I have a tunnel from Cisco IOS-XE (SDWAN) to Zscaler configured. The crypto phases are up (IKEv2 and IPSec), however the VTI is down:
swn-01#sho crypto ipsec sa interface Tunn11
interface: Tunnel11Crypto map tag: Tunnel11-head-0, local addr 10.241.17...