Netskope Global Technical Success (GTS)

DeepSeek - Block Native Client on iOS

Netskope Cloud Version - 123

Objective

Block DeepSeek Native Client on iOS

Prerequisite

Netskope CASB Inline or SWG license is required

Context

DeepSeek can be accessed through its web platform and native client. DeepSeek Native Client is available for the following platforms:

1. Android
2. iOS

This document focuses on Netskope's ability to Block the DeepSeek Native Client on iOS.

Do You Know?

• Netskope acknowledges DeepSeek as a Cloud Application and provides a pre-defined cloud app connector. Netskope classifies deepseek.com under the 'Generative AI' web category.
• As of Feb 06, 2025 with Netskope’s DeepSeek predefined connector, customers can exercise control over the following activities:

Lab Recreate

1.Create Certificate Pinned Application for iOS Platform with the definition as ‘deepseek.com’’

Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> App Definition >>> New Certificate Pinned App

Note: Here you need to define the Platform where the application will be used, if needed for another platform then need to repeat the process.

2.  Create an Exceptions, while the action will be set to block as follow 

Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> Steering configuration >>> Select the Steering Configuration Profile you wish apply controls to >>> Exceptions >>> New  

1. Select the above created Certificated Pinned Application, 
2. Under Custom App Domains - deepseek.com
3. Select - Block

Note: Once the edition on the steering configuration profile is saved, please ensure that Netskope Client is up-to-date by setting an icon, go to its configuration, and make sure there are no pending updates.

Verification

• Try posting a message and You should notice that the application will not be able to initiate as well as new messages will not be sent/received nor Upload/Download.

You should see the below ‘Blocked Events’ in netskope clients block event

• For further verification, you can find ‘Block’ logs in Netskope Client logs

File Name - nsdebuglog.log

Author Notes

• How to block access for DeepSeek Web Access? Ref. - Link
• For detailed write-up on using the Netskope Client on Android with certificate pinned applications here

Terms and Conditions

• All documented information undergoes testing and verification to ensure accuracy.
• In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

Notes

• This article is authored by Netskope Global Technical Success (GTS).
• For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.