Do you know if they use CGNAT? If so, this adds packet overhead and can interfere with IPSec tunnels, especially with IKEv2 and default MTU sizes of 1500 bytes. MTU fragmentation is a known problem with Zscaler on wireless ISPs like T-Mobile. Reducing the MTU in the Zscaler policy or on the tunnel interface usually solves the problem. Working with T-Mobile 5G internet at home doesn't work with Meraki VPN - Cisco Community
... View more