zia_get_advanced_settings
Retrieve the full ZIA Advanced Settings block (read-only) including authentication, DNS optimization, Office365, and more. Use before updating to merge partial changes.
Instructions
Get the full ZIA Advanced Settings block (read-only) — ~50 knobs surfaced under Administration → Advanced Settings, including authentication / Kerberos / digest bypass URLs and apps, DNS optimization on transparent proxy (IPv4 + IPv6) with their include/exempt URL / app / category lists, Office 365 one-click (enable_office365), UI session timeout (ui_session_timeout — seconds), surrogate IP enforcement, HTTP tunnel tracking (track_http_tunnel_on_http_ports, block_http_tunnel_on_non_http_ports), domain-fronting block, cascade URL filtering, policy for unauthenticated traffic, admin rank access, HTTP/2 non-browser traffic, ECS-for-all, dynamic user risk, CONNECT-host / SNI mismatch handling, and SIPA XFF header insertion. Always call this before zia_update_advanced_settings so partial updates can be merged onto the existing payload (the update is PUT-replace). Supports JMESPath client-side filtering via the query parameter.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | JMESPath expression for client-side filtering/projection of the returned settings dict (e.g. "{office365: enable_office365, timeout: ui_session_timeout}"). | |
| service | No | The service to use. | zia |