Netskope Global Technical Success (GTS)
Grok xAI - Block Native Client on iOS
Netskope Cloud Version - 123
Objective
Grok xAI Block DeepSeek Native Client on iOS
Prerequisite
Netskope CASB Inline or SWG license is required
Context
Grok xAI can be accessed through its web platform and native client. Grok xAI Native Client is available for the following platforms:
- Android
- iOS
This document focuses on Netskope's ability to block the Grok xAI Native Client on iOS.
Do You Know?
- Netskope acknowledges Grok xAI as a Cloud Application. Netskope classifies Grok xAI under the 'Generative AI' web category.
- As of Feb 24, 2025 with Netskope’s Grok xAI predefined connector, customers can exercise control over the following activities:
Lab Recreate
Step 1: Create Certificate Pinned Application for iOS Platform with the definition as ‘:G-rok-XAI]”
Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> App Definition >>> New Certificate Pinned App
Domains: grok.com, grok.x.ai, x.ai
Note: Here you need to define the Platform where the application will be used, if needed for another platform then need to repeat the process.
Step 2: Create an Exception, while the action will be set to block as follow
Path: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> Steering configuration >>> Select the Steering Configuration Profile you wish apply controls to >>> Exceptions >>> New
- Select the above created Certificated Pinned Application,
- Under Custom App Domains add *
- Select - Block
Note: Once the edition on the steering configuration profile is saved, please ensure that Netskope Client is up-to-date by setting an icon, go to its configuration, and make sure there are no pending updates.
Verification
Try posting a message and You should notice that the application will not be able to initiate as well as new messages will not be sent/received nor Upload/Download.
- You should see the below ‘Blocked Events’ in Netskope clients block event
- For further verification, you can find ‘Block’ logs in Netskope Client logs
File Name - nsdebuglog.log
Author Notes
- How to block access for Grok xAI Web Access? Ref. -
- For detailed write-up on using the Netskope Client on Android with certificate pinned applications here
Terms and Conditions
- All documented information undergoes testing and verification to ensure accuracy.
- In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.
Notes
- This article is authored by Netskope Global Technical Success (GTS).
- For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.