These are the new features and enhancements with NPA:

Private Access Cloud

NPA Global Attributes in Tenant UI

This release makes several NPA features directly configurable in the Tenant UI. Users can now view and modify selected Publisher feature flags in the Global Attributes window. Learn more.

UI Changes

A new Global Attributes button appears in the top-right corner of this page:

Settings → Security Cloud Platform → Publishers

Clicking this button opens a panel where you can review and toggle supported NPA global attributes.

Customer Impact

Action required: None.
Existing tenants retain their current settings.
New tenants receive the updated default values.

General Availability of Private Applications Across Multiple Netskope Tenants for macOS

Accessing private applications across multiple Netskope tenants functionality was a controlled-GA feature in version 131.0.0. This is now available for all tenants and supports tenants using Secure Configuration Services and MacOS with the default browser.

Supported OS: macOS, Windows

Supported minimum Client version: 125.0.0 (Windows), 131.0.0 (macOS)

Dynamic Reconnection Based on Relative Latency

The Publisher will now periodically re-evaluate its connection to find the best-performing Point of Presence (PoP). This mechanism is now driven by our GSLB API service that is now also able to steer traffic away from a Publisher during maintenance windows or traffic connections issues in the region. The values can be individually changed on a per request basis by the customer.

Supported minimum Client version: 134.0.0

NPA Prelogon Support for Device Cert Check Against Multiple CA’s

This feature enables NPA Pre-logon to validate device certificates against multiple Certificate Authorities (CAs) within a single Client configuration. It simplifies certificate management for large enterprises using multiple sub-CAs or undergoing PKI migrations by allowing a single policy to support various trusted certificate issuers.

Restrictions on Special Characters in Name Fields

The control characters and special characters such as \t, \r, \v, and \fare now blocked from use in the name fields of Private Apps, Publishers, Local Brokers, and Publisher upgrade profiles.

This change is introduced with release 134.0.0.

Publisher

Software Version: 134.0

Supported Publisher Versions: 134.0, 133.0, and 132.0.

General Availability Date: December 10, 2025

Updated Kernel Versions

Platform	Kernel Version
OVA VHDX AMI VHD	5.15.0-168-generic 6.8.0-1044-azure 6.5.0-1024-aws 6.8.0-1044-azure

SHA Hash for Publisher Images

Image Type	SHA256
OVA	b5dadd877c33f2befb9b0bd099711bfd70c928310429a0842d0dbb18c2e552c0
VHDX	7fff721c1557a84768a40883bdd88caa3b0b58e948e21eb2143902ef776aba2e

OVA/VHDX Hosting on the Alicloud

OVA hosting on the AliCloud: https://npa-ova.oss-cn-shenzhen.aliyuncs.com/latest/NetskopePrivateAccessPublisher.ova
VHDX hosting on the AliCloud: https://npa-ova.oss-cn-shenzhen.aliyuncs.com/latest/NetskopePrivateAccessPublisher.vhdx

AnyApp: Do not send domain parameter when the input is empty

Improved the stability of AnyAPP RDP login when no domain is present.

AnyApp: Encrypt/Decrypt special character in the password

Improved the stability of AnyAPP RDP login with special characters in the password.

Local Broker

Local Broker Wizard

Release date: February 13, 2026

Enhance the debug capability of the local broker when using the wizard for the upgrade.

Netskope Private Access Publisher Release Notes Version 134.0