Global Secure Access - Private Access segmentation

We are just starting to evaluate Private Access and are already experiencing the first problems. We have our internal network area 10.0.0.0/8, local dns, some external partner dns, which should ...