Several cases have been reported where network-related issues cause Apex One agents to not work as expected when Zscaler products are in their environment. The issues may include, but are not limited to:
- Agents cannot connect to Global Smart Scan servers and other backend services for whitelist checking.
- Agents cannot connect to Apex One as a Service, which results in an Offline status in the web console.
This issue is caused by the SSL inspection feature in Zscaler products. Zscaler replaces all Apex One server/agent certificates used for communication with its own certificate, causing multiple network communication failures.
To resolve this issue, it is suggested to add *.trendmicro.com to the Zscaler exception list from SSL inspection.