Mobile Device Traffic Forwarding

Is it possible to create traffic forwarding rules to say:

Forward traffic to ZIA for defined managed SaaS services
Do not forward for all other traffic

This is not a requirement but would be a nice to have for corporate owned, personally enabled mobile devices.

We are not trying to create a per-app vpn for these services as they are SaaS and should be routed through ZIA.

Any help or guidance would be appreciated.

You could do this in the app profile PAC, with a default return to a sinkhole address (and earlier statement direction the needed App URL/Hosts to Zscaler)