icon-zapp.svg
Client Connector

Using the Windows Filter Driver for Zscaler Client Connector

Zscaler Client Connector 1.3 and later provides a new Windows filter driver for handling traffic within the app. This filter allows for VPN clients to better interoperate with the app. To learn more, refer to the Microsoft documentation on LWF drivers.

This driver only applies to Tunnel mode for ZIA and ZPA. If you are using ZPA, Zscaler highly recommends that you use the Windows filter driver.

Previously, when in Tunnel mode or when using ZPA, Zscaler Client Connector created a new virtual network adapter on Windows platforms. The app used OS routing to forward traffic via this interface to the cloud.

With the filter driver option, the app does not create a virtual network adapter. Instead, it uses Windows filtering to capture and forward traffic to the cloud. This allows for more granular control over traffic and also reduces interoperability issues for applications that manage network adapters on the system.

Enabling the Filter Driver

You must deploy Zscaler Client Connector 1.3 or later to use this feature.

To enable the filter driver:

  1. Go to Administration > Forwarding Profile.
  2. Add a new forwarding profile or edit an existing forwarding profile.
  3. Under Tunnel Driver Type, click Packet Filter Based to enable the filter driver.

The Tunnel Driver Type option for a forwarding profile in the Zscaler Client Connector Portal

  1. Click Save.

To learn about the packet capture feature for Zscaler Client Connector, see Enabling Packet Capture for Zscaler Client Connector.

Related Articles
About Forwarding ProfilesConfiguring Forwarding Profiles for Zscaler Client ConnectorUsing the Windows Filter Driver for Zscaler Client ConnectorSearching for a Forwarding ProfileAbout Trusted NetworksConfiguring Trusted Networks for Zscaler Client ConnectorSearching for a Trusted NetworkAbout Z-Tunnel 1.0 & Z-Tunnel 2.0Best Practices for Deploying Z-Tunnel 2.0Migrating from Z-Tunnel 1.0 to Z-Tunnel 2.0Configuring Dedicated Proxy PortsCopying a Forwarding Profile