Blog · Series
From the Trenches
An ongoing series. Read it in order or jump to what you need.
- 1
Your ZPA discovery wildcard is a black box. Here's how to open it.
Every ZPA environment starts with broad discovery wildcards. They are necessary, and they go opaque fast. Here is how to see exactly what is flowing through one, then tighten it.
Jul 23, 2026 · 3 min read From the Trenches - 2
App profiles, forwarding profiles, PAC files: the assessment nobody wanted to do
The Client Connector layer is the part of a Zscaler assessment everybody postpones: three configurations that depend on each other, spread across screens you cannot open at the same time. Here is how ZHERO turns it into two scores, a heatmap and a recovery plan.
Sep 16, 2026 · 9 min read From the Trenches