zScaler client connector with PAC file

Hi everyone.

I am trying to figure out the relationship between implementing a PAC file and the client connector.

If both are implemented, how does zscaler determine whether to use the correct forwarding method. Does it use the PAC file when on a trusted network then connector while on an untrusted network. If yes, how does the browser determine how not to use the PAC file while using the connector?

I hope this makes sense and thanks in advance.