In Strata Cloud Manager, go to ManagePolicies >PathPath Sets.
Select a Path Policy Set and within the policy set, select a rule to edit or
add a new rule.
Go to Apps and select the required
applications or confirm that the required applications are selected.
On the Paths tab, select the Active and/or Backup path
as Standard VPN on <circuit category>
or Any Public / Private to allow the system
to use any/ all paths of that type.
You
can mix Standard VPNs with other available paths – private, public,
direct or VPNs.
On the Service & DC Group tab,
select Zscaler as the Standard VPN group,
and click Save & Exit.
If
Standard VPN path is used in a network policy, then you must have
a Standard VPN Services and DC Group defined in the policy for the
traffic to transit through that group. If not, traffic will be black-holed.
If Required is selected, traffic will always transit through the Services
and DC Group. If not selected, traffic may or may not transit
through the Services and DC Group per policy.