Install and configure Security Incident Response integration with Zscaler

Install and configure the Security Incident Response integration with Zscaler internet Access product from the ServiceNow Store to start using the integration on your ServiceNow AI Platform instance.

Avant de commencer

Role required: sn_si.admin

Procédure

1. Download the Security Incident Response integration with Zscaler product from the ServiceNow Store and install it.
2. Navigate to Security Operations > Integrations > Integration Configurations.
3. Search for the Security Incident Response integration with Zscaler tile and select Configure > Create new configuration.
4. On the form, fill in the fields.

   Tableau 1. Zscaler Configuration form

   Field	Description
   Server Name	Zscaler server name. For example, ZSserver.
   Active	Indicator that the profile is active.
   Order	Flow priority. The value for this field indicates the order of the workflows when two or more profiles share triggering conditions. The flow with the lowest number has the highest priority. To set the order of operation, enter a value. For example, 100, 200, 300, 400. The default is 100.
   Zscaler API URL	Base URL that hosts the Zscaler API. For example, https://example.zscalerbeta.net
   User Name	User name for the Zscaler Internet Access admin account.
   Password	Password for the Zscaler Internet Access admin account.
   API Key	API key that you obtained from the Zscaler Internet Access administration portal. Remarque : The user must have sn_si.admin role to setup the integration.

   The following example shows the Zscaler configuration page.

   Figure 1. ZScaler configuration page

   

5. Select Validate and Update.

Résultats

After you validate and save this configuration, return to the Zscaler Configurations page.