when you say it doesnt work, do you mean that traffic going to internet doesnt work?
if so, you will need to configure natting on the policy. natting would have been done by default from trust to untrust. but since you changed to custom zone, you will need to add that. It looks something like this
set policy top from <custom zone> to untrust any any any nat src permit