You can configure your organization to use a Zscaler Client Connector IP range beyond the default range of 100.64.0.0/16 for your Zscaler Private Access (ZPA) applications. Enter a range between 100.64.0.0/16–100.127.0.0./16 in the Zscaler Client Connector Synthetic IP Range field.

If your LAN network operates on the same synthetic IP range that Zscaler Client Connector uses for ZPA, enable Drop Non-Zscaler Packets in Synthetic IP Range to have Zscaler Client Connector block non-Zscaler packets destined for the synthetic IP range.

This option is disabled by default. When disabled, non-Zscaler packets are bypassed.