Service Description
High-Capacity Tunnels steer customer traffic to Netskope NewEdge Data Centers (DCs), also known as Points of Presence (POP), from customer infrastructure through:
- IPSec tunnels supporting tunnel bandwidth equal to or greater than 1 Gbps
- GRE tunnels supporting tunnel bandwidth greater than 1 Gbps.
Definitions and Units of Measure
A Tunnel is a virtual point-to-point and dedicated connection from a customer’s infrastructure to a NewEdge DC, using IPSec or GRE protocols.
The Tunnel Bandwidth is the sum of upload and download data transfer rates.
Units of Measure
- Tunnel: One Subscription Unit is one pair of active-standby Tunnels. Tunnels are only purchased in pairs of active-standby tunnels.
- Tunnel Bandwidth: Measured in Gigabits per second (Gbps), representing the maximum allowable aggregate (sum of upload and download) data transfer rate in the active Tunnel.
Entitlement
Subscription Period: As set forth in a customer’s Order.
Licensing Model: One Subscription Unit provides access to an active-standby IPSec or GRE Tunnel. Each Tunnel includes a maximum amount of Tunnel Bandwidth as per the entitled Subscription. Only one Tunnel will be active at any given point in time from the pair of active-standby Tunnels.
Licensing Example: One Subscription Unit of “IPSec 2 Gbps” :
- Provides ability to configure one IPSec tunnel to primary NewEdge DC and another tunnel to failover NewEdge DC.
- Provides entitlement to send up to 2 Gbps, upload + download, in an active-standby manner over the active IPSec Tunnel from the pair of active-standby tunnels.
- Does NOT provide entitlement to send 2 Gbps, upload + download, in Active-Active manner over both the IPSec Tunnels at the same time.
- Does NOT provide entitlement to send 2 Gbps in each direction, i.e., 2 Gbps upload and 2 Gbps download, over any of the IPSec Tunnels.
- Does NOT provide entitlement to configure Tunnels to additional Netskope DCs, beyond the primary and failover DCs.
- Does NOT provide entitlement to GRE or other types of Tunnels.
Pooling
Tunnel entitlement is assigned at the tenant level and may not be shared among customer’s other tenants.
Tunnel Bandwidth entitlement is assigned per Tunnel and may not be shared among multiple Tunnels or customer’s other tenants.
Usage Monitoring
Netskope will continually monitor the customer’s actual usage and notify the customer when the customer exceeds the Tunnel Bandwidth entitlement.
Measurement and Enforcement
Measurement Methodology: Netskope continually measures customer Tunnel Bandwidth based on the peak throughput of Gbps processed (upload and download) across the active Tunnel.
Overage Notification: Netskope continually will monitor traffic throughput and notify customers in case of any excess usage.
Service Limitations: Netskope reserves the right to constrain throughput should usage exceed the entitled Tunnel Bandwidth. Exceeding Tunnel Bandwidth entitlement may result in service degradation or traffic failure.
Overage Remediation: If the customer’s Tunnel throughput exceeds the entitled Tunnel Bandwidth more than 5% for a continuous duration of more than 5 minutes, two times during any rolling 12 month period, the customer is required to purchase the requisite incremental Base Allocation package(s) or upgrade to the applicable Tunnel Bandwidth tier within the ensuing 30 days.
Customer Records: The customer may be required to provide system data, audit logs, or written confirmation of Bandwidth usage upon reasonable request by Netskope for verification purposes.
Exclusions
Active-Active: The Subscription does not provide Active-Active entitlement for purchased bandwidth over both the Tunnels at the same time.
Tunnel Limit: The Subscription does not provide tunnels to additional tertiary or more NewEdge DCs, beyond the primary and failover DC.
Availability: High-Capacity Tunnels are available in select NewEdge DCs but not guaranteed to be available across all NewEdge DCs.