Brave Browser - Block Native Client on macOS

Netskope Global Technical Success (GTS)

Brave Browser - Block Native Client on macOS

Netskope Cloud Version - 126

Objective

Restricting web traffic originating from Brave Browser on macOS

Prerequisite

SWG or Next-Gen SWG license

Context

This article outlines the process to block Brave Browser traffic at the Netskope Client level on macOS.

Do You Know?

Netskope acknowledges Brave as a Cloud Application and provides a pre-defined cloud app connector.
As of May 22, 2025 with Netskope’s Brave predefined connector, customers can exercise control over the following activities:

AD_4nXc8ortso5_sK6aExtiMVBIDDNNU9y--wm53nuGAXr1Nhs8YXLkJg6sAWBijTp6RN3e3Z2DODjrJiy3bTMD2v3IGLf6-GWdup6BtgHbeyHye8P8jC6OfIY-bL44JHlqs2vxltu6tmw?key=owCl07iox1RbM85PzzhRiQ

Netskope categorizes Brave under the 'Security' web category.

Details

Brave Browser Processes on macOS

AD_4nXevmKvKqbfj1WIRRA7pYlQ-47jM-tRxyZmXLEihCFbru8HZJPoG2XUcLsniIhxwAs61drMPdbbHO7EuUWUI7-IglKjSJh8QDfFjqJBTM7tBfMhR3tjIC-W6HrWE5GZJZ0N8zy0dPQ?key=owCl07iox1RbM85PzzhRiQ

Configuration

Create Certificate Pinned Application for macOS Platform with the definition

Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> App Definition >>> New Certificate Pinned App

Note: Here you need to define the Platform where the application will be used, if needed for another platform then need to repeat the process.

Create an Exceptions, while the action will be set to block as follow

Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> Steering configuration >>> Select the Steering Configuration Profile you wish apply controls to >>> Exceptions >>> New

AD_4nXd9lE3U3oqSXXIHBvNaK0CQ6mkdSDtcPZedxfseqJGTV3bfGy97XI1cDziYaKvzyQT4iMkykZRCQxpRKu5zVpfUcgl2oovtPpKKYN9ypy6HlikJ9nGGJPOSDyyYX7g8VGvZwvzZwA?key=owCl07iox1RbM85PzzhRiQ

Select the above created Certificated Pinned Application,
Under Custom App Domains ‘*’
Select - Block

AD_4nXclDF4u-UW9Lz9vBrdbQTnV_I9rJqhDaLcLK4rhJeS_iKkJ8phhmixFKupRJm17x04K7Ya0fhkCXgUbPAmrfN56jKA95NvSflIihphaJnEhh47lr8WcVt7NhxlJhxKw6G_d5ypR3w?key=owCl07iox1RbM85PzzhRiQ

AD_4nXccDRjaE2CWIh1XclhOp27QHUFllUkyxRlQfngVkRFr81xpNxPDIlJhYj8p-wQ8xeOe6oAO-gMqvX5EesMA_WO1BpDWJlQzRsEvJ8H6UnGBQHAnQhMt17RfNdIjC0rjivc-SIJfYw?key=owCl07iox1RbM85PzzhRiQ

AD_4nXcRwwVs5nTuPEfHiaf1AnkVf38AK6AwZqoDTUXi44jGe8D1JL1qQYXS8Y4w9Uqfpx4RtVIMbTooYYSEjodihEqVADzhRsS2ROgaN3XawXymQ8ktGxcQViHc3wJ5K9PJZSFDXDPP1A?key=owCl07iox1RbM85PzzhRiQ

Note: Once the edition on the steering configuration profile is saved, please ensure that Netskope Client is up-to-date by setting an icon, go to its configuration, and make sure there are no pending updates.

Verification

Generate traffic through the Brave Browser, the Netskope Client will display the following notification.

Netskope Client logs

File Name - nsdebuglog.log

AD_4nXdNZHc-0gedaXTIIgwKcBWDpKCYs5Y3xZ1geHo9WtMrBGmXHYQ39owH-3je3AsmxTgz4hRtDJd2z3ZsD-FwydqW_9RONRccvSvKLLg4CPpWsR2GdM8s_UHVhjdJsKmDjlUM-4Yh?key=owCl07iox1RbM85PzzhRiQ

Terms and Conditions

All documented information undergoes testing and verification to ensure accuracy.
In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

Notes

This article is authored by Netskope Global Technical Success (GTS).
For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.

Be the first to reply!

Netskope Global Technical Success (GTS)