Empower your team to resolve security incidents faster
Give security practitioners and threat researchers easy access to raw, decrypted traffic for efficient security forensics—without requiring additional appliances.
Support deeper incident response
Enhance retrospective analysis
Improve detection fidelity
Access to past traffic content is critical
Security teams need to understand the content traversing your environment to conduct effective forensic analysis, investigate incidents, ensure compliance, and more. Appliance-based packet capture tools, unequipped for the volume and speed of the cloud, are no longer enough.
Poor performance and scalability
Hardware-bound legacy solutions can't decrypt and capture today's massive volume of traffic efficiently.
High infrastructure and bandwidth costs
Legacy solutions capture all content regardless of risk relevance, creating high volumes of low-interest capture.
Complexity in analysis
Analyzing the vast amounts of data collected by legacy PCAP solutions can be complex and time-consuming.
Get secure and seamless access to traffic content
Easily capture decrypted traffic via specific criteria in Zscaler policy engines.
Traffic Capture enables you to incorporate capture decisions into existing policies across URL filtering, malware protection, advanced threat protection, firewall and IPS control, DNS control, and file type control.
By defining granular policies and rules for capturing specific content, you can concentrate on packets and full content related to risky events identified by advanced threat and malware detection signatures, threat intelligence, AI/ML as well as flexible and specific policy controls.
Traffic Capture is part of Zscaler Internet Access™, the world’s most-deployed security service edge (SSE) solution.
Reduce time, effort, and cost to capture traffic content
Cut costs and complexity
Decrypt and capture traffic content without a legacy appliance-based solution, saving countless hours and expense.
Reduce infrastructure and bandwidth costs
Define policy-level criteria to capture only content associated with risky events, rather than all content, avoiding further added costs.
Safeguard your data your way
Securely store captured data as PCAP files in your preferred external storage.
Power superior security forensics
Capture some traffic for extended periods to support threat hunting and many forensic/incident response investigation needs.
Study and replay traffic that might have caused a threat signature or other detection to trigger a false positive.
Test new threat signatures or detections of any kind against known threat activity in real traffic content.
Capture traffic content to comply with regulatory compliance requirements.
Découvrez la puissance de Zscaler Zero Trust Exchange
Une plateforme complète pour sécuriser, simplifier et transformer votre entreprise
01 Gestion des risques
Réduire les risques, détecter et contenir les violations, grâce à des informations exploitables provenant d’une plateforme unifiée
02 Protection contre les menaces en ligne
Protéger les utilisateurs, les appareils et les workloads contre les compromissions et le déplacement latéral des menaces
03 Protection des données
Exploitez une inspection TLS/SSL complète à grande échelle pour une protection complète des données sur la plateforme SSE.
04 Zero Trust pour les sites distants et le cloud
Connecter les utilisateurs, les appareils et les workloads entre le site distant, le cloud et le data center, et au sein de ceux-ci
Learn and explore resources
Request a demo
Let our experts show you the power and efficiency of cloud-based Traffic Capture.