Updated on August 28, 2024

Netskope Client for iOS

Netskope Client for iOS

The iOS client App is intended to offer Netskope security services in a single client for the iOS phones and tablets (iPad). The iOS Client app supports Netskope security services such as Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Netskope Private Access (NPA), and Netskope Cloud Firewall (CFW).

This document describes the various methods to install Netskope Client on an iOS device and how to configure and steer traffic to the Netskope Cloud.

Supported Versions

Refer to Netskope Client Supported OS and Platform to understand the supported versions for iOS.

Prerequisites

  • iOS version 15 and above.

  • Configure steering exceptions.

    • Refer Apple Support article to configure steering exceptions for traffic from Apple.

Client Installation Methods

You can install Netskope Client in iOS using one of the following methods:

Email Invite

Deployments through an email invite is a  two step process:

  • iOS Profile link: This installs tenant certificates on the device. They are necessary for SSL Decrypt related functionality. This profile contains only certificates.
  • iOS Client link: Helps to find the client in the App Store and enroll it after installation.
– iOS Client in the email is a one time installation only link. You will receive an error message Email Invitation Expired the second time you attempt to use the link after installing Netskope Client.
– If you are unable to see the link to download Netskope Client for iOS in the email invite, use the default email template that includes the link to download Netskope Client for iOS. 

After you receive the email:

  1. Check your email from Netskope Onboarding and click iOS Profile to install the profile with certificates to your iOS device.
    iOSClient_EmailInvite_102.png
  2. Click Allow for the pop-up This website is trying to download a configuration profile. Do you want to allow this?
    iOS_AllowConfigs_102.png
  3. Close the pop-up after the profile is downloaded.
  4. In your iOS device, go to Settings app > General and tap Profile Downloaded. The profile consists of the root and tenant certificates.
    iOS_InstallProfile_102.png
  5. Tap Install in the upper-right corner. Follow the installation instructions displayed on the screen.
  6. Go to Settings > General > About > Certificate Trust Settings.
  7. Tap to enable the option Enable Full Trust to Root Certificates.
    iOS_CertTrustSettings_102.png
  8. Click Continue to close the warning.
  9. Click the iOS Client link in the email invite.
    iOS_Emailinvite_102.png
  10. This opens a page with two links and perform the following steps:
    iOS_InstallClientApp_102.png
    1. Click Install to download Netskope Client from Apple Store to iOS devices. Perform the following instructions:
      1. Click Allow to add VPN configurations.
        iOS_AllowVPNConfigs_102.png
      2. Wait for the Client enrollment.
    2. Click Download iOS configurations to complete the enrollment process.
    3. Follow the enrollment steps as displayed on your screen.
      iOS_Enrollmentprocess_102.png
  11. After completing the enrollment steps, go to VPN & Device Management.
  12. Check whether VPN displays the Connected status to ensure the successful installation of the iOS configuration profile.
    iOS_VerifyVPNConnected_102.png
Verify Client Enrollment

After completing the enrollment process, you can verify the iOS Client installation on your iOS device and in the Netskope account.

On your iOS device,

  1. Verify Netskope Client’s Internet Security is enabled on the Client app home page.
    iOS_verifyinstallationprocess_102.png
  2. Verify the configuration details are correct on the client app Configuration page.
    iOS_VerifyConfigdetails_102.png

On your Netskope User Interface,

  1. Log into your Netskope account.
  2. Go to Settings > Security Cloud Platform > Devices.
  3. The Devices page displays the hostname of your iOS device along with the username.

Other Deployment Options

You can install Netskope Client in iOS using one of the following MDM/EMM plaftforms:

Prerequisites
  • In the Netskope UI, go to Settings > Security Cloud Platform > Netskope Client > MDM Distribution. Download the Netskope Root Certificate. These are needed to configure Intune certificate profiles.
  • User accounts provisioned within MDM/EMM platform must match with those provisioned with the Netskope tenant.

Netskope Client Uninstallation

To uninstall Netskope Client in an iOS device:

  1. Tap and hold the Netskope Client icon.
  2. A pop-up is displayed and tap Remove App.
    iOS_Uninstall_102.png

The Netskope Client application is removed successfully.

Share Logs From iOS App

This section explains how to collect logs for Netskope Client for iOS using an iOS app.

  1. On your iOS device, go to Client app home page.

  2. Tap the Settings icon.

  3. On the Settings screen, tap Share Log.

  4. You can now share logs to the desired location as displayed on your screen.

Limitations

The following are a few limitations pertaining to Netskope Client for iOS:

  • The VPN logo is visible on the status bar of your iOS device. This is an iOS limitation.
  • Per-app VPN and Global VPN coexistence is not supported.
  • NPA do not support UDP-based private apps, Secure DNS, DoH and DoT.
  • Do not support user notifications in iOS.
Share this Doc

Netskope Client for iOS

Or copy link

In this topic ...