This app implements containment and investigative actions on Zscaler
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get report: Fetch sandbox report for provided md5 file hash
- list url categories: List all URL categories
- block ip: Block an IP
- block url: Block a URL
- unblock ip: Unblock an IP
- unblock url: Unblock a URL
- allow ip: Add an IP address to the allowlist
- allow url: Add a URL to the allowed list
- unallow ip: Remove an IP address from the allowlist
- unallow url: Remove a URL from the allowed list
- lookup ip: Lookup the categories related to an IP
- lookup url: Lookup the categories related to a URL
- submit file: Submit a file to Zscaler Sandbox
- get admin users: Get a list of admin users
- get users: Gets a list of all users and allows user filtering by name, department, or group
- get groups: Gets a list of groups
- add group user: Add user to group
- remove group user: Remove user from group
- get allowlist: Get urls on the allow list
- get denylist: Get urls on the deny list
- update user: Update user with given id
- add category url: Add urls to a cetgory
- add category ip: Add IPs to a cetgory
- remove category url: Add urls to a cetgory
- remove category ip: Remove IPs to a cetgory
- create destination group: Create destination group
- list destination group: List destination group
- edit destination group: Edit destination group
- delete destination group: Delete destination group
- get departments: Get a list of departments
- get category details: Get the urls and keywords of a category