How to exclude Zscaler (or only selectively include certain applications) in SFC Protect?

Ok I see, you want SaaS in outbound rules as a priority over SFC routing.

How do you configure this? From the app?