Forum Discussion
LauriK000
Feb 03, 2023Copper Contributor
Using Sentinel API to connect Zscaler Cloud NSS
Hi guys, I'm looking into connecting my Zscaler environment logs to Sentinel via Zscaler Cloud NSS. Which will stream the logs direct to Sentinel without a VM. Zscaler Cloud NSS is asking Senti...
- Feb 06, 2023
There is an API, Logs Ingestion API in Azure Monitor - Azure Monitor | Microsoft Learn
Probably this will help.
mikhailf
Feb 04, 2023Iron Contributor
Hello LauriK000,
I've just looked into my Sentinel and found that there are 2 connectors available out-of-the box: Zscaler Internet Access and Zscaler Private Access (both of them are not your case).
So you need to check what options of SIEM integration Zscaler Cloud NSS has.
It can be a Syslog forwarding (needs a Syslog forwarder), pulling logs via HTTPS (API requests by Logic App or Azure Function, for example), or anything else. You can find it in the Zscaler documentation.
When you have verified the available options, you can decide how to proceed.