If your LAN network operates on the same synthetic IP range that Zscaler Client Connector uses for Private Applications, enable Drop Non-Zscaler Packets in Synthetic IP Range to have Zscaler Client Connector block non-Zscaler packets destined for the synthetic IP range.

This option is disabled by default. When disabled, non-Zscaler packets are bypassed.