I took your advice (one zone with sub-zones) and it works much better. All of the internal IPs are properly tagged with zones and geolocation in the events now.
Thanks very much for your help!
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center