Feature · Advanced Exports

Advanced Exports Comprehensive Zscaler exports, generated in seconds.

Zscaler holds powerful data, but compiling it into meaningful, shareable analysis takes real effort. Advanced Exports gives you 15+ professional export types powered by a unified Export Engine: configuration, policy usage and traffic data cross-referenced into documents the native console does not produce, ready for networking, audit, endpoint, capacity planning and executive teams.

Start Free Trial ▶ Watch Demo

Excel export of firewall rules generated by ZHERO, with action, state, labels and last 30 days traffic per rule

Exports that took hours of manual compilation now take minutes.

The full export catalog

One unified engine, one click. 15+ export types and counting, grouped by the team that needs them.

ZIA

URL Inventory
Firewall Rules
Locations
App Profiles (3 sheets)
SSL Policies
URL Filtering
Cloud App Rules

ZPA

Access Policies
Application Segments
Diagnostics Logs
User Drilldown
Domain Drilldown

Collaboration

Audit Trail
Pending Changes
ZIA Insights

Unified Export Engine

Column Selection Matrix Mode Templates Reordering Collaboration Data Traffic Analytics

Why it matters

One engine, exports for every team

Feature

Unified Export Engine

Benefit

Per-tenant templates, column selection and drag-and-drop reordering, matrix mode that expands multi-value fields into one column per value, plus collaboration tags and comments included in every export

Outcome

Every document lands with headers, filters, freeze panes and conditional highlighting already in place, no post-processing needed

Feature

Policy audit exports

Benefit

Firewall Rules, SSL Inspection Policy, URL Filtering, Cloud App Control and ZPA Access Policy as sortable, filterable Excel with criteria, actions, rule usage and 30 or 180-day traffic on firewall rules

Outcome

Audit reviews and compliance documentation without copying rules screen by screen

Feature

Inventory and capacity exports

Benefit

URLs, Locations, App and Forwarding Profiles and ZPA Application Segments, enriched with policy usage counts and 30 or 180-day traffic volume on locations

Outcome

Cleanup, capacity planning and rationalization projects grounded in real usage data, with zero-impact items highlighted

Feature

SSL Inspection Analytics

Benefit

Inspection rate, 30-day traffic trends, Office 365 and SaaS coverage, and gap analysis, generated through Smart Analysis templates

Outcome

Quantify encryption coverage for leadership and track improvement over time

Feature

Pending Changes PDF

Benefit

Visual before and after diff cards with author attribution and a complete change summary

Outcome

Stakeholders without ZHERO can review and approve changes, with a documented audit trail

Advanced Exports removes the reporting tax from Zscaler administration: instead of extracting data screen by screen and rebuilding spreadsheets by hand, you generate professional, analysis-enriched documents in one click. Everything is compiled locally in your browser from your live configuration, so the export is always current and your data never leaves your machine.

Pending Changes PDF

Change documentation, ready to hand off

Visual before and after diff cards with author attribution and a complete change summary: stakeholders without ZHERO can review and approve changes, with a documented audit trail.

ZHERO pending changes report exported as a branded PDF with entity snapshots and category diffs

ZPA Diagnostics exports

Raw ZPA logs, one click to Excel

From any ZPA diagnostic search, drill down by users, domains or domain:port combination, then export the result to a formatted Excel in one click. Exports run in the background with a notification when ready, so you can keep working. Run a wildcard segment weekly and you build a traffic picture beyond ZPA's 14-day log window. The engine that powers these drilldowns lives on Investigation & Diagnostics.

User drilldown: every user matching your filter, with access counts
Domain and domain:port drilldown: essential for tightening discovery wildcards
Raw diagnostic logs, exported straight to Excel

ZPA diagnostics engine in ZHERO: drilldown from a search to the users, domains and domain and port combinations behind it

How it works

From console to handoff in three steps

Step 1

Navigate

Open the area you want to document: URLs, locations, firewall rules, SSL inspection, ZPA policies, application segments or pending changes.

Step 2

Export in one click

Pick a saved template or customize columns on the spot, then click Export. ZHERO compiles configuration, usage and traffic data into a professionally formatted file.

Step 3

Hand the Excel or PDF to the team that needs it: networking, audit, endpoint, capacity planning or executives. Filters and formatting are already done.

Without ZHERO vs With ZHERO

Without ZHERO

With ZHERO

Building a report

Hours of manual extraction across multiple screens

One-click generation in seconds

Configuration and traffic together

No correlation, two separate manual efforts

Exports enriched with policy usage and 30 or 180-day traffic data

Formatting

Raw spreadsheets cleaned up by hand

Headers, filters, freeze panes and highlighting built in

Freshness

Static documents that quickly go stale

Regenerate from live data anytime, in one click

Cross-team handoff

Screenshots and copy-paste into email

Shareable Excel and PDF each team can filter on their own

Case study

Nobody knew which of 290 locations were still active. One export added a single column, traffic volume over the last 30 to 180 days, and 180 came back at zero. 62% of the configuration was obsolete, surfaced in minutes and handed to the networking team as a spreadsheet.

Enterprise ZIA locations cleanup

Anonymized customer engagement

180/290

locations with zero traffic, revealed by one export

62%

of the configuration was obsolete

30 & 180-day

traffic volume per location, in one Excel column

FAQ

Questions, answered

Which exports are available?

15+ export types, grouped by team. ZIA policy and entity: URL Inventory and Analytics, Firewall Rules, Locations, App and Forwarding Profiles and PAC Files, SSL Inspection Policy, URL Filtering Policy, Cloud App Control, and SSL Inspection Analytics. ZPA: Access Policies, Application Segments, Diagnostics Raw Logs, Diagnostics User Drilldown, and Diagnostics Domain and domain:port Drilldown. Collaboration and audit: Audit Trail and the Pending Changes PDF. The list keeps growing with every release.

Can I add traffic data to exports?

Yes. Locations and Firewall Rules exports can include actual traffic volume over the last 30 or 180 days, so you can instantly separate active configuration from ghosts before a cleanup or capacity project.

Does my configuration data leave the browser?

No. Every export is generated locally in your browser using your existing Zscaler API session. Your configuration and traffic data are never transmitted to ZHERO servers; ZHERO only receives licensing data.

Can I customize what goes into an export?

Yes. The Export Engine supports saved templates per tenant, column selection and drag-and-drop reordering, matrix mode that expands multi-value fields into individual rows, and optional collaboration tags and comments.

What formats do exports use?

Excel for configuration and analytics exports, with multisheet layouts where the data calls for it (for example flat and expanded views of ZPA access policies). Pending changes export as a PDF with visual diff cards.

Do exports cover ZPA as well as ZIA?

Yes. ZPA Access Policy, ZPA Application Segments and ZPA Diagnostic exports are included. Diagnostic drilldowns by user, domain or domain:port export to Excel in one click and run in the background with notifications.

Advanced Exports in action

Watch a 4-minute demo.

Ready to see Advanced Exports in your tenant?

Start Your Transformation!

Install in two minutes. No servers, no migration, no training.

Start Free Trial Schedule a Demo