We want to script "Disable Netskope Client", "Enable Netskope Client" on MacOS. That is a full tunnel teardowns and rebuild, reloading of network stack etc.
I saw some posts re using
sudo launchctl [un]load /Library/LaunchDaemons/com.netskope.client.auxsvc.plist but this appears to do nothing. Certainly the NPA tunnel stays up for existing connections.