NSS Exclude Filter Configuration Issue
Minor
June 17, 2026 - Started 2 days ago
Incident Report
Zscaler is investigating an issue affecting Nanolog Streaming Service (NSS) feed filtering. We will continue to provide updates here as the investigation progresses. For detailed updates, please check the Service Status section in your Zscaler customer support portal (CSP). Status changes and additional details will be posted there as they become available.Latest Update - Thu, 18 Jun 2026 07:27:01 UTCZscaler has identified a permanent fix. The fix is being deployed to ZS3 and ZS3 Cloud this weekend, with deployment to additional clouds to follow. We are actively working on the deployment plan for the remaining clouds and will provide timelines as they become available.Update - Wed, 17 Jun 2026 20:13:32 UTCZscaler is investigating an issue affecting Nanolog Streaming Service (NSS) feed filtering. Customers who configure NSS feeds using the Exclude Filter option may experience unintended behavior resulting in log delivery interruptions to their configured SIEM destination. Instead of excluding only the selected URL category, the filter may prevent logs from being forwarded through the affected NSS feed. This issue may affect customers across all ZIA cloud environments that utilize the NSS Exclude Filter functionality. As a workaround, customers should avoid using the Exclude Filter option. Customers currently using this configuration should review and remove the Exclude Filter setting and verify that log delivery resumes as expected. Customers who require filtering may alternatively use the Include Filter option to explicitly select the URL categories that should be forwarded through the NSS feed. Zscaler teams are actively investigating this issue to identify the underlying cause and develop a permanent resolution. Until a fix is available, customers should utilize the documented workaround described above. We will continue to provide updates as more information becomes available.Update - Thu, 18 Jun 2026 07:27:01 UTCZscaler has identified a permanent fix. The fix is being deployed to ZS3 and ZS3 Cloud this week, with deployment to additional clouds to follow. We are actively working on the deployment plan for the remaining clouds and will provide timelines as they become available.
Trusted by 1,000+ teams
Stop finding out about outages from your users. Monitor 6,320+ cloud services and get alerted the second something breaks.