<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://www.staffordnet.uk/lib/exe/css.php?s=feed" type="text/css"?>
<rdf:RDF
    xmlns="http://purl.org/rss/1.0/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel rdf:about="https://www.staffordnet.uk/feed.php">
        <title>Saucepan - zscaler</title>
        <description></description>
        <link>https://www.staffordnet.uk/</link>
        <image rdf:resource="https://www.staffordnet.uk/lib/exe/fetch.php?media=favicon.ico" />
       <dc:date>2026-04-05T18:24:44+00:00</dc:date>
        <items>
            <rdf:Seq>
                <rdf:li rdf:resource="https://www.staffordnet.uk/doku.php?id=zscaler:dns&amp;rev=1719922277&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.staffordnet.uk/doku.php?id=zscaler:logging&amp;rev=1720529867&amp;do=diff"/>
            </rdf:Seq>
        </items>
    </channel>
    <image rdf:about="https://www.staffordnet.uk/lib/exe/fetch.php?media=favicon.ico">
        <title>Saucepan</title>
        <link>https://www.staffordnet.uk/</link>
        <url>https://www.staffordnet.uk/lib/exe/fetch.php?media=favicon.ico</url>
    </image>
    <item rdf:about="https://www.staffordnet.uk/doku.php?id=zscaler:dns&amp;rev=1719922277&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2024-07-02T12:11:17+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>dns</title>
        <link>https://www.staffordnet.uk/doku.php?id=zscaler:dns&amp;rev=1719922277&amp;do=diff</link>
        <description>Zscaler DNS

Documentation here.

Zscaler can operate in 1 of 2 ways

	*  Client DNS traffic is forwarded to the Zscaler trusted resolver
	*  As client DNS traffic is sent to the local DNS server, the Zscaler client transparently moves it into cloud and forwards it to BloxOne. If BloxOne is offline, the packet will be forwarded from Zscaler cloud to the original</description>
    </item>
    <item rdf:about="https://www.staffordnet.uk/doku.php?id=zscaler:logging&amp;rev=1720529867&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2024-07-09T12:57:47+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>logging</title>
        <link>https://www.staffordnet.uk/doku.php?id=zscaler:logging&amp;rev=1720529867&amp;do=diff</link>
        <description>Zscaler DNS

See link for DNS logging via Zscaler and below for actual logging taking place (for reference):

\{ &quot;sourcetype&quot; : &quot;zscalernss-dns&quot;, &quot;event&quot; :\{&quot;datetime&quot;:&quot;%s{time}&quot;,&quot;user&quot;:&quot;%s{elogin}&quot;,&quot;department&quot;:&quot;%s{edepartment}&quot;,&quot;location&quot;:&quot;%s{elocation}&quot;,&quot;reqaction&quot;:&quot;%s{reqaction}&quot;,&quot;resaction&quot;:&quot;%s{resaction}&quot;,&quot;reqrulelabel&quot;:&quot;%s{reqrulelabel}&quot;,&quot;resrulelabel&quot;:&quot;%s{resrulelabel}&quot;,&quot;dns_reqtype&quot;:&quot;%s{reqtype}&quot;,&quot;dns_req&quot;:&quot;%s{req}&quot;,&quot;dns_resp&quot;:&quot;%s{res}&quot;,&quot;srv_dport&quot;:&quot;%d{sport}&quot;,&quot;durationms&quot;:&quot;%d{durationm…</description>
    </item>
</rdf:RDF>
