Ask the community

Internal and External server same name

barrycuda72
New Contributor II

New user to Netskope so apologies if this has been answered.

I have an internal application with an Admin page that can be access via port 8383.

This application has a public address for client apps to communicate with when they are not in the building.  The Admin page is not available when you are using the External address.

Example:

Internal  App.Test.com  IP 192.1.1.1

External App.Test.com. IP 35.1.1.1

We configured this as a Private App, however the admin page does not work and from what I can tell from the logs Netskope is using the External address.  If I use the IP address instead of the FQDN internally it works.   Any thoughts?

2 Solutions
qyost
Contributor III

uuid-fbf09aa4-2cb6-e1ad-5f37-c7468df8777f.png

When defining your private app, there is an option to "Use Publisher DNS".   That should move the resolution to the internal DNS servers for you.

--
-Q.

View solution in original post

You can accomplish this with a simple Real-time Protection Policy. “DNS over HTTPS” is an application in the list. Just create a policy to block it with no notification. In fact, I’m under the impression this is standard policy deployment for new customers by their SE’s now. 

View solution in original post

8 Replies 8
qyost
Contributor III

uuid-fbf09aa4-2cb6-e1ad-5f37-c7468df8777f.png

When defining your private app, there is an option to "Use Publisher DNS".   That should move the resolution to the internal DNS servers for you.

--
-Q.
barrycuda72
New Contributor II

Dang that was an easy fix..  Thank you

Welcome to the community. 

--
-Q.
nduda
Contributor

But this should works without using the internal dns option. Netskope should be intercepting that fqdn. What we found is that blocking dns over https is usually the cause for this. We’ve deployed a simple utility policy in Netskope to do this and all our NPA fqdn intercepting works now. 

barrycuda72
New Contributor II

I have a follow up question.  On a different app we are seeing where the private app only works when we disable dns over https in the browser.   How would I do that in Netskope?

You can accomplish this with a simple Real-time Protection Policy. “DNS over HTTPS” is an application in the list. Just create a policy to block it with no notification. In fact, I’m under the impression this is standard policy deployment for new customers by their SE’s now. 

barrycuda72
New Contributor II

That worked like a charm

Please mark the comments as a accepted solution for your question
Best Wishes
Rohit Bhaskar
Subscribe

In order to view this content, you will need to sign in to your account. Simply click the "Sign In" button below

Sign In