WVD and Zscaler App

%3CLINGO-SUB%20id%3D%22lingo-sub-1137293%22%20slang%3D%22en-US%22%3EWVD%20and%20Zscaler%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1137293%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20anyone%20had%20an%20issue%20running%20Zscaler%20with%20WVD%3F%26nbsp%3B%20%26nbsp%3BOr%20has%20anyone%20been%20succesful%3F%26nbsp%3B%20%26nbsp%3BAt%20the%20moment%2C%20Zscaler%20is%20totally%20killing%20our%20WVD%20pilot.%26nbsp%3B%20%26nbsp%3BWe%20run%20the%20app%20version%20of%20Zscaler%20that%20runs%20on%20the%20client%20and%20it%20seems%20to%20be%20unhappy%20with%20some%20of%20the%20WVD%20components%20and%20how%20they%20talk%20to%20Azure.%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20working%20with%20Zscaler%20support%2C%20but%20so%20far%20no%20luck.%26nbsp%3B%20%26nbsp%3BSo%20I'm%20wondering%20if%20anyone%20else%20has%20experienced%20issues%20with%20Zscaler%20and%20WVD.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1192705%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20and%20Zscaler%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1192705%22%20slang%3D%22en-US%22%3EWe're%20in%20the%20same%20boat.%20It%20doesn't%20appear%20ZApp%20supports%20the%20multi-session%20Windows%2010%20OS%20utilzed%20by%20WVD.%20Support%20tells%20me%20it's%20on%20the%20roadmap%20but%20currently%20unsupported.%20We've%20tried%20using%20PAC%20files%20but%20continue%20to%20get%20mixed%20results.%20Sites%20which%20should%20be%20blocked%20sometimes%20work%2C%20authentication%20fail%2C%20etc.%20Have%20you%20made%20any%20progress%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1254681%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20and%20Zscaler%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1254681%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F338210%22%20target%3D%22_blank%22%3E%40ChristopherB2175%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20you%20been%20able%20to%20get%20Zscaler%20to%20work%20on%20WVD%3F%20What%20has%20been%20your%20experience%3F%3C%2FP%3E%3CP%3EI%20read%20in%20some%20posts%20that%20WVD%20does%20not%20support%20proxy%20configurations%2C%20so%20am%20also%20wondering%20if%20this%20breaks%20any%20MS%20support%20on%20the%20vdi's%20running%20Zscaler.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1503214%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20and%20Zscaler%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1503214%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F177412%22%20target%3D%22_blank%22%3E%40Animesh%20Bhattacharya%3C%2FA%3E%26nbsp%3BWe%20had%20to%20take%20a%20different%20approach%20to%20ZScaler%2FAzure.%26nbsp%3B%20We%20are%20also%20a%20SilverPeak%20(SD-WAN)%20client%20so%20what%20we%20did%20was%20setup%20an%20SD-WAN%20virtual%20appliance%20in%20Azure%20which%20handles%20the%20GRE%20tunnels%20to%20ZScaler%2C%20then%20with%20routing%20tables%20change%20the%20WVD%20subnet%20to%20use%20this%20device%20as%20it's%20Default%20GW.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe're%203%20months%20in%20with%20the%20design%20and%20no%20notable%20issues.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1691432%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20and%20Zscaler%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1691432%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F338210%22%20target%3D%22_blank%22%3E%40ChristopherB2175%3C%2FA%3E%26nbsp%3B.We%20have%20similar%20issue%20with%20sporadic%20disconnects%20from%20active%20VDIs.%20We%20do%20have%20Zscaler%20on%20the%20network.%20Have%20you%20had%20further%20disconnects%20after%20you%20installed%26nbsp%3B%3CSPAN%3ESD-WAN%20virtual%20appliance%20to%20handle%20GRE%20traffic%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Has anyone had an issue running Zscaler with WVD?   Or has anyone been succesful?   At the moment, Zscaler is totally killing our WVD pilot.   We run the app version of Zscaler that runs on the client and it seems to be unhappy with some of the WVD components and how they talk to Azure.   

 

We are working with Zscaler support, but so far no luck.   So I'm wondering if anyone else has experienced issues with Zscaler and WVD.

4 Replies
We're in the same boat. It doesn't appear ZApp supports the multi-session Windows 10 OS utilzed by WVD. Support tells me it's on the roadmap but currently unsupported. We've tried using PAC files but continue to get mixed results. Sites which should be blocked sometimes work, authentication fail, etc. Have you made any progress?

@ChristopherB2175 

Have you been able to get Zscaler to work on WVD? What has been your experience?

I read in some posts that WVD does not support proxy configurations, so am also wondering if this breaks any MS support on the vdi's running Zscaler.

@Animesh Bhattacharya We had to take a different approach to ZScaler/Azure.  We are also a SilverPeak (SD-WAN) client so what we did was setup an SD-WAN virtual appliance in Azure which handles the GRE tunnels to ZScaler, then with routing tables change the WVD subnet to use this device as it's Default GW.  

 

We're 3 months in with the design and no notable issues.  

@ChristopherB2175 .We have similar issue with sporadic disconnects from active VDIs. We do have Zscaler on the network. Have you had further disconnects after you installed SD-WAN virtual appliance to handle GRE traffic?