- What are the installation prerequisites?
- Which IdP/SSO providers do you support?
- Can I use the Enterprise Browser with the Netskope Client?
- How can I resolve performance issues or slow loading times?
- What steps should I take if a web site or application doesn’t function as expected?
- Why am I experiencing compatibility issues with certain enterprise tools?
- How does NewEdge POP selection work?
Common Questions
This page contains the latest FAQs and best practices for Enterprise Browser.
Which IdP/SSO Providers Do You Support?
Enterprise Browser relies on SAML Forward Proxy configuration for SAML assertion upon user authentication. Any SAML 2.0 IdP/SSO is supported.
Can I Use the Enterprise Browser with the Netskope Client?
The main use case for Enterprise Browser is unmanaged devices. Both solutions can work together with the proper configuration. Define a Certificate Pinned Application exception to bypass Enterprise Browser traffic at the Netskope Client level.
How Does NewEdge POP Selection Work?
NewEdge POP selection for clientless access methods like Enterprise Browser relies on DNS resolution for optimal data center selection, which may differ from the NewEdge POP selection when the Netskope Client is enabled and running on the endpoint.
Can Enterprise Browser Be Set as the Default Browser on Mobile?
On mobile devices, Enterprise Browser cannot currently be set as the system default browser through Netskope configuration. Users must manually set it as their default browser in their device settings (iOS or Android). Organizations can use MDM policies to guide or enforce default browser settings where the MDM platform supports this capability.
Can I Use Non-Chrome Web Store Extensions?
Enterprise Browser supports extensions from the Chrome Web Store. Self-hosted (private) extensions are also supported through Extension Governance policies. Administrators can force-install private extensions by configuring the extension ID and update URL. Extensions that are not available in the Chrome Web Store and are not self-hosted are not supported.
Does Enterprise Browser Support WebSockets?
Enterprise Browser supports WebSocket connections for both SaaS applications and private applications accessed through NPA. WebSocket traffic is steered through the Netskope edge alongside standard HTTPS traffic.
Can I Copy and Paste Between Enterprise Browser and Other Browsers?
Clipboard behavior depends on the Browser Protection Policy configuration for your tenant. When clipboard policies are configured, Copy blocked prevents copying content out of Enterprise Browser, Paste blocked prevents pasting content from other applications into Enterprise Browser, and when the Sandboxed Clipboard is enabled, the clipboard is isolated within Enterprise Browser. If no clipboard policy is applied, copy and paste works normally.
Does Enterprise Browser Support Inactivity Timeout?
Enterprise Browser supports the PIN/Passcode Protected Profiles feature, which locks the browser profile after a period of inactivity. When enabled, users must enter a PIN or passcode to resume their session. The authentication session lifetime is controlled by the Auth Refresh Interval configured on the tenant.
Can I Use the Enterprise Browser Without Signing In?
Enterprise Browser does not support a “signed out” or personal profile. Every profile must be tied to a valid Netskope tenant license. Incognito mode is disabled by default for security reasons. Multiple profiles are supported, allowing users to sign in with different accounts within the same browser installation.
How Do I Filter Enterprise Browser Events in SkopeIT?
To view Enterprise Browser events in SkopeIT, filter by the access method “Enterprise Browser” in the Application Events view.
Why Does SSO Prompt Every Time I Reopen the Browser?
If users are prompted to authenticate each time they reopen the browser, the Auth Refresh Interval may be configured to a short duration. Verify your tenant’s Auth Refresh Interval setting and increase it if appropriate. Additionally, ensure that IdP bypass domains are correctly configured in the browser setup.
Does Enterprise Browser Support Device Posture Classification?
Enterprise Browser supports device classification to differentiate between managed and unmanaged devices. Administrators can define classification criteria based on device posture attributes and apply different policies depending on the device’s classification.
What Browser Protection Policies Are Supported on Mobile?
On iOS, iPadOS, and Android, the following Browser Protection Policies are currently supported: copy, paste, and print. Watermarking and screen sharing controls on mobile are planned for upcoming releases. Desktop platforms (Windows and macOS) support the full set of Browser Protection Policies.
How Can I Troubleshoot Policy Issues?
If policies are not being applied as expected, go to netskope://policy in the Enterprise Browser address bar and click refresh to force a policy reload. This retrieves the latest configuration from the backend without requiring a browser restart.
How Can I Resolve Performance Issues or Slow Loading Times?
Check your internet connection and browse the same websites with an additional browser to verify if the issue is browser-specific. Close any unnecessary applications consuming system resources. Verify that no enterprise-level restrictions or firewalls are causing delays.
What Steps Should I Take If a Website Does Not Function as Expected?
Verify that you have connectivity to other websites and the Enterprise Browser is properly working for other cases. Use an alternative browser to identify if the issue is browser-specific. Review the policy settings to ensure there are no conflicts with the Enterprise Browser permissions.
System Requirements
Before deploying Netskope Enterprise Browser, verify that your organization’s devices meet the minimum hardware, software, and network requirements on each supported platform.
Desktop
Windows
- Operating system: Windows 10 or later
- Processor: x64 or ARM
- Installation privileges: Local administrator privileges are not required for user-driven installation (EXE or MSI to user folder). MDM-based installation may require elevated privileges depending on your deployment method.
- Disk space: At least 500MB of free space.
macOS
- Operating system: macOS 12 Monterey or later
- Processor: Apple Silicon (ARM) or Intel (x64)
- Installation privileges: Local administrator privileges are not required for user-driven installation (DMG). MDM-based PKG installation runs with the permissions provided by your MDM solution.
- Disk space: At least 500MB of free space.
Mobile
iOS and iPadOS
- Operating system: iOS 17.0 / iPadOS 17.0 or later
- Distribution: Available on the Apple App Store
Android and ChromeOS
- Android: Android 12 (Snow Cone) or later
- ChromeOS: ChromeOS 89 or later (Android App via ARC++)
- Distribution: Available on Google Play
Network Connectivity
Netskope Enterprise Browser requires access to the following endpoints. Ensure your firewall and proxy rules allow outbound HTTPS traffic to:
Endpoint | Purpose |
|---|---|
https://nsbrowser-updates.<MP>.goskope.com | Browser updates and installer downloads |
https://nsbrowser-config.<MP>.goskope.com | Tenant and user configuration retrieval |
eproxy-<tenant-name>.goskope.com:8090 | Secure proxy for internet destinations (SaaS apps) |
<tenant-name>.ebnpa.goskope.com:8090 | Secure proxy for private apps (NPA-entitled tenants only) |
Replace <MP> with your management plane hostname and <tenant-name> with your Netskope tenant name. Check “Annex: Endpoints per MP” for a detailed list of hostnames.
Security Software Compatibility
Some antivirus and endpoint detection and response (EDR) solutions may block Enterprise Browser installation or operation. To prevent conflicts, ensure your security software allows access to:
Windows paths:
- C:\Users\<USERNAME>\AppData\Local\Netskope\Browser
- C:\Users\<USERNAME>\AppData\Local\Netskope\NetskopeBrowserUpdater
- C:\Users\<USERNAME>\AppData\Local\Temp
- C:\Windows\Installer (MSI installation only)
Windows registry key:
- HKCU\Software\Netskope\Update
Other Considerations
Considerations include:
- If your tenant uses NPA feature -Netskope Private Access-, the ebnpa endpoint is required in addition to the eproxy endpoint.
- Devices behind a corporate proxy must allow direct access to the Netskope endpoints listed above; chaining through another proxy is not supported.
To learn more: Netskope Enterprise Browser Installation and Troubleshooting | Platform Support Matrix