If you’re still having an issue but you have colleagues that have everything working, please ask them to run Cursor Settings > Network > Run Diagnostics and check the SSL issuer:
- If yours shows Zscaler but theirs shows Amazon RSA, your machines are receiving different SSL inspection policies. Please ask IT to align your policy or exempt Cursor domains from SSL inspection.
- If both show Zscaler, but only your machine fails API, Ping, Chat, and Agent, please ask IT to compare the Windows Trusted Root and Intermediate Certification Authority stores and the Zscaler Client Connector policy on both machines.
The durable fix is for IT to exempt Cursor’s required domains from SSL inspection, not only to allow the traffic. The required domains are listed under Cursor Settings > Network > Required Domains and here:
After IT makes the change, fully restart Cursor and rerun Network Diagnostics.