> For the complete documentation index, see [llms.txt](https://cybrhawksoc.gitbook.io/cybrhawk-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cybrhawksoc.gitbook.io/cybrhawk-docs/siem-integrations/content-security/zscaler.md).

# Zscaler

CybrHawk integrates with **Zscaler Internet Access (ZIA)** and **Zscaler Private Access (ZPA)** platforms to ingest logs related to web traffic, application access, and content security enforcement.

Logs provide visibility into user activity, blocked traffic, policy enforcement, and threat prevention events.

***

## Integration Method

Zscaler logs are forwarded to CybrHawk via **Syslog**.\
For configuration, please follow the [Onboarding Syslog Data Guide](/cybrhawk-docs/appliances/syslog-forwarder/onboarding-syslog-data.md).

***

## Prerequisites

* Administrative access to the Zscaler portal.
* TD Syslog forwarder deployed in your environment.
* Outbound connectivity from the forwarder to CybrHawk platform.

***

## Next Steps

1. Configure Zscaler to forward logs via syslog to your CybrHawk Syslog Forwarder VM.
2. Ensure correct port mapping (60000+ per source).
3. Submit a request to [**socv2@cybrhawk.com**](mailto:socv2@cybrhawk.com) with:
   * Log source IP(s)
   * Device type (ZIA or ZPA)

CybrHawk will validate parsing and enable dashboards for Zscaler logs.

***