshoot icon allows users to start a debug session, view network latency, access ip.zscaler.com, or export isolation session logs.</li><li data-list-item-id="e9bffd026316e2426d72dfc16856ea20b">The Information icon allows users to view the settings configured by admins for an isolation profile. This includes user restrictions and disabled tools.</li></ul><p>Clicking the checkmark Zero Trust Mode icon at the bottom of the menu collapses the options back under the floating icon.</p><p><a class="image-icon" href="#Isolation-icon-menu">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-zero-trust-mode-menu-native-browser-experience" target="_blank" data-entity-type="node" data-entity-uuid="1d60a59a-f5ef-44aa-9acd-ec9a3fbddd64" data-entity-substitution="canonical">Using the Zero Trust Mode Menu in Native Browser Experience</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Isolation-icon-menu" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-isolation-bar-native-browser-experience/Isolation-bar-main-menu_2.png" alt="The Zero Trust Mode menu shows different user options" title="The Zero Trust Mode menu"></p></div> Feature Available Wed, 05 Aug 2026 07:00:00 GMT feature 1541795 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-31&id=1542050 <div class="sub"><p>Canada has been added as an isolation region in Zero Trust Browser. You can select the region when configuring isolation profiles for Private Access (ZPA).</p><p><a class="image-icon" href="#canada-region">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/creating-isolation-profiles-for-private-access" target="_blank">Creating Isolation Profiles for Private Access</a>.</p></div><div class="subc"><a class="ck-anchor" id="canada-region" target="_blank"></a><img src="https://help.zscaler.com/downloads/canada-region-private-access-isolation-profile.png" alt="Canada region in Private Access isolation profile" title="Canada region in Private Access isolation profile"></div> Feature Available Fri, 31 Jul 2026 07:00:00 GMT feature 1542050 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-23&id=1542020 <p>The App Connector Docker image has been updated to use high ciphers for microdnf calls.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/zpa-app-connector-software-by-platform" target="_blank">App Connector Software by Platform</a>.</p> Feature Available Thu, 23 Jul 2026 07:00:00 GMT feature 1542020 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-23&id=1542027 <p>An updated Docker image is available for Private Service Edge for Private Access (ZPA).</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/private-service-edge-software-by-platform" target="_blank">Private Service Edge Software by Platform</a>.</p> Feature Available Thu, 23 Jul 2026 07:00:00 GMT feature 1542027 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-23&id=1541583 <p>Updated images for Red Hat Enterprise Linux 9 App Connector, Private Service Edge for Private Access (ZPA), Private Cloud Controller, and Network Connector are available for the following:</p><ul><li data-list-item-id="e9c1d0e6e1a0184c803a8eb26f4babd9a">Amazon Web Services (AWS)</li><li data-list-item-id="e5cc1599aaae6a7da6591d57d48e903f9">Google Cloud Platform (GCP)</li><li data-list-item-id="e4216b536ac8d1044b6ed622bf9e6da3f">Microsoft Azure</li><li data-list-item-id="e1169a1cd8469833578e8a2d8a9c9d218">Nutanix AHV for App Connector and Private Service Edge</li><li data-list-item-id="e9ec5b5df6e9a7dbdd1cacfac16f2a7b5">VMware for App Connector, Private Service Edge, and Private Cloud Controller</li></ul><p>These image updates include a 4 GB boot partition that exceeds Red Hat's recommendations to help support seamless OS updates.</p><p>To learn more, see:</p><ul><li data-list-item-id="ecf9e112da50b8b45eca5dcde271cbbda"><a href="https://help.zscaler.com/zpa/zpa-app-connector-software-by-platform" target="_blank">App Connector Software by Platform</a></li><li data-list-item-id="e776ae28c8dcaebc5b95c20c3ff90662f"><a href="https://help.zscaler.com/zpa/private-service-edge-software-by-platform" target="_blank">Private Service Edge Software by Platform</a></li><li data-list-item-id="e24b7a81f5dde1a2d60614d6e2e634890"><a href="https://help.zscaler.com/zpa/private-cloud-controller-software-platform" target="_blank">Private Cloud Controller Software by Platform</a></li><li data-list-item-id="ee95c592f2f47eda975107e9263afd02b"><a href="https://help.zscaler.com/zpa/network-connector-software-platform" target="_blank">Network Connector Software by Platform</a></li></ul> Feature Available Thu, 23 Jul 2026 07:00:00 GMT feature 1541583 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-20&id=1542029 <p>An update was released to provide Adaptive Access Engine support for User Activity diagnostics and access policies. You can filter the User Activity diagnostics page by user profiles and adaptive access device profiles, and you can select Adaptive Access Profiles as a criteria when configuring access policies.</p><p>To learn more, see:</p><ul><li data-list-item-id="e479d67dfc22e28704bbf59809315aa36"><a href="https://help.zscaler.com/unified/understanding-adaptive-access-engine" target="_blank">Understanding Adaptive Access Engine</a></li><li data-list-item-id="e49fb8d7e3c4bc2be6646e520c23a370b"><a href="https://help.zscaler.com/zpa/accessing-user-activity-diagnostics" target="_blank">Accessing User Activity Diagnostics</a></li><li data-list-item-id="ec60a663d45011644bc6df8a75f582862"><a href="https://help.zscaler.com/zpa/configuring-access-policies" target="_blank">Configuring Access Policies</a></li></ul> Feature in Limited Availability Mon, 20 Jul 2026 07:00:00 GMT feature 1542029 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-20&id=1535252 <div class="sub"><p>B2B Federation supports secure sharing of resources between business partners, and allows organizations to establish trusted cross-partner relationships. You can create Partner Federation requests, manage incoming and outgoing requests, and manage federated partners that have established trust. After establishing trust between two organizations, admins can federate application segments to partners and enforce Zero Trust granular controls for shared resources and users. The same functionality is supported via the Private Access (ZPA) cloud service API.</p><p><a class="image-icon" href="#federated-partners-page">See image.</a></p><p>To learn more, see:</p><ul><li data-list-item-id="ecb105ec64ee2aba67f4b41b3780693fc"><a href="https://help.zscaler.com/zpa/understanding-business-business-b2b-federation" target="_blank" data-entity-type="node" data-entity-uuid="e9cd12ba-7c79-4768-9001-209b8891d845" data-entity-substitution="canonical">Understanding Business-to-Business (B2B) Federation</a></li><li data-list-item-id="ea8a7d38dc6ee7747a1d0a65f7bed37e4"><a href="https://help.zscaler.com/zpa/about-federated-partners" target="_blank">About Federated Partners</a></li><li data-list-item-id="ec59a3457db02788da9281c1388536aa7"><a href="https://help.zscaler.com/zpa/about-pending-requests-partners" target="_blank">About Pending Requests for Partners</a></li><li data-list-item-id="ea886c28f37e33f0c9a51745bfccf217f"><a href="https://help.zscaler.com/zpa/configuring-business-business-federation" target="_blank">Configuring Business-to-Business Federation</a></li><li data-list-item-id="e6109509646894bf4bb57b9fa8f0affd9"><a href="https://help.zscaler.com/legacy-apis/federating-partners-using-api" target="_blank">Federating Partners Using API</a></li><li data-list-item-id="e816a937e8cd63e048d65d238d7626d47"><a href="https://help.zscaler.com/legacy-apis/federating-applications-using-api" target="_blank">Federating Applications Using API</a></li><li data-list-item-id="ef2b02941fb8bbe176f0eddbdcadafb99"><a href="https://help.zscaler.com/legacy-apis/obtaining-access-policy-details-federated-applications-using-api" target="_blank">Obtaining Access Policy Details for Federating Applications Using API</a></li></ul></div><div class="subc"><p><a class="ck-anchor" id="federated-partners-page" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/xc-federated-partners-page-release-note.png" alt="Viewing the Partners page in the Zscaler Admin Console" title="Viewing the Partners page in the Zscaler Admin Console"></p></div> Feature in Limited Availability Mon, 20 Jul 2026 07:00:00 GMT feature 1535252 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-20&id=1541922 <p>Step-up authentication is supported for Privileged Remote Access (PRA) and enhances security by only allowing access to applications after users complete additional authentication. Conditional access is supported for step-up authentication in the Zscaler Admin Console.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-access-policies" target="_blank" data-entity-type="node" data-entity-uuid="fbf8b5b0-9812-401b-9318-4110f4b84086" data-entity-substitution="canonical">Configuring Access Policies</a> and <a href="https://help.zscaler.com/zidentity/understanding-step-up-authentication" target="_blank">Understanding Step-Up Authentication</a>.</p> Feature Available Mon, 20 Jul 2026 07:00:00 GMT feature 1541922 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-16&id=1538765 <div class="sub"><p>You can edit App Connector groups on the Where are my apps being served from? page to resolve unknown app hosting and location details.</p><p><a class="image-icon" href="#edit-app-connector-group">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/viewing-where-your-apps-are-served" target="_blank">Viewing Where Your Apps Are Served</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="edit-app-connector-group" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/dashboard-diagnostics/applications-and-users-monitoring/applications-users-insights/viewing-application-and-user-group-relationships/xc-where-are-your-apps-being-served-from-app-connector-groups-release-notes.png" alt="Viewing the App Connector Groups Navigation " title="Viewing the App Connector Groups Navigation in the Zscaler Admin Console"></p><p><img src="https://help.zscaler.com/downloads/zpa/dashboard-diagnostics/applications-and-users-monitoring/applications-users-insights/viewing-application-and-user-group-relationships/xc-app-connector-groups-drawer.png" alt="Viewing the App Connector Groups drawer" title="Viewing the App Connector Groups drawer in the Zscaler Admin Console"></p></div> Feature Available Thu, 16 Jul 2026 07:00:00 GMT feature 1538765 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-14&id=1538717 <div class="sub"><p>Private Access (ZPA) supports the <code>journalctl</code> command for App Connectors, Private Service Edges, Private Cloud Controllers, and Network Connectors to collect service logs or full system logs for remote troubleshooting.</p><p><a class="image-icon" href="#add-session">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/accessing-and-viewing-support-information" target="_blank">Accessing and Viewing Support Information</a> or <a href="https://help.zscaler.com/zpa/configuring-vpn-diagnostics-sessions" target="_blank">Configuring VPN Diagnostic Sessions</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="add-session" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/vpn-legacy-apps/vpn-configuration/configuring-network-segments/zpa-add-session-journalctl.png" alt="JOURNALCTL feature in the Add Session page" title="The Add Session page"></p></div> Feature Available Tue, 14 Jul 2026 07:00:00 GMT feature 1538717 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-13&id=1539756 <div class="sub"><p>Private Access (ZPA) supports the Get Network Interfaces command to collect a list of network interfaces used by an App Connector to help with remote troubleshooting.</p><p><a class="image-icon" href="#session-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/accessing-and-viewing-support-information" target="_blank">Accessing and Viewing Support Information</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="session-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/dashboard-diagnostics/accessing-and-viewing-support-information/zpa-add-session-get-network-interface-appc.png" alt="Add Session window with Get Network Interfaces command selected" title="The Add Session window"></p></div> Feature Available Mon, 13 Jul 2026 07:00:00 GMT feature 1539756 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-13&id=1541210 <div class="sub"><p>Network settings for App Connectors help improve administrative efficiency and support secure integration. You can configure settings to perform remote commands that enable SSH on the OS, and also update software interface settings across Private Access (ZPA) virtual machines, such as AWS, Azure, and GCP.</p><p><a class="image-icon" href="#net-setting-image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-connector-groups" target="_blank">About App Connector Groups</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="net-setting-image" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-app-connector-release-notes/release-upgrade-summary-2026/zpa-edit-network-settings.png" alt="Editing Network Settings for an App Connector" title="Edit Network Settings page"></p></div> Feature Available Mon, 13 Jul 2026 07:00:00 GMT feature 1541210 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-10&id=1541512 <p>Agents on the Windows operating system exclude infrastructure traffic (i.e., loopback IP addresses) from the flow logs, reducing noise and improving visibility. With this update, both Windows and Linux agents provide this streamlined flow data for organizations to monitor and analyze.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-flow-logs" target="_blank">About Flow Logs</a>.</p> Feature Available Fri, 10 Jul 2026 07:00:00 GMT feature 1541512 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-10&id=1540316 <p>Isolated sessions now automatically restore their web pages if they time out on a user's device. If a session is idle for longer than the timeout of 10 minutes, the isolated page automatically refreshes itself. When this action occurs, the banner notification announcing the start of isolation is disabled. This feature is different from Persistent State, which is enabled per isolation profile to carry over data from an expired session to a new session.</p> Feature Available Fri, 10 Jul 2026 07:00:00 GMT feature 1540316 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-10&id=1541477 <p>Microsegmentation supports Ubuntu 26.04 LTS.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/supported-versions-os-compatibility-microsegmentation" target="_blank">Supported Versions & OS Compatibility for Microsegmentation</a>.</p> Feature Available Fri, 10 Jul 2026 07:00:00 GMT feature 1541477 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-10&id=1541479 <p>Microsegmentation supports Microsoft Windows Server 2025.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/supported-versions-os-compatibility-microsegmentation" target="_blank">Supported Versions & OS Compatibility for Microsegmentation</a>.</p> Feature Available Fri, 10 Jul 2026 07:00:00 GMT feature 1541479 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-01&id=1541213 <p>Enterprise Browser for Zero Trust Browser is a dedicated, hardened Chromium browser that protects users from everyday browser-based threats. Users can access private applications for their organization while utilizing browser protection for daily operations such as file transfer, data sharing, and cloud service authentication.</p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/understanding-enterprise-browser" target="_blank" data-entity-type="node" data-entity-uuid="c1125f6f-bbd9-4c85-8e94-0b790dd28aca" data-entity-substitution="canonical">Understanding Enterprise Browser</a>.</p> Feature Available Wed, 01 Jul 2026 07:00:00 GMT feature 1541213 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-29&id=1541314 <p>A recommended update was released that includes updated App Connector and Private Service Edge for Private Access (ZPA) RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.55.1.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Mon, 29 Jun 2026 07:00:00 GMT feature 1541314 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-23&id=1532590 <div class="sub"><p>You can configure device posture profile failure notifications when you create an access policy. This feature notifies end users when a device posture check fails for associated Zscaler Client Connector posture profiles. Click Manage Notifications in the Add Access Policy window to set up notification messages in the Zscaler Client Connector Portal.</p><p><a class="image-icon" href="#Notification">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-access-policies" target="_blank" data-entity-type="node" data-entity-uuid="fbf8b5b0-9812-401b-9318-4110f4b84086" data-entity-substitution="canonical">Configuring Access Policies</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Notification" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/dashboard-diagnostics/applications-users-monitoring/understanding-private-access-session-status-codes/Updated%20Device%20Posture%20Failure%20selected.jpg" alt="Configurations for Device Posture Failure Notification in the Add Access Policy window" title="Configurations for Device Posture Failure Notification in the Add Access Policy window"></p></div> Feature Available Tue, 23 Jun 2026 07:00:00 GMT feature 1532590 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-23&id=1540986 <p>A new Event Monitoring & Notification API service monitors the health of App Connectors to ensure optimal performance and helps you make informed decisions about resource allocations. You can monitor the following health diagnostics, App Connector status, and network detail events:</p><ul class="alternate" style="list-style-type:disc;" type="square"><li data-list-item-id="e6d1b54b024799824f8c9bcce89e57d26">CPU threshold violations</li><li data-list-item-id="edc2149fc794946b155a3b5a0e8013363">Memory threshold violations</li><li data-list-item-id="e03a8de342670fa5a0f7c8c1758a6c5bc">Disk space alerts</li><li data-list-item-id="e3de430dc333930ed5712c3a1edc98858">Bandwidth utilization events</li><li data-list-item-id="ebde310b886f0de06c19c1a76051cbcdd">File descriptor exhaustion</li><li data-list-item-id="ed340a5421fc146b0b1f53cc010e72197">CPU starvation events</li><li data-list-item-id="e3d4395ceb31e1d116a4a9a683186f10a">Control connection disconnections</li><li data-list-item-id="e05800d8eee446e1e249471782d6ee51c">Connection status (UP/DOWN)</li><li data-list-item-id="ef82069b5812e1f6a20e646fccc1f9872">Private IP addresses</li><li data-list-item-id="e95afbd5cfcf4233084fb8937923595cf">Public IP addresses</li><li data-list-item-id="e6daf356e361445ea081f65e5cfc90aa4">Authentication events</li><li data-list-item-id="e9909886b8ea4729150479b34f9ce1a2e">Connector identity and grouping</li></ul><p>To learn more, see <a class="url-external" href="https://automate.zscaler.com/docs/api-reference-and-guides/guides/event-monitoring/" target="_blank">Understanding the Event Monitoring & Notification API</a>.</p> Feature in Limited Availability Tue, 23 Jun 2026 07:00:00 GMT feature 1540986 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-23&id=1539927 <div class="sub"><p>On the Access Policy Data Diagnostics page, you can view comprehensive VPN access policy logs and diagnostic data. This page is designed to streamline troubleshooting and provide deeper visibility into organizational connectivity.</p><p><a class="image-icon" href="#traffic-flow-page-img">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-vpn-access-policy-logs" target="_blank">About VPN Access Policy Data Diagnostics</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="traffic-flow-page-img" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/vpn-legacy-apps/dashboard-diagnostics/about-vpn-traffic-flow-logs-diagnostics/ZPA-Access-Policy-Data-Diagnostics-rn%20(1).png" alt="Access Policy Data in VPN Diagnostics" title="VPN Access Policy Data"></p></div> Feature in Limited Availability Tue, 23 Jun 2026 07:00:00 GMT feature 1539927 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-23&id=1539791 <div class="sub"><p>On the Traffic Flow Logs Diagnostics page, you can view comprehensive VPN connection traffic flow logs and diagnostic data. This page is designed to streamline troubleshooting and provide deeper visibility into organizational connectivity.</p><p><a class="image-icon" href="#traffic-flow-page-img">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-vpn-traffic-flow-logs-diagnostics" target="_blank">About VPN Traffic Flow Logs Diagnostics</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="traffic-flow-page-img" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/vpn-legacy-apps/dashboard-diagnostics/about-vpn-traffic-flow-logs-diagnostics/zpa-traffic-logs-page-rn%20(1).png" alt="Traffic Flow Logs in VPN Diagnostics" title="VPN Traffic Flow Logs"></p></div> Feature in Limited Availability Tue, 23 Jun 2026 07:00:00 GMT feature 1539791 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-23&id=1539973 <div class="sub"><p>On the User Logs Diagnostics page, you can view comprehensive VPN user connection logs and diagnostic data. This page is designed to streamline troubleshooting and provide deeper visibility into organizational connectivity.</p><p><a class="image-icon" href="#user-logs-page-img">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-vpn-user-logs-diagnostics%20" target="_blank">About VPN User Logs Diagnostics</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="user-logs-page-img" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/app-connector-management/app-connector-deployment-guides-supported-platforms/connector-deployment-vmware-appliance/ZPA-user-logs-Diagnostics.png" alt="Traffic Flow Logs in VPN Diagnostics" title="VPN Traffic Flow Logs"></p></div> Feature in Limited Availability Tue, 23 Jun 2026 07:00:00 GMT feature 1539973 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-23&id=1540920 <div class="sub"><p>The VPN Service Edges Dashboard shows the total number of Zscaler Client Connectors, Network Connectors, and VPN Service Edges and their total data transfer to help determine when more resources need to be added.</p><p><a class="image-icon" href="#image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/viewing-vpn-service-edges-dashboard" target="_blank" data-entity-type="node" data-entity-uuid="22cab662-4fc2-4888-943a-0e1521cf8655" data-entity-substitution="canonical">Viewing the VPN Service Edges Dashboard</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="image" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/vpn-se-dashboard-xc_0.png" alt="VPN Service Edges Dashboard" title="VPN Service Edges Dashboard"></p></div> Feature in Limited Availability Tue, 23 Jun 2026 07:00:00 GMT feature 1540920 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-17&id=1534143 <div class="sub"><p>The Log Streaming Service (LSS) is supported at the Microtenant level. Admins can configure and manage log receivers in Microtenants. When the LSS is configured at the Microtenant level, shared application logs are visible for the respective LSS configuration of the Microtenant. If a Microtenant is disabled, then only audit logs are streamed to the log receiver.</p><p><a class="image-icon" href="#log-receiver-microtenant-configuration">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-microtenants" target="_blank">About Microtenants</a>, <a href="https://help.zscaler.com/zpa/sharing-defined-application-segments" target="_blank">Sharing Defined Application Segments</a>, and <a href="https://help.zscaler.com/zpa/configuring-log-receiver" target="_blank">Configuring a Log Receiver</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="log-receiver-microtenant-configuration" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/xc-configuring-log-receiver-log-stream-tab-release-note.png" alt="Selecting Microtenants in the Add Log Receiver window" title="Selecting Microtenants in the Add Log Receiver window"></p></div> Feature in Limited Availability Wed, 17 Jun 2026 07:00:00 GMT feature 1534143 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-12&id=1541047 <p>There are several enhancements to resource policy rule configuration:</p><ul><li data-list-item-id="e4d859c2e114a7a3bf8eb07ce16f0c8ab">Application Port Template: You can select destination ports that are in applications from the <a href="https://help.zscaler.com/zpa/about-application-catalog-microsegmentation" target="_blank" data-entity-type="node" data-entity-uuid="ccf6917d-b103-439d-99cd-d487ef62e905" data-entity-substitution="canonical">Application Catalog</a>.</li><li data-list-item-id="e53b2ad1630cb860e42de98e095823568">Manual Ports: You have the option to manually select ports for the TCP port ranges instead of using default status ports. Additionally, you can choose to include all available TCP ports.</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-microsegmentation-policies" target="_blank" data-entity-type="node" data-entity-uuid="1ab609c4-c68f-4b62-b9c1-33cce0973749" data-entity-substitution="canonical">Configuring Microsegmentation Policies</a>.</p> Feature Available Fri, 12 Jun 2026 07:00:00 GMT feature 1541047 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-11&id=1541117 <p>A recommended update was released that includes updated App Connector and Private Service Edge for Private Access (ZPA) RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.54.6.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/understanding-manager-software" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Thu, 11 Jun 2026 07:00:00 GMT feature 1541117 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-08&id=1538949 <p>AppProtection and Multimatch can be configured for the same application segment.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-application-segments" target="_blank">Configuring Defined Application Segments</a> and <a href="https://help.zscaler.com/zpa/using-app-segment-multimatch" target="_blank">Using Application Segment Multimatch</a>.</p> Feature in Limited Availability Mon, 08 Jun 2026 07:00:00 GMT feature 1538949 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-02&id=1539709 <div class="sub"><p>An update was released to support OAuth 2.0 enrollment for Private Cloud Controllers. OAuth 2.0 is the recommended method for enrollment for Private Access (ZPA), but provisioning key enrollment is also supported. To use OAuth 2.0, the OAuth server FQDN <code>zpa-oauth.private.zscaler.com</code> must be allowlisted, and user devices must be allowed to make an outbound connection to the <code>zpa-oauth.private.zscaler.com</code> server. Refer to <a class="url-external" href="https://config.zscaler.com/private.zscaler.com/zpa" target="_blank">config.zscaler.com/private.zscaler.com/zpa</a> (for the private.zscaler.com cloud) or <a class="url-external" href="https://config.zscaler.com/zpatwo.net/zpa" target="_blank">config.zscaler.com/zpatwo.net/zpa</a> (for the zpatwo.net cloud) for the IP address to add to the allowlist.</p><p>OAuth 2.0 support is available with a minimum version of Manager software and Private Cloud Controller version 25.47.3.</p><p class="note">Supported virtual machine (VM) images automatically have this feature enabled. Provisioning key enrollment is also supported on all VM images. The image attempts to use OAuth enrollment tokens by default but applies a provisioning key first if one is available. <br><br><span class="cf0">The OAuth server only supports IPv4-based communication. If a Private Cloud Controller only has an IPV6 address, it cannot access the OAuth server.</span></p><p><a class="image-icon" href="#add-enrollment-token">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-private-cloud-controllers" target="_blank">Configuring Private Cloud Controllers</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="add-enrollment-token" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/app-connector-management/app-connector-deployment-guides-supported-platforms/connector-deployment-guide-centos-oracle-and-redhat/zpa-pcc-add-pcc-xc.png" alt="Add Private Cloud Controllers page" title="Add Private Cloud Controllers page in the Zscaler Admin Console"></p></div> Feature Available Tue, 02 Jun 2026 07:00:00 GMT feature 1539709 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-02&id=1540988 <p>Updated Red Hat Enterprise Linux 9 App Connector, Private Service Edge, and Private Cloud Controller STIG-hardened images with FIPS enabled by default are available for Microsoft Azure. These image updates address the removal of FIPS enablement by Red Hat from the STIG playbook.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/zpa-app-connector-software-by-platform" target="_blank">App Connector Software by Platform</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-software-by-platform" target="_blank">Private Service Edge Software by Platform</a>, and <a href="https://help.zscaler.com/zpa/private-cloud-controller-software-platform" target="_blank">Private Cloud Controller Software by Platform</a>.</p> Feature Available Tue, 02 Jun 2026 07:00:00 GMT feature 1540988 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-02&id=1540987 <p>Updated Red Hat Enterprise Linux 9 App Connector, Private Service Edge, and Private Cloud Controller STIG-hardened images with FIPS enabled by default are available for Google Cloud Platform (GCP). These image updates address the removal of FIPS enablement by Red Hat from the STIG playbook.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/zpa-app-connector-software-by-platform" target="_blank">App Connector Software by Platform</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-software-by-platform" target="_blank">Private Service Edge Software by Platform</a>, and <a href="https://help.zscaler.com/zpa/private-cloud-controller-software-platform" target="_blank">Private Cloud Controller Software by Platform</a>.</p> Feature Available Tue, 02 Jun 2026 07:00:00 GMT feature 1540987 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-01&id=1539708 <div class="sub"><p>An update was released to support OAuth 2.0 enrollment for Private Service Edges for Private Access (ZPA). OAuth 2.0 is the recommended method for enrollment for Private Access, but provisioning key enrollment is also supported. To use OAuth 2.0, the OAuth server FQDN <code>zpa-oauth.private.zscaler.com</code> must be allowlisted, and user devices must be allowed to make an outbound connection to the <code>zpa-oauth.private.zscaler.com</code> server. Refer to <a class="url-external" href="https://config.zscaler.com/private.zscaler.com/zpa" target="_blank">config.zscaler.com/private.zscaler.com/zpa</a> (for the private.zscaler.com cloud) or <a class="url-external" href="https://config.zscaler.com/zpatwo.net/zpa" target="_blank">config.zscaler.com/zpatwo.net/zpa</a> (for the zpatwo.net cloud) for the IP address to add to the allowlist.</p><p>OAuth 2.0 support is available with a minimum version of Manager software and Private Service Edge version 25.48.4.</p><p class="note">Supported virtual machine (VM) images automatically have this feature enabled with the exception of Docker. Provisioning key enrollment is also supported on all VM images. The image attempts to use OAuth enrollment tokens by default but applies a provisioning key first if one is available. <br><br><span class="cf0">The OAuth server only supports IPv4-based communication. If a Private Service Edge only has an IPV6 address, it cannot access the OAuth server.</span></p><p><a class="image-icon" href="#image">See image.</a></p><p><span class="cf0">To learn more, see </span><a href="https://help.zscaler.com/zpa/configuring-service-edges" target="_blank"><span class="cf0">Configuring Private Service Edges</span></a><span class="cf0">.</span></p></div><div class="subc"><p><a class="ck-anchor" id="image" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/vpn-legacy-apps/network-connector-deployment-guides-supported-platforms/network-connector-deployment-guide-linux/zpa-pse-add-pse-oauth.png" alt="How to add a Private Service Edge " title="How to add a Private Service Edge "></p></div> Feature Available Mon, 01 Jun 2026 07:00:00 GMT feature 1539708 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-01&id=1530777 <div class="sub"><p>Zero Trust Browser allows admins to enable the redaction of sensitive text data for configured Data Loss Prevention (DLP) engines and dictionaries based on the DLP configuration in an isolation profile.</p><p><a class="image-icon" href="#Redaction">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/using-redactive-sensitive-text-isolation" target="_blank" data-entity-type="node" data-entity-uuid="ce03a2ba-06b9-4d9b-9683-90b64e23ab8e" data-entity-substitution="canonical">Using Redactive Sensitive Text for Isolation</a> and <a href="https://help.zscaler.com/zero-trust-browser/creating-isolation-profiles-zpa" target="_blank" data-entity-type="node" data-entity-uuid="134c3244-226e-40be-bf7a-df50cc6e4e10" data-entity-substitution="canonical">Creating Isolation Profiles for Private Access</a>.</p></div><div class="subc"><a class="ck-anchor" id="Redaction" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/using-redactive-sensitive-text-isolation/Browser-Isolation_Isolation-Profiles_Add-Isolation-Profile_window_Security_with-REDACTION-ONLY.png" alt="Security panel showing redaction toggle." title="A view of the Redaction section and the options within it."></div> Feature in Limited Availability Mon, 01 Jun 2026 07:00:00 GMT feature 1530777 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-29&id=1539596 <div class="sub"><p>An update was released to support OAuth 2.0 enrollment for Network Connectors. OAuth 2.0 is the recommended method for enrollment for Private Access (ZPA), but provisioning key enrollment is also supported. To use OAuth 2.0, the OAuth server FQDN <code>zpa-oauth.private.zscaler.com</code> must be allowlisted, and user devices must be allowed to make an outbound connection to the <code>zpa-oauth.private.zscaler.com</code> server. Refer to <a class="url-external" href="https://config.zscaler.com/private.zscaler.com/zpa" target="_blank">config.zscaler.com/private.zscaler.com/zpa</a> (for the private.zscaler.com cloud) or <a class="url-external" href="https://config.zscaler.com/zpatwo.net/zpa" target="_blank">config.zscaler.com/zpatwo.net/zpa</a> (for the zpatwo.net cloud) for the IP address to add to the allowlist.</p><p>OAuth 2.0 support is available with a minimum version of Manager software and Network Connector version 25.47.3.</p><p class="note">Supported prebuilt images automatically have this feature enabled. Provisioning key enrollment is also supported on all VM images. The image attempts to use OAuth enrollment tokens by default but applies a provisioning key first if one is available. <br><br><span class="cf0">The OAuth server only supports IPv4-based communication. If a Network Connector only has an IPV6 address, it cannot access the OAuth server.</span></p><p><a class="image-icon" href="#add-enrollment-token">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-network-connectors" target="_blank">Configuring Network Connectors</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="add-enrollment-token" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/private-service-edge-management/private-service-edge-deployment-guides-supported-platforms/service-edge-deployment-guide-vmware/zpa-add-network-connectors.png" alt="Add Network Connectors page" title="Add Network Connectors page in the Zscaler Admin Console"></p></div> Feature Available Fri, 29 May 2026 07:00:00 GMT feature 1539596 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-28&id=1538579 <p>High-performance and high-throughput hardware appliances are available for App Connectors and Private Service Edges for Private Access (ZPA) to provide connectivity between sites and users accessing large files, such as medical records or imaging files. These hardware appliances include:</p><ul><li data-list-item-id="efefc5e22a2f7bcc1be60f9d83373f056">A single, high-performance App Connector or Private Service Edge.</li><li data-list-item-id="e95f8f73f2c150794c99436c42df5d44d">At least 3 Gbps throughput performance per appliance.</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/understanding-zpa-appliances" target="_blank">Understanding ZPA Appliances</a>.</p> Feature in Limited Availability Thu, 28 May 2026 07:00:00 GMT feature 1538579 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-28&id=1540855 <p>Updated Red Hat Enterprise Linux 9 Private Service Edge and Private Cloud Controller STIG-hardened images with FIPS enabled by default are available for Amazon Web Services (AWS). These image updates address the removal of FIPS enablement by Red Hat from the STIG playbook.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/private-service-edge-software-by-platform" target="_blank">Private Service Edge Software by Platform</a> and <a href="https://help.zscaler.com/zpa/private-cloud-controller-software-platform" target="_blank">Private Cloud Controller Software by Platform</a>.</p> Feature Available Thu, 28 May 2026 07:00:00 GMT feature 1540855 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-26&id=1540973 <p>A recommended update was released that includes updated App Connector and Private Service Edge for Private Access (ZPA) RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.54.4.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Tue, 26 May 2026 07:00:00 GMT feature 1540973 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-26&id=1532618 <p>An update was released to provide support for end user migration to Authentication Service. This update ensures that the set of existing Private Access (ZPA) end users and their entitlements remain accurate and consistent throughout the migration process. During migration, external IdP configurations are view only. After migration is complete, the following conditions apply:</p><ul style="list-style-type:disc;"><li data-list-item-id="e970989b986fb5fc2fb5deed6c5acf2e0">IdP configurations are inactive but can be restored if necessary.</li><li data-list-item-id="e45f7cd3fdcc99f47f7e64681a0425f26">Private Access no longer syncs users from external IdPs, and new external IdP configurations are not allowed.</li><li data-list-item-id="e1e82f1a7ee6363907098168512b5c146">Authentication Service becomes the identity service for all Zscaler products, centralizing all identity management.</li></ul><p class="mt-3">As part of this release, you can select the External IAM IdP (i.e., the external IdP attribute created in Authentication Service) when configuring a policy or a Microtenant.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/migrating-private-access-end-users-zidentity" target="_blank">Migrating Private Access End Users to Authentication Service</a>, <a href="https://help.zscaler.com/zidentity/migrating-end-users-zidentity" target="_blank">Migrating End Users to Authentication Service</a>, <a href="https://help.zscaler.com/zidentity/migrating-zscaler-service-admins-zidentity" target="_blank">Migrating Zscaler Service Admins to Authentication Service</a>, <a href="https://help.zscaler.com/zpa/configuring-microtenants" target="_blank">Configuring Microtenants</a>, <a href="https://help.zscaler.com/zpa/policies" target="_blank">Policies</a>, and <a href="https://help.zscaler.com/node/1530936" target="_blank">Support for End User Migration</a>.</p> Feature in Limited Availability Tue, 26 May 2026 07:00:00 GMT feature 1532618 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-26&id=1540951 <div class="sub"><p>The cloud service API includes the following endpoints to extend programmatic access to various Private Access (ZPA) features and functionalities:</p><ul class="triangle"><li data-list-item-id="eed76878ce198b064a3d6920f933d5c83"><a href="#acmanagement">App Connector Group Management</a></li><li data-list-item-id="e65e1e768a2996adef8a492ed31e5c544"><a href="#bagroupsmanage">Browser Access Groups Management</a></li><li data-list-item-id="e79522e43c81589953c6b72b389d5795d"><a href="#bcsettings">Business Continuity Settings</a></li><li data-list-item-id="e1df4ddf040da138fdec218c7e69c9a1b"><a href="#enrollmentcertificates">Enrollment Certificates</a></li><li data-list-item-id="e01a1bb9474b969cdc75f138edd644d85"><a href="#lssconfig">Log Streaming (LSS) Configuration</a></li><li data-list-item-id="ea65a1b469e8438073114c80013f5ea57"><a href="#pcmanage">Private Cloud Management</a></li><li data-list-item-id="ed3b4dfb2abf964c49436c04e39ed179d"><a href="#pccontroller">Private Cloud Controller Management</a></li><li data-list-item-id="e3bacc89991cbfaeac851c72bee890224"><a href="#pccontrollergroup">Private Cloud Controller Group Management</a></li><li data-list-item-id="e50cf3a3b2b526a4c192c9163308317ce"><a href="#provisioningkey">Provisioning Key Management</a></li><li data-list-item-id="e4e86aee72e08279d1984ddba4221de8a"><a href="#segroup">Service Edge Group Management</a></li><li data-list-item-id="ec839915336c237b7b92807c69de35625"><a href="#versionprofiles">Version Profiles</a></li></ul><div class="subc"><p><a class="ck-anchor" id="bcsettings" target="_blank"></a></p><ul style="list-style-type:disc;"><li data-list-item-id="e07bc1dad6dd231512ab7d7d0c05a00fd"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/businessContinuitySettings</code></li><li data-list-item-id="e0a279095f4f8742ac3f8501fb733a1f6"><code>PUT /mgmtconfig/v1/admin/customers/{customerId}/BusinessContinuitySettings/{id}</code></li><li data-list-item-id="e8848e841d622d60c18c85283c987521b"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/BusinessContinuitySettings/metadata</code></li><li data-list-item-id="ee8ea3406c316e16f606640448bf9dab4"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/BusinessContinuitySettings/certificate</code></li></ul></div><div class="subc"><p><a class="ck-anchor" id="pcmanage" target="_blank"></a></p><ul style="list-style-type:disc;"><li data-list-item-id="ef0ca226100c079448fab102df33d1d7f"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/privateCloud</code></li><li data-list-item-id="ea258b999c78665ac2cc00f37e76c4624"><code>POST /mgmtconfig/v1/admin/customers/{customerId}/privateCloud</code></li><li data-list-item-id="ee982853ffcf255fee2a26086c9f5e193"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/privateCloud/{privateCloudId}</code></li><li data-list-item-id="ef37fed45af685395073f5deb583b4c85"><code>PUT /mgmtconfig/v1/admin/customers/{customerId}/privateCloud/{privateCloudId}</code></li><li data-list-item-id="e80d6b784ccac99fa297169daf8f44b5c"><code>DELETE /mgmtconfig/v1/admin/customers/{customerId}/privateCloud/{privateCloudId}</code></li></ul></div><div class="subc"><p><a class="ck-anchor" id="pccontroller" target="_blank"></a></p><ul style="list-style-type:disc;"><li data-list-item-id="e7ab458b8ada5558006836a7e62ebef04"><code>GET /privateCloudController/zpn/api/v1/admin/customers/{customerId}/privateCloudController</code></li><li data-list-item-id="e948ac46825b143f356f7c5a18b0f0cc0"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/privateCloudController/{privateCloudControllerId}</code></li><li data-list-item-id="e0527113984db6e6096514a23f30578b3"><code>PUT /mgmtconfig/v1/admin/customers/{customerId}/privateCloudController/{privateCloudControllerId}</code></li></ul></div><div class="subc"><p><a class="ck-anchor" id="pccontrollergroup" target="_blank"></a></p><ul style="list-style-type:disc;"><li data-list-item-id="e6de526a97d00c4a8ef59173affbb4371"><code>POST /mgmtconfig/v1/admin/customers/{customerId}/privateCloudControllerGroup</code></li><li data-list-item-id="ef6bce8bb7e9226871a231ae59214fb90"><code>DELETE /mgmtconfig/v1/admin/customers/{customerId}/privateCloudControllerGroup</code></li><li data-list-item-id="ebba1622550eafda077ec5be3d717394d"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/privateCloudControllerGroup/{privateCloudControllerGroupId}</code></li><li data-list-item-id="e2433d8db3235b0c030758a2fc86b4bc1"><code>DELETE /mgmtconfig/v1/admin/customers/{customerId}/privateCloudControllerGroup/{privateCloudControllerGroupId}</code></li><li data-list-item-id="e79e19821cda8e8e740fb40580bb34f46"><code>PUT /mgmtconfig/v1/admin/customers/{customerId}/privateCloudControllerGroup/{privateCloudControllerGroupId}</code></li></ul></div><div class="subc"><p><a class="ck-anchor" id="enrollmentcertificates" target="_blank"></a></p><p><code>GET /mgmtconfig/v2/admin/customers/{customerId}/enrollmentCert</code></p></div><div class="subc"><p><a class="ck-anchor" id="provisioningkey" target="_blank"></a></p><ul style="list-style-type:disc;"><li data-list-item-id="ea8f0146eca8eb1461396e170b4f4e791"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/associationType/{associationType}/provisioningKey</code></li><li data-list-item-id="eff43d39c11efcd337f620f4db86aca52"><code>DELETE /mgmtconfig/v1/admin/customers/{customerId}/associationType/{associationType}/provisioningKey/{provisioningKeyId}</code></li><li data-list-item-id="e4f2a4655a504ff8ed1e5f8c1def07339"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/associationType/{associationType}/provisioningKey/{provisioningKeyId}</code></li><li data-list-item-id="efeb6a4b4824740fa9486c8461c3c2b80"><code>PUT /mgmtconfig/v1/admin/customers/{customerId}/associationType/{associationType}/provisioningKey/{provisioningKeyId}</code></li></ul></div><div class="subc"><p><a class="ck-anchor" id="versionprofiles" target="_blank"></a></p><ul style="list-style-type:disc;"><li data-list-item-id="e548c013bb95536473b4f7b0352042684"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/visible/versionProfiles</code></li><li data-list-item-id="e470a3180becbc9261446b399906fa58d"><code>GET /mgmtconfig/v1/admin/customers/{customerId}/versionProfile</code></li></ul></div><div class="subc"><p><a class="ck-anchor" id="acmanagement" target="_blank"></a></p><p><code>GET /mgmtconfig/v1/admin/customers/{customerId}/appConnectorGroup</code></p></div><div class="subc"><p><a class="ck-anchor" id="segroup" target="_blank"></a></p><p><code>GET /mgmtconfig/v1/admin/customers/{customerId}/serviceEdgeGroup</code></p></div><div class="subc"><p><a class="ck-anchor" id="lssconfig" target="_blank"></a></p><p><code>GET /zpn/api/v2/admin/customers/{customerId}/lssConfig</code></p></div><div class="subc"><p><a class="ck-anchor" id="bagroupsmanage" target="_blank"></a></p><p><code>GET /mgmtconfig/v1/admin/customers/{customerId}/browserAccessGroups</code></p></div></div> Feature Available Tue, 26 May 2026 07:00:00 GMT feature 1540951 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-22&id=1539041 <div class="sub"><p>The following updates have been made to the isolation experience for Zero Trust Browser:</p><ul><li data-list-item-id="ea4546de337e4dfe067667a6eabe79bb9">As you enter an isolated session, a static, temporary message appears in the middle of the web page as it loads to confirm you are entering an isolated session. Additionally, an animated green outline appears around the website border as the page loads.<br><a class="image-icon" href="#Entering-Zero-Trust-Mode">See image.</a></li><li data-list-item-id="e22ee98922bfeefb3f1aa6a083fe0ed32">When the page has completely rendered, a <a href="https://help.zscaler.com/zero-trust-browser/profiles/profile-notifications" target="_blank">temporary notification banner</a> appears in the upper-right corner that displays a customized notification title. You can click the Show More link in the banner to view a message customized by the admin.<br><a class="image-icon" href="#Zero-Trust-Mode-Icon-and-Notification-Banner-condensed">See image.</a></li><li data-list-item-id="eabe108578e936e239b7637808167a654">A floating checkmark icon also appears when the page has completely rendered, and stays visible after the temporary notification banner disappears. This is a visual indicator that the isolation session is persisting and has not expired.<br><a class="image-icon" href="#Zero-Trust-Mode-icon-and-expanded-message">See image.</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/adding-banner-theme-isolation-end-user-notification-zia" target="_blank" data-entity-type="node" data-entity-uuid="2c76eaa4-2a94-484a-9572-cbe06c1af0d5" data-entity-substitution="canonical">Adding a Banner Theme for the Isolation End User Notification in ZIA</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="Entering-Zero-Trust-Mode" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/profiles/profile-notifications/adding-banner-theme-isolation-end-user-notification-zia/Entering-Zero-Trust-Mode_message_green-outline.png" alt="A view of a web page entering Zero Trust Mode. " title="A green outline appears around the web page as a notification message temporarily loads."></p></div><div class="subc"><p><a class="ck-anchor" id="Zero-Trust-Mode-Icon-and-Notification-Banner-condensed" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/user-experience-modes-isolation/UX-Phase-0_Notification-Banner-Show-More_squircles.png" alt="A view of a web page after it has completely loaded while in an isolated session." title="The web page shows the temporary notification banner that appears when the user is in Zero Trust Mode and the active session icon at the bottom of the page."></p></div><div class="subc"><a class="ck-anchor" id="Zero-Trust-Mode-icon-and-expanded-message" target="_blank"></a><img src="https://help.zscaler.com/downloads/zero-trust-browser/end-user-isolation-experience/user-experience-modes-isolation/UX-Phase-0_Notification-Banner_Expanded_squircles.png" alt="A view of a web page after it has completely loaded while in an isolated session." title="The web page shows the fully expanded temporary notification banner that appears when the user is in Zero Trust Mode and the active session icon at the bottom of the page."></div> Feature Available Fri, 22 May 2026 07:00:00 GMT feature 1539041 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-20&id=1540283 <p>Updated Red Hat Enterprise Linux 9 App Connector, Private Service Edge, and Private Cloud Controller STIG-hardened images with FIPS enabled by default are available. These image updates address the removal of FIPS enablement by Red Hat from the STIG playbook.</p><p>The following updated images are available:</p><ul><li data-list-item-id="e126b2ac0a1893fd86379582a6119cacd">Nutanix for App Connector and Private Service Edge</li><li data-list-item-id="effefeb93ad63f492d1baffffec53337d">VMware</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/zpa-app-connector-software-by-platform" target="_blank">App Connector Software by Platform</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-software-by-platform" target="_blank">Private Service Edge Software by Platform</a>, and <a href="https://help.zscaler.com/zpa/private-cloud-controller-software-platform" target="_blank">Private Cloud Controller Software by Platform</a>.</p> Feature Available Wed, 20 May 2026 07:00:00 GMT feature 1540283 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-19&id=1535297 <div class="sub"><p>The AppProtection default profile was renamed to Recommended OWASP Top 10 Profile. When you add or edit an AppProtection profile, using the default profile automatically selects recommended controls for OWASP predefined controls and ThreatLabZ controls. You can also select the Use Recommended Controls checkbox for these two control types, and also select the option to automatically add ThreatLabZ recommended controls.</p><p><a class="image-icon" href="#default">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-appprotection-profiles" target="_blank" data-entity-type="node" data-entity-uuid="f28b7b42-b658-4f90-aa51-742fe65bbc38" data-entity-substitution="canonical">About AppProtection Profiles</a> and <a href="https://help.zscaler.com/zpa/configuring-appprotection-profiles" target="_blank" data-entity-type="node" data-entity-uuid="e0fb1a2d-e62e-4178-8d32-d9096fdda1bb" data-entity-substitution="canonical">Configuring AppProtection Profiles</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="default" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/policies/timeout-policy/configuring-timeout-policies/Default%20AppProtection%20Profile_0.png" alt="Default AppProtection Profile template included on the AppProtection Profile page" title="Viewing the Default AppProtection Profile template included on the AppProtection Profile page in the Zscaler Admin Console"><img src=""></p></div> Feature Available Tue, 19 May 2026 07:00:00 GMT feature 1535297 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-18&id=1540086 <p>Improvements to LSS-based Log Streaming in Business Continuity were made to support log streaming across multiple Private Clouds.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-private-clouds" target="_blank">About Private Clouds</a>.</p> Feature Available Mon, 18 May 2026 07:00:00 GMT feature 1540086 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-18&id=1540815 <p>Fixed an issue where a proxy configured on a Windows OS resulted in AppProtection custom controls not being applied to HTTPS traffic.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-appprotection-controls" target="_blank">About AppProtection Controls</a>.</p> Feature Available Mon, 18 May 2026 07:00:00 GMT feature 1540815 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-18&id=1540087 <p>An update was released to support B2B Federation for cross-tenant collaboration and application sharing between Private Access (ZPA) customers.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-07-20&id=1535252" target="_blank">Business-to-Business (B2B) Federation</a>.</p> Feature in Limited Availability Mon, 18 May 2026 07:00:00 GMT feature 1540087 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-18&id=1540083 <div class="sub"><p>This release includes new data types for user status and traffic flow were added to the Log Streaming Service (LSS). To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-09-02&id=1538918" target="_blank">LSS Support for VPN (for Legacy Apps)</a>.</p></div> Feature in Limited Availability Mon, 18 May 2026 07:00:00 GMT feature 1540083 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-11&id=1540062 <p>A recommended update was released that includes updated App Connector and Private Service Edge for Private Access (ZPA) RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.54.2.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Mon, 11 May 2026 07:00:00 GMT feature 1540062 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-08&id=1540156 <p>Several new statuses are available for filtering Agent Telemetry results.</p><p>For agents, the following statuses are available:</p><ul><li data-list-item-id="e52b3047b4b4fc13c169318adec8344bc">Up to Date: The new agent upgrade version number is either greater than or equal to the agent version number of its corresponding agent group.</li><li data-list-item-id="eab2490b62905e57f7aa0a29ce0439931">Pending: The new agent upgrade version number is less than the agent version number of its corresponding agent group.</li><li data-list-item-id="e1cf1fccb11c811da1d859df48d333190">In Progress: The agent is actively upgrading, and will complete within 10 minutes of reaching this status.</li><li data-list-item-id="e230bdb6c89241df72d8317a9daa5f8a8">Forced Upgrade: The agent has manually been upgraded by an admin outside its configured upgrade schedule.</li><li data-list-item-id="edac7f248bd97a9af903d4c09538cbdbc">Failed: An upgrade attempt has failed.</li><li data-list-item-id="eff0d4cab2153b374abc432da46a0b2d2">N/A: The agent or its agent group is disabled.</li></ul><p>For agent groups, the following statuses are available:</p><ul><li data-list-item-id="ecb5f241515103043f656d1fbe51ccada">Up to Date: All agents are up-to-date.</li><li data-list-item-id="ee27d9e7dd062bca4acc8103a5d698928">Pending: At least one agent in the agent group is in a pending status for the latest agent version.</li><li data-list-item-id="ead5cf25955df742ac93275153372cd5c">In Progress: At least one agent in the agent group is actively upgrading.</li><li data-list-item-id="ec1aa566319932f116dd9145ac11d84e4">In Progress with Failures: Multiple agents in an agent group are upgrading with some in a failed state and the remaining agents proceeding.</li><li data-list-item-id="ee53a256f70aa1a3307abd6fffa137efc">Failed: All agents within an agent group have reached a failed state.</li><li data-list-item-id="eaa42e0a964eff2a6078f842970585ef5">Completed with Failures: All agents within an agent group have completed the upgrade process with some in a failed state.</li><li data-list-item-id="efed9344e1396cc434011eebb92b90a21">N/A: The agent group is disabled.</li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-agent-telemetry" target="_blank" data-entity-type="node" data-entity-uuid="a14a9d5c-368b-4139-b57a-fb440acdb3b9" data-entity-substitution="canonical">About Agent Telemetry</a>.</p> Feature Available Fri, 08 May 2026 07:00:00 GMT feature 1540156 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-08&id=1540155 <div class="sub"><p>Microsegmentation policy rules are now organized by order instead of by priority numbers. Admins can re-order rules at any time and as many times as needed. Any rule order changes are tracked in Event Logs.</p><p><a class="image-icon" href="#Edit-Rule-Order">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-microsegmentation-policies" target="_blank" data-entity-type="node" data-entity-uuid="1ab609c4-c68f-4b62-b9c1-33cce0973749" data-entity-substitution="canonical">Configuring Microsegmentation Policies</a> and <a href="https://help.zscaler.com/zpa/about-event-logs" target="_blank" data-entity-type="node" data-entity-uuid="17f14573-ebe8-482f-bf75-79437576ff2c" data-entity-substitution="canonical">About Event Logs</a>.</p></div><div class="subc"><a class="ck-anchor" id="Edit-Rule-Order" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/microsegmentation/policy/editing-microsegmentation-policies/Edit-Rule-Order.png" alt="A view of the Edit Rule Order drawer." title="The list shows the ability to enter a different order number for policy rules."></div> Feature Available Fri, 08 May 2026 07:00:00 GMT feature 1540155 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-04&id=1540150 <div class="sub"><p>An update was released to support automated updates to the Manager software service for App Connector and Network Connector.</p><p class="note">Automated Manager software updates are available with a Manager software version of 25.46.3 or later and an App Connector or Network Connector version of 25.46.3 or later.</p><p>The table includes the following updates:</p><ul><li data-list-item-id="e898b166cd507b61c61dd039b5d22fbb2"><p>Version Profile: Displays the version profile applied to the App Connector or Network Connector. You can hover over the information icon under the Version Profile column heading to view the target version for the Manager software and App Connector or Network Connector software.</p><p><a class="image-icon" href="#version-profile">See image.</a></p></li><li data-list-item-id="eb010e849dfa4c45850f698c818fa7a9f">Software Update: Displays the status of the App Connector or Network Connector update. You can hover over the information icon next to the update status to view more information, such as the scheduled version and upgrade window.</li><li data-list-item-id="e08a38dbbd7635140ae4df1abbef0776f"><p>Manager Update: Displays the status of the Manager software update. You can hover over the information icon next to the update status to view more information, such as the scheduled version and upgrade window.</p><p><a class="image-icon" href="#mgr-update">See image.</a></p></li><li data-list-item-id="eec7ccb8894182e5cf8f5ed256c0b37ed"><p>When viewing details for an App Connector or Network Connector, you can view the Last Manager Update time.</p><p><a class="image-icon" href="#appc-details">See image.</a></p></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-connectors" target="_blank">About App Connectors</a> or <a href="https://help.zscaler.com/zpa/about-network-connectors" target="_blank">About Network Connectors</a>.</p><p>Manager software updates are scheduled during the maintenance window for Private Access (ZPA) software updates.</p></div><div class="subc"><p><a class="ck-anchor" id="version-profile" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/zpa-appc-table-mgr-software.png" alt="Version Profile Tooltip on the App Connectors Page in the ZPA Admin Portal" title="App Connector Page in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="mgr-update" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/zpa-appc-table-mgr-software-aum.png" alt="Manager Software Tooltip on the App Connectors Page in the ZPA Admin Portal" title="App Connectors Page in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="appc-details" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/appc-table-details-aum_0.png" alt="App Connector Details in the ZPA Admin Portal" title="App Connector Details in the ZPA Admin Portal"></p></div> Feature Available Mon, 04 May 2026 07:00:00 GMT feature 1540150 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-01&id=1532812 <div class="sub"><p>An update was released to support automated security updates to the RHEL 9 operating system (OS) for App Connector, Private Service Edge for Private Access (ZPA), Private Cloud Controller, and Network Connector. This includes security updates and full OS updates.</p><p class="note">Automated OS updates are only available for prebuilt App Connector, Private Service Edge, Private Cloud Controller, and Network Connector images on RHEL 9.x. App Connectors, Private Service Edges, Private Cloud Controllers, and Network Connectors installed manually using an RPM file on a custom RHEL 9.x build are not supported.</p><p>OS security updates are scheduled during the maintenance window for Private Access software updates.</p><p>The following updates are available:</p><ul><li data-list-item-id="e04e0a294dafdf8de7097502d66fe014b">OS Update Filter: Sorts the table based on the status of the OS update (Success, Failure, Scheduled, etc.).</li><li data-list-item-id="ebcbb9bfe296cc7b122a59bb05042e0d9"><p>OS Update: Displays the status of the OS update. You can hover over the information icon next to the update status to view more information, such as the update window and status of the update (Scheduled, Not Scheduled, In Progress, Success, or Failure).</p><p><a class="image-icon" href="#os-update">See image.</a></p></li><li data-list-item-id="ec260c52aae37f1e74655dfb8cfe4dec5"><p>When viewing details for an App Connector, Private Service Edge, Private Cloud Controller, and Network Connector, the following information has been added:</p><ul><li data-list-item-id="eec70407ed306c286961a3395f5ce8e35">View the Last OS update time.</li><li data-list-item-id="e093abb65050e3d4d5af2803f2ab3b6c0">View whether OS updates have been enabled.</li></ul><p><a class="image-icon" href="#appc-details">See image.</a></p></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-connectors" target="_blank">About App Connectors</a>, <a href="https://help.zscaler.com/zpa/about-zpa-private-service-edges" target="_blank">About Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/about-private-cloud-controllers" target="_blank">About Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/about-network-connectors" target="_blank">About Network Connectors</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="os-update" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/business-continuity-management/private-cloud-controller-managing-troubleshooting/managing-deployed-private-cloud-controllers/appc-table-os-updates.png" alt="Update Fields in the App Connectors Page of the ZPA Admin Portal" title="Update Fields in the App Connectors Page of the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="appc-details" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/business-continuity-management/private-cloud-controller-managing-troubleshooting/managing-deployed-private-cloud-controllers/appc-table-details-os-updates.png" alt="App Connector Details in the ZPA Admin Portal" title="App Connector Details in the ZPA Admin Portal"></p></div> Feature in Limited Availability Fri, 01 May 2026 07:00:00 GMT feature 1532812 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-05-01&id=1538801 <div class="sub"><p>The client hostname was added to the VPN Connected Users page.</p><p><a class="image-icon" href="#image">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-vpn-connected-users" target="_blank">About VPN Connected Users</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="image" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/zpa-vpn-connected-user-hostname.png" alt="VPN Connected Users Page in the Zscaler Admin Console" title="VPN Connected Users Page in the Zscaler Admin Console"></p></div> Feature Available Fri, 01 May 2026 07:00:00 GMT feature 1538801 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-21&id=1538607 <div class="sub"><p>An update was released to provide support for two Private Access (ZPA) tenants with a single Authentication Service tenant. Customers with more than one single Internet & SaaS (ZIA) and Private Access tenant can manage them in the Zscaler Admin Console.</p><p><a class="image-icon" href="#account-settings">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/unified/customizing-your-account-settings" target="_blank">Customizing Your Account Settings</a> and <a href="https://help.zscaler.com/node/1538629" target="_blank">Support for Integrating Two Private Access Tenants</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="account-settings" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/authentication/identity-management/about-scim-groups/xc-account-settings-menu-rn.png" alt="Changing the Default Private Access Cloud within the Zscaler Admin Console" title="Changing the Default Private Access Cloud in the Account Settings Menu"></p></div> Feature Available Tue, 21 Apr 2026 07:00:00 GMT feature 1538607 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-16&id=1534151 <div class="sub"><p>Private Access (ZPA) supports Tag Management, which enables you to create, organize, and manage tags for classifying and grouping resources more effectively. Tag Management standardizes tagging across environments to simplify policy configuration and improve visibility into related resources within Private Access. To learn more, see <a href="https://help.zscaler.com/zpa/about-tag-management-application-segments" target="_blank" data-entity-type="node" data-entity-uuid="421f122a-0609-4ff6-aa27-1b3664dbea09" data-entity-substitution="canonical">About Tag Management for Application Segments</a>.</p><p><a class="image-icon" href="#tag-management-1534151">See image.</a></p><p>With Tag Management, you can configure namespaces to logically organize tags and avoid naming conflicts, as well as add and configure tags within those namespaces. When configuring namespaces, you can assign optional values to tags to enable discovery and logical grouping, and configure tag groups by grouping related tags using shared values. To learn more, see <a href="https://help.zscaler.com/zpa/configuring-tags-and-namespaces-application-segments" target="_blank" data-entity-type="node" data-entity-uuid="b8d01c62-cbd7-4b87-881b-3e8ab85fbc97" data-entity-substitution="canonical">Configuring Tags and Namespaces for Application Segments</a>.</p><p><a class="image-icon" href="#namespaces-1534151">See image.</a></p><p>Namespaces and tags can be assigned to defined application segments. To learn more, see <a href="https://help.zscaler.com/zpa/configuring-defined-application-segments" target="_blank" data-entity-type="node" data-entity-uuid="cdae95b3-0142-4c33-a8e3-7e02faf8ab6b" data-entity-substitution="canonical">Configuring Defined Application Segments</a>.</p><p><a class="image-icon" href="#config-app-segs-tags-1534151">See image.</a></p><p>Tag groups and tag values can be assigned to access policies. To learn more, see <a href="https://help.zscaler.com/zpa/configuring-access-policies" data-entity-type="node" data-entity-uuid="fbf8b5b0-9812-401b-9318-4110f4b84086" data-entity-substitution="canonical" target="_blank">Configuring Access Policy</a>.</p><p><a class="image-icon" href="#tags-access-policy-1534151">See image. </a></p><p>The maximum number of tags that can be created per Microtenant is 25,000. The maximum number of tags that can be created per customer is 25,000. To learn more, see <a href="https://help.zscaler.com/unified/ranges-limitations" target="_blank" data-entity-type="node" data-entity-uuid="e03eceba-1538-4234-b398-a662f132b685" data-entity-substitution="canonical">Ranges & Limitations</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="tags-access-policy-1534151" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/access-policy-tags.png" alt="Add tags to access policy criteria" title="Add tags to access policy criteria"></p></div><div class="subc"><p><a class="ck-anchor" id="config-app-segs-tags-1534151" target="_blank"></a><img src="https://help.zscaler.com/downloads/tech-pubs-drafts/zpa-draft-articles/about-applications-doc-58697/app-segment-tags.png" alt="Add Tags to Application Segments" title="Add Tags to Application Segments"></p></div><div class="subc"><p><a class="ck-anchor" id="tag-management-1534151" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/tag-mgmt-page.png" alt="Tag Management Page in Private Access" title="Tag Management Page in Private Access"></p></div><div class="subc"><p><a class="ck-anchor" id="namespaces-1534151" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/namespaces.png" alt="Namespaces Page in Private Access" title="Namespaces Page in Private Access"></p></div> Feature in Limited Availability Thu, 16 Apr 2026 07:00:00 GMT feature 1534151 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-14&id=1535263 <div class="sub"><p>An update was released to provide the following enhancements to the AI-Powered Recommendations page:</p><ul><li data-list-item-id="e288d9eac68a031ab36bc7ae5b5766725">Recommendations are sorted into intuitive categories for User Groups, Observed Users, and Application Type to improve discoverability and allow users to focus on relevant recommendations based on specific organizational contexts.</li><li data-list-item-id="e9c5faeaf06a862891347ea131cc12afe">Recommendations achieving less than 75% attack surface reduction (ASR) are included to provide visibility of recommendations that can still provide substantial implementation value. The default list of 100 recommendations includes items below this threshold.</li><li data-list-item-id="e5fdfdc8dba6d06f630d2b7ae6b2aec2c">The Recommendation Details drawer has been improved to provide deeper insights and actionable data, including:<ul><li data-list-item-id="e2d0271ca6256a11f226ee51d5de4fbeb">Top-level metrics for Current Configuration, AI Recommendation, and ASR.</li><li data-list-item-id="e00b03cb8e00a49987e6285b21291fbe0">Human-readable explanations for grouping hosts and recommending specific user groups.</li><li data-list-item-id="edf5fca944cc779c71ca0380567cdd358">Dedicated tabs of reorganized information for Hosts, Observed Users, and Recommended Users.</li></ul></li></ul><p><a class="image-icon" href="#ai-powered-recommendations-landing-page">See image.</a></p><p class="note">Customers with the Segmentation add-on license can request to update the total number of recommendations from 100 to 500.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-ai-powered-recommendations-application-segments" target="_blank">About AI-Powered Recommendations for Application Segments</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="ai-powered-recommendations-landing-page" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/dashboard-diagnostics/applications-users-monitoring/about-users-dashboard/xc-ai-powered-recommendations-page-with-categories1.png" alt="Viewing the AI-Powered Recommendations page in the Zscaler Admin Console" title="Viewing the AI-Powered Recommendations page in the Zscaler Admin Console"></p></div> Feature Available Tue, 14 Apr 2026 07:00:00 GMT feature 1535263 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-09&id=1539613 <p>Anti-tamper protection for the Microsegmentation agent ensures that the agent service (e.g., reporting, enforcement, and upgrades) can't be maliciously disabled or altered. This includes alterations attempted by an untrusted actor running with admin privileges.</p> Feature Available Thu, 09 Apr 2026 07:00:00 GMT feature 1539613 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-09&id=1539614 <p>Microsegmentation now extends support for Azure Kubernetes Service (AKS) and Google Kubernetes Engine (GKE). Customers can install the Microsegmentation agent for these services to gain visibility to Kubernetes inventory and flow logs.</p><p>To learn more <a href="https://help.zscaler.com/zpa/about-kubernetes-clusters-microsegmentation" target="_blank" data-entity-type="node" data-entity-uuid="4c8408a3-424b-4bba-9dfa-e6b95a0fb1fa" data-entity-substitution="canonical">About Kubernetes Clusters for Microsegmentation</a>.</p> Feature Available Thu, 09 Apr 2026 07:00:00 GMT feature 1539614 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-09&id=1539615 <p>The Microsegmentation agent can now be installed on Suse Linux Enterprise Server 15.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/installing-upgrading-agent-manager" target="_blank" data-entity-type="node" data-entity-uuid="1a276ceb-97ba-45d7-abf2-baba3ee1a843" data-entity-substitution="canonical">Installing & Upgrading the Agent Manager</a> and <a href="https://help.zscaler.com/zpa/supported-versions-os-compatibility-microsegmentation" target="_blank" data-entity-type="node" data-entity-uuid="6cfaa528-0b69-4a2c-8c51-a73417db5d9c" data-entity-substitution="canonical">Supported Versions & OS Compatibility for Microsegmentation</a>.</p> Feature Available Thu, 09 Apr 2026 07:00:00 GMT feature 1539615 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-02&id=1538471 <p>Browser Extension for Zero Trust Browser is a lightweight solution providing seamless and secure enterprise access from any browser. The extension enhances existing browsers with browser detection and response (BDR) and browser-native data loss prevention (DLP) capabilities as well as posture-based application access.</p><p>To learn more, see <a href="https://help.zscaler.com/zero-trust-browser/understanding-browser-extension" data-entity-type="node" data-entity-uuid="a5d784b6-8079-440f-a8db-8b3548efd0b8" data-entity-substitution="canonical" target="_blank">Understanding Browser Extension</a>.</p> Feature Available Thu, 02 Apr 2026 07:00:00 GMT feature 1538471 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-02&id=1535324 <div class="sub"><p>If users access an application via FQDN, you can assign a secondary DNS server as a backup in Network segments. This ensures DNS resolution remains close to the VPN Service Edge's physical location.</p><p class="note">This feature requires Zscaler Client Connector 4.9 or later on Windows.</p><p><a class="image-icon" href="#backup-dns">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-network-segments%20" target="_blank">Configuring Network Segments</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="backup-dns" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/zpa-vpn-add-network-segment-backup-servers.png" alt="Add Network Segment Page with DNS Secondary Server in the ZPA Admin Portal" title="Add Network Segment Page in the ZPA Admin Portal"></p></div> Feature in Limited Availability Thu, 02 Apr 2026 07:00:00 GMT feature 1535324 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-02&id=1538873 <p>An update was released to support logs and diagnostics data to help you analyze and troubleshoot issues for the following:</p><ul><li data-list-item-id="ee45814f252e1a0125fc833f6f24d0286">VPN traffic flow logs. To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-24&id=1539791" target="_blank">Viewing Diagnostics for VPN Traffic Flow Logs</a>.</li><li data-list-item-id="e032d191a44f897c36fd0e7a019993a37">VPN user logs. To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-06-24&id=1539973" target="_blank">Viewing Diagnostics for VPN User Logs</a>.</li></ul> Feature in Limited Availability Thu, 02 Apr 2026 07:00:00 GMT feature 1538873 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-02&id=1538936 <p>A fix was released to address a misconfiguration in <code>/etc/logrotate.d/frr</code> that caused the logrotate service not to start for Network Connectors and VPN Service Edges.</p> Feature Available Thu, 02 Apr 2026 07:00:00 GMT feature 1538936 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-04-01&id=1532855 <p>You can select Client Connector Trusted Network as a criteria option for the timeout policy. Client Connector Trusted Network allows users who are working from secure locations to be designated as part of a trusted network. This results in fewer reauthentication requests for trusted network users, as opposed to untrusted network users (e.g., road warriors, contractors, etc.) that require frequent reauthentication. You can view the analytics of Client Connector Trusted Networks by selecting the Timeout Policy Blocks on the User Activity Diagnostics page.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-timeout-policies" target="_blank" data-entity-type="node" data-entity-uuid="9fd9419d-9a2d-4cce-9867-646c6341c85b" data-entity-substitution="canonical">Configuring Timeout Policies</a>.</p> Feature Available Wed, 01 Apr 2026 07:00:00 GMT feature 1532855 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-31&id=1538868 <p>A recommended update was released that includes updated App Connector and Private Service Edge for Private Access (ZPA) RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.53.4.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Tue, 31 Mar 2026 07:00:00 GMT feature 1538868 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-31&id=1538825 <p>Private Access (ZPA) supports private link domains, allowing administrators to configure domain patterns that match private link CNAME records, including services such as Azure Private Link. This enables Private Access to correctly identify and route traffic to resources hosted behind private link endpoints while avoiding unnecessary routing for non-private resources.</p><div class="sub"><p><a class="image-icon" href="#privatelinkdomain">See image.</a></p></div><p>To learn more, see <a href="https://help.zscaler.com/zpa/configuring-private-link-domains" data-entity-type="node" data-entity-uuid="1ab60208-2ecf-4009-a05d-b3f7d46a009c" data-entity-substitution="canonical" target="_blank">Configuring Private Link Domains</a>.</p><div class="subc"><p><a class="ck-anchor" id="privatelinkdomain" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2026/azureprivatelink02.png" alt="App Segment drop-down menu for features" title="Private Link Domains"></p></div> Feature in Limited Availability Tue, 31 Mar 2026 07:00:00 GMT feature 1538825 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-26&id=1539601 <div class="sub"><p>Details for App Connector name, the time the App Connector was modified, and who modified the App Connector were added to the raw logs of the Provisioning Key Not Found event in Events Diagnostics.</p><ul class="triangle"><li><a href="#sample-raw-log-provisioning-key-not-found">View example log.</a></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/viewing-and-managing-events-diagnostics" target="_blank">Viewing and Managing Events Diagnostics</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="sample-raw-log-provisioning-key-not-found" target="_blank"></a></p><pre><code class="language-plaintext">{ "priority":"high", "customerId":"75057594037927936", "system":"assistant", "eventName":"PROVISIONING_KEY_NOT_FOUND", "time":"1775529452642", "category":"Enrollment", "otherFields":{ "Last Modified By":"3", "l_disp":"bad", "App Connector Name":"35T6t508gqg2VtgbaYYaK3TBu-1775529451633", "fingerprint":"ASwjgKAgKf0q7sgDu1bhNFpJeko", "message":"Enrollment failed due to non-existing provisioning key." }, "rowId":"4090396760_2294306628" }</code></pre></div> Feature Available Thu, 26 Mar 2026 07:00:00 GMT feature 1539601 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-20&id=1534018 <p>An updated Red Hat Enterprise Linux 9 Network Connector AWS image is available to support the upcoming release of OAuth 2.0 enrollment.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/network-connector-software-platform" target="_blank">Network Connector Software by Platform</a>.</p> Feature Available Fri, 20 Mar 2026 07:00:00 GMT feature 1534018 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-19&id=1534016 <p>An updated Red Hat Enterprise Linux 9 Network Connector Microsoft Azure image is available to support the upcoming release of OAuth 2.0 enrollment.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/network-connector-software-platform" target="_blank">Network Connector Software by Platform</a>.</p> Feature Available Thu, 19 Mar 2026 07:00:00 GMT feature 1534016 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-18&id=1538542 <p>False positive rules are being removed from the following OWASP_CRS control versions:</p><ul><li>OWASP_CRS/4.8.0: 46 false positive rules</li><li>OWASP_CRS/3.3.5: 68 false positive rules</li><li>OWASP_CRS/3.3.0: 68 false positive rules</li></ul><p>Any AppProtection profiles with these rules configured still display the rules, but the rules themselves are ineffective. Contact your Zscaler Account team for more information.</p> Feature Available Wed, 18 Mar 2026 07:00:00 GMT feature 1538542 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-18&id=1534017 <p>An updated Red Hat Enterprise Linux 9 Network Connector VMware image is available to support the upcoming release of OAuth 2.0 enrollment.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/network-connector-software-platform" target="_blank">Network Connector Software by Platform</a>.</p> Feature Available Wed, 18 Mar 2026 07:00:00 GMT feature 1534017 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-18&id=1533787 <p>For organizations with the VPN (for Legacy Apps) service enabled, a VPN Service Edge is available in Beijing, China. This VPN Service Edge is only available to users in China to access applications in China. It should not be used to connect to applications outside of China, nor for users outside of China to connect to applications within China.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/deploying-vpn-service-edges-china" target="_blank">Deploying VPN Service Edges in China</a> or <a href="https://help.zscaler.com/zpa/about-vpn-service-edges" target="_blank">About VPN Service Edges</a>.</p> Feature Available Wed, 18 Mar 2026 07:00:00 GMT feature 1533787 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-09&id=1535134 <p>A column for Application Types is available on the Application and User Group Relationships Usage page to provide visibility on application usage reporting. The application types are also available when viewing the CSV file of the downloaded reports.</p><div class="sub"><p><a class="image-icon" href="#app-type-classification">See image.</a></p></div><p>To learn more, see <a href="https://help.zscaler.com/zpa/viewing-application-and-user-group-relationships" target="_blank">Viewing Application and User Group Relationships</a>.</p><div class="subc"><p><a class="ck-anchor" id="app-type-classification" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/release-upgrade-summary-2026/zpa-application-and-user-group-relationships-app-type-release%20note.png" alt="Viewing the Application Types in the Application and User Group Relationships page" title="Viewing the Application Types in the Application and User Group Relationships page"></p></div> Feature Available Mon, 09 Mar 2026 07:00:00 GMT feature 1535134 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-06&id=1538838 <p>Updated Red Hat Enterprise Linux 9 Google Cloud Platform (GCP) images are available in the GCP Marketplace for App Connector, Private Service Edge, Private Cloud Controller, and Network Connector.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/zpa-app-connector-software-by-platform" target="_blank">App Connector Software by Platform</a>, <a href="https://help.zscaler.com/zpa/zpa-private-service-edge-software-by-platform" target="_blank">Private Service Edge Software by Platform</a>,<a href="https://help.zscaler.com/zpa/private-cloud-controller-software-platform" target="_blank"> Private Cloud Controller Software by Platform</a>, and <a href="https://help.zscaler.com/zpa/network-connector-software-platform" target="_blank">Network Connector Software by Platform</a>.</p> Feature Available Fri, 06 Mar 2026 08:00:00 GMT feature 1538838 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-05&id=1538659 <div class="sub"><p>Machine learning (ML) resource group recommendations have been updated to include custom type tags and agent groups.</p><p><a class="image-icon" href="#ML-tags-update">See images.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-ml-recommendations-resource-groups" target="_blank" data-entity-type="node" data-entity-uuid="a79144a5-740a-48a2-8625-794419ae1811" data-entity-substitution="canonical">About ML Recommendations for Resource Groups</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="ML-tags-update" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/microsegmentation/about-machine-learning-recommendations-microsegmentation/ML-Tagging-Recommendations_in_Resource-Groups_Release-Note_zms-1.10.2_custom-tag.png" alt="A view of an ML recommended resource group configuration." title="The Dynamic Membership section shows the new tag type of a custom entry."></p><p><img src="https://help.zscaler.com/downloads/zpa/microsegmentation/about-machine-learning-recommendations-microsegmentation/ML-Tagging-Recommendations_in_Resource-Groups_Release-Note_zms-1.10.2_agent-group-tag.png" alt="A view of the Review page for the ML recommendation." title="The Dynamic Membership section shows the new tag type of Agent Group."></p></div> Feature Available Thu, 05 Mar 2026 08:00:00 GMT feature 1538659 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-05&id=1538676 <p>For customers who are not yet running Network Connectors that support redundancy, Zscaler strongly recommends replacing or migrating existing Network Connectors with redundancy-capable Network Connectors. Network Connectors that support redundancy resolve the following failure scenarios:</p><ul><li>A Network Connector link failure<ul><li>An internal link failure towards customer routers</li><li>An external link failure towards the VPN Service Edge</li></ul></li><li>A complete Network Connector node failure</li><li>A data center failure with traffic rerouting towards another data center</li><li>Scaling - ECMP (equal-cost multi-path) load balancing across Network Connectors from the VPN Service Edges and customer routers towards the Network Connector</li></ul><p>The redundancy design is based on External Border Gateway Protocol (EBGP) routing.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2025?applicable_category=private.zscaler.com&deployment_date=2025-10-08&id=1530986" target="_blank">High Availability and Redundancy in VPN (for Legacy Apps)</a> and <a href="https://help.zscaler.com/zpa/replacing-or-migrating-network-connectors-redundancy-capable-network-connectors" target="_blank">Replacing or Migrating Existing Network Connectors with Network Connectors that Support Redundancy</a>.</p> Feature Available Thu, 05 Mar 2026 08:00:00 GMT feature 1538676 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-03&id=1532693 <p>If you are using a privileged console with an RDP protocol for Privileged Remote Access (PRA), Zscaler has added support for additional keyboard languages: English (UK), Belgian French, Brazilian Portuguese, Swiss French, Swiss German, Hungarian, Italian, Norwegian, Spanish Latin American, Swedish, and Turkish (Q layout).</p> Feature Available Tue, 03 Mar 2026 08:00:00 GMT feature 1532693 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-03&id=1543053 <p>An update was released to support a new SIEM log type for Business Continuity events. </p><p>To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-25&id=1532408" target="_blank">Log Streaming Service (LSS) Support for Business Continuity Events</a>.</p> Feature in Limited Availability Tue, 03 Mar 2026 08:00:00 GMT feature 1543053 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-03&id=1535165 <p>A new credential agent is available for Privileged Remote Access (PRA) that enables ZPA integration with external identity sources, including Active Directory and Microsoft Entra ID, for credential discovery.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-03&id=1534088" target="_blank">Credential Management for Privileged Remote Access</a>.</p> Feature in Limited Availability Tue, 03 Mar 2026 08:00:00 GMT feature 1535165 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-03&id=1534088 <p>You can deploy a credential agent to automate the discovery, synchronization, and lifecycle management of privileged credentials for Privileged Remote Access (PRA) in the Zscaler Admin Console. After configuring the credential agent, you can:</p><ul><li>Automatically discover credentials using LDAP queries from Active Directory (AD) or search queries from Microsoft Entra AD.</li><li>Rotate credentials to generate new passwords with defined security requirements.</li><li>Create rotation policies to set rotation schedules for credentials.</li><li>Apply filters to automatically identify and pull newly created credentials from the AD.</li><li>Manage existing credentials, discovered credentials, and ignored credentials.</li><li>Organize privileged credentials into credential pools for policy mapping and injection.</li></ul> Feature in Limited Availability Tue, 03 Mar 2026 08:00:00 GMT feature 1534088 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-03-03&id=1535404 <p>An update was released to support traffic inspection with Internet & SaaS (ZIA) in application segments when Multimatch and pattern matching are enabled.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-08-21&id=1538863" target="_blank">Support for Internet & SaaS Inspection with Multimatch</a>.</p> Feature in Limited Availability Tue, 03 Mar 2026 08:00:00 GMT feature 1535404 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-02-25&id=1535403 <p>A recommended update was released that includes updated App Connector and ZPA Private Service Edge RPM packages for Red Hat Enterprise Linux 8.x and 9.x, and Private Cloud Controller and Network Connector RPM packages for Red Hat Enterprise Linux 9.x.</p><p>You can download the Manager software for <a href="https://help.zscaler.com/zpa/app-connector-deployment-guide-linux" target="_blank">App Connectors</a>, <a href="https://help.zscaler.com/zpa/private-service-edge-deployment-guide-linux" target="_blank">ZPA Private Service Edges</a>, <a href="https://help.zscaler.com/zpa/private-cloud-controller-deployment-guide-linux" target="_blank">Private Cloud Controllers</a>, or <a href="https://help.zscaler.com/zpa/network-connector-deployment-guide-linux" target="_blank">Network Connectors</a> from our repository. The Manager software version is 26.52.3.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-manager-software#managerUpgrades" target="_blank">Understanding the Manager Software</a>.</p> Feature Available Wed, 25 Feb 2026 08:00:00 GMT feature 1535403 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-02-24&id=1533613 <p>This release includes an update that supports VPN tunnels for users connected to ZPA Private Service Edges. With this update, Zscaler Client Connector users connected to ZPA Private Service Edges use public VPN Service Edges provisioned for the tenant in the Zscaler cloud.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-vpn-service-edges" target="_blank">About VPN Service Edges</a>.</p> Feature Available Tue, 24 Feb 2026 08:00:00 GMT feature 1533613 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-02-17&id=1532690 <div class="sub"><p>An update was released to support OAuth 2.0 enrollment for App Connectors. OAuth 2.0 is the recommended method for enrollment for ZPA, but provisioning key enrollment is also supported. To use OAuth 2.0, the OAuth server FQDN <code>zpa-oauth.private.zscaler.com</code> must be allowlisted, and user devices must be allowed to make an outbound connection to the <code>zpa-oauth.private.zscaler.com</code> server. Refer to <a class="url-external" href="https://config.zscaler.com/private.zscaler.com/zpa" target="_blank">config.zscaler.com/private.zscaler.com/zpa</a> (for the private.zscaler.com cloud) or <a class="url-external" href="https://config.zscaler.com/zpatwo.net/zpa" target="_blank">config.zscaler.com/zpatwo.net/zpa</a> (for the zpatwo.net cloud) for the IP address to add to the allowlist.</p><p>OAuth 2.0 support is available with a Manager software and App Connector version 25.48.4.</p><p class="note">Supported virtual machine (VM) images automatically have this feature enabled with the exception of Kubernetes, OpenShift, and Docker. Provisioning key enrollment is also supported on all VM images. The image attempts to use OAuth enrollment tokens by default but applies a provisioning key first if one is available. <br><br><span class="cf0">The OAuth server only supports IPv4-based communication. If an App Connector only has an IPV6 address, it cannot access the OAuth server.</span></p><p>OAuth 2.0 enrollment includes the following features:</p><ul><li><p>The pages for adding App Connectors have been simplified so you only need to select an App Connector group and up to 20 OAuth 2.0 enrollment tokens. If you add an App Connector to a previously created App Connector group without a signing certificate, you can select a certificate and add enrollment tokens from this page. To learn more, see <a href="https://help.zscaler.com/zpa/configuring-connectors" target="_blank">Configuring App Connectors</a>.</p><p><a class="image-icon" href="#add-appc">See image.</a></p></li><li><p>The App Connector Groups table contains a new column that shows the number of App Connectors associated with each App Connector group. To learn more, see <a href="https://help.zscaler.com/zpa/about-connector-groups" target="_blank">About App Connector Groups</a>.</p><p><a class="image-icon" href="#appc-group-table">See image.</a></p></li><li><p>The App Connector Groups details page includes a tab that shows the App Connectors in the current group. To learn more, see <a href="https://help.zscaler.com/zpa/about-connector-groups" target="_blank">About App Connector Groups</a>.</p><p><a class="image-icon" href="#group-details">See image.</a></p></li><li><p>You can create App Connector groups before configuring App Connectors to help streamline the process. The following tabs are also available:</p><ul><li><p>Details tab: Configure group settings, including an option to select a signing certificate. With the previous provisioning key enrollment, the signing certificate was associated with the provisioning key. With this release, the signing certificate is associated with an App Connector group.</p><p class="note">If you have an App Connector group that has its signing certificate associated with a provisioning key, and you add a new App Connector to that group using OAuth 2.0, you must edit the group and add the signing certificate to it.</p></li><li>Update Settings tab: Set a version profile, select how often updates occur, or pause updates for App Connectors in this group.</li></ul><p>These options are also available when editing App Connector groups.</p><p><a class="image-icon" href="#add-appc-group">See image.</a></p></li><li><p>On the App Connector Provisioning Keys page, you can select a provisioning key name to view details for the key, edit the key, or edit properties for the enrollment certificate. To learn more, see <a href="https://help.zscaler.com/zpa/about-connector-provisioning-keys" target="_blank">About App Connector Provisioning Keys</a>.</p><p><a class="image-icon" href="#pk-details">See image.</a></p></li><li><p>The Add App Connector Provisioning Key page lets you create a provisioning key and associate a group and signing certificate with the key.</p><p><a class="image-icon" href="#appc-pk">See image.</a></p></li></ul></div><div class="subc"><p><a class="ck-anchor" id="add-appc" target="_blank"></a><img src="https://help.zscaler.com/downloads/appc-add-appc.png" alt="Add App Connectors page in the ZPA Admin Portal" title="Add App Connectors page in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="group-details" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/appc-group-details_0.png" alt="App Connectors Tab in the App Connector Group Details Page" title="App Connectors Tab in the App Connector Group Details Page of the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="add-appc-group" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/add-appc_0.png" alt="Add App Connector Groups in the ZPA Admin Portal" title="Add App Connector Groups in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="appc-pk" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/add-appc-pk.png" alt="Add App Connector Provisioning Key Page in the ZPA Admin Portal" title="Add App Connector Provisioning Key Page in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="pk-details" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/add-appc-pk-details.png" alt="App Connector Provisioning Key Details in the ZPA Admin Portal" title="App Connector Provisioning Key Details in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="appc-group-table" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/appc-group-table_0.png" alt="App Connector Groups Page in the ZPA Admin Portal" title="App Connector Groups Page in the ZPA Admin Portal"></p></div> Feature Available Tue, 17 Feb 2026 08:00:00 GMT feature 1532690 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-02-11&id=1533775 <div class="sub"><p>VPN (for Legacy Apps) provides access policy rules that can allow or block network traffic on VPN Service Edges. To create a rule, you need to define the source and destination IP addresses as well as the protocol used. An address book consists of Classless Inter-Domain Routing (CIDRs) and IP addresses that can be used as a source or destination network in multiple policy rules to help organize the network resources to protect.</p><p>Per ZPA policy evaluation, VPN (for Legacy Apps) evaluates access policy rules using a top-down, specific-match principle. Traffic that doesn't match any access policy rule is blocked by default. If you are new to VPN (for Legacy Apps), you must create a policy rule to allow any traffic through the VPN tunnel.</p><p class="note">VPN (for Legacy Apps) supports a maximum of 1,000 policy rules and 128 address book entries.</p><p>This release includes the following enhancements for access policies:</p><ul><li><p>You can view configured rules and their actions on the Rules page. You can also:</p><ul><li>Search or filter rules.</li><li>Add, edit, or delete rules.</li><li>View how many additional source or destination networks are available. By default, two networks display but if there are more, the number of additional networks appears (e.g., +1).</li><li>Select a value in the Rule Order column to change the order in which rules are evaluated. Rules are evaluated using a top-down, first-match principle.</li><li>Select a rule name to view details for the rule.</li></ul><p><a class="image-icon" href="#rules">See image.</a></p></li><li><p>When adding a rule for the source or destination network, you can manually enter it, import individual LAN/Client Subnet entries, or select entries from the address book. You can expand the list of added entries under the IP Address field.</p><p class="note">If you manually enter or import LAN/Client Subnet entries, each time you update a Network segment, you must make a corresponding change to the access policy to add the LAN/Client Subnet entries. If you use the address book, any host or subnet added to the address book is automatically added to the access policy.</p><p><a class="image-icon" href="#add-rule">See image.</a></p></li><li><p>On the Address Book page, you can view, search, add, edit, or delete defined sets of IP addresses and CIDRs.</p><p><a class="image-icon" href="#address-book">See image.</a></p></li><li><p>You can add a set of IP addresses or CIDRs to the address book. A set of addresses in the address book cannot be nested inside of other address books, but you can reuse IP addresses and CIDRs in different address books.</p><p><a class="image-icon" href="#add-address">See image.</a></p></li></ul></div><div class="subc"><p><a class="ck-anchor" id="rules" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/zpa-vpn-access-policy-rules.png" alt="Access Policy Rules Page in VPN (for Legacy Apps)" title="Access Policy Rules Page in VPN (for Legacy Apps) in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="add-rule" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/zpa-vpn-access-policy-add-rule.png" alt="Add Rule Page in VPN (for Legacy Apps)" title="Add Rule Page in VPN (for Legacy Apps) in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="address-book" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/zpa-vpn-address-book.png" alt="Access Policy Address Book Page in VPN (for Legacy Apps)" title="Access Policy Address Book Page in VPN (for Legacy Apps) in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="add-address" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/zpa-vpn-access-policy-add-address.png" alt="Access Policy Add Address Page in VPN (for Legacy Apps)" title="Access Policy Add Address Page in VPN (for Legacy Apps) in the ZPA Admin Portal"></p></div> Feature Available Wed, 11 Feb 2026 08:00:00 GMT feature 1533775 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-02-06&id=1535353 <p>You can now configure a timer for the automatic age-out of disconnected agents for individual agent groups. When the timer is enabled, you can set the duration of days, hours, or minutes before access expires.</p> Feature Available Fri, 06 Feb 2026 08:00:00 GMT feature 1535353 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-02-06&id=1529975 <p>Microsegmentation now provides visibility to resources such as deployments, statefulsets, replicasets, and daemonsets. When you deploy agents, you can view network flows in the Zscaler Private Access (ZPA) Admin Portal.</p> Feature Available Fri, 06 Feb 2026 08:00:00 GMT feature 1529975 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-02-06&id=1535352 <p>You can now use tags to annotate resources with metadata that can be used when defining membership criteria for resource groups. You can create namespaces, tag keys, and tag groups and assign them to managed resources. To learn more, see <a href="https://help.zscaler.com/zpa/configuring-resource-groups" target="_blank" data-entity-type="node" data-entity-uuid="3ab7be3f-977b-463e-9a1f-064947287052" data-entity-substitution="canonical">Configuring Resource Groups</a>.</p> Feature Available Fri, 06 Feb 2026 08:00:00 GMT feature 1535352 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-02-03&id=1535235 <div class="sub"><p>An update was released to support automated updates to the Manager software and software updates for ZPA Private Service Edge and Private Cloud Controller.</p><p class="note">Automated Manager software updates are available with a Manager software version of 25.46.3 or later and a ZPA Private Service Edge or Private Cloud Controller version of 25.46.3 or later.</p><p>The table includes the following updates:</p><ul><li data-list-item-id="eaa1907b873d6624288ca72dccd046d99"><p>Version Profile: Displays the version profile applied to the ZPA Private Service Edge or Private Cloud Controller. You can hover over the information icon under the Version Profile column heading to view the target version for the Manager software and ZPA Private Service Edge or Private Cloud Controller software.</p><p><a class="image-icon" href="#version-profile">See image.</a></p></li><li data-list-item-id="eeb0a2f7d38da1f32a918e06d9f14570d">Software Update: Displays the status of the ZPA Private Service Edge or Private Cloud Controller software update. You can hover over the information icon next to the update status to view more information, such as the scheduled version and upgrade window.</li><li data-list-item-id="eae3a0174c8886982b02d15e6a2933a0b"><p>Manager Update: Displays the status of the Manager software update. You can hover over the information icon next to the update status to view more information, such as the scheduled version and upgrade window.</p><p><a class="image-icon" href="#mgr-update">See image.</a></p></li><li data-list-item-id="e5ffd13705e8d17ae68be8db31dd6a03d"><p>When viewing details for a ZPA Private Service Edge or Private Cloud Controller, you can view the Last Manager Update time.</p><p><a class="image-icon" href="#appc-details">See image.</a></p></li></ul><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-zpa-private-service-edges" target="_blank">About ZPA Private Service Edges</a> or <a href="https://help.zscaler.com/zpa/about-private-cloud-controllers" target="_blank">About Private Cloud Controllers</a>.</p><p>Manager software updates are scheduled during the maintenance window for ZPA software updates.</p></div><div class="subc"><p><a class="ck-anchor" id="version-profile" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/zpa-pse-table-mgr-software_0.png" alt="Example Version Profile column in the ZPA Private Service Edges page" title="Example Version Profile column in the ZPA Private Service Edges page"></p></div><div class="subc"><p><a class="ck-anchor" id="mgr-update" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/zpa-pse-table-mgr-software-aum_0.png" alt="Example Manager software tooltip in the ZPA Admin Portal" title="Example Manager software tooltip in the ZPA Admin Portal"></p></div><div class="subc"><p><a class="ck-anchor" id="appc-details" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/release-notes/zpa-service-release-notes/release-upgrade-summary-2025/pse-table-details-aum.png" alt="Example ZPA Private Service Edge details drawer in the ZPA Admin Portal" title="Example ZPA Private Service Edge details drawer in the ZPA Admin Portal"></p></div> Feature Available Tue, 03 Feb 2026 08:00:00 GMT feature 1535235 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-01-16&id=1535110 <p>This release fixes an intermittent issue with VPN redundancy where upgrading the VPN Service Edge caused it to lose the Border Gateway Protocol (BGP) override configuration file upon restart, which resulted in the BGP neighborship between the Network Connector and VPN Service Edge dropping until the configuration file was manually reuploaded.</p><p>To learn more, see <a href="https://help.zscaler.com/zpa/about-vpn-service-edges" target="_blank">About VPN Service Edges</a>.</p> Feature Available Fri, 16 Jan 2026 08:00:00 GMT feature 1535110 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-01-13&id=1529092 <p>A new client type and criteria for Extranet is supported when configuring an access policy. The Extranet client type and criteria allow admins to assign an extranet to an application segment to provide a defined set of partners, and supports both location and sublocation for extranet traffic. The same functionality is supported via the cloud service API.</p><div class="sub"><p><a class="image-icon" href="#extranetClientType">See image.</a></p></div><p>To learn more, see <a href="https://help.zscaler.com/zia/about-extranet" target="_blank">About Extranet</a>, <a href="https://help.zscaler.com/zpa/about-access-policy#criteriacondition" target="_blank">About Access Policy</a>, and <a href="https://help.zscaler.com/zpa/configuring-access-policies" target="_blank">Configuring Access Policies</a>.</p><div class="subc"><a class="ck-anchor" id="extranetClientType" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/zpa-add-access-policy-extranet-client-type-release-note.png" alt="Selecting the Extranet Client Type when Configuring an Access Policy" title="Selecting the Extranet Client Type when Configuring an Access Policy"></div> Feature in Limited Availability Tue, 13 Jan 2026 08:00:00 GMT feature 1529092 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-01-09&id=1534020 <p>An update was released to support adding more metadata for tagging applications to provide a more granular grouping and access management strategy.</p><p>To learn more, see <a href="https://help.zscaler.com/node/1534151">Tag Management for Defined Application Segments</a>.</p> Feature in Limited Availability Fri, 09 Jan 2026 08:00:00 GMT feature 1534020 at https://help.zscaler.com https://help.zscaler.com/zpa/release-upgrade-summary-2026?applicable_category=private.zscaler.com&deployment_date=2026-01-08&id=1534384 <div class="sub"><p>The Application Map for Microsegmentation is a visual representation of your network data and how it all works together. The interactive graph provides widgets for resource group, Public Internet, and VPC/VNET data that can aid in policy configuration and general resource maintenance.</p><p><a class="image-icon" href="#app-Map">See image.</a></p><p>To learn more, see <a href="https://help.zscaler.com/zpa/viewing-application-map" data-entity-type="external" class="url-external" target="_blank">Viewing the Application Map</a>.</p></div><div class="subc"><p><a class="ck-anchor" id="app-Map" target="_blank"></a><img src="https://help.zscaler.com/downloads/zpa/microsegmentation/dashboard/viewing-application-map/App-Map_release-notes.png" alt="A view of the new Application Map dashboard." title="The Application Dashboard showing the General Information details for a resource group."></p></div> Feature Available Thu, 08 Jan 2026 08:00:00 GMT feature 1534384 at https://help.zscaler.com