Troubleshooting Engine From "Why Is This Blocked?" to "Here's Why"

In Under 5 Minutes

Premium Beta
3

Scroll Down

ZHERO’s Troubleshooting Engine combines traffic flow visualization, multi-layer policy analysis across 11 policy types, HAR file debugging, and real traffic data from ZIA Insights — all in a single, privacy-preserving investigation workspace.

Four Investigation Tools in One Workspace

1. Set Criteria

Define the Scenario

Select the combination of criteria to investigate:
  • User or user group
  • Device or device group
  • Location
  • Destination URL or application
2. Visualize Flow

See the Path, Find the Problem

Interactive Sankey diagram shows traffic flow:
  • Device Groups → App Profiles → ZCC Settings → Forwarding Profiles
  • Flow widths reflect configuration impact
  • Hover over any node for entity details
  • Click through to drill into any entity
3. Analyze Policies

11 Policy Layers, One View

See which policies apply across all layers:
  • URL Filtering, SSL, Firewall, DNS, IPS
  • Forwarding, Cloud App Control, File Type
  • DLP, Sandbox, Bandwidth Management
  • Clear ALLOW/BLOCK indicators on each rule
4. Correlate Data

Theory Meets Reality

Bring in actual traffic data to validate:
  • Upload HAR files — ZHERO extracts domains and correlates with policies
  • Query real ZIA Insights traffic logs
  • See which requests were blocked, by which policy, and why
75% reduction in Mean Time To Resolution withmulti-layer visibility

Want to know more?

Watch Demo
Start Free Trial
Schedule a Demo
When a user says “I can’t access this site”, a Zscaler admin enters a maze of policy types, forwarding rules, and configuration layers — with no map and no visibility into what’s actually happening.

Without ZHERO

With ZHERO

Without ZHERO

❌ 30+ minutes to trace a single access issue

With ZHERO

✅ See complete traffic flow in a single Sankey diagram

Without ZHERO

❌ 10+ screens to navigate between policies

With ZHERO

✅ All 11 policy types evaluated simultaneously

Without ZHERO

❌ Traffic data and config in separate screens

With ZHERO

✅ HAR files correlated with Zscaler policies instantly

Without ZHERO

❌ Manual HAR analysis in separate tools

With ZHERO

✅ Query real ZIA Insights data for any user and time range

Without ZHERO

❌ Investigation context lost between sessions

With ZHERO

✅ Save and restore investigation sessions

Traffic Flow Visualization

  • Interactive Sankey diagram
  • Auto-updates on criteria change
  • Entity cards on hover
  • Proportional flow scaling
  • Click to drill into any entity

Multi-Layer Policy Analysis

  • 11 policy types simultaneously
  • Clear ALLOW/BLOCK indicators
  • Rule priority and precedence
  • URL expansion testing
  • Complete evaluation chain

HAR File Analysis

  • Drag & drop upload
  • Domain extraction
  • Policy correlation
  • Error identification
  • Request analysis

ZIA Insights Integration

  • Real traffic data from ZIA logs
  • User-specific transaction analysis
  • Time-based queries
  • Policy hit tracking
  • Blocked request details

Session Management

  • Save complete investigation sessions
  • Session history for quick access
  • Continue investigations later
  • Local storage via IndexedDB

Privacy-Preserving Architecture

  • 100% browser-based analysis
  • HAR files never leave your machine
  • Uses existing Zscaler API session
  • No data transmitted to ZHERO servers

Multi-Criteria Scenarios

  • Specific user + location + URL
  • Device group + application + time range
  • Any combination of criteria

Watch a 4-minute demo:

Ready to Transform Your Zscaler Experience?

Talk to Our Team!

Schedule a Demo
Start Free Trial