Reading Zscaler dataWatching network, identity and cloudSignal caught: response action sent to ZscalerSignal caught: detection sent to ZscalerSignal caught in Zscaler dataSignal caught by Vectra AI
How it works
How the integration works
Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) provide the essential SASE architecture you need for secure remote and hybrid work. But attackers still find blind spots. And they'll use them to slip past prevention controls, remaining invisible to SASE alone.
ZscalerNetwork, identity and cloud to Vectra AI to ZscalerZscalerYour SOC
Zscaler
Network, identity and cloud
Observe
Understand
Signal
Act
ZscalerResponse actionDetection
ZscalerResponse action
Your SOCPrioritized detection
01
Connect
Into Vectra AI
The Vectra AI Platform ingests Zscaler traffic to detect hidden attacker behaviors across internet, private access, cloud, and IoT/OT.
Eliminate blind spots across your entire modern network
The result is complete visibility and faster investigations, without added complexity.
Find the attacks others can’t
Legacy solutions prevent and control access, but advanced attackers still find ways in. The Vectra AI Platform sees and stops hidden attacks as they progress from network to identity to cloud.
Vectra AI’s real-time data ingestion engine
Monitors 13.3 million IPs daily
Processes 10 billion sessions per hour
Handles 9.4 trillion bits per second
This modern approach to network detection and response
Covers > 90% of MITRE ATT&CK techniques
Makes Vectra AI the most-referenced MITRE D3FEND vendor
To fill security gaps across your modern network
Correlate signals across SASE, cloud, identity, and IoT to expose multi-vector hybrid attacks before they spread.
“Vectra AI captures metadata at scale from all network traffic and enriches it with a lot of useful security information. Getting context up-front tells us where and what to investigate.”
Eric WeaklandDirector of Information Security, American University
“The Vectra AI Platform introduced innovative AI and machine learning capabilities, significantly enhancing our ability to detect and respond to cyberattacks.”
“The Zscaler and Vectra AI integration gives us the ability to analyze, detect and respond to threats with precision, whether it's identifying east-west movement within our environment or mitigating encrypted network anomalies in real time.”
How does Vectra AI strengthen Zero Trust enforcement?
By ingesting traffic from Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), Vectra AI provides detection of hidden attacker behaviors across all users, workloads, and devices. This gives SOC teams the visibility they need to enforce zero trust policies with confidence.
What types of detections does the integration enable?
Integrating the Vectra AI Platform with ZIA and ZPA allows your security team to identify evasive command-and-control, lateral movement, reconnaissance, and data exfiltration attempts that traditional legacy solutions and NGFW controls frequently miss.
Does the solution add complexity to existing Zscaler deployments?
No. The integration leverages existing ZIA and ZPA traffic flows, enriching telemetry with AI-driven detection to simplify, not burden, SOC workflows.
Which environments are covered?
The integration covers cloud, on-premises, remote work, and IoT/OT environments, ensuring end-to-end visibility across the enterprise attack surface.
.jpg)
.jpeg)
