Extend Your Zscaler DLP to Every Endpoint
Zscaler, Tuesday, October 27th, 2026
Zscaler Endpoint DLP extends existing inline DLP policies to devices through Client Connector without a separate agent.
Zscaler argues inline DLP loses visibility once sensitive data reaches a device, through USB copies, printing, or syncing to personal cloud storage.
Zscaler Endpoint DLP runs in the existing Zscaler Client Connector, so no separate endpoint agent is needed, and existing inline DLP policies, classifiers, and data identifiers extend to endpoints even offline.
On activation it reports connected devices and data movement channels, and a two-layer model controls device access and inspects content.
Endpoint and inline incidents appear in one console with timelines, with options such as multi-rule policies, network-aware enforcement, Windows and macOS support, and Shadow AI data protection.