Action Required for CMS Contractors with Non-GFE Devices: Upgrade your Zscaler by September 20, 2026
Action Required for CMS Contractors with Non-GFE Devices: Upgrade your Zscaler by September 20, 2026
CMS Cloud

Action Required for CMS Contractors with Non-GFE Devices: Upgrade your Zscaler by September 20, 2026


Security vulnerabilities have been identified in older versions of the Zscaler client. To maintain secure and reliable remote access, all CMS contractors using Non-Government-Furnished Equipment (GFE) devices must upgrade their Zscaler client to a supported version by September 20, 2026. 

 

GFE devices are being updated automatically and do not require any action. 

 

If you do not upgrade your non-GFE device to a supported version by September 20, your Zscaler access will be revoked, and you will no longer be able to access critical CMS resources. 

 

If you have already upgraded your non-GFE device and are running a supported Zscaler version, no further action is required. 

 

Supported versions: 

 

Windows: 

  • 4.8.0.232 or higher  
  • 4.9.0.272 or higher  

MacOS 

  • 4.8.0.191 or higher  
  • 4.7.0.292 or higher  

How to Verify Your Zscaler Version and Upgrade Instructions 

Step-by-step instructions for verifying your current Zscaler version and performing an upgrade are available on the VPN Setup page: "Do I need to update Zscaler?". 

For troubleshooting tips, best practices, and remote access guidance, refer to the “Zscaler VPN Frequently Asked Questions (FAQ) for ADOs” located on the VPN Setup Home Page, under the Documentation section.  

Using a Company-Provided Zscaler Client? 

If your Zscaler client was provided by your company, please contact your IT support team for assistance. They can follow the instructions on the VPN Setup Home Page to ensure proper configuration for CMS access. 

Need Help or Have Questions? 

If you have questions, please reach out to your Hosting Coordinator. To find the assigned Hosting Coordinator supporting your application(s), visit this page on CCG. 

Connect with us via the Slack channel #help-cms-zscaler. 



This email was sent to NPrm5pk4s@niepodam.pl using Granicus Communications Cloud 7500 Security Boulevard · Baltimore MD 21244