Investigation & Diagnostics Answer "What Happened?" Across ZIA and ZPA

In Under 5 Minutes

Premium Beta
  • ZHERO
  • 5
  • Investigation & Diagnostics
3

Scroll Down

When something goes wrong — a user can’t access a site on ZIA, or an application isn’t reachable on ZPA — the admin enters a maze of policy types, diagnostic logs, and configuration layers. The native consoles show data, but not answers.

ZHERO changes this with two purpose-built investigation engines — one for ZIA, one for ZPA — that turn hours of manual cross-referencing into minutes of guided analysis.

The Investigation Tax

1. Set Criteria

Define the Scenario

Select the combination of criteria to investigate:
  • User or user group
  • Device or device group
  • Location
  • Destination URL or application
2. Visualize Flow

See the Path, Find the Problem

Interactive Sankey diagram shows traffic flow:
  • Device Groups → App Profiles → ZCC Settings → Forwarding Profiles
  • Flow widths reflect configuration impact
  • Hover over any node for entity details
  • Click through to drill into any entity
3. Analyze Policies

11 Policy Layers, One View

See which policies apply across all layers:
  • URL Filtering, SSL, Firewall, DNS, IPS
  • Forwarding, Cloud App Control, File Type
  • DLP, Sandbox, Bandwidth Management
  • Clear ALLOW/BLOCK indicators on each rule
4. Correlate Data

Theory Meets Reality

Bring in actual traffic data to validate:
  • Upload HAR files — ZHERO extracts domains and correlates with policies
  • Query real ZIA Insights traffic logs
  • See which requests were blocked, by which policy, and why
75% reduction in Mean Time To Resolution withmulti-layer visibility

Two Engines, One Mission

Different platforms, different data sources — same goal: give you answers fast.

ZIA Troubleshooting Engine

  • Visual traffic flow with interactive Sankey diagram
  • 11 policy layers evaluated simultaneously
  • HAR file analysis correlated with Zscaler policies
  • ZIA Insights — query real traffic logs for any user

ZPA Diagnostics Engine

  • Multi-dimensional drilldown — users, domains, domain:port
  • One-click Excel export of any drilldown result
  • Raw logs with infinite scroll and search history
  • Background operation — get notified when results are ready

Want to know more?

Watch Demo
Start Free Trial
Schedule a Demo
When a user says “I can’t access this site”, a Zscaler admin enters a maze of policy types, forwarding rules, and configuration layers — with no map and no visibility into what’s actually happening.

Without ZHERO

With ZHERO

Without ZHERO

❌ 30+ minutes to trace a single access issue

With ZHERO

✅ See complete traffic flow in a single Sankey diagram

Without ZHERO

❌ 10+ screens to navigate between policies

With ZHERO

✅ All 11 policy types evaluated simultaneously

Without ZHERO

❌ Traffic data and config in separate screens

With ZHERO

✅ HAR files correlated with Zscaler policies instantly

Without ZHERO

❌ Manual HAR analysis in separate tools

With ZHERO

✅ Query real ZIA Insights data for any user and time range

Without ZHERO

❌ Investigation context lost between sessions

With ZHERO

✅ Save and restore investigation sessions

Without ZHERO

❌ Manually cross-referencing ZPA diagnostic logs to find patterns

With ZHERO

✅ One-click drilldown to extract all users, domains, or domain:port combinations

Without ZHERO

❌ Copy-pasting diagnostic data into spreadsheets for analysis

With ZHERO

✅ Export any drilldown result to Excel in one click

Without ZHERO

❌ Losing your place when switching between diagnostics and configuration

With ZHERO

✅ Floating panel runs in the background — get notified when results are ready

ZIA Troubleshooting Engine

Diagnose access issues end-to-end with visual traffic flow, multi-layer policy analysis, and real traffic correlation.

Traffic Flow Visualization

  • Interactive Sankey diagram
  • Auto-updates on criteria change
  • Entity cards on hover
  • Proportional flow scaling
  • Click to drill into any entity

Multi-Layer Policy Analysis

  • 11 policy types simultaneously
  • Clear ALLOW/BLOCK indicators
  • Rule priority and precedence
  • URL expansion testing
  • Complete evaluation chain

HAR File Analysis

  • Drag & drop upload
  • Domain extraction
  • Policy correlation
  • Error identification
  • Request analysis

ZIA Insights Integration

  • Real traffic data from ZIA logs
  • User-specific transaction analysis
  • Time-based queries
  • Policy hit tracking
  • Blocked request details

Session Management

  • Save complete investigation sessions
  • Session history for quick access
  • Continue investigations later
  • Local storage via IndexedDB

Privacy-Preserving Architecture

  • 100% browser-based analysis
  • HAR files never leave your machine
  • Uses existing Zscaler API session
  • No data transmitted to ZHERO servers

Multi-Criteria Scenarios

  • Specific user + location + URL
  • Device group + application + time range
  • Any combination of criteria

ZPA Diagnostics Engine BETA

Turn raw ZPA diagnostic data into actionable intelligence — without leaving the console.

1. Launch Panel

Open diagnostics from the ZHERO menu or right-click any entity card

2. Set Filters & Search

Use the native ZPA filters — ZHERO reads them automatically and runs in the background

3. Drill Down & Export

Extract users, domains, or domain:port combinations — export to Excel in one click

Multi-Dimensional Drilldown

Extract all users, all domains, or full domain:port combinations from any diagnostic search result.

Floating Panel

Draggable, resizable panel that works alongside the native ZPA Diagnostics page — never leaves your workflow.

Raw Logs

Browse raw diagnostic log entries with infinite scroll and automatic pagination for large result sets.

Search History

Built-in history of past diagnostic searches — restore any previous search with one click.

Excel Export

Export drilldown results and raw logs to professionally formatted Excel files — ready for reporting and analysis.

Entity Enrichment

See entity names instead of raw IDs. Launch diagnostics directly from entity card context menus.

Watch a 4-minute demo:

Ready to Transform Your Zscaler Experience?

Talk to Our Team!

Schedule a Demo
Start Free Trial