function FindProxyForURL(url, host) {

    // -------------------------------------------------------
    // Bypass rules - traffic goes DIRECT (skips Zscaler cloud)
    // -------------------------------------------------------

    // Bypass whatismyipaddress.com
    if (dnsDomainIs(host, ".whatismyipaddress.com") ||
        host == "whatismyipaddress.com")
        return "DIRECT";

    // -------------------------------------------------------
    // Default: send all other traffic to Zscaler cloud (ZEN)
    // -------------------------------------------------------
    return return "PROXY ${GATEWAY}:9400; PROXY ${SECONDARY_GATEWAY}:9400; PROXY ${GATEWAY}:80; PROXY ${SECONDARY_GATEWAY}:80; DIRECT";
}