FAIL CLOSE

adityasharma08 · ‎10-23-2023

Hello Everyone,

can you please guide me in enabling fail close even when client is not installed and access method is IPsec/Gre. what configuration i need to do on firewall in o

sshiflett · ‎10-25-2023

@adityasharma08

What is the use case for this? Netskope can't enforce fail close on devices without the Netskope client installed. There are some ways using device classification or user based policies that we could likely enforce a fail closed posture though but before I advise any of them I'd suggest diving deeper with your local Netskope account team or channel engineer on what outcome you're looking for.

Sam Shiflett
Netskope Solution Architect - North America

View solution in original post

sshiflett · ‎10-25-2023

@adityasharma08

What is the use case for this? Netskope can't enforce fail close on devices without the Netskope client installed. There are some ways using device classification or user based policies that we could likely enforce a fail closed posture though but before I advise any of them I'd suggest diving deeper with your local Netskope account team or channel engineer on what outcome you're looking for.

Sam Shiflett
Netskope Solution Architect - North America