Creating a Custom Certificate Pinned Application

If you want to bypass web traffic from certain applications from the Netskope cloud, you can add them as a custom certificate pinned application.

To create a custom certificate pinned application:

After creating your custom certificate pinned app, you can add it as an exception for your steering configuration.

Priority Order for Certificate Pinned Applications With Similar Configurations

If there are two certificate pinned applications, one with Exact process definition and another with RegEx process definition, Netskope Client first tries to match the process name with a Certificate Pinned application having the ‘Exact’ process definition. If no match exists, it considers the app with Regex definition.

For example, there are two Certificate Pinned applications configured for Windows:

• “ABC” with ‘Exact’ process definition “curl.exe”.

  

• “XYZ” with ‘Regex’ process definition “cur(.*).exe”.

  

When an admin runs a process “curl.exe <url>”, “ABC” takes precedence over “XYZ” as it matches with the Exact process name “curl.exe”.

Configuring Steering Configuration Exceptions from Certificate-Pinned Applications

Use Steering Config Exceptions option to apply created Certificate-pinned applications to steering configurations directly from Certificate-Pinned app without navigating to the Steering Configuration webUI. This functionality simplifies and reduces the steps to apply certificate-pinned application exceptions across multiple steering configurations.

With this option, you can:

• Direct assignment of steering configuration to a Certificate-Pinned application.

• Modify exceptions options and Advanced options directly from the steering configurations using the Action column.

• View the certificate-pinned apps configured for each steering configuration.

You can use either one of the following methods to add steering configuration exceptions:

• From Certificate-Pinned Application UI.

• Directly after creating a new Certificate-Pinned Application.

From Certificate-Pinned Application User Interface(UI)

To configure steering exception configuration from Certificate-Pinned Apps:

1. Click the ellipsis(…) for a configuration where you want to add the steering configuration exception.

   

2. Click Steering Config Exceptions.

   

3. This displays the Steering Config Exceptions screen.

   

4. Add or modify exceptions from the Action column. Click the edit icon and it navigates to the New Exceptions window. For steering configurations where the actions are already set, it navigates to the Edit Exception window.

   

After Creating a New Certificate-Pinned Application

After you create a new Certificate -Pinned Application, the screen displays a successful message and an option to edit the steering config exception to bypass it. This navigates you to the Steering Config Exception screen that allows you to configure the exception as described in the previous section.

Filter Steering Configurations

Steering Configuration Exceptions also gives you the ability to filter steering configurations with one of the following:

• Dynamic Steering

• Actions

To use the filter options:

1. Click +Add Filter to view search results based on the options that you choose in the filter:

2. Click Dynamic Steering to display steering configurations with dynamic steering enabled. Choose one of the following dynamic steering options:

   • Off

   • On-Premise

   • Off-Premise

     The steering configurations with dynamic steering enabled displays On-Premises or Off-Premises in brackets next to the steering configuration name. If you want to view steering configurations without dynamic steering, choose Off.

     You can only filter steering configurations with dynamic steering enabled. You cannot apply or enable dynamic steering to a steering configuration. Go to Steering Configuration to do so.

     

3. Click Actions to filter steering configurations with one of the following:

• Bypass

• Block

• Mixed

• Not Configured