icon-zapp.svg
Client Connector

Zscaler Client Connector: Windows Registry Keys

You can navigate to Zscaler Client Connector registry keys by using the following path: Computer\HKEY_CURRENT_USER\Software\Zscaler\App.

This table provides a list of possible values and their explanation for the registry key, ZNW_State which represents Zscaler Client Connector's network state.

Registry Key Values Explanation
TRUSTED_VPN The machine is connected to a trusted full tunnel VPN.
NON_TRUSTED The machine is connected to a non-trusted network.
TRUSTED The machine is connected to a trusted network.

This table provides a list of possible values and their explanation for the registry keys, ZPA_State and ZWS_State which represents ZPA service state and ZIA service state, respectively.

Registry Key Values Explanation
OFF Service is turned off.
ON Service is turned on.
CONNECTING Service is connecting.
NONE_FORWARDING Service is in None Forwarding state. The traffic Interception is turned off.
TUNNEL_FORWARDING Service is in Tunnel Forwarding state. Network drivers are being used to intercept traffic.
LOCAL_PROXY_FORWARDING Service is in Local Proxy Forwarding state. PAC files are being used to intercept traffic.
ENFORCE_PROXY_FORWARDING Service is in Enforce Proxy Forwarding state. A PAC file is being enforced on the system.
ADAPTER_DOWN_ERROR

Service is in Adapter Down Error state. Zscaler Client Connector is not able to find an adapter with a default route.

This error may appear due to DHCP renewal. Run the "ipconfig /all" command and check for the lease obtained timestamp. Verify if the lease obtained timestamp coincides with the problem time.

For example: Lease Obtained. . . . . . . . . . : Wednesday, 9 February 2022 2:59:42

SERVICE_DOWN_ERROR Service is in Service Down Error state. One of the microservices is not operational.
CAPTIVE_PORTAL_ERROR Service is in Captive Down Error state. Captive portal has been detected on the system and the open timeout has expired.
SERVER_DOWN_ERROR Service is in Server Down Error state. Zscaler Client Connector is not able to reach the ZIA Public Service Edge (formerly ZIA ZEN) or ZPA Public Service Edge (formerly ZPA ZEN or ZPA Broker).
INTERNET_UNREACHABLE_ERROR

Service is in Internet Unreachable Error state. Network appears to be connected but ZPA is not able to resolve the broker name.

This registry key value is applicable only for ZPA.

FIREWALL_BLOCK_ERROR Service is in Firewall Block Error state. Zscaler Client Connector's attempt to create an outbound and/or inbound connection to itself failed.
SYSTEM_SOCKETS_EXHAUSTED_ERROR Service is in Sockets Exhausted Error state. System's limit for maximum sockets has reached.
DRIVER_ERROR Service is in Driver Error state. Zscaler Client Connector is not able to load the network driver (TAP/TUN/LWF).
CAPTIVE_PORTAL_FAILOPEN Service is in Captive Portal FailOpen state. Zscaler Client Connector has detected a captive portal on the network and it has stopped traffic interception for some time to allow captive authentication.
PRE_ENROLMENT_PROXY_ENFORCEMENT Service is in Local Captive Mode state. Strict enforcement has been configured and Zscaler Client Connector has blocked network access till the user logs in to Zscaler Client Connector.
SERVER_AUTH_ERROR Service is in Server Auth Error state. ZIA Public Service Edge or ZPA Public Service Edge is not accepting the auth credentials sent by the client.
SERVER_AUTH_TERMINATED_AT_UNKNOWN Service is in Chaining Authentication Error state. The realm of ZIA Public Service Edge or ZPA Public Service Edge and the logged-in user do not match.
ZPA_UNTRUSTED_SERVER_CERT_ERROR

Service is in ZPA Untrusted Server Error state. ZPA connection got an SSL exception while connecting.

This registry key value is applicable only for ZPA.

Related Articles
AppArmor Causes Auto-Upgrade to Zscaler Client Connector version 3.7.1 for Linux to FailZscaler Client Connector Errors Zscaler Client Connector: Windows Registry KeysZscaler Client Connector: Connection Status ErrorsZscaler Client Connector: ZPA Authentication ErrorsCaptive Portal Sign-In Fails for Chromebook UsersZscaler Client Connector Displays Blank PageFirewall Posture Check Failure on macOS SequoiaMicrosoft Outlook and Microsoft Teams Not AccessibleLogin Failure in Zscaler Client Connector for Android on ChromeOS version 1.12 Browser-Based Authentication Fails When Using Certain Browsers to Launch Zscaler Client Connector for Linux and WindowsDNS Request Failure in Zscaler Client Connector version 4.1.0.89DNS Resolution Failure in Zscaler Client Connector for Android on ChromeOS version 1.12Upgrading to Zscaler Client Connector 3.7 for WindowsMissing Zscaler Client Connector GNOME Tray icon for LinuxUpgrading to Windows 10, Version 2004Supporting M1 ProcessorsUpgrading to macOS Big SurUpgrading to macOS CatalinaUpgrading to Android 10Using Zscaler Client Connector with Cisco AnyConnect on macOS CatalinaUsing the Unauthorized Modification Device Posture ProfileResolving Update Issues to Zscaler Client Connector 1.4.3Login Failures with Zscaler Client Connector Using Active DirectoryDowngrading Zscaler Client Connector to an Earlier VersionResolving Zscaler Client Connector Linux 1.2 DNS Configuration Issues for VPNsResolving Auto-Update Issues for Zscaler Client Connector Linux 1.2Upgrading to Zscaler Client Connector version 1.9 for Android