Skip to main content
  • EN

Hi,

If a customer has a corporate site where they configure Cloud Explicit Proxy as a steering method and they have clientless devices, such as servers, and the customer wants all traffic to be authenticated, what is the difference between configuring a SAML Forward Proxy account to authenticate this traffic and configuring a Reverse Proxy as a Service on the Netskope tenant? Additionally, which option is the best approach?

If the clientless device is a BYOD from a third-party worker, I assume that the best option would be to use the Reverse Proxy so that they don’t need to change the proxy settings on the device. But what about servers or corporate-managed clientless devices? What kind of authentication method should be used for them, and what are the differences, if any, between these methods?

 

Thanks! Regards

​@ElTetu, 

 

This requires a bit of a broader discussion but in general, the answer for servers and managed devices is the client, IPSEC/GRE, or explicit proxy.  We would need to better understand if these are unattended servers and what authentication is required.  

Reverse Proxy will not be applicable to the servers as it requires user authentication as SAML is the redirection method.    Clientless BYOD can be served a number of different ways when on premise including IPSEC/GRE and as of R125 DNS security is in EA for content filtering and additional use cases such as Guest WiFi network.  

Authentication usually comes via the client or SAML integration but if a deeper discussion is required I’d suggest reaching out to your local account team or channel engineer to assist with a deeper architecture discussion based on your use case. 

Thanks a lot for your answer ​@sshiflett!

The end customer decid to addopt an explicit proxy solution, as they are more comfortable managing PAC files than IPSEC/GRE tunnels, and they don’t really expect a lot of BYOD users on premises.

My original question went looking for this deeper discussion, from a forum point of view, just to gain more knowledge and understanding of Netskope and SSE solutions in general :)

 

Reply


Badges Winner

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings