I’m working on behalf of a client who is running in packet filter mode with full tunnel.
They are trying to deploy a new tunnel app that sits on the 100.64.0.1 address and adds a route for the whole of the CGN network (100.64.0.0/10).
When this tunnel client is running the ZAPP fails to connect. Is there any way to debug the issue on the ZAPP to see where the traffic is going for the DNS tunnels which I also believe are on 100.64.0.3, 4, 5?
Is it the route that is the issue? Or will there be a clash somewhere else that could be causing this?
Is there any way to move zscaler off the 100.64 network ?