Skip to main content
Zscaler integrates with Inviolet in the two directions described in the network enforcement overview: observe (read the vendor’s egress logs into Inviolet) and enforce (block direct LLM access).

​
Observe (CASB) — available today

Inviolet’s casb-zscaler connector pulls Zscaler egress events and ingests the ones bound for LLM providers, so bypass volume and attribution show up in the Shadow IT analytics view. Set it up: Inviolet → Settings → Data Sources → Admin Connectors → New → Zscaler, then paste your credentials. Credentials: Zscaler ZIA — an API key + admin credentials (Administration → API Key Management).

​
Enforce (SWG) — on request

Network enforcement packs for Zscaler (block direct LLM API + consumer UIs, forcing traffic through Inviolet) are delivered per engagement. Unlike Cloudflare — which matches at the DNS layer natively — Zscaler enforcement is scoped to your tenant’s capabilities. Contact us to scope a deployment.
Cloudflare is the reference vendor, validated end to end (enforcement + observability). See the Cloudflare guide for the full pattern; the same shape applies here once your enforcement pack is built.