GSA coexistence with Netskope
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 5f345f6 · +8 −8 lines · also on GitHub
⋯ 16 unchanged lines
1717
1818
This guide outlines how to configure and deploy Microsoft Entra solutions alongside Netskope's Security Service Edge (SSE) offerings. By using the strengths of both platforms, you can optimize your organization's security posture while maintaining high-performance connectivity for private applications, Microsoft 365 traffic, and internet access.
1919
20
−1. **[Microsoft Entra Private Access with Netskope Internet Access](#configuration-1-microsoft-entra-private-access-with-netskope-internet-access)**
20
+1. **[Microsoft Entra Private Access with Netskope Internet Access](#microsoft-entra-private-access-with-netskope-internet-access)**
2121
2222
In the first scenario, Global Secure Access handles private application traffic. Netskope only captures Internet traffic.
2323
24
−2. **[Microsoft Entra Private Access with Netskope Private Access and Netskope Internet Access](#configuration-2-microsoft-entra-private-access-with-netskope-private-access-and-netskope-internet-access)**
24
+2. **[Microsoft Entra Private Access with Netskope Private Access and Netskope Internet Access](#microsoft-entra-private-access-with-netskope-private-access-and-netskope-internet-access)**
2525
2626
In the second scenario, both clients handle traffic for separate private applications. Global Secure Access handles private applications in Microsoft Entra Private Access. Private applications in Netskope Private Access are accessed through the Netskope client. Netskope handles Internet traffic.
2727
28
−3. **[Microsoft Entra Microsoft Access with Netskope Private Access and Netskope Internet Access](#configuration-3-microsoft-entra-microsoft-access-with-netskope-private-access-and-netskope-internet-access)**
28
+3. **[Microsoft Entra Microsoft Access with Netskope Private Access and Netskope Internet Access](#microsoft-entra-microsoft-access-with-netskope-private-access-and-netskope-internet-access)**
2929
3030
In the third scenario, Global Secure Access handles all Microsoft 365 traffic. Netskope handles private application and Internet traffic.
3131
32
−4. **[Microsoft Entra Internet Access and Microsoft Entra Microsoft Access with Netskope Private Access](#configuration-4-microsoft-entra-internet-access-and-microsoft-entra-microsoft-access-with-netskope-private-access)**
32
+4. **[Microsoft Entra Internet Access and Microsoft Entra Microsoft Access with Netskope Private Access](#microsoft-entra-internet-access-and-microsoft-entra-microsoft-access-with-netskope-private-access)**
3333
3434
In the fourth scenario, Global Secure Access handles Internet and Microsoft 365 traffic. Netskope only captures Private application traffic.
3535
⋯ 40 unchanged lines
7676
7777
The `MSFT SSE Service` and `MSFT SSE M365` profiles are used in steering configurations.
7878
79
−## Configuration 1: Microsoft Entra Private Access with Netskope Internet Access
79
+## Microsoft Entra Private Access with Netskope Internet Access
8080
8181
In this scenario, Global Secure Access handles private application traffic. Netskope only captures Internet traffic.
8282
⋯ 52 unchanged lines
135135
1. In the system tray, right-click **Global Secure Access Client** and then select **Advanced Diagnostics**. In the **Traffic** dialog box, select **Stop collecting**.
136136
1. Scroll to confirm the Global Secure Access client handled only private application traffic.
137137
138
−## Configuration 2: Microsoft Entra Private Access with Netskope Private Access and Netskope Internet Access
138
+## Microsoft Entra Private Access with Netskope Private Access and Netskope Internet Access
139139
140140
In this scenario, both clients handle traffic for separate private applications. The Global Secure Access client handles private applications in Microsoft Entra Private Access and the Netskope client handles private applications in Netskope Private Access. Netskope handles internet traffic.
141141
⋯ 72 unchanged lines
214214
1. In the system tray, right-click **Global Secure Access Client** and then select **Advanced Diagnostics**. In the **Traffic** dialog box, select **Stop collecting**.
215215
1. Scroll to confirm the Global Secure Access client handled private application traffic for the SMB file share and didn't handle the RDP session traffic.
216216
217
−## Configuration 3: Microsoft Entra Microsoft Access with Netskope Private Access and Netskope Internet Access
217
+## Microsoft Entra Microsoft Access with Netskope Private Access and Netskope Internet Access
218218
219219
In this scenario, Global Secure Access handles all Microsoft 365 traffic. Netskope Private Access handles Private application traffic and Netskope Internet Access handles Internet traffic.
220220
⋯ 72 unchanged lines
293293
1. You can also validate that the traffic is captured in the Global Secure Access traffic logs. In the Microsoft Entra admin center, navigate to **Global Secure Access** > **Monitor** > **Traffic logs**.
294294
1. Validate traffic related to Outlook Online and SharePoint Online is missing from Netskope portal in **Skope IT** > **Events & Alerts** > **Page Events**.
295295
296
−## Configuration 4: Microsoft Entra Internet Access and Microsoft Entra Microsoft Access with Netskope Private Access
296
+## Microsoft Entra Internet Access and Microsoft Entra Microsoft Access with Netskope Private Access
297297
298298
In this scenario Netskope only captures private application traffic. Global Secure Access handles all other traffic.
299299
⋯ 67 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 04:48 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.