Use a Group in Stacked Policies

From
Policies >
Stacked Policies
Path
Path Sets
, and then select a path policy set.
Within the policy set, select a rule to edit or add a new rule.
Go to
Apps
and select the required applications or confirm that the required applications are selected.

On the
Paths
tab, select the
Active
and/or
Backup
path as
Standard VPN
on <circuit category> or
Any Public / Private
to allow the system to use any/ all paths of that type.

You can mix Standard VPNs with other available paths – private, public, direct or VPNs.
On the
Service & DC Group
tab, select
Zscaler
as the Standard VPN group, and click
Save & Exit
.

If Standard VPN path is used in a network policy, then you must have a Standard VPN Services and DC Group defined in the policy for the traffic to transit through that group. If not, traffic will be black-holed.
If Required is selected, traffic will always transit through the Services and DC Group. If not selected, traffic may or may not transit through the Services and DC Group per policy.