Things like Zerotier are installed on each device, and connect them all directly into whatever networking you configured on the platform. It doesn't fit into your map, because logically zerotier is yet another switch. So it's more like each device is now connected to two different switches, one reaches Untangle, the other doesn't.
This is advanced network engineering, so you'll forgive me for not going further. I have kids to feed after all.