AdvancedSettings
Advanced Settings resource for Zscaler Internet Access.
Resource operations
This resource supports the following standard methods: load(), update(). They operate on the instance state — set properties with dot notation, then call the method with no arguments. Any other action listed below is a custom action that takes explicit keyword arguments and returns a value.
Quick Start
import zssdk
import logging
# Enable debug logging for AdvancedSettings
logging.getLogger('zssdk.zia').setLevel(logging.DEBUG)
logging.basicConfig(level=logging.DEBUG)
session = zssdk.Session(
vanity_domain="your-vanity-domain",
client_id="your-client-id",
client_secret="your-client-secret",
)
# Call get_advanced_settings_lite on AdvancedSettings
resource = session.zia.AdvancedSettings()
result = resource.get_advanced_settings_lite()
print(result)
# Debug output shows HTTP request/response details
Actions
get_advanced_settings_lite()
Returns: AdvancedSettingsLite
Example:
resource = session.zia.AdvancedSettings()
result = resource.get_advanced_settings_lite()
print(result)
load()
Fetches an existing AdvancedSettings by id. Only the id identifier is required; load() takes no other arguments.
Returns: AdvancedSettings
Example:
resource = session.zia.AdvancedSettings()
resource.load()
print(resource)
update()
Updates an existing AdvancedSettings. Call load() first, modify properties, then call update() — this method takes no arguments.
Properties for update:
| Name | Type | Required | Description |
|---|---|---|---|
auth_bypass_apps | stringCollection | No | - |
auth_bypass_url_categories | stringCollection | No | - |
auth_bypass_urls | stringCollection | No | - |
basic_bypass_apps | stringCollection | No | - |
basic_bypass_url_categories | stringCollection | No | - |
best_effort_policy | boolean | No | - |
block_connect_host_sni_mismatch | boolean | No | - |
block_domain_fronting_apps | stringCollection | No | - |
block_domain_fronting_on_host_header | boolean | No | - |
block_http_tunnel_on_non_http_ports | boolean | No | - |
block_non_compliant_http_request_on_http_ports | boolean | No | - |
block_non_http_on_http_port_enabled | boolean | No | - |
cascade_url_filtering | boolean | No | - |
comp_default_location_used | boolean | No | - |
digest_auth_bypass_apps | stringCollection | No | - |
digest_auth_bypass_url_categories | stringCollection | No | - |
digest_auth_bypass_urls | stringCollection | No | - |
dns_resolution_on_transparent_proxy_apps | stringCollection | No | - |
dns_resolution_on_transparent_proxy_exempt_apps | stringCollection | No | - |
dns_resolution_on_transparent_proxy_exempt_url_categories | stringCollection | No | - |
dns_resolution_on_transparent_proxy_exempt_urls | stringCollection | No | - |
dns_resolution_on_transparent_proxy_IPv6_apps | stringCollection | No | - |
dns_resolution_on_transparent_proxy_IPv6_exempt_apps | stringCollection | No | - |
dns_resolution_on_transparent_proxy_IPv6_exempt_url_categories | stringCollection | No | - |
dns_resolution_on_transparent_proxy_IPv6_url_categories | stringCollection | No | - |
dns_resolution_on_transparent_proxy_url_categories | stringCollection | No | - |
dns_resolution_on_transparent_proxy_urls | stringCollection | No | - |
domain_fronting_bypass_url_categories | stringCollection | No | - |
dynamic_user_risk_enabled | boolean | No | - |
ecs_for_all_enabled | boolean | No | - |
ecs_object | EntityReference | No | - |
enable_admin_rank_access | boolean | Yes | - |
enable_dns_resolution_on_transparent_proxy | boolean | No | - |
enable_evaluate_policy_on_global_SSL_bypass | boolean | No | - |
enable_IPv6_dns_optimization_on_all_transparent_proxy | boolean | No | - |
enable_IPv6_dns_resolution_on_transparent_proxy | boolean | No | - |
enable_office365 | boolean | No | - |
enable_policy_for_unauthenticated_traffic | boolean | No | - |
enforce_surrogate_ip_for_windows_app | boolean | No | - |
fail_close | boolean | No | - |
http2_nonbrowser_traffic_enabled | boolean | No | - |
http_range_header_remove_url_categories | stringCollection | No | - |
jwt_auth_bypass_apps | stringCollection | No | - |
jwt_auth_bypass_url_categories | stringCollection | No | - |
kerberos_bypass_apps | stringCollection | No | - |
kerberos_bypass_url_categories | stringCollection | No | - |
kerberos_bypass_urls | stringCollection | No | - |
log_internal_ip | boolean | No | - |
prefer_sni_over_conn_host | boolean | No | - |
prefer_sni_over_conn_host_apps | stringCollection | No | - |
sipa_xff_header_enabled | boolean | No | - |
sni_dns_optimization_bypass_url_categories | stringCollection | No | - |
track_http_tunnel_on_http_ports | boolean | No | - |
ui_session_timeout | integer | Yes | - |
zscaler_client_connector1_and_pac_road_warrior_in_firewall | boolean | No | - |
Returns: AdvancedSettings
Example:
resource = session.zia.AdvancedSettings(id="your-resource-id")
resource.load()
# Modify resource attributes here, then call update()
resource.update()
Attributes
| Name | Type | Required | Description |
|---|---|---|---|
auth_bypass_apps | stringCollection | No | - |
auth_bypass_url_categories | stringCollection | No | - |
auth_bypass_urls | stringCollection | No | - |
basic_bypass_apps | stringCollection | No | - |
basic_bypass_url_categories | stringCollection | No | - |
best_effort_policy | boolean | No | - |
block_connect_host_sni_mismatch | boolean | No | - |
block_domain_fronting_apps | stringCollection | No | - |
block_domain_fronting_on_host_header | boolean | No | - |
block_http_tunnel_on_non_http_ports | boolean | No | - |
block_non_compliant_http_request_on_http_ports | boolean | No | - |
block_non_http_on_http_port_enabled | boolean | No | - |
cascade_url_filtering | boolean | No | - |
comp_default_location_used | boolean | No | - |
digest_auth_bypass_apps | stringCollection | No | - |
digest_auth_bypass_url_categories | stringCollection | No | - |
digest_auth_bypass_urls | stringCollection | No | - |
dns_resolution_on_transparent_proxy_apps | stringCollection | No | - |
dns_resolution_on_transparent_proxy_exempt_apps | stringCollection | No | - |
dns_resolution_on_transparent_proxy_exempt_url_categories | stringCollection | No | - |
dns_resolution_on_transparent_proxy_exempt_urls | stringCollection | No | - |
dns_resolution_on_transparent_proxy_IPv6_apps | stringCollection | No | - |
dns_resolution_on_transparent_proxy_IPv6_exempt_apps | stringCollection | No | - |
dns_resolution_on_transparent_proxy_IPv6_exempt_url_categories | stringCollection | No | - |
dns_resolution_on_transparent_proxy_IPv6_url_categories | stringCollection | No | - |
dns_resolution_on_transparent_proxy_url_categories | stringCollection | No | - |
dns_resolution_on_transparent_proxy_urls | stringCollection | No | - |
domain_fronting_bypass_url_categories | stringCollection | No | - |
dynamic_user_risk_enabled | boolean | No | - |
ecs_for_all_enabled | boolean | No | - |
ecs_object | EntityReference | No | - |
enable_admin_rank_access | boolean | Yes | - |
enable_dns_resolution_on_transparent_proxy | boolean | No | - |
enable_evaluate_policy_on_global_SSL_bypass | boolean | No | - |
enable_IPv6_dns_optimization_on_all_transparent_proxy | boolean | No | - |
enable_IPv6_dns_resolution_on_transparent_proxy | boolean | No | - |
enable_office365 | boolean | No | - |
enable_policy_for_unauthenticated_traffic | boolean | No | - |
enforce_surrogate_ip_for_windows_app | boolean | No | - |
fail_close | boolean | No | - |
http2_nonbrowser_traffic_enabled | boolean | No | - |
http_range_header_remove_url_categories | stringCollection | No | - |
jwt_auth_bypass_apps | stringCollection | No | - |
jwt_auth_bypass_url_categories | stringCollection | No | - |
kerberos_bypass_apps | stringCollection | No | - |
kerberos_bypass_url_categories | stringCollection | No | - |
kerberos_bypass_urls | stringCollection | No | - |
log_internal_ip | boolean | No | - |
prefer_sni_over_conn_host | boolean | No | - |
prefer_sni_over_conn_host_apps | stringCollection | No | - |
sipa_xff_header_enabled | boolean | No | - |
sni_dns_optimization_bypass_url_categories | stringCollection | No | - |
track_http_tunnel_on_http_ports | boolean | No | - |
ui_session_timeout | integer | Yes | - |
zscaler_client_connector1_and_pac_road_warrior_in_firewall | boolean | No | - |
Related
- AdvancedSettings - Data structure definition
- Logging guide - enable verbose logs while debugging this resource