zscaler-zia

$npx mdskill add automateyournetwork/netclaw/zscaler-zia

Manages Zscaler Internet Access firewall, URL filtering, DLP, and security policies.

  • Simplifies managing ZIA firewall rules, URL filtering, and DLP configurations.
  • Uses Zscaler APIs to interact with firewall, URL, and DLP resources.
  • Analyzes user queries to determine which ZIA resources to retrieve or modify.
  • Returns structured data or actionable insights based on user requests.

SKILL.md

.github/skills/zscaler-ziaView on GitHub ↗
---
name: zscaler-zia
description: "Manage Zscaler Internet Access firewall rules, URL filtering, DLP, and security policies."
version: 1.0.0
license: Apache-2.0
author: netclaw
tags: []
---

# Zscaler Internet Access (ZIA) Skill

Manage Zscaler Internet Access firewall rules, URL filtering, DLP, and security policies.

## Tools

| Tool | Description |
|------|-------------|
| `list_firewall_rules` | List firewall filtering rules |
| `get_firewall_rule` | Get firewall rule details |
| `list_url_filtering_rules` | List URL filtering rules |
| `get_url_filtering_rule` | Get URL filtering rule details |
| `list_url_categories` | List URL categories |
| `list_dlp_dictionaries` | List DLP dictionaries |
| `get_dlp_dictionary` | Get DLP dictionary details |
| `list_dlp_engines` | List DLP engines |
| `list_locations` | List branch/location definitions |
| `get_location` | Get location details |
| `list_location_groups` | List location groups |
| `list_vpn_credentials` | List VPN credentials |
| `list_traffic_forwarding_rules` | List GRE tunnel policies |
| `create_firewall_rule` | Create firewall rule (write mode) |
| `update_firewall_rule` | Update firewall rule (write mode) |
| `delete_firewall_rule` | Delete firewall rule (write mode) |

## Example Queries

```
List all ZIA firewall rules

Show URL filtering rules that block social media

What DLP dictionaries are configured?

List all branch locations

Show traffic forwarding rules for the data center
```

## Prerequisites

- `ZSCALER_CLIENT_ID` OneAPI client ID
- `ZSCALER_CLIENT_SECRET` OneAPI client secret
- `ZSCALER_CUSTOMER_ID` Customer/tenant ID
- `ZSCALER_VANITY_DOMAIN` Vanity domain
- `ZSCALER_MCP_SERVICES` must include `zia`

## Server

This skill uses the `zscaler-mcp` server which connects to ZIA via OneAPI.

More from automateyournetwork/netclaw

SkillDescription
aap-automationRed Hat Ansible Automation Platform — inventory management, job template execution, project SCM sync, ad-hoc commands, host management, Galaxy content discovery. Use when automating infrastructure with Ansible, running playbooks, managing inventories, or searching for Ansible collections and roles.
aap-edaEvent-Driven Ansible (EDA) — activation lifecycle, rulebook management, decision environments, event stream monitoring. Use when managing event-driven automation triggers, enabling/disabling activations, or reviewing EDA rulebooks.
aap-lintansible-lint playbook and role validation — syntax checking, best practice enforcement, project-wide analysis, rule filtering. Use when validating Ansible playbooks, checking code quality, or enforcing automation best practices before deployment.
aci-change-deploySafe ACI policy change deployment - ServiceNow CR lifecycle, pre/post-change fault baselines, APIC policy application, automatic rollback on fault delta, and GAIT audit trail. Use when deploying ACI policy changes, creating tenants or EPGs, pushing config to APIC, or running a change window with rollback protection.
aci-fabric-auditComprehensive Cisco ACI fabric health audit - node status, tenant/VRF/BD/EPG policy review, contract analysis, fault triage, and endpoint learning verification. Use when auditing ACI fabric health, checking for faults, reviewing tenant policies, or running pre/post-change baselines on APIC.
arista-cvpArista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools). Use when managing Arista devices, checking CloudVision events, monitoring network connectivity probes, or tagging devices in CVP.
aruba-cx-configView and manage Aruba CX switch configurations, perform ISSU upgrades, and firmware operations
aruba-cx-interfacesMonitor Aruba CX switch interface status, LLDP neighbors, and optical transceiver health
aruba-cx-switchingView and manage Aruba CX switch VLANs and MAC address tables for Layer 2 operations
aruba-cx-systemDiscover Aruba CX switch system information, firmware versions, and VSF topology