Suppose we have two gateways i.e SWG and NPA gateways and both the tunnels are established between respective gateways and the client. How does Netskope client understand where the traffic should be routed?
There is a priority to the two tunnels and the respective traffic that is intercepted and tunneled. The same Netskope client is used to monitor all traffic on the machine (the exact mechanism varies by operating system). Once the Netskope client has inspected the traffic is it checked against the specified NPA Private App definitions and the steering configuration. In your scenario the priority is:
1. Traffic specified in a private app assigned to the user will be intercepted and tunneled via the NPA tunnel. NPA specified apps have the highest priority.
2. Any outbound web traffic that is not in the exceptions list will be tunneled via the SWG tunnel.
Sam Shiflett Netskope Solution Architect - North America