14:I[57429,["/_next/static/chunks/1quy3rt9yzpdl.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/16wkgyg6k45ib.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/252p5oe_wmfp7.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/3d7iw7rwuckjm.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/2y2gkwlhyx4c8.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/129tlyvqsdtp_.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/3g7gte5v74_3p.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/2ujfuc0z417cf.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/2clonc1g8s8i6.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/0uuiqbtac-3k_.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/2i399vj0k8vm_.js?dpl=0a06109524facd17526c66b8424657462f46c536"],"default"] 18:I[27201,["/_next/static/chunks/1quy3rt9yzpdl.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/16wkgyg6k45ib.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/252p5oe_wmfp7.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/3d7iw7rwuckjm.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/2y2gkwlhyx4c8.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/129tlyvqsdtp_.js?dpl=0a06109524facd17526c66b8424657462f46c536","/_next/static/chunks/3g7gte5v74_3p.js?dpl=0a06109524facd17526c66b8424657462f46c536"],"IconMark"] 15:T29fd,

Here is the list of the new features and enhancements.

Private Access Cloud

DNS over TCP Parity for Private Apps (Windows and macOS)

The Netskope Client now handles DNS queries for private apps the same way whether they arrive over UDP or TCP. Before this release, a DNS query retried over TCP (for example, after a truncated UDP response, or by browsers and resolvers that prefer TCP) could get a different result from the same query over UDP. That could cause intermittent private app access failures, failed service discovery, or traffic being steered incorrectly.

With this release, DNS-over-TCP queries for private apps follow the same rules as UDP:

A, AAAA, HTTPS, and PTR queries are answered locally with the NPA stub IP unless Publisher DNS or DNS validation applies. If either applies, the query is sent to the Publisher.
SRV, MX, TXT, CNAME, NS, SOA, and CERT queries are sent to the Publisher, as they are over UDP. This covers Active Directory service discovery (for example _ldap._tcp, _kerberos._tcp, and _gc._tcp).
Wildcard App Validation and Publisher DNS Records Validation now apply to DNS over TCP. When validation is enabled, the Client keeps the Publisher’s full response structure, including CNAME chains, and rewrites only the A record addresses to the NPA stub IP.
Queries for unsupported record types, or queries that don’t match a private app, are no longer reset by the Client. They are passed through or handled the same way as over UDP.

Requirements: Netskope Client R143 or later on Windows or macOS. No configuration changes are needed.

Ping Support for Legacy Applications ^Beta

Netskope Private Access adds compatibility for legacy applications and scripts that require a ping response before establishing a TCP or UDP connection to a private application server. Ping requests travel through the NPA tunnel to the destination server, and the server’s actual echo replies return to the application. Access remains subject to NPA policy.

This capability supports Windows clients and standard IPv4 ping requests and replies using default payload sizes. Enablement is managed by Netskope per tenant. Other ICMP message types, custom packet sizes, fragmented pings and traceroute are outside the supported scope.

Ping timings reflect the selected ZTNA service path and the behavior of the outer TLS-over-TCP tunnel, including retransmissions. When Publisher DNS is disabled, additional destination DNS resolution can delay the initial ping. Path selection can also vary between destinations and connections. These results are intended for application compatibility and should not be used to measure network latency or packet loss, or determine the nearest server. Learn more.

Support limitation: Client-side ping results for NPA private applications are not accepted as diagnostic evidence in Netskope Support cases. For troubleshooting, provide Publisher logs and Publisher-side diagnostics, including ping to the application server, using Collect Logs from a Publisher, where enabled.

Minimum supported software versions: R144 (Windows), R143 (Local Broker), R143 (Publisher)

Glob Pattern Matching for Private Applications

Netskope Private Access now supports glob patterns in private app host definitions. Administrators can use * to match zero or more characters, including dots, and ? to match exactly one non-dot character. This simplifies application definitions for dynamic cloud environments, such as Kubernetes and AWS ECS, by reducing the need to maintain individual hostnames.

For example, task-*.ecs.internal matches hosts with dynamically generated task IDs, while node?.prod.corp matches node1.prod.corp but not node12.prod.corp. Patterns can also match multiple domain levels: db.*.corp matches both db.us-west-2.corp and db.us-west-2.rds.corp. Patterns must include a dot and cannot contain wildcards in the final domain label.

Glob patterns are supported for Netskope Client and Netskope Enterprise Browser access. Clientless Browser Access is not supported. Contact Netskope Support to enable this feature for your tenant.

Documentation: Use Glob Patterns in Private App Definitions
Minimum Supported Client version: R142 (Windows/MacOS/iOS), R144 (Android)

Publisher

Software Version: 143.0

Supported Publisher Versions: 143.0, 142.0, and 140.1.

General Availability Date: November 11, 2026

Updated Kernel Versions

Platform	Kernel Version
OVA VHDX AMI VHD QCOW2	5.15.0-202-generic 6.8.0-1070-azure 6.5.0-1024-aws 6.8.0-1070-azure 5.15.0-202-generic

SHA Hash for Publisher Images

Image Type	SHA256
OVA	c8a15c1c82c5d2f0571a5f7f5291baa861497011c40aac439b0b85f7ec9b6711
VHDX	9f5b370d71c6ad41b0fa7165e1161e5003e523d488d6c1d098f9d0417a88034b
QCOW2	9e10067e37cb61c3af39cb2c706d43f4bd3d1ef2a5be95213c86a94c6718c89b

OVA/VHDX Hosting on the Alicloud

OVA hosting on the AliCloud: https://npa-ova.oss-cn-shenzhen.aliyuncs.com/latest/NetskopePrivateAccessPublisher.ova
VHDX hosting on the AliCloud: https://npa-ova.oss-cn-shenzhen.aliyuncs.com/latest/NetskopePrivateAccessPublisher.vhdx
QCOW2 hosting on the Alicloud: https://npa-ova.oss-cn-shenzhen.aliyuncs.com/latest/NetskopePrivateAccessPublisher.qcow2

16:T10df,

Here are the fixed issues.

Private Access Cloud

Issue Number	Description
1077431	Fixed an issue where NPA tunnels stayed blocked after a user account was temporarily removed and restored in the backend, like after an IdP group update or re-provisioning. NPA now retries enrollment automatically, so users no longer need to restart the Netskope Client or reboot the endpoint.
1292338	Fixed an issue where traffic meant to bypass NPA was routed through it instead when private application segments disconnected frequently.
1292392	Fixed an issue where the Private Access tunnel repeatedly disconnected and reconnected when a private app segment included a Local Broker’s IP address.

Publisher

Issue Number	Description
1331022	Fixed an issue where some users couldn’t reach private apps through a Publisher in SNAT mode because their traffic was given an address that conflicted with the Publisher’s own tunnel interface.
1309429	Fixed an issue where `npa_publisher_wizard` exited with code 0 even when Publisher registration failed. Token-based and AWS auto-registration now exit with a non-zero code on failure, so automation can detect it.

17:T7fb,

Here are the known issues.

Private Access Cloud

Issue Number	Description
1153393	NPA connectivity failures may occur following certificate rotation events on affected tenants. The Netskope Gateway may be unable to establish TLS tunnels if certificate retrieval encounters errors or if incorrect certificates are selected during tunnel setup. We have identified the root cause and fixes are targeted for an upcoming release to improve certificate fetch reliability, as well as certificate selection behavior.

Issue Number

Description

1153393

NPA connectivity failures may occur following certificate rotation events on affected tenants. The Netskope Gateway may be unable to establish TLS tunnels if certificate retrieval encounters errors or if incorrect certificates are selected during tunnel setup. We have identified the root cause and fixes are targeted for an upcoming release to improve certificate fetch reliability, as well as certificate selection behavior.

7:["$","$L14",null,{"url":"fixed-issues-in-netskope-private-access-143-0","searchParams":"","initialData":{"meta":{"title":"Netskope Private Access Release Notes Version 143.0 - Netskope Technical Documentation","description":"Published on: November 11, 2026 We are excited to announce our release updates! Here are the latest features, fixed issues, and known issues in this release.","canonical":"https://docs.netskope.com/en/netskope-private-access-release-notes-version-143-0/","robots":"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1","og:locale":"en_US","og:type":"article","og:title":"Netskope Private Access Release Notes Version 143.0 - Netskope Technical Documentation","og:description":"Published on: November 11, 2026 We are excited to announce our release updates! Here are the latest features, fixed issues, and known issues in this release.","og:url":"https://docs.netskope.com/en/netskope-private-access-release-notes-version-143-0/","og:site_name":"Netskope Technical Documentation","article:publisher":"","article:modified_time":""},"status":200,"post_status":"publish","id":126351,"title":"Netskope Private Access Release Notes Version 143.0","path":"/fixed-issues-in-netskope-private-access-143-0","last_modified_on":"November 10, 2026","breadcrumbs":[{"id":0,"title":"Home","link":"/"},{"id":34141,"title":"Netskope Private Access","link":"netskope-private-access"},{"id":126351,"title":"Netskope Private Access Release Notes Version 143.0","link":"https://docs.netskope.com/en/netskope-private-access-release-notes-version-143-0/","active":"1"}],"type":"release","rn_is_jira":false,"release_note":{"product_id":"34141","sub_title":"143.0"},"content":"

Published on: November 11, 2026

We are excited to announce our release updates! Here are the latest features, fixed issues, and known issues in this release.

\n\n\n\n","rn_filter":"all","sections":{"new":{"title":"What's New","content":"$15"},"fixed":{"title":"Fixed Issues","content":"$16"},"known":{"title":"Known Issues","content":"$17"}},"warning_message":"","current_user_id":0,"current_user_is_admin":false,"post_author_id":7,"current_user_is_rn_lead":false}}] a:null f:[["$","title","0",{"children":"Netskope Private Access Release Notes Version 143.0 - Netskope Technical Documentation"}],["$","meta","1",{"name":"description","content":"Published on: November 11, 2026 We are excited to announce our release updates! Here are the latest features, fixed issues, and known issues in this release."}],["$","meta","2",{"name":"robots","content":"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1"}],["$","link","3",{"rel":"canonical","href":"https://docs.netskope.com/en/netskope-private-access-release-notes-version-143-0/"}],["$","meta","4",{"property":"og:title","content":"Netskope Private Access Release Notes Version 143.0 - Netskope Technical Documentation"}],["$","meta","5",{"property":"og:description","content":"Published on: November 11, 2026 We are excited to announce our release updates! Here are the latest features, fixed issues, and known issues in this release."}],["$","meta","6",{"property":"og:url","content":"https://docs.netskope.com/en/netskope-private-access-release-notes-version-143-0/"}],["$","meta","7",{"property":"og:site_name","content":"Netskope Technical Documentation"}],["$","meta","8",{"property":"og:locale","content":"en_US"}],["$","meta","9",{"property":"og:type","content":"article"}],["$","meta","10",{"name":"twitter:card","content":"summary"}],["$","meta","11",{"name":"twitter:title","content":"Netskope Private Access Release Notes Version 143.0 - Netskope Technical Documentation"}],["$","meta","12",{"name":"twitter:description","content":"Published on: November 11, 2026 We are excited to announce our release updates! Here are the latest features, fixed issues, and known issues in this release."}],["$","link","13",{"rel":"icon","href":"/_next/static/media/favicon-production.0ugm7_3h94jm2.png?dpl=0a06109524facd17526c66b8424657462f46c536"}],["$","$L18","14",{}]]

Private Access Cloud

DNS over TCP Parity for Private Apps (Windows and macOS)

Ping Support for Legacy Applications Beta

Glob Pattern Matching for Private Applications

Publisher

Updated Kernel Versions

SHA Hash for Publisher Images

OVA/VHDX Hosting on the Alicloud

Private Access Cloud

Publisher

Private Access Cloud

Ping Support for Legacy Applications ^Beta