Skip to main content

Netskope Help

Netskope Client for iOS

The iOS client App is intended to offer Netskope security services in a single client for the iOS phones and tablets (iPad). The iOS Client app supports Netskope security services such as Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Netskope Private Access (NPA), and Netskope Cloud Firewall (CFW).

This document describes the various methods to install Netskope Client on an iOS device and how to configure and steer traffic to the Netskope Cloud.

Note

Supported Versions

Refer to Netskope Client Supported OS and Platform to understand the supported versions for iOS.

Prerequisites

  • iOS version 15 and above.

  • Configure steering exceptions for Apple’s traffic. To learn more, view Apple products.

  • Remove the following:

    • Existing NPA iOS Netskope Client.

    • Existing legacy Netskope iOS Profile.

Install Client

You can install Netskope Client in iOS using one of the following methods:

Email Invite

Deployments through an email invite is a  two step process:

  • iOS Profile link: This installs tenant certificates on the device. They are necessary for SSL Decrypt related functionality. This profile contains only certificates.

  • iOS Client link: Helps to find the client in the App Store and enroll it after installation.

Important

iOS Client in the email is a one time installation only link. You will receive an error message Email Invitation Expired the second time you attempt to use the link after installing Netskope Client.

After you receive the email:

  1. Check your email from Netskope Onboarding and click iOS Profile to install the profile with certificates to your iOS device.

    iOSClient_EmailInvite_102.png

  2. Click Allow for the pop-up This website is trying to download a configuration profile. Do you want to allow this?

    iOS_AllowConfigs_102.png

  3. Close the pop-up after the profile is downloaded.

  4. In your iOS device, go to Settings app > General and tap Profile Downloaded. The profile consists of the root and tenant certificates.

    iOS_InstallProfile_102.png

  5. Tap Install in the upper-right corner. Follow the installation instructions displayed on the screen.

  6. Go to Settings > General > About > Certificate Trust Settings.

  7. Tap to enable the option Enable Full Trust to Root Certificates.

    iOS_CertTrustSettings_102.png

  8. Click Continue to close the warning.

  9. Click the iOS Client link in the email invite.

    iOS_Emailinvite_102.png

  10. This opens a page with two links and perform the following steps:

    iOS_InstallClientApp_102.png

    1. Click Install to download Netskope Client from Apple Store to iOS devices. Perform the following instructions:

      1. Click Allow to add VPN configurations.

        iOS_AllowVPNConfigs_102.png

      2. Wait for the Client enrollment.

    2. Click Download iOS configurations to complete the enrollment process.

    3. Follow the enrollment steps as displayed on your screen.

      iOS_Enrollmentprocess_102.png

  11. After completing the enrollment steps, go to VPN & Device Management.

  12. Check whether VPN displays the Connected status to ensure the successful installation of the iOS configuration profile.

    iOS_VerifyVPNConnected_102.png
Verify Client Enrollment

After completing the enrollment process, you can verify the iOS Client installation on your iOS device and in the Netskope account.

On your iOS device,

  1. Verify Netskope Client's Internet Security is enabled on the Client app home page.

    iOS_verifyinstallationprocess_102.png

  2. Verify the configuration details are correct on the client app Configuration page.

    iOS_VerifyConfigdetails_102.png

On your Netskope User Interface,

  1. Log into your Netskope account.

  2. Go to Settings > Security Cloud Platform > Devices.

  3. The Devices page displays the hostname of your iOS device along with the username.

Other Deployment Options

You can install Netskope Client in iOS using one of the following MDM/EMM plaftforms:

Prerequisites

  • In the Netskope UI, go to Settings > Security Cloud Platform > Netskope Client > MDM Distribution. Download the Netskope Root Certificate. These are needed to configure Intune certificate profiles.

  • User accounts provisioned within MDM/EMM platform must match with those provisioned with the Netskope tenant.

Uninstall Netskope Client

To uninstall Netskope Client in an iOS device:

  1. Tap and hold the Netskope Client icon.

  2. A pop-up is displayed and tap Remove App.

    iOS_Uninstall_102.png

The Netskope Client application is removed successfully.

Limitations

The following are a few limitations pertaining to Netskope Client for iOS:

  • The VPN logo is visible on the status bar of your iOS device. This is an iOS limitation.

  • Per-app VPN and Global VPN coexistence is not supported.

  • NPA do not support UDP-based private apps, Secure DNS, DoH and DoT.

In this section: