We recently cut all of our users over to our new tunnel 2.0 app profile and after doing so, have seen more and more issues with FTP trickle in. We quickly realized we needed to enable FTP control, so we turned on support for Native FTP and FTP over HTTP, and created a URL category to input the allowed destinations. We also added FTP and Implicit FTPS to the allowed network services on our Cloud Firewall policy. We continue to face issues and we need to figure out how to get this resolved. My Zscaler case has gotten me nowhere so far, so I’m hoping the Zscaler community can help me out a bit.