What is ZDX (Zscaler Digital Experience)?
ZDX, Zscaler Digital Experience, is the Zero Trust Exchange service that measures how well users actually experience applications. ZDX does not enforce policies itself. Instead, it observes device health, network path and the reachability of individual applications, and brings these values together as metrics. When it detects an anomaly, ZDX Deep Tracing supplies detailed path data down to hop level. That turns a subjective complaint about a 'slow connection' into a solid, measurable basis for diagnosis in IT operations and the helpdesk.
ZDX in detail
ZDX continuously collects telemetry from the endpoint: resource usage, Wi-Fi signal quality, latency to the nearest Zscaler data centre, and response times of monitored applications. When it detects an anomaly, ZDX Deep Tracing can trigger a detailed network path analysis that shows, hop by hop, where the delay originates.
ZDX therefore adds the experience perspective to ZIA and ZPA: while ZIA and ZPA enforce and secure access, ZDX answers the question of how well that access actually works from the user's point of view.
Why ZDX matters in Zscaler operations
Reports such as 'the connection is slow' are among the most common helpdesk tickets, and also among the hardest to resolve, because the cause can lie anywhere between the device, the Wi-Fi, the internet service provider and the Zscaler cloud. ZDX makes this chain measurable and replaces guesswork with data.
For IT operations, ZDX also acts as an early warning system: falling values at a site or for an application can be spotted before a flood of tickets arrives.
Common sources of error
- ZDX data is reviewed only once an incident is already under way, not on a regular basis.
- ZDX metrics are not mapped to specific sites or user groups.
- The helpdesk has no direct access to ZDX values and must escalate every suspicion.
- Results from a ZDX Deep Tracing run are viewed in isolation instead of being combined with ZIA/ZPA status.
ZDX in practice: what CentaurNexus contributes
CentaurNexus brings ZDX metrics and Deep Tracing data together with the policy status from ZIA and ZPA through Connectivity Triage Map, and names the likely cause of an experience problem in plain language: the device, the Wi-Fi, the internet service provider or a Zscaler policy. The helpdesk does not need its own ZDX view or admin rights to do this. The guide below shows what this root-cause chain looks like in practice: Is it Zscaler or the Wi-Fi?
Related terms
Frequently asked questions about ZDX
ZDX stands for Zscaler Digital Experience. It is the Zero Trust Exchange service that measures how well users actually experience applications, based on device health, network path and application reachability. The result is a set of metrics and diagnostic data that let you trace experience problems at a technical level.
ZDX captures device resources such as CPU and memory, Wi-Fi signal quality, latencies along the network path, and the response times of individual applications, among other things. Together, these values build an overall picture of the user experience rather than a set of isolated readings.
ZIA and ZPA enforce security policies for internet access and access to private applications. ZDX, by contrast, measures how well that access actually works from the user's point of view. The three services complement each other: enforcement, access and experience measurement, all along the same Zero Trust Exchange.
Without ZDX data, a complaint about a 'slow internet connection' often leaves it unclear whether the device, the Wi-Fi, the internet service provider or Zscaler itself is the cause. ZDX provides the measurement basis to answer that question with data instead of guesswork, and to assign tickets faster.
ZDX is a standalone service within the Zscaler product family and is licensed separately. The exact scope of features at each licence level depends on the package booked, and should be checked in the relevant contract.
- Zscaler Help Portal: official documentation on Zscaler Digital Experience - help.zscaler.com
Note: CentaurNexus is an independent product of SourcingBlox GmbH and not an offering of Zscaler, Inc. Product and brand names belong to their respective owners.