Blog · Category

Investigation & MTTR

Cover of the video Can this user reach it?: the title on a navy background next to a tilted card of the ZHERO reachability verdict, Reachable with 92% inspected and the Firewall, DNS and SSL Inspection tiles
Investigation & MTTR

Can this user reach it? From a vague Zscaler ticket to the cause

"Claude stopped working for me on Wednesday." No time, no error, just a day. The configuration says the destination is reachable, the logs say there were blocks, and the answer sits in the gap between the two. This is how the Troubleshooting Engine closes that gap, step by step.

Oct 6, 2026 · 7 min read Feature Spotlight
ZHERO's ZPA Diagnostics Engine showing a search result drilled down into users, domains and domain-port combinations, with an export to Excel button
Investigation & MTTR

Your ZPA discovery wildcard is a black box. Here's how to open it.

Every ZPA environment starts with broad discovery wildcards. They are necessary, and they go opaque fast. Here is how to see exactly what is flowing through one, then tighten it.

Jul 23, 2026 · 3 min read From the Trenches
An Excel workbook generated by ZHERO listing Zscaler firewall rules with action, state, labels and a column of real traffic volume per rule, ready to filter and hand off
Investigation & MTTR

The work you'll never do: the mental list every Zscaler admin carries

One tenant had 290 locations and nobody knew which were still live. An export with one extra column showed 180 were ghosts. The work that was too expensive becomes done.

Jul 13, 2026 · 5 min read The Hidden Cost