Changes since SOA version
IXFR is a zone transfer request that returns changes since a specific SOA version. Enter the SOA version to request changes since then.
Not an apex domain
The domain _spf-cidr.zscaler.com is not the root of its zone.
Instead, try zone transfer on zscaler.com .
Instead, try zone transfer on zscaler.com .