Zscaler Cloud Firewall - Deployment Method

I am planning to use Zscaler Cloud Firewall functionality.
I have nearly 50 branches & from these 50 branches, I want to use Zscaler cloud firewall functionality so that the user traffic to 3rd party solution goes via Firewall

So to achieve this , is it required to have GRE or IPSec tunnel from each of my branch office location to Zscaler ?
It is possible to achieve without GRE/IPSec tunnel ?

Zscaler cloud firewall works only location based like GRE or IPSEC…

Zscaler tunnel 2.0 supports all port TCP/udp forwarding.