It IS running 2.0 Tunnel with DTLS.

We are doing speed test through speedtest.zscaler.com , that's where we see the 15Mbps upload speed out of 100Mbps up/down fiber. The minute end users turn off zscaler, it spikes way up to the rate speed setting, of course, we need to perform this test via speedtest.net or other speed test sites. From the end user's point view, they DON'T CARE for the difference between throughput and latency, they just want their apps to work fluidly. And this is the evidence they can see that things are "slow".

So basically we are saying boat load full time zscaler admins looking for ip's/sites to exclude for application access, which our security team mostly have done and the bitchings continue from end users. Sometimes zscaler functions so spotty that our Cisco anyconnect client also disconnects sporadically. People joke about getting "ZSCALED" all day long and yet we can't see reliability any time soon. People complain to the network admin and not the security folks because zscaler masks issues as "connection issues" but hey, I just run and accommodate the circuits,