These are the new features and enhancements with NPA:

Private Access Cloud

Steering Exception Bypasses for NPA

Introduced Steering Exceptions for Private Apps, allowing administrators to configure granular routing exceptions for specific IPs, subnets, domains, and hostnames. This ensures your end-users maintain seamless access to local network resources, VOIP applications, and split-domain public apps without ever needing to disable their NPA Client.

Supported minimum Client version: 134.0.0

Publisher

Software Version: 135.0

Supported Publisher Versions: 135.0, 134.0, and 133.0.

General Availability Date: March 11, 2026

Updated Kernel Versions

Platform	Kernel Version
OVA VHDX AMI VHD	5.15.0-171-generic 6.8.0-1044-azure 6.5.0-1024-aws 6.8.0-1044-azure

SHA Hash for Publisher Images

Image Type	SHA256
OVA	2a0995b621f15791b127be08ff5691a9b97dfadecf176920cb346f29ab25e51c
VHDX	e6053a00bf546975ea8e077a45adb8b32874ea14d3accb2168f735d156634a51

OVA/VHDX Hosting on the Alicloud

OVA hosting on the AliCloud: https://npa-ova.oss-cn-shenzhen.aliyuncs.com/latest/NetskopePrivateAccessPublisher.ova
VHDX hosting on the AliCloud: https://npa-ova.oss-cn-shenzhen.aliyuncs.com/latest/NetskopePrivateAccessPublisher.vhdx

Publisher Wizard Login

Starting with v134, the Publisher wizard will not automatically execute after SSH login for newly deployed Publishers, including OVA, VHDX, AWS AMI, Azure VHD, and script installations. You must enter sudo ./npa_publisher_wizard to launch the wizard. The sudo password is required for OVA and VHDX deployments.

This change will also apply to all existing publishers in the v135 release that are below v133.

Publisher to Local Broker Selection Improvements

This release introduces optimal, low-latency Local Broker selection for NPA Publishers.

The feature extends auto-reconnection to support Local Brokers.

The feature enables NPA Publishers to select the Local Brokers based on the best latency. This eliminates the burden to build and maintain complex DNS workarounds, and significantly simplifies network operations.

AnyApp Display Banner

The top banner on the RDP and SSH pages is now hidden by default and shown on hover when accessed via the AnyApp browser.

Netskope Private Access Release Notes Version 135.0