Using ZAP with VPN and company proxy

[Joe Clifton]

Hello All,

I am a fairly new user of ZAP but understand the way to use it in a Non-VPN and proxy setting.  I am trying to use ZAP on my company laptop which is connected to the company VPN.  I need to test a server that can only be accessed across the company VPN.  I set up chrome to use localhost:8080 and verified that ZAP is also set to use localhost:8080.  When i browse to the server in question I get no activity n ZAP its as if I don't have the proxy set at all. I have a feeling its because of the company Proxy settings, could someone please verify this for me,  The proxy setting in my browser runs a script which is "http://pac.zscaler.net/XXXXX/com/inet" . where XXXXX is my company name.  i even setup up a manual proxy setting in the same browser to be localhost:8080 but still no luck.  Any help would be appreciated.

Thanks in Advance,

--joe

[Rishabh Khanna]

As you are telling that you have proper set up on browser for proxy, then I would recommend you to check the ZAP "Local Proxy" tab or "Connection" tab under respective preferences.

[kingthorin+owaspzap]

You can set ZAP to communicate outbound with your company's proxy. However, you should be sure to follow-up with your IT and networking team to make sure that's what they want you to do.

https://github.com/zaproxy/zap-core-help/wiki/HelpUiDialogsOptionsConnection#use-proxy-chain