Replaces all Zscaler location configurations with the provided array. Validates appliances, groups, regions, WAN labels, LAN labels, and firewall zones exist; removes invalid references silently. Converts bandwidth from Kbps to Mbps (multiplied by 1000) for storage unless bwControl is 'usePercent'. Converts time values to minutes based on displayTimeUnit/surrogateRefreshTimeUnit. Gateway options have dependencies: authRequired=true disables aupEnabled/cautionEnabled but enables surrogateIP/kerberosAuth; ofwEnabled=false disables ipsControl; aupEnabled=false resets aupTimeoutInDays; surrogateIP=false disables surrogateIPEnforcedForKnownBrowsers and resets idleTimeInMinutes. After save, triggers orchestration for all appliances.