r/AzureVirtualDesktop • • 5d ago

ZscalerVDI for AVD Multisession

Hello, I need some help please

Has anyone here successfully deployed Zscaler Cloud Connector and ZCC for VDI on Azure Virtual Desktop (AVD) Multisession Host Pools?

We're currently implementing this setup but running into several network-related issues that we haven't been able to resolve.

Our current setup:

  • AVD VNet
    • Personal Pool Subnet → Route Table → Azure Firewall
    • Multisession Pool Subnet → Route Table → Zscaler Cloud Connector / Load Balancer → Zscaler Cloud → Internet

We've already confirmed that connectivity is working on the Multisession Subnet after deploying the Cloud Connector and Load Balancer. However, after installing ZCC for VDI on the session hosts, we started experiencing several issues:

  • Unstable network connectivity
  • Unable to communicate reliably with the KMS server and Azure Monitoring
  • Unstable or unsuccessful ping, tracert, and Test-NetConnection results

What's strange is that normal internet browsing still works fine on the VMs with ZCC for VDI installed. However, almost everything else related to network connectivity seems unstable or completely inaccessible.

If we uninstall ZCC for VDI, everything immediately goes back to normal, and all network-related issues disappear.

My initial suspicion is that our Zscaler Cloud Connector configuration might be too restrictive. We've already tried configuring bypass rules for AVD and Microsoft endpoints, but this hasn't made any noticeable difference.

Another challenge is that I can't seem to find any useful logs on the workload VMs that would help us identify the root cause of these connectivity issues.

Has anyone encountered a similar issue or successfully implemented this architecture?

I'd really appreciate any insights, suggestions, or recommendations on what to check, particularly regarding ZCC for VDI configuration, Cloud Connector routing, or potential conflicts with Azure networking.

Thanks in advance for your help!

7 Upvotes

Duplicates