Hi Rau,

Assuming the default route next hop is the Zscaler Tunnel and static routing does not provide the required scalability, SD-WAN traffic steering can be used to bypass the zscaler tunnel(s) for a specific IP address.

An SD-WAN policy can be configured to match a specific destination IP address with either a basic next hop configuration within the SD-WAN policy or with more scalable steering configuration within a Forwarding Profile that is then applied to the SD-WAN policy.

Traffic steering has a vast feature set within the Versa solution, so providing the link to the Versa Docs portal below for details. Hope this helps!

https://docs.versa-networks.com/Secure_SD-WAN/01_Configuration_from_Director/SD-WAN_Configuration/Advanced_SD-WAN_Configuration/Configure_SD-WAN_Traffic_Steering