What happens to intranet site definitions in the browser when it operates in tunnel mode?

When a browser operates in tunnel mode, it sends all traffic, including that destined for intranet sites, through the Zscaler service. In this mode, the browser does not have an internal definition of intranet sites available. Consequently, when it attempts to access these sites, it can lead to the browser losing the definitions that it might otherwise use for local resources. This lack of local awareness can result in prompts for user authentication, as the browser needs to verify access to intranet sites through the Zscaler platform.

This scenario emphasizes the relationship between how traffic is routed through Zscaler in tunnel mode and the handling of defined intranet sites; the browser's operations rely on the definitions available within its local environment, which are not present in this mode, thus requiring user authentication for access.