Zscaler Network Error When Connected Via Cato SDP Client


The Zscaler Client Connector encounters a connection failure when used in conjunction with the Cato SDP Client, displaying an error message stating "No network interface can be detected."


  • Cato SDP Client connected to the Cato Cloud.
  • Zscaler Client Connector App version 4.1 and above.


The connection failure is attributed to a compatibility issue between the Cato SDP client and Zscaler Client Connector App versions 4.1 and above.

The Cato SDP client assigns a 169.254.x.x IP address (defaulting to as the default gateway address to route traffic via the tunnel when the Cato client is connected. However, when the Zscaler Client Connector 4.1 and above detects the use of a link-local IP address as the next hop, it blocks the Zscaler connection.

From zScaler Client logs, the error looks like this:

2023-08-14 16:54:44.117118(+0530)[11896:11880] ERR Default Interface Gateway is:

This issue will persist even if the Zscaler Cloud public IP is bypassed from the Cato tunnel (split tunnel).


This compatibility concern has been reported to Zscaler Support. While awaiting a comprehensive solution from Zscaler, the current known workaround involves downgrading to Zscaler client version 4.0.

Was this article helpful?

3 out of 3 found this helpful


  • Comment author
    Scott Hong

    Zscaler version above 4.2 has resolved this issue as well.

  • Comment author
    Jon Derrenbacker

    Thanks Scott. 

Add your comment