How to (ps)ping through ZPA


(Lisa Lorenzin) #1

We’ve seen several inquiries regarding how to test for reachability through ZPA, since ping (and ICMP in general) is not supported.

Windows users can use a Microsoft utility, PsPing, to achieve similar functionality over ZPA. PsPing is a sysinternals tool that displays connectivity to a resource (by FQDN) via TCP rather than ICMP:
C:\Users\LLorenzin>psping -t jira.corp.zscaler.com:80

PsPing v2.10 - PsPing - ping, latency, bandwidth measurement utility
Copyright © 2012-2016 Mark Russinovich
Sysinternals - www.sysinternals.com

TCP connect to 100.64.1.3:80:
Infinite iterations (warmup 1) ping test:
Connecting to 100.64.1.3:80 (warmup): from 192.168.144.71:27490: 0.36ms
Connecting to 100.64.1.3:80: from 192.168.144.71:27491: 0.31ms
Connecting to 100.64.1.3:80: from 192.168.144.71:27493: 0.32ms
Connecting to 100.64.1.3:80: from 192.168.144.71:27495: 0.33ms
Connecting to 100.64.1.3:80: from 192.168.144.71:27496: 0.31ms

Sent = 4, Received = 4, Lost = 0 (0% loss),
Minimum = 0.31ms, Maximum = 0.33ms, Average = 0.32ms

Get it here:

docs.microsoft.com

PsPing - Windows Sysinternals

Please note that this should be used solely to check reachability, and not for performance - it doesn’t accurate reflect latency when used through ZPA.

Mac users, you can use netcat or TCPping to accomplish similar reachability testing…

Regards,
Lisa