CGNAT Address Support for Local DNS Resolution
When a private app is published via Netskope Private Access, the Netskope Client will resolve DNS to a synthetic IP address. This would be the case when Publisher DNS is disabled. With this new feature, Private Access now reserves CGNAT addresses for local DNS resolution. This feature is enabled by default on all new tenants created after release 101. For existing tenants, users should contact Support to enable this functionality.
Netskope suggests that you do not enable this functionality if the Client CPE or the Private Apps are assigned CGNAT IPs. When this functionality is enabled for an existing tenant, the Client needs to restart to begin operating with CGNAT. Until then, Clients will continue to work in the existing manner.