Detection & Response Enablement
Aperçu
The Zscaler connector streams OpenCTI domain indicators to Zscaler for URL filtering and blocking.
The Zscaler connector streams OpenCTI domain indicators to Zscaler for URL filtering and blocking. It integrates OpenCTI threat intelligence into the Zscaler environment by managing domain indicators in Zscaler URL categories, automatically adding or removing domains from a configurable blacklist category.
Key features:
- Real-time domain indicator management
- Automatic Zscaler configuration activation
- Domain validation before submission
- Classification lookup before blacklisting
- Rate limit handling with automatic retries
- Duplicate domain detection