Zscaler Internet Access DBL Configuration Guide

Our Dynamic Block List (DBL) configuration guide was accurate at the time of writing but vendors change things frequently! If you find errors or anything is outdated, let us know by raising a request in the Samurai MDR application and we shall get it updated.

Follow the steps below and then submit an onboarding request raise a request via the Samurai MDR application.

Access Requirements

Threat data will be pushed using the Zscaler native API with standard HTTPS TCP/443 to your Zscaler cloud instance.

From Zscaler Internet Access Portal:

• Create a dedicated user for NTT

• Provide your API base URL and API key

• Create a URL category

• Configure URL and Cloud App control

• Configure Monthly Reporting

Once completed you will need to provide specific information to NTT via a ticket in the Samurai MDR application.

Create a dedicated user with a specific role for NTT

Follow the steps outlined in Zscaler documentation to create an admin role: 

• Adding Admin Roles

Use the following parameters when completing the steps:

Table 1: Admin role

Follow the steps outlined in Zscaler documentation to create a user and assign the role:

• Adding ZIA Admins

Use the following parameters when completing the steps:

Table 2: Admin user

You will need to share these credentials when raising a ticket with us.

Provide your API base URL and API key

Review the Zscaler documentation to find your Base URL and API Key:

• Managing Organization API Keys

You can also read more information about the Zscaler API at:

• https://help.zscaler.com/zia/about-cloud-service-api-key-management

You will need this information when raising a ticket with us.

Create a dedicated URL category for the DBL:

Follow the Zscaler documentation:

• Configuring Custom URL Categories

You need to create two URL categories. Use the following parameters when completing the steps:

Table 3: Custom URL category 1

Table 4: Custom URL category 2

Configure URL and Cloud App control

Follow the steps outlined in Zscaler documentation:

• Configuring the URL Filtering Policy

Use the following applicable parameters when completing the steps (set other parameters according to your specific configuration):

Table 5: URL filtering policy

Configure Monthly Reporting

To enable improvements of DBL we recommend that you schedule monthly reports that are automatically emailed to us. 

Follow the steps in the Zscaler documentation, Refer to Copying a Standard Report:

• Creating or Copying a Report

Select the Blocked Web Traffic Overview under Standard Reports - Web Activity to copy 

Table 6: Copy Report

Follow the steps in Zscaler documentation to Schedule the Report:

• Scheduling Reports

Use the following parameters when completing the steps:

Table 7: Scheduled Report

Raise a Request

Now that you have completed all of the steps above you must now raise a request via the Samurai MDR application. Add the following information (created from the steps above) within your request:

Submit the ticket and you will hear back from us when onboarding is complete.