You need to configure ZPA gateways in the Admin Portal to map it to the Private Applications server groups and the associated application segments that require Source IP Anchoring.

To configure a ZPA gateway for Source IP Anchoring:

1. Go to Infrastructure > Internet & SaaS > Network Policies > Zscaler Private Access.
2. Click Add Gateway for ZPA. The Add Gateway for ZPA window appears.
3. In the Gateway field, enter a name for the gateway.
4. From the Server Group drop-down menu, select the server group that you configured on Private Applications for Source IP Anchoring. All the application segments that are associated with the selected server group for which Source IP Anchoring is enabled appear in the Application Segment field.
5. Click Save and activate the change.