One needs to set http_proxy=  and https_proxy= in the windows system environment variables in order for FMT 6.x to reach https://sign-on.security.cisco.com/oauth2/

https://zscaler.my.site.com/customers/s/article/000006209   1. Cisco FTD has deprecated "ESP-NULL" encryption for IPSec Phase 2 which is normally how the tunnels against Zscaler get built. For Zscaler to support IPSec Phase 2 encryption, you need to ...