In this scenario, which two steps must be completed to satisfy this requirement?

Recently your company implemented Zoom for collaboration purposes and you are attempting to inspect the traffic with Netskope. Your initial attempt reveals that you are not seeing traffic from the Zoom client that is used by all users. You must ensure that this traffic is visible to Netskope.

In this scenario, which two steps must be completed to satisfy this requirement? (Choose two.)
A . Create a steering exception for Zoom to ensure traffic is reaching Netskope.
B . Create a Do Not Decrypt SSL policy for the Zoom application suite.
C . Remove the Zoom certificate-pinned application from the default steering configuration.
D . Remove the default steering exception for the Web Conferencing Category.

View Answer

Answer: CD

Explanation:

To ensure that the traffic from the Zoom client is visible to Netskope, you need to remove the Zoom certificate-pinned application from the default steering configuration and remove the default steering exception for the Web Conferencing Category. A certificate-pinned application is an application that validates the server certificates against the hardcoded ones in the application. This is a security technique used to prevent man-in-the-middle attacks and secure access to the application. By default, Netskope bypasses the traffic from certificate-pinned applications and does not decrypt or inspect it3. Zoom is one of the predefined certificate-pinned applications that Netskope supports4. To enable Netskope to inspect the traffic from Zoom, you need to remove it from the steering configuration that applies to your users5. Additionally, you need to remove the default steering exception for the Web Conferencing Category, which includes Zoom and other similar applications. A steering exception is a rule that specifies the traffic that you want to bypass Netskope and go directly to the destination6. By removing this exception, you allow Netskope to steer and analyze the traffic from web conferencing applications. Therefore, options C and D are correct and the other options are incorrect.

Reference: Certificate Pinned Applications – Netskope Knowledge Portal, Certificate Pinned App (CPA) – The Netskope Community, Steering Configuration – Netskope Knowledge Portal, Steering Exceptions – Netskope Knowledge Portal