Desktop Upgrade to Enterprise Browser v1.5.6

Upgrade v1.5.6 | 146.0.7680.214 is now available for Netskope Enterprise Browser.

Desktop Platforms: Windows (x86, ARM), MacOS

Main updates:

Screen Share Guard (Beta)
File Downloads Control – Restrict and Encrypt (Beta) NOTE:
To facilitate the classification of encrypted downloads on multi-profile users, this version will change the default Downloads folder to a new folder with the profile name. For example, /home/<user>/Downloads/<profile-name> instead of /home/<user>/Downloads
Control Text Input (Beta)
Save As (Beta)
Inform users about the restrictions that apply
macOS MDM (PKG)
InfoBar for Private Clipboard
Data Masking (Beta)
Security patches available until Jun 3, 2026

macOS MDM support (PKG)

This update introduces a native macOS installer package to ensure a seamless administrative experience.

Standardized PKG Installer: A native macOS .pkg file is now generated automatically in our CI/CD pipeline, ensuring every release is ready for enterprise distribution.
MDM Compatibility: Fully optimized for major providers (Jamf, Kandji, Intune) to support Silent Installation, enabling zero-touch deployment without end-user prompts.
Validated Deployment Scenarios: Verified workflows for fresh installs, in-place upgrades from manual versions, and remote configuration via MDM profiles (.plist).
Parity with Windows: Provides IT teams with a consistent deployment logic and documentation set across both Windows (MSI) and macOS (PKG) for hybrid fleet management

Enterprise Browser Restrictions and Controls Enhancement

This update introduces two primary UI components designed to keep users informed about their security posture without interrupting their browsing experience.

1. Page-Level “Policy” Button (Address Bar)

A new “Policy” button has been added to the navigation bar, positioned immediately before the “Site Information” (lock) icon.

Real-time Context: When clicked, it displays a popup listing the specific Netskope policy name (rulename) governing the current site.
Action Visibility: It explicitly lists which browser controls are currently Blocked or Enabled, including:
- Copy / Paste operations
- Print operations
- Screen capture
- Watermarking
- New: Save As, File Downloads, Data Masking, and Text Input Suppression.
Status: If no restrictions apply, it clearly states: “All actions allowed.”

2. Profile-Level Configuration (Profile Menu)

The profile popup (accessed by clicking the user icon in the toolbar) has been expanded to include a “General Configuration” section. This surfaces the status of key browser-wide policies:

Password Manager: Enabled/Disabled
Developer Tools: Enabled/Disabled
Notifications & Popups: Enabled/Disabled
Media Access: Audio/Video input permissions
New: Intelligent Tab Sharing status

Sandboxed Clipboard Notification Infobar

When “Sandboxed Clipboard” settings were active, users were often unaware why copy/paste actions between the Enterprise Browser and external applications were failing, leading to confusion and perceived “bugs.”

This feature proactively notifies users when clipboard operations are blocked by administrator policies using a non-intrusive infobar.

Key Capabilities:

Contextual Notifications: Displays specific messages based on the block direction:
- Copying out of Enterprise Browser: “Pasting data outside of this browser has been blocked by administrator policies.”
- Pasting into Enterprise Browser: “Copying data from outside of this browser has been blocked by administrator policies.”
Supports all Sandboxed Clipboard modes, including full Sandbox, Read-only, and Write-only restrictions.

Screen Share Guard (BETA)

This is a Beta feature. Contact Netskope Support or your sales representative to enable this feature.

Netskope introduces Screen Share Guard, a privacy-first security layer designed to prevent the accidental exposure of sensitive corporate or personal data during virtual meetings (e.g., Zoom, Teams, Google Meet).

Key Capabilities:

Real-Time Content Analysis: The browser automatically analyzes the active tab’s content upon page load. Using a hybrid engine—combining heuristic regex pattern matching with a lightweight ML core—it determines if a page contains sensitive info like financial data, credentials, or PII.
Privacy Overlay: If high-risk content is detected, the browser applies an opaque gray mask over the page content. This prevents the data from being visible to meeting participants while keeping the tab title and URL visible for the presenter’s navigation.
User-Centric Controls: Users maintain explicit control through a warning dialog. They can choose to “View Page” (accepting the risk for that domain) or “Keep Protected.” Manual “Show/Hide” toggles are also available via the tab’s context menu.
Hybrid Extraction: Supports both standard HTML web pages and large PDF documents (up to 100MB) using an Accessibility Tree (AXTree) snapshotting strategy for high-performance text extraction.
Smart Allowlisting: Includes a built-in allowlist of 100+ low-risk domains (e.g., search engines, news, reference sites) to minimize friction and prevent false positives during general browsing.

File Download Control – Restrict and Encrypt (BETA)

This is a Beta feature. Contact Netskope Support or your sales representative to enable this feature.

Netskope introduces a high-performance File Download Control engine for the Enterprise Browser. This update moves beyond simple binary (allow/block) actions to a sophisticated streaming architecture that enables real-time encryption.

Key Capabilities:

File Download Protection: Supports “Block, Allow, or Encrypt” logic for files by processing data directly in the browser renderer.,eliminating proxy-induced latency.
Automatic Local Encryption: Admins can enforce a policy that automatically encrypts files as they are saved to the device, ensuring sensitive data remains protected even if it needs to live on unmanaged storage. EB will add the .eb file extension to the original file.
Per-Profile Encryption: Encrypted files can only be opened within the same Enterprise Browser User profile that performed the download.
Seamless decryption on re-upload: Encrypted downloads are automatically decrypted when uploaded back through the browser via file chooser or drag-and-drop. Supported encrypted files can also be viewed within the corresponding Enterprise Browser profile (like PDFs, Images, etc.)
Unified Policy Framework: Download block is also natively integrated with “Save As” options. Restricting a download also covers “Save Page As”, “Save Link as”, “Save Image As” items as well, to close common bypass loops.
Integrated Info Bar: A native browser notification bar provides real-time status and justification prompts during the download and encryption / decryption lifecycle.

Browser Protection Policies – Control Text Input (BETA)

This is a Beta feature. Contact Netskope Support or your sales representative to enable this feature.

Netskope introduces Text Input Suppression for the Enterprise Browser, a new Browser Protection control that renders sensitive web pages effectively read-only. Users can continue to view and navigate applications, but attempts to add, modify, or replace text in editable regions are rejected (with a user notification via the info bar) thereby closing a common data-exfiltration path without breaking the ability to read or scroll.

Key Capabilities:

Universal Input Coverage: Enforced inside the renderer’s editing pipeline so suppression applies uniformly across physical keyboards, on-screen keyboards, multi-lingual IMEs (Chinese, Japanese, Korean), voice dictation, drag-and-drop into editable regions, and clipboard paste.
Spellcheck and Autocorrect Aware: Spelling indicators continue to render as non-mutating decorations, but autocorrect and “Replace with suggestion” actions are blocked — the underlying text is preserved exactly as rendered.
Autofill Protection: Browser autofill is suppressed, preventing addresses, credit cards, and saved form values from populating fields under a protected policy.
Canvas Text Coverage: For applications that use <canvas> for editing (e.g. Figma, browser-hosted code editors), text-producing input is filtered. Non-text canvas interactions ( like drawing, map pan/zoom, HTML5 games) are intentionally left untouched to preserve web compatibility.
Site Isolation Aware: Enforcement is per-frame, so the policy is automatically respected inside cross-origin iframes. Users cannot bypass the lock by interacting with embedded third-party content.
Tab and Focus Preserved: Keyboard navigation (Tab / Shift+Tab) and programmatic focus continue to work normally to avoid regressing accessibility flows.

Browser Protection Policies – Control “Save As” (BETA)

This is a Beta feature. Contact Netskope Support or your sales representative to enable this feature.

The “Save As” Control policy allows administrators to govern whether users can save web content to their local devices. This feature integrates directly into the existing “Enterprise Browser Protection” policy pipeline, alongside existing controls like Copy, Print, and Screenshot.

Key Capabilities:

Comprehensive UI Coverage: Blocks “Save As” actions across all major entry points:
Main Menu: File -> Save page as...
Context Menu (Right-click): “Save image as…”, “Save link as…”, “Save audio/video as…”, and “Save video frame as…”
PDF & Plugins: Blocks “Save as…” and “Download” buttons within the embedded PDF viewer.
Keyboard Shortcuts: Governs Ctrl+S (Windows/Linux) and Cmd+S (macOS).
Granular Policy Enforcement: Policies are applied on a per-domain basis
User Feedback: When an action is blocked, users receive an immediate infobar notification, ensuring they understand why the action was restricted without interrupting their workflow.
Tenant-Level Fallback: Admins can define a default “fallback” behavior (Allow or Block) for domains where a specific policy hasn’t been defined.

Browser Protection Policies – Data Masking (BETA)

This is a Beta feature. Contact Netskope Support or your sales representative to enable this feature.

Enterprise Browser introduces Real-Time Data Masking, a shippable beta security tool that automatically redacts sensitive info (like credit card numbers) within the browser renderer.

Developed across two major milestones, the system combines a dynamic rendering engine—which prevents visual latency in modern web apps—with a robust backend rollout control to ensure a stable deployment.

It also includes “Red Pixel” testing to guarantee that sensitive data is never momentarily visible before being masked.

During Beta this feature is not configurable via the WebUI.

Enterprise Browser Release Notes July 15, 2026

Enterprise Browser Release Notes July 15, 2026