A user is accessing a private application through Zscaler with SSL Inspection enabled.

When SSL Inspection is enabled and a user accesses a private application through Zscaler, the user will see a Zscaler generated MITM (Man-In-The-Middle) Certificate on their browser session. Zscaler intercepts and decrypts SSL/TLS traffic at the Service Edge and then re-encrypts it before forwarding it to the client, presenting its own certificate to maintain the security of the connection while enabling inspection.

This allows Zscaler to inspect encrypted traffic for threats and policy enforcement transparently without exposing the original server’s certificate. The study guide clarifies this mechanism under SSL Inspection details.