Skip to main content
  • EN

                                                      AD_4nXe6UeX_w2WHdDndbsy6RdznnTfIZxPCPJSSYTfCWeEkMYvYILipH69yEhzyR-KReEEGjzc3ZNs1XiZ67b_VF46FwYaXGu0oypt_ppSeQDBderKZcLOaUVN6kBxNSCFZN5PqTiVFog?key=BZoSOOPxf18GBwTtujbu_Wv_

Netskope Global Technical Success (GTS)

DeepSeek - Block Native Client on Android

 

Netskope Cloud Version - 123

 

Objective

Block DeepSeek Native Client on Android

 

Prerequisite

Netskope CASB Inline or SWG license is required

 

Context

DeepSeek can be accessed through its web platform and native client. DeepSeek Native Client is available for the following platforms:

  1. Android
  2. iOS

This document focuses on Netskope's ability to Block the DeepSeek Native Client on Android OS.

 

Do You Know?

  • Netskope acknowledges DeepSeek as a Cloud Application and provides a pre-defined cloud app connector. Netskope classifies deepseek.com under the 'Generative AI' web category.
  • As of Feb 06, 2025 with Netskope’s DeepSeek predefined connector, customers can exercise control over the following activities:

AD_4nXfQQwMWafYqSOkWqO_6TdVb9SKfG2g_iw0z5hQLMSZjBP7nFb6e4VlQQ0MuvGxhJoLRjrTTeOkWqRtRwxXX2tcpt4xZyBev8PGfth-NsQb-jJFAWCMjjxbQXxh2oEk9QTM28N3f1g?key=BZoSOOPxf18GBwTtujbu_Wv_

 

Lab Recreate

1.Create Certificate Pinned Application for Android Platform with the definition as ‘com.deepseek.chat’

Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> App Definition >>> New Certificate Pinned App

AD_4nXfjiTMSkNOrE1Ue1Kwtm2OHFBM25dk-P-DUBPGhM3CgQWiUBHN3OhpW-23wpLA0qBgFlMl_mL5rYaw7jwOPjXTrVUi0GXSktzkcHKSFvWqVVez-HYF0shXah7cdnAe7oivakyss-w?key=BZoSOOPxf18GBwTtujbu_Wv_

Note: Here you need to define the Platform where the application will be used, if needed for another platform then need to repeat the process.

 

2.  Create an Exceptions, while the action will be set to block as follow 

Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> Steering configuration >>> Select the Steering Configuration Profile you wish apply controls to >>> Exceptions >>> New  

AD_4nXcqQ58cW_ABDB3S-VlCEKFpgTtuZmAi2ML09eb4BymGu5wsKUGWp8AphmsgYxccgNI5ELze4cEAtY_SKf8zDTpFdx4tMu556216c4o-ouos-IsUauRQvmNDlIDdZtYo-UJzzsZi3g?key=BZoSOOPxf18GBwTtujbu_Wv_

 

  1. Select the above created Certificated Pinned Application, 
  2. Under Custom App Domains add *
  3. Select - Block

AD_4nXdYPzOrAWMrGn0Ri5dmXw9KFZKinuVDg_Q-xC09aKcqeGzNc2pmaaopQwDroHwYlx--yAf-Q9apqDpv-jYykE9ZHXK27dgZwntyfvfO8O-JRT848ROFj7B-bcYws5rqReou7BHXXw?key=BZoSOOPxf18GBwTtujbu_Wv_

 

AD_4nXfa1a56cTWj3BcQsQy2-LI93lxsKUYvkaN2ahsicJ01IFpR09H1njBoTKy5XgAcyUnzeUsyEExgBILj_bM40U9GmYigK-d5kDSQefuF-N7D9Y2knxz9nRmo_aTKy90M2eQR7M79sw?key=BZoSOOPxf18GBwTtujbu_Wv_

Note: Once the edition on steering configuration profile is saved, please ensure that Netskope Client is up-to-date by right-clicking on its icon, go to its configuration, and make sure there are no pending updates.

 

Verification

Scenario 1 - In an Android with DeepSeek App installed, try logging in to DeepSeek Application.You will see an error like below:

AD_4nXe2mlh8dSWxjZXaUa-92sOQT-onJusw-TFr-dw3PphqshVgbfMUgMHWMNdzdKGvlxc01ZkF3r1837ljz3gHN16aaerEoKX7_Tic5hLv5Xf2fec3OEuawOfMRaJPnxM93aPbzFXD?key=BZoSOOPxf18GBwTtujbu_Wv_

 

Scenario 2 - If the App is already logged in, Try posting a message and You should notice that the application will not be able to initiate as well as new messages will not be sent/received nor Upload/Download.

AD_4nXeHtJunPkIapwafxFFSA9aHz9G5pB9ivwwUItC09PQoVxsGqtblyubY6D6kPJze6fnVpdgoF2D6sNoS8BS1a5xl8sOCw2Fejms4dZv6nrKDaHcmKmzmfW6yRYdUzwvwVp7y0L1n7w?key=BZoSOOPxf18GBwTtujbu_Wv_

 

You should see the below ‘Blocked Events’ from Netskope Client on Android App.

AD_4nXe6uIh3dm4lPjXyTNveyha-TwN1enaD7x4ixyhReF4XKCibQ_Hg1G802YS-0CTLtX9D6gtoyoofxtqP4lVtwo9mDnlRdcDXYdcP5kOldp-587nwmHaNLrRFb5kQ87-ZcTSgI89e5Q?key=BZoSOOPxf18GBwTtujbu_Wv_

 

For further verification, You can find the ‘Block’ logs in Netskope Client logs

File Name - nsdebuglog.log

AD_4nXdO51Ff8W91e5JfdkEqoNGS3PbgTfq_lDYJDifNpaLJLNm2q5kVCnKF5sr7LPHkeeAlPmClUhGROGDSotbEc-lQ9yvR51hDiFUPKwRiVUVkbwW4_ILBqkGEEerfQDADG88aSMx6?key=BZoSOOPxf18GBwTtujbu_Wv_

 

Author Notes

  • How to block access for DeepSeek Web Access? Ref. - Link
  • For detailed write-up on using the Netskope Client on Android with certificate pinned applications here

 

Terms and Conditions

  • All documented information undergoes testing and verification to ensure accuracy.
  • In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

 

Notes

  • This article is authored by Netskope Global Technical Success (GTS).
  • For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.


 

Be the first to reply!
Terms & ConditionsCookie settings