Adding Zscaler cloud IP addresses as updatable object

[carl_t]

Hi All

I want to add the Zscaler cloud IP addresses / domain names to a updatable object, I have tried the generic data center option, it says connected  when I click test but then when I select the data center in the rule it just seems to fail saying "The data center is still initializing, it may take a moment, please try again later".

I have tried multiple url's

config.zscaler.com/api/zscaler.net/cenr/json

https://config.zscaler.com/api/zscaler.net/zpa/json

I checked the logs on the management server and get the below

19/05/26 13:44:15,736 ERROR scanner.ctf.CTFScanner [scanner-GenericDataCenter-67 4073807]: json parse failed with: JSONObject["version"] not found.
19/05/26 13:44:15,736 ERROR scanner.ctf.CTFScanner [scanner-GenericDataCenter-67 4073807]: failed to fetch data from server
19/05/26 13:44:15,737 ERROR datacenter.scanner.DcScanner [scanner-GenericDataCen ter-674073807]: Error during scan - attempting to reconnect for scanner of 'Zsca ler ZPA JSON Feed' (URL: https://config.zscaler.com/api/zscaler.net/zpa/json) in domainID 41e821a0-3720-11e3-aa6e-0800200c9fde
19/05/26 13:44:15,737 ERROR scanner.util.DcScannerUtils [scanner-GenericDataCent er-674073807]: Exception while connecting to 'Zscaler ZPA JSON Feed' (URL: https ://config.zscaler.com/api/zscaler.net/zpa/json). Return invalid CTF feed content problem.
19/05/26 13:44:15,738 ERROR datacenter.scanner.DcScanner [scanner-GenericDataCen ter-674073807]: Mapping of Generic Data Center failed, 'version' field is missin g or invalid.. Next mapping is in 300 seconds.

Has anyone had this working? what could be the issue?

[the_rock]

Maybe its schema issue.

Try below:

https://config.zscaler.com/api/zscaler.net/cenr/json

[carl_t]

Hi Andy, I have also tried that too, it failed

19/05/26 14:26:07,653 ERROR scanner.util.DcScannerUtils [scanner-GenericDataCenter-511374553]: Exception while connecting to 'Zscaler ZPA JSON Feed' (URL: https://config.zscaler.com/a pi/zscaler.net/cenr/json). Return invalid CTF feed content problem.
19/05/26 14:26:07,653 ERROR datacenter.scanner.DcScanner [scanner-GenericDataCenter-511374553]: Mapping of Generic Data Center failed, 'version' field is missing or invalid.. Next map ping is in 64 seconds.
19/05/26 14:26:18,677 ERROR datacenter.monitoring.DataCenterStatisticsGenerator [qtp313676009-528678]: scanner status is in FIRST_SCAN. return -1 for the following fields: first_scan_ duration_in_milliseconds, number_of_ips_of_imported_objects, number_of_scanned_objects
19/05/26 14:27:17,817 ERROR scanner.ctf.CTFScanner [scanner-GenericDataCenter-511374553]: json parse failed with: JSONObject["version"] not found.
19/05/26 14:27:17,817 ERROR scanner.ctf.CTFScanner [scanner-GenericDataCenter-511374553]: failed to fetch data from server
19/05/26 14:27:17,817 ERROR datacenter.scanner.DcScanner [scanner-GenericDataCenter-511374553]: Error during scan - attempting to reconnect for scanner of 'Zscaler ZPA JSON Feed' (URL : https://config.zscaler.com/api/zscaler.net/cenr/json) in domainID 41e821a0-3720-11e3-aa6e-0800200c9fde
19/05/26 14:27:17,818 ERROR scanner.util.DcScannerUtils [scanner-GenericDataCenter-511374553]: Exception while connecting to 'Zscaler ZPA JSON Feed' (URL: https://config.zscaler.com/a pi/zscaler.net/cenr/json). Return invalid CTF feed content problem.
19/05/26 14:27:17,818 ERROR datacenter.scanner.DcScanner [scanner-GenericDataCenter-511374553]: Mapping of Generic Data Center failed, 'version' field is missing or invalid.. Next map ping is in 74 seconds.

[the_rock]

Maybe try one Lesley gave, looks promising.

[Lesley]

this one:

https://config.zscaler.com/api/zscaler.net/future/json

[carl_t]

I just tried that URL, same message again 😞

[the_rock]

Maybe TAC case?

[Lesley · Accepted solution]

Try this method:

image.pngimage.png

[Chris_Atkinson]

According to sk131852 an object should already exist for this in Smartconsole... Are those not working for you?

In the Source / Destination column, click the + sign and select Import > Updatable Objects

[carl_t]

Hi

We only get the below, nothing comes up when I search for Zscaler

[Chris_Atkinson]

Please check sk174066, sk122636 for clues and if the problem persists you may have to contact TAC to investigate further.

[carl_t · Accepted solution]

Hi Chris

Sorted the updatable object issue, I ran a couple of commands on the management server which renamed the old catalogue file, this then forced a refresh, I can now see everything.

Many thanks for the assistance