Whether you’re deep in audit prep, working through year-end priorities, or just trying to keep your security stack current, finding time to review every release is a challenge. Here is a curated roundup of notable Zscaler GovCloud updates from October, with quick context and scan-friendly takeaways you can share across security, network, and operations teams. Highlights include Zscaler Client Connector 5.0 for Windows, expanded Endpoint DLP capabilities with Device Control for portable devices and real-time PDF OCR, Real User Monitoring in ZDX, AI transcript and meeting summary scanning for Zoom tenants in ZIA, and IPSec tunnel stability improvements for Zero Trust Branch. Zscaler Internet Access (ZIA)Zscaler Internet Access (ZIA) is Zscaler’s secure internet and SaaS access service, providing policy-based protection and visibility for users wherever they work. For many federal environments, ZIA is central to enforcing acceptable use, protecting sensitive data, and maintaining consistent security controls across a distributed workforce.This month’s ZIA updates significantly expand Endpoint DLP capabilities, address a File Type Control security issue, and introduce AI-generated content scanning for Zoom tenants.HighlightsEndpoint DLP 26.08 Enhancements and Fixes: This release expands Device Control to portable devices (such as smartphones and cameras), CD/DVD, and floppy disk channels (floppy is Windows only). It adds DLP Intent visibility into suspicious user behavior, visibility into sensitive files entering endpoints, a refreshed User Investigation experience, and CSV export for Application Inventory. IDM can now index all files in a folder instead of being limited to 20, and OCR now supports PDFs in real time for all channels except Application File Access. (FedRAMP Moderate and High)Security Fixes: The File Type Control evaluation rule no longer allows a potential evasion of File Type Control policies (CVE-2026-25684). (FedRAMP Moderate and High)Support for AI Transcript and Summary for a Zoom Tenant: Zoom tenants onboarded with Data at Rest Scanning DLP and Malware can now scan two additional content types: AI transcripts and AI meeting summaries. AI Companion must be enabled on the Zoom account, and existing tenants need additional scopes, webhook subscriptions, and reauthorization. (FedRAMP Moderate and High)For full release notes: https://help.zscaler.us/zia/release-upgrade-summary-2026 Zscaler Private Access (ZPA)Zscaler Private Access (ZPA) provides secure, zero trust connectivity between users and private applications without exposing those applications to the internet. It helps organizations reduce attack surface while improving access experience, which is especially important for distributed users, mission partners, and hybrid work environments common across federal agencies.This month’s ZPA updates continue the rollout of AI-powered application segment features and deliver a new App Connector release with stability improvements.HighlightsAI Recommendations for Application Segments (Limited Availability): AI-powered recommendations analyze user logs and suggest application segments based on application similarity or user behavior, helping teams discover and create new segments automatically and find missing applications for existing segments. (FedRAMP Moderate and High)Application Segments Usage (Limited Availability): Admins can view or download Application Segments Usage reports from the Zscaler Admin Console to see which application segments are actively used and which user groups are accessing them. Available only to customers with the Segmentation add-on. (FedRAMP Moderate and High)App Connector Version 26.55.1: An update for App Connector that includes bug fixes, optimizations, and version enhancements. App Connectors update based on the software update schedule configured per App Connector group. (FedRAMP Moderate and High)For full release notes: https://help.zscaler.us/zpa/release-upgrade-summary-2026 Zscaler Digital Experience (ZDX)Zscaler Digital Experience (ZDX) provides visibility into end-user device health, application performance, and network path quality. For federal teams managing distributed endpoints across agencies and field locations, ZDX helps identify and resolve experience issues before they impact productivity or mission delivery.This month’s ZDX update introduces Real User Monitoring, a significant addition that brings browser-level visibility into application performance.HighlightsReal User Monitoring: Real User Monitoring captures and analyzes user interactions with applications through their web browsers to create comprehensive visibility into an application’s digital experience. Teams can use it to identify bottlenecks users encounter while accessing configured applications through their browsers, enabling faster troubleshooting and more informed performance optimization. (FedRAMP Moderate)For full release notes: https://help.zscaler.us/zdx/release-upgrade-summary-2026 Zscaler Client ConnectorZscaler Client Connector is the unified endpoint agent that steers traffic to ZIA, ZPA, and ZDX services. It ensures consistent policy enforcement regardless of where users connect from, which is critical for agencies supporting remote and hybrid workforces.This month brings a major milestone with Client Connector 5.0 for Windows, introducing a modernized user experience, new connectivity options, and expanded platform support.HighlightsZscaler Client Connector 5.0 for Windows (Limited Availability): This release brings modernized, plain-language status and guidance in the app (requires Windows 11 24H2 build 26100 or later). Key additions include Wi-Fi Name (SSID) as a trusted network criterion, TLS 1.3 support with automatic fallback to TLS 1.2, and machine tunnels in Business Continuity mode so devices can stay connected to Private Access apps when the Zscaler cloud is unreachable. The release also adds Endpoint DLP on ARM-based Windows machines (with ZDP Module 26.08 and later) and includes a fix for memory corruption in the Private Access certificate timeout handler (CVE-2026-25687). Note: this version does not support Windows 32-bit.For full release notes: https://help.zscaler.us/client-connector/release-upgrade-summary-2026 Zero Trust BranchZscaler Zero Trust Branch helps modernize branch security and connectivity by bringing zero trust principles to branch offices, remote sites, and OT/IoT environments, reducing reliance on legacy appliances while maintaining consistent policy enforcement.This month’s update improves IPSec tunnel stability and adds new administrative access and UI simplifications.HighlightsZero Trust Branch 8.2.1-P1 (FD105) (Limited Availability): Improves the stability of IPSec tunnels between the Zero Trust Branch appliance and Internet & SaaS (ZIA) to prevent intermittent disconnections. Adds an Appliance Admin Console page that gives administrators terminal access to appliances for troubleshooting and simplifies the Add Site UI for ebond0 WAN interface selection. Resolved issues include a failover fix when the primary WAN nexthop is unreachable, a fix so deleting a BGP session no longer removes same-named sessions at other sites, and the ability to specify a WAN VLAN ID on the primary WAN during site creation. (FedRAMP Moderate and High)For full release notes: https://help.zscaler.us/zero-trust-branch/release-upgrade-summary-202 Cloud ConnectorZscaler Cloud Connector helps extend Zscaler policy enforcement and traffic forwarding for workloads running in public cloud environments. It supports organizations that need consistent security controls for cloud-hosted services while enabling architectures aligned to modernization initiatives.This month’s Cloud Connector updates add AWS account tagging for cross-account deployments and new VDI provisioning permissions.HighlightsSupport for Amazon Web Services Account Tagging (Limited Availability): Organizations can now leverage user-defined tags across AWS accounts in cross-account deployments with workload communications. This gives teams more flexibility in organizing and managing multi-account cloud environments. (FedRAMP Moderate)Support for VDI Provisioning Permission: Zscaler Cloud Connector now supports the VDI Provisioning permission when adding admin roles, with Full, View Only, or None options. This provides more granular role-based access control for virtual desktop infrastructure management. (FedRAMP Moderate and High)For full release notes: https://help.zscaler.us/cloud-branch-connector/release-upgrade-summary-2026 ConclusionWant the full details? Use the links above to review the complete release summaries, and check back next month for the next GovCloud update roundup.Zscaler continues to invest in a robust GovCloud roadmap and remains committed to supporting the unique security, compliance, and operational requirements of the federal market. We’ll keep delivering enhancements that help agencies and federal partners strengthen resilience, simplify operations, and advance mission success.
[#item_full_content] Whether you’re deep in audit prep, working through year-end priorities, or just trying to keep your security stack current, finding time to review every release is a challenge. Here is a curated roundup of notable Zscaler GovCloud updates from October, with quick context and scan-friendly takeaways you can share across security, network, and operations teams. Highlights include Zscaler Client Connector 5.0 for Windows, expanded Endpoint DLP capabilities with Device Control for portable devices and real-time PDF OCR, Real User Monitoring in ZDX, AI transcript and meeting summary scanning for Zoom tenants in ZIA, and IPSec tunnel stability improvements for Zero Trust Branch. Zscaler Internet Access (ZIA)Zscaler Internet Access (ZIA) is Zscaler’s secure internet and SaaS access service, providing policy-based protection and visibility for users wherever they work. For many federal environments, ZIA is central to enforcing acceptable use, protecting sensitive data, and maintaining consistent security controls across a distributed workforce.This month’s ZIA updates significantly expand Endpoint DLP capabilities, address a File Type Control security issue, and introduce AI-generated content scanning for Zoom tenants.HighlightsEndpoint DLP 26.08 Enhancements and Fixes: This release expands Device Control to portable devices (such as smartphones and cameras), CD/DVD, and floppy disk channels (floppy is Windows only). It adds DLP Intent visibility into suspicious user behavior, visibility into sensitive files entering endpoints, a refreshed User Investigation experience, and CSV export for Application Inventory. IDM can now index all files in a folder instead of being limited to 20, and OCR now supports PDFs in real time for all channels except Application File Access. (FedRAMP Moderate and High)Security Fixes: The File Type Control evaluation rule no longer allows a potential evasion of File Type Control policies (CVE-2026-25684). (FedRAMP Moderate and High)Support for AI Transcript and Summary for a Zoom Tenant: Zoom tenants onboarded with Data at Rest Scanning DLP and Malware can now scan two additional content types: AI transcripts and AI meeting summaries. AI Companion must be enabled on the Zoom account, and existing tenants need additional scopes, webhook subscriptions, and reauthorization. (FedRAMP Moderate and High)For full release notes: https://help.zscaler.us/zia/release-upgrade-summary-2026 Zscaler Private Access (ZPA)Zscaler Private Access (ZPA) provides secure, zero trust connectivity between users and private applications without exposing those applications to the internet. It helps organizations reduce attack surface while improving access experience, which is especially important for distributed users, mission partners, and hybrid work environments common across federal agencies.This month’s ZPA updates continue the rollout of AI-powered application segment features and deliver a new App Connector release with stability improvements.HighlightsAI Recommendations for Application Segments (Limited Availability): AI-powered recommendations analyze user logs and suggest application segments based on application similarity or user behavior, helping teams discover and create new segments automatically and find missing applications for existing segments. (FedRAMP Moderate and High)Application Segments Usage (Limited Availability): Admins can view or download Application Segments Usage reports from the Zscaler Admin Console to see which application segments are actively used and which user groups are accessing them. Available only to customers with the Segmentation add-on. (FedRAMP Moderate and High)App Connector Version 26.55.1: An update for App Connector that includes bug fixes, optimizations, and version enhancements. App Connectors update based on the software update schedule configured per App Connector group. (FedRAMP Moderate and High)For full release notes: https://help.zscaler.us/zpa/release-upgrade-summary-2026 Zscaler Digital Experience (ZDX)Zscaler Digital Experience (ZDX) provides visibility into end-user device health, application performance, and network path quality. For federal teams managing distributed endpoints across agencies and field locations, ZDX helps identify and resolve experience issues before they impact productivity or mission delivery.This month’s ZDX update introduces Real User Monitoring, a significant addition that brings browser-level visibility into application performance.HighlightsReal User Monitoring: Real User Monitoring captures and analyzes user interactions with applications through their web browsers to create comprehensive visibility into an application’s digital experience. Teams can use it to identify bottlenecks users encounter while accessing configured applications through their browsers, enabling faster troubleshooting and more informed performance optimization. (FedRAMP Moderate)For full release notes: https://help.zscaler.us/zdx/release-upgrade-summary-2026 Zscaler Client ConnectorZscaler Client Connector is the unified endpoint agent that steers traffic to ZIA, ZPA, and ZDX services. It ensures consistent policy enforcement regardless of where users connect from, which is critical for agencies supporting remote and hybrid workforces.This month brings a major milestone with Client Connector 5.0 for Windows, introducing a modernized user experience, new connectivity options, and expanded platform support.HighlightsZscaler Client Connector 5.0 for Windows (Limited Availability): This release brings modernized, plain-language status and guidance in the app (requires Windows 11 24H2 build 26100 or later). Key additions include Wi-Fi Name (SSID) as a trusted network criterion, TLS 1.3 support with automatic fallback to TLS 1.2, and machine tunnels in Business Continuity mode so devices can stay connected to Private Access apps when the Zscaler cloud is unreachable. The release also adds Endpoint DLP on ARM-based Windows machines (with ZDP Module 26.08 and later) and includes a fix for memory corruption in the Private Access certificate timeout handler (CVE-2026-25687). Note: this version does not support Windows 32-bit.For full release notes: https://help.zscaler.us/client-connector/release-upgrade-summary-2026 Zero Trust BranchZscaler Zero Trust Branch helps modernize branch security and connectivity by bringing zero trust principles to branch offices, remote sites, and OT/IoT environments, reducing reliance on legacy appliances while maintaining consistent policy enforcement.This month’s update improves IPSec tunnel stability and adds new administrative access and UI simplifications.HighlightsZero Trust Branch 8.2.1-P1 (FD105) (Limited Availability): Improves the stability of IPSec tunnels between the Zero Trust Branch appliance and Internet & SaaS (ZIA) to prevent intermittent disconnections. Adds an Appliance Admin Console page that gives administrators terminal access to appliances for troubleshooting and simplifies the Add Site UI for ebond0 WAN interface selection. Resolved issues include a failover fix when the primary WAN nexthop is unreachable, a fix so deleting a BGP session no longer removes same-named sessions at other sites, and the ability to specify a WAN VLAN ID on the primary WAN during site creation. (FedRAMP Moderate and High)For full release notes: https://help.zscaler.us/zero-trust-branch/release-upgrade-summary-202 Cloud ConnectorZscaler Cloud Connector helps extend Zscaler policy enforcement and traffic forwarding for workloads running in public cloud environments. It supports organizations that need consistent security controls for cloud-hosted services while enabling architectures aligned to modernization initiatives.This month’s Cloud Connector updates add AWS account tagging for cross-account deployments and new VDI provisioning permissions.HighlightsSupport for Amazon Web Services Account Tagging (Limited Availability): Organizations can now leverage user-defined tags across AWS accounts in cross-account deployments with workload communications. This gives teams more flexibility in organizing and managing multi-account cloud environments. (FedRAMP Moderate)Support for VDI Provisioning Permission: Zscaler Cloud Connector now supports the VDI Provisioning permission when adding admin roles, with Full, View Only, or None options. This provides more granular role-based access control for virtual desktop infrastructure management. (FedRAMP Moderate and High)For full release notes: https://help.zscaler.us/cloud-branch-connector/release-upgrade-summary-2026 ConclusionWant the full details? Use the links above to review the complete release summaries, and check back next month for the next GovCloud update roundup.Zscaler continues to invest in a robust GovCloud roadmap and remains committed to supporting the unique security, compliance, and operational requirements of the federal market. We’ll keep delivering enhancements that help agencies and federal partners strengthen resilience, simplify operations, and advance mission success.
