{
    "Name": "Zscaler Internet Access",
    "Author": "Zscaler",
    "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/ZscalerLogo.svg\" width=\"358px\" height=\"221px\">",
    "Description": "The [Zscaler Internet Access](https://www.zscaler.com/products-and-solutions/zscaler-internet-access) solution for Microsoft Sentinel enables you to ingest [Zscaler Internet Access Logs](https://help.zscaler.com/zia/nanolog-streaming-service) into Microsoft Sentinel using the Microsoft Sentinel Analytics Workspace.\n\nSupported log types include:\n 1. Web, Firewall, DNS, Tunnel\n 2. Endpoint DLP, Email DLP\n 3. CASB: Activity, Cloud Storage, Collaboration, CRM, Email, File Sharing, ITSM, Repo\n 4. Audit\n\nThis enables you to monitor web access, security events, and data protection activity, and respond using the included workbooks and playbooks.\n\n**Underlying Microsoft Technologies used:**\n\nThis solution takes a dependency on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\n 1. [Azure Monitor Logs: DCR-based Custom Logs](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview)\n 2. [Codeless Connector Platform (CCP)](https://docs.microsoft.com/azure/sentinel/create-codeless-connector?tabs=deploy-via-arm-template%2Cconnect-via-the-azure-portal)\n 3. [Azure Logic Apps](https://learn.microsoft.com/azure/logic-apps/logic-apps-overview)",
    "Data Connectors": [
      "Data Connectors/CloudNSSWebLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSFWLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSDNSLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSTunnelLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSEndpointDLPLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSEmailDLPLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSCASBRepoLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSCASBITSMLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSCASBFileSharingLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSCASBEmailLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSCASBCRMLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSCASBCollabLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSCASBCloudStorageLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSCASBActivityLogs_ccp/connectorDefinition.json",
      "Data Connectors/CloudNSSAuditLogs_ccp/connectorDefinition.json"
    ],
    "Workbooks": [
            "Workbooks/NSSWebLogsOverview.json",
            "Workbooks/NSSWebLogsThreats.json",
            "Workbooks/NSSWebLogsOffice365.json",
            "Workbooks/NSSFWLogs.json",
            "Workbooks/NSSDNSLogs.json",
            "Workbooks/NSSTunnelLogs.json",
            "Workbooks/NSSEndpointDLPLogs.json",
            "Workbooks/NSSEmailDLPLogs.json",
            "Workbooks/NSSCASBActivityLogs.json",
            "Workbooks/NSSCASBCloudStorageLogs.json",
            "Workbooks/NSSCASBCollabLogs.json",
            "Workbooks/NSSCASBCRMLogs.json",
            "Workbooks/NSSCASBEmail.json",
            "Workbooks/NSSCASBFileSharingLogs.json",
            "Workbooks/NSSCASBITSMLogs.json",
            "Workbooks/NSSCASBRepoLogs.json",
            "Workbooks/NSSAuditLogs.json"
    ],
    "Playbooks": [
      "Playbooks/Oauth2Authentication/azuredeploy.json",
      "Playbooks/Oauth2BlacklistURL/azuredeploy.json",
      "Playbooks/Oauth2BlockIP/azuredeploy.json",
      "Playbooks/Oauth2BlockURL/azuredeploy.json",
      "Playbooks/Oauth2LookupIP/azuredeploy.json",
      "Playbooks/Oauth2LookupURL/azuredeploy.json",
      "Playbooks/Oauth2UnblacklistURL/azuredeploy.json",
      "Playbooks/Oauth2UnblockIP/azuredeploy.json",
      "Playbooks/Oauth2UnblockURL/azuredeploy.json",
      "Playbooks/Oauth2WhitelistURL/azuredeploy.json"
    ],
    "BasePath": "C:\\Source\\Azure-Sentinel\\Solutions\\Zscaler Internet Access\\Data",
    "Version": "3.0.4",
    "Metadata": "SolutionMetadata.json",
    "TemplateSpec": true,
    "Is1PConnector": false
  }