Service Description
Netskope Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) Inline, and Next-Generation Secure Web Gateway (NG-SWG) and other add-on products are inline security services that inspect and enforce policy on user traffic transiting the Netskope NewEdge network, providing visibility and control across web, cloud, and application traffic.
Definitions and Units of Measure
Definitions
A User is defined as each individual that (a) is authorized by the customer to use the customer’s systems (including the customer’s network, cloud services, and Internet connections), and (b) whose use of such systems is monitored by, or accessed by use of, the Services.
A Light User means a User with additional capacity limitations as set forth in the Licensing Model section below.
Authenticated Traffic means when traffic is generated by a User or Device that has identity attached to it, is considered Authenticated Traffic measured in GB or MB.
Unauthenticated Traffic means when traffic is generated by a User or Device and does not have identity attached to it, is considered Unauthenticated Traffic in GB or MB.
Units of Measure
User and Light User: Each User or Light User counts as one Subscription Unit and cannot be shared between multiple Users.
Authenticated Traffic: Measured in gigabytes (GB) or megabytes (MB); represents the volume of traffic processed per calendar month.
Unauthenticated Traffic: Measured in gigabytes (GB); represents the volume of traffic processing per calendar Month.
Entitlement
Subscription Period: As set forth in a customer’s order.
Licensing Model:
User-Based: Each Subscription Unit entitles the customer to one (1) User or Light User with a fixed allocation of traffic processing per calendar month as defined in the applicable SKU description or below.
The traffic allocation across different Inline services are:
- Max and Prime: Foundational & Advanced Inline Packages include 16 GB of Authenticated Traffic and 1 GB unauthenticated traffic allocation per User per month.
- Prime Light: This inline package includes a per Light User traffic allocation of 1 GB per month and no unauthenticated traffic allocation.
Unauthenticated Traffic-Based: Each Subscription Unit entitles the customer to one (1) GB of unauthenticated traffic per month based on their desired protection level. This can be purchased separately or as an add-on to the User based Inline Packages.
Pooling
User and traffic allocation entitlement is assigned at the account level and may be shared across multiple of the Customer’s tenants and is not enforced on a per-User basis.
Non-Rollover
Any unused traffic allocations at the end of the calendar month do not roll over to the subsequent period.
Add-On Packages
Customers may purchase incremental Subscription Units to increase their entitlements for Users, Light Users or traffic (via “add-on” packages) or additional functionality at any time during the Subscription Period, by placing an additional Order.
Any add-on packages purchased are subject to traffic limits as defined in the SKU descriptions and will not add additional capacity to the caps listed above.
Usage Monitoring
Customers may monitor their User count and retrieve a list of entitled Users in their Netskope tenant WebUI at the tenant level. Netskope will also notify the Customer via the account team when the number of Users or volume of traffic processing exceeds the licensed quantity.
Measurement and Enforcement
Measurement Methodology
Netskope measures User usage based on the number of unique Users and Light Users observed over a rolling 90-day period.
Netskope measures traffic consumption based on the cumulative volume of traffic processed for all Users across all tenants in the customer account over a calendar month.
Overage Notification
Netskope will notify the Customer via in-tenant indicators or the account team in case of any excess usage.
Service Limitations
If service usage exceeds the purchased entitlement, Netskope may limit functionality until the Customer acquires additional licenses, or until the data entitlement resets at the start of the next calendar month.
Overage Remediation
For Users and Lights Users, if the Customer’s number of Users or Light Users exceed the quantity of Users or Light Users entitlement, the Customer must, within 30 days of notification:
- License additional User packages sufficient to cover the excess Users for the remainder of the Subscription Period; or
- Cease usage of the services by Users in excess of purchased User quantities.
During the Service subscription period, Netskope will determine if actual Light Users exceed the capacity limitations set forth in the applicable product description. If actual capacity for any Light Users exceeds the capacity limitation, the customer is required within 30 days after notice to either:
- Purchase upgrades to Users for all Light Users exceeding the capacity limitations, or
- Immediately cease utilization of the excess capacity for all Light Users exceeding the purchased quantity, or a combination of both
For traffic processing, if the Customer has exceeded the purchased entitlement by more than 10% for any two (2) consecutive months during the Subscription Period, then within 30 days of notification, the Customer is required to purchase:
- Additional Users to cover the highest monthly Authenticated Traffic usage during that period, or
- Additional Unauthenticated Traffic packages to cover the highest monthly Unauthenticated traffic usage during that period.
Customer Records
The Customer may be required to provide written information or confirmation of the number of Users and volume of data processing upon reasonable request by Netskope.