Install and configure Security Incident Response integration with Zscaler

Install and configure the Security Incident Response integration with Zscaler Internet Access product from the ServiceNow Store to start using the integration on your ServiceNow AI Platform instance.

Before you begin

Role required: sn_si.admin

Procedure

1. Download the Security Incident Response integration with Zscaler product from the ServiceNow Store and install it.
2. Navigate to Security Operations > Integrations > Integration Configurations.
3. Search for the Security Incident Response integration with Zscaler tile and click Configure > Create new configuration.
4. On the form, fill in the fields.

   Table 1. Zscaler Configuration form

   Field	Description
   Server Name	Zscaler server name. For example, ZSserver.
   Active	Indicator that the profile is active.
   Order	Flow priority. The value for this field indicates the order of the workflows when two or more profiles share triggering conditions. The flow with the lowest number has the highest priority. To set the order of operation, enter a value. For example, 100, 200, 300, 400. The default is 100.
   Zscaler API URL	Base URL that hosts the Zscaler API. For example, https://example.zscalerbeta.net
   User Name	User name for the Zscaler Internet Access admin account.
   Password	Password for the Zscaler Internet Access admin account.
   API Key	API key that you obtained from the Zscaler Internet Access administration portal.

   The following example shows the Zscaler configuration page.

   Figure 1. ZScaler configuration page

   

5. Click Validate and Update.

Result

After you validate and save this configuration, return to the Zscaler Configurations page.