Skip to main content

Netskope Help

CGNAT Address Support for Local DNS Resolution

When a private app is published via NPA, the application will resolve to a synthetic IP address, which may go to unknown public hosts. With this new feature, NPA now reserves CGNAT for local DNS resolve instead of the 191.1.x.x/16 IPs. This feature is enabled by default on all new tenants onboarded after release 101, and exiting tenants should contact Support to enable this functionality.

When this functionality is enabled for an existing tenant, the Client will continue to function at the address until the client is upgraded to version 101 or higher. Restarting the Client would be necessary in order for it to change to the new CGNAT address area.