Configure and Install the Zscaler Integration

1. In Strata Cloud Manager, go to ManagePrisma SD-WANCloudBlades.
2. Locate the Zscaler Enforcement Nodes (ZEN) Integration CloudBlade tile in the CloudBlades page and click Configure. If this CloudBlade does not appear, contact Palo Alto support team.

3. Enter the following information in the CloudBlade installation page.
   1. From the Version list, select the required version.
   2. For Admin State, retain Enabled, which is the default value.
   3. For API Key, provide the SD-WAN key generated in the previous section.
   4. For Partner Admin Username and Partner Admin Password, provide the partner administrator account details created in the previous section.
   5. For Zscaler cloud, select the Zscaler cloud to which your subscription is attached (zscalerthree in the example below).
      From version 2.1.0 onwards, the CloudBlade supports govcloud which supports only IPsec tunnels.
   6. Specify the IPsec Profile name (case sensitive). The default is ZSCALER_IKEV2, which should be pre-provisioned along with the CloudBlade allocation. The tunnels to be created will be identified based on the tags created (AUTO-zscaler for IPSec and AUTO-zscaler-GRE for GRE; version 2.0.0 onwards).
   7. If you select Allow Interface Level Override for the IPsec profile, it will allow administrators to change the IPsec profile referenced at the Standard VPN tunnel level without the CloudBlade overriding this change. This is typically useful in case of troubleshooting scenarios.
   8. (Optional) Provide the base URL. If left blank, the base URL will be derived from the admin username domain.
4. After you configure the settings, click Install (or Save, if the CloudBlade was previously installed).