v1.4.4

1.4.4 (June 6, 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

New ZIA Endpoint - Virtual ZEN Clusters:

• PR #299 - Added the following new ZIA API Endpoints:
  • Added GET /virtualZenClusters Retrieves a list of ZIA Virtual Service Edge clusters.
  • Added GET /virtualZenClusters/{cluster_id} Retrieves the Virtual Service Edge cluster based on the specified ID
  • Added POST /virtualZenClusters Adds a new Virtual Service Edge cluster.
  • Added PUT /virtualZenClusters/{cluster_id} Updates the Virtual Service Edge cluster based on the specified ID
  • Added DELETE /virtualZenClusters/{cluster_id} Deletes the Virtual Service Edge cluster based on the specified ID

New ZIA Endpoint - Alert Subscription

• PR #299 - Added the following new ZIA API Endpoints:
  • Added DELETE /alertSubscriptions/{subscription_id} Deletes the Alert Subscription based on the specified ID

Documentation

• PR #299 - Fixed and added several documentations and included examples.

v1.4.3

1.4.3 (June 3, 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

Bug Fixes:

• PR #296 - Added the following new functions in the ZPA policies package: add_browser_protection_rule_v2 and update_browser_protection_rule_v2 to support CLIENTLESS_SESSION_PROTECTION_POLICY policy type for Browser Protection Rule configuration.
• PR #296 - Added the following new object_type USER_PORTAL in the ZPA conditions template _create_conditions_v2 to support CLIENTLESS_SESSION_PROTECTION_POLICY policy type for Browser Protection Rule configuration.
• PR #296 - Fixed update_segment() behavior in all ZPA Application Segment client to ensure that port fields (tcpPortRange, udpPortRange, tcpPortRanges, udpPortRanges) are properly cleared when omitted. Previously, omitting these fields during update would leave existing port configurations intact instead of removing them.

v1.4.2

1.4.2 (May, 29 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

Bug Fixes:

• PR #294 - Fixed ZIA cloud_firewall_rules model nw_services attribute
• PR #294 - Fixed ZPA cbi_certficate pem model attribute
• PR #294 - Fixed an issue where SDK logging configuration interfered with user-defined loggers. The SDK no longer overrides global logging behavior or disables logs for external modules.

v1.4.1

1.4.1 (May, 27 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

Bug Fixes:

• PR #292 - Fixed ZPA application_segment model missing attribute passive_health_enabled
• PR #292 - Added missing ZIA attribute nw_services to reformat_params list

v1.4.0

1.4.0 (May, 26 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

Zscaler OneAPI Support for Cloud & Branch Connector API

PR #287: Cloud & Branch Connector API are now supported via OneAPI with Oauth2 authentication support through Zidentity

ZPA Application Segment Provision

PR #287 - Added the following new ZPA API Endpoints:
- Added POST /provision Provision a new application for a given customer by creating all related objects if necessary

ZPA Application Segment Weighted Load Balancer

PR #287 - Added the following new ZPA API Endpoints:
- Added GET /weightedLbConfig Get Weighted Load Balancer Config for AppSegment
- Added PUT /weightedLbConfig Update Weighted Load Balancer Config for AppSegment

ZPA Browser Access Application Segment

PR #287 - Added dedicated resource app_segments_ba for ZPA Browser Access Application Segment provisioning.
PR #287 - Added dedicated resource app_segments_ba_v2 for ZPA Browser Access Application Segment provisioning using newly recommended format via block common_apps_dto.apps_config

ZPA Policy-Set-Controller Condition - New Object Type

• PR #287 - Added the following new object_types to function _create_conditions_v2 in the policies package: CHROME_ENTERPRISE and CHROME_POSTURE_PROFILE

Zscaler Client Connector (Legacy) New Rate Limiting Headers

• PR #287 - Enhanced LegacyZCCClientHelper rate limiting logic with new headers for more accurate retry-calculations.
  • X-Rate-Limit-Retry-After-Seconds - This header is only returned when rate limit for /downloadDevices and downloadServiceStatus is reached.
  • The endpoint handler /downloadDevices and downloadServiceStatus has a rate limit of 3 calls per day.
  • X-Rate-Limit-Remaining - This header is returned for all other endpoints. ZCC endpoints called from a specific IP address are subjected to a rate limit of 100 calls per hour. See Zscaler Client Connector API

Bug Fixes:

• PR #287 - Fixed ZCC functions remove_devices and force_remove_devices to use custom decorator zcc_param_mapper for os_type attribute
• PR #287 - Removed incorrect validation from ZIA url_categories function add_url_category - Issue #284
• PR #287 - Fixed ZPA application_segment_pra model attribute common_apps_dto.
• PR #287 - Fixed ZPA resources add_privileged_credential_rule_v2, and update_privileged_credential_rule_v2
• PR #287 - Fixed ZPA Application segment v2 Port formatting issue: Issue #288
• PR #287 - Added new ZPA attribute models to support extranet features across server_groups and application_segments
• PR #287 - Added pre-check on all ZPA application_segment resources to prevent port overlap configuration.
• PR #287 - Added additional CLIENT_TYPE validation within the ZPA policy functions add_redirection_rule_v2 and update_redirection_rule_v2
• PR #287 - Enhanced _create_conditions_v2 function used on ZPA Policy v2 condition block.

Internal Enhancements

• PR #287 - Enhanced check_response_for_error function to parse and display API error messages more clearly.
• PR #287 - Consolidated all application segment resource models into a single model shared across all Application Segment package resources.

v1.3.0

1.3.0 (May, 12 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

ZPA Administrator Controller

PR #280 - Added the following new ZPA API Endpoints:
- Added GET /administrators Retrieves a list of administrators in a tenant. A maximum of 200 administrators are returned per request.
- Added GET /administrators/{admin_id} Retrieves administrator details for a specific {admin_id}
- Added POST /administrators Create an local administrator account
- Added PUT /administrators/{admin_id} Update a local administrator account for a specific {admin_id}
- Added DELETE /administrators/{admin_id} Delete a local administrator account for a specific {admin_id}

ZPA Role Controller

PR #280 - Added the following new ZPA API Endpoints:
- Added GET /permissionGroups Retrieves all the default permission groups.
- Added GET /roles Retrieves a list of all configured roles in a tenant.
- Added GET /roles/{admin_id} Retrieves a role details for a specific {role_id}
- Added POST /roles Adds a new role for a tenant.
- Added PUT /roles/{admin_id} Update a role for a specific {role_id}
- Added DELETE /roles/{role_id} Delete a role for a specific {role_id}

ZPA Enrollment Certificate Controller

PR #280 - Added the following new ZPA API Endpoints:
- Added POST /enrollmentCert/csr/generate Creates a CSR for a new enrollment Certificate
- Added POST /enrollmentCert/selfsigned/generate Creates a self signed Enrollment Certificate
- Added POST /enrollmentCert Creates a enrollment Certificate
- Added PUT /enrollmentCert/{cert_id} Update an existing enrollment Certificate
- Added DELETE /enrollmentCert/{cert_id} Delete an existing enrollment Certificate

ZPA SAML Attribute Controller

PR #280 - Added the following new ZPA API Endpoints:
- Added POST /samlAttribute Adds a new SamlAttribute for a given tenant
- Added PUT /samlAttribute/{attr_id} Update an existing SamlAttribute for a given tenant
- Added DELETE /samlAttribute/{attr_id} Delete an existing SamlAttribute for a given tenant

ZPA Client-Settings Controller

PR #280 - Added the following new ZPA API Endpoints:
- Added GET /clientSetting Retrieves clientSetting details. ClientCertType defaults to CLIENT_CONNECTOR
- Added POST /clientSetting Create or update clientSetting for a customer. ClientCertType defaults to CLIENT_CONNECTOR
- Added DELETE /clientSetting Delete an existing clientSetting. ClientCertType defaults to CLIENT_CONNECTOR
- Added GET /clientSetting/all Retrieves all clientSetting details.

Bug Fixes:

• PR #280 - Fixed username parameter in the ZCC devices model for the correct non-standard snake_case vs cameCase format.
• PR #280 - Added missing user_risk_score_levels and source_ip_groups attributes to dlp_web_rules

v1.2.4

1.2.4 (May, 9 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

Bug Fixes:

• (#277) - Fixed documentation formatting.

v1.2.3

1.2.3 (May, 9 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

Bug Fixes:

• (#276) - Fixed ZCC download_devices method to support octet-stream header
• (#276) - Fixed ZCC devices model attributes and attribute edge cases.
• (#276) - Fixed missing link for resource cloud_apps in both legacy and OneAPI client
• (#276) - cloud_apps resource has been renamed to shadow_it_report for consistency.

v1.2.2

1.2.2 (May, 7 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

Bug Fixes:

• (#274) - Fixed ZPA pagination across several resources.
• (#274) - Fixed ZCC pagination function resources
• (#274) - Fixed ZCC Device resource models
• (#274) - Fixed debug logging activation

v1.2.1

1.2.1 (May, 6 2025)

Notes

• Python Versions: v3.8, v3.9, v3.10, v3.11

Bug Fix:

• (#273) - Fixed ZIA bandwidth_classes function names
• (#273) - Fixed ZIA LegacyZIAClient API client incorrect variable assignment.