Setting up the Zscaler Nanolog Streaming Service (NSS) virtual machine
The Zscaler Nanolog Streaming Service (NSS) uses a virtual appliance to stream security information or other access events detected in real-time by the Zscaler Nanolog to a customer's Security Information and Event Management (SIEM) system for further analysis.
MaaS360 uses the SIEM integration capabilities exposed by Zscaler to consume threat events and the correlation of these events. MaaS360 supports integration with NSS virtual machine-based deployment only. MaaS360 can integrate with a new virtual machine setup or an existing NSS virtual machine setup.
Downloading the Zscaler NSS virtual machine
For steps on how to download the Zscaler NSS virtual machine, see the Zscaler documentation at https://help.zscaler.com/zia/nss-deployment-guide-vmware-vsphere.
Setting up a new Zscaler NSS virtual machine
For steps on how to set up a new Zscaler NSS virtual machine, see the Zscaler documentation at https://help.zscaler.com/zia/documentation-knowledgebase/analytics/nss/nss-deployment/nss-vm-deployment.
Integrating with an existing Zscaler NSS virtual machine
For an existing Zscaler NSS virtual machine setup, you must create additional NSS feeds to process security information. After you set up NSS, you must configure the Zscaler threat feeds. For more information about configuring Zscaler threat feeds, see Configuring the Zscaler NSS feed from the Zscaler admin portal.