Bypass Streaming Media over GRE Tunnels on Guest WIFI

I have a customer who needs to bypass streaming media for users sitting on Guest Wifi because its producing excessive unauthenticated traffic into Zscaler and they don’t want to get charged for it. The endpoints in that scenario do not have ZCC installed and they are BYO so they cannot deliver a PAC easily to those endpoints.

Anything we can do in that scenario?

What are you trying to bypass? The GRE/IPSec tunnels?
You can turn off authentication for the whole sub-location.

e.g. Netflix over GRE without a client