[ZSCALER-ZPA] Private application access denied (no matching policy)

alert any $HOME_NET any -> $EXTERNAL_NET any (msg:"[ZSCALER-ZPA] Private application access denied (no matching policy)"; program: Zscaler; json_content:".InternalReason","BRK_MT_SETUP_FAIL_NO_POLICY_FOUND"; json_content:!".IPProtocol","1" content:!"ZPA LSS Client"; json_map: "src_ip", ".ClientPublicIP"; json_map: "dest_ip", ".ServerIP"; json_map: "username", ".Username"; threshold: type suppress, track by_src&by_username, count 1, seconds 1800; classtype: reconnaissance; sid:5017951; rev:2; metadata: mitre_tactic_id TA0007, mitre_technique_id T1046, created_at 2026_08_11, updated_at 2026_08_11;)