Skip to main content

AD_4nXdBgQOKWjn1b4GPDH9MbcqSdUfVzfrCHytTpORTcDjzGOt2_-iOE_PMLu_SkJZBciXaHZGrlitRqpPzvHhOgyQ3a7WyYmzenszZyWPDiOKjEQox6KmBBOx1VXPSvlmSNBIgqPD8pA?key=_kJkiMGVnHiUW6IbDe7eUA

Netskope Global Technical Success (GTS)

Brave Browser - Block Native Client on Windows OS

 

Netskope Cloud Version - 126

Objective

Restricting web traffic originating from Brave Browser on Windows OS

 

Prerequisite

SWG or Next-Gen SWG license

 

Context

This article outlines the process to block Brave Browser traffic at the Netskope Client level on Windows OS.

 

Do You Know?

  • Netskope acknowledges Brave as a Cloud Application and provides a pre-defined cloud app connector.
  • As of May 22, 2025 with Netskope’s Brave predefined connector, customers can exercise control over the following activities:

AD_4nXevwzdZEPE8RmdVMpHwzUbFNXo1AEWPJqY0mp5IccVPJzNazBRtXnxaFJRL-8HaUl8C0ungxEybloSm_2ZtUJCR1x5ayUo_mmeEtmW0X9TxKH_qZ_R9cQZcHmOgl3umnH-8ZzPX?key=_kJkiMGVnHiUW6IbDe7eUA

  • Netskope categorizes Brave under the 'Security' web category.

 

Details

Brave Browser Processes on Windows OS

AD_4nXc6nY66P5SFBB0XnOGV-wDs7I4aHPzCT-Qf50nrorK-e4hksA7A3oO7byCNa365AqhgzWCxhCBZX8T7Rny9Q1RNK0b6x7XNgX08ktRe6xt15F6DNvS5SpwncpaHZfkIxwknCflcSA?key=_kJkiMGVnHiUW6IbDe7eUA

 

Configuration

  • Create Certificate Pinned Application for Windows OS Platform with the definition

Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> App Definition >>> New Certificate Pinned App

AD_4nXep5NZBXy4Ghc-e3YVLTWSwvldLC8TI8fOcl4gd0J4m4x1GTIqNZ4hd2KitY9GDgRG8WRCRbi_m5KJSGGEOJ5FGO4NPZXJWAYg-FYZhroJi2ngGK-whTb4nlJBVpprvN090Vu8H?key=_kJkiMGVnHiUW6IbDe7eUA

Note: Here you need to define the Platform where the application will be used, if needed for another platform then need to repeat the process.

 

  • Create an Exceptions, while the action will be set to block as follow 

Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> Steering configuration >>> Select the Steering Configuration Profile you wish apply controls to >>> Exceptions >>> New  

AD_4nXd9lE3U3oqSXXIHBvNaK0CQ6mkdSDtcPZedxfseqJGTV3bfGy97XI1cDziYaKvzyQT4iMkykZRCQxpRKu5zVpfUcgl2oovtPpKKYN9ypy6HlikJ9nGGJPOSDyyYX7g8VGvZwvzZwA?key=owCl07iox1RbM85PzzhRiQ

 

  1. Select the above created Certificated Pinned Application, 
  2. Under Custom App Domains ‘*’
  3. Select - Block

AD_4nXcSZ8_ww_FtZA3uiBzqJLfHoZ7bgn7IGHQUIc8XEYnWmDMVaap1bj9CCQt-J2gMtkkZ_2Jjs5O1GkCLSusoJ4OQlKKmSnRGaUXEI10bXDxl6HsciBzotvWzGRi1Uy3xTUCYfWdSwg?key=_kJkiMGVnHiUW6IbDe7eUA

 

AD_4nXcFjVdWi8-KNNb91_JTL8XGJc18HcR-JjxQ_48nQ5sNWI-SI8jhodil73FA-DQHUDlHiEb8srSLQtI5BM19u1WDvFU52ksY0q9tlVoAanOBF-79qR9Sum0RTBHjHP45X2CBknX4?key=_kJkiMGVnHiUW6IbDe7eUA

 

Note: Once the edition on the steering configuration profile is saved, please ensure that Netskope Client is up-to-date by setting an icon, go to its configuration, and make sure there are no pending updates.

 

Verification

  • Generate traffic through the Brave Browser, the Netskope Client will display the following notification.

AD_4nXdKk3ar_2vTovCFRo7KEu62tqMt46DUN_qvgUsIZ49naJ3JQkJAGloGqnV89O1888Jxp_K2BmUEssPPeki8pCdn9yFsRIMdV0aFJXiNE_g81IuebBwv_dm5A65r7pAz8autSqwJMA?key=_kJkiMGVnHiUW6IbDe7eUA

  • Netskope Client Logs

File Name - nsdebug.log

2025/05/22 17:28:25.895 stAgentSvc p1658 t1040 info bypassAppMgr.cpp:729 BypassAppMgr Dropping connection from process: brave.exe, host: star-randsrv.bsg.brave.com

2025/05/22 17:28:26.148 stAgentSvc p1658 t1040 info bypassAppMgr.cpp:729 BypassAppMgr Dropping connection from process: brave.exe, host: star-randsrv.bsg.brave.com

 

Terms and Conditions

  • All documented information undergoes testing and verification to ensure accuracy.
  • In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

 

Notes

  • This article is authored by Netskope Global Technical Success (GTS).
  • For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.

 

Be the first to reply!