If you are using ZCC and the web traffic is proxy aware, you can use “Tunnel with Local Proxy” to tunnel port 8443 traffic to Zscaler cloud. ZCC Tunnel 1.0 only intercepting port 80 and port 443.
If there is GRE in place, then this can bring the port 8443 traffic transparently to Zscaler cloud.
But you can configure a PAC file (forwarding profile PAC) to forward http(s) traffic on non-standard ports to be directed to client connector. This is done by using the tunnel with local proxy method to explicitly forward to localhost:9000