Skip to main content

Hello,

We are observing a problem with on-prem detection enabled in client config with NPA.

Exceptions are being done on the cloud proxy side instead of the client. We have multiple exceptions configured whereby user traffic must originate from our office IPs due to whitelisting requirements.

We are now on R117.0.2.136.

It has been indicated that Netskope were working on a feature which would allow customers to choose if exceptions should be done at the client or cloud for BOTH on and off prem.

Is anyone aware of the status of this feature?

Regards,

Simon

According to the Enabling Dynamic Steering document, the Flexible Dynamic Steering is available from version 112.0.0. 

Contact Support to enable the new Dynamic Steering Configuration for the existing tenants. This feature is automatically enabled for the new tenants.


We’ve been using Dynamic Steering since it was in beta - fantastic stuff!


@simonma,

 

The feature you mentioned, Flexible Dynamic Steering, is the correct resolution to this behavior.  With this enabled, you can chose where to handle exceptions based on your environment.  The original design assumed an environment where exceptions should be handled at the cloud.  With this enhancement administrators can now select where to handle exceptions in the steering configuration:

 

 


We enabled flexible dynamic steering under beta recently and it has been working well.