Zscaler is Ending Support for Adobe Flash Cookies

In our continuing effort to provide the highest level of security to our users, Zscaler is discontinuing its use of Adobe Flash cookies on its authentication pages and pre-provisioned cookies as an authentication mechanism. This is due to security concerns around the vulnerabilities of Adobe Flash cookies.

How do I confirm if I am using Adobe Flash cookies?

You are using Adobe Flash cookies if you downloaded cookies from https://admin.zscaler_cloud/download/cookies, and distributed them to your users’ devices. (To learn how to find your Zscaler cloud name, see What is my cloud name?)

What do I need to do?

If your organization is using Adobe Flash cookies for authentication, please ensure that your desired authentication mechanism is configured on the Authentication Settings page of the Zscaler admin portal. Zscaler recommends deploying Identity Federation using SAML for provisioning and authentication. (See Choosing Provisioning and Authentication Methods.)

You can also deploy the Zscaler App to your users with no additional charge. The Zscaler App provides all of the benefits of the Zscaler Cloud Security Platform for Internet traffic, and requires users to log in just once. (See What is the Zscaler App?)

If you do not configure an authentication mechanism before Zscaler ends its support for Adobe Flash cookies, the Zscaler service will use the authentication mechanism that is already configured on the admin portal to authenticate users.

Additionally, Zscaler strongly recommends that you inform your users about the new authentication process, because the Adobe Flash cookies allowed them to skip the authentication step. With the new authentication mechanism, users will need to authenticate themselves to the Zscaler service at least once.

When is the change planned?

Zscaler plans to discontinue its support for Adobe Flash cookies in the next several months. Zscaler will send periodic reminders before ending its support for Adobe Flash cookies.

Where can I get more information?

If you need assistance changing your configuration or if you have additional questions or concerns, please contact the Zscaler Technical Support team by submitting a ticket through the Zscaler admin portal, or by calling +1-408-701-0534 or 1-800-953-3897 from within the U.S.