@SimonGA Go to your IT department and ask them to create a profile for people with problems using TLS instead of DTLS. They should assign you the new profile > start Zscaler > update policy > no more...