Set up the Netskope Security Cloud

Integrate prisma SD-WAN with Netskope to have a lightweight remote office hardware footprint along with a full suite of application-specific security policies.

Set up the Netskope security cloud.

1. Log in to Netskope.

2. Navigate to Settings.

3. Select Security Cloud Platform.

4. Select IPSec.

5. Add a new IPsec tunnel.
   1. Click Add New Tunnel.

   2. Enter a name for the tunnel.
   3. Enter the IP address or the unique FQDN of the Prisma SD-WAN tunnel endpoint.
   4. Choose the geographically closest Netskope POP as the Primary and choose a failover Netskope POP.
   5. Enter a Pre-Shared key.
   6. Configure an encryption cipher.
   7. Configure the Maximum BW to be used by the IPsec tunnel.
      No rate limiting happens based on the configured bandwidth.
   8. Click Add.
      When you click Add, the IPsec tunnel entry can be seen.
   9. Verify the status of the tunnel.
      An upward arrow indicates the tunnel is UP.

   10. (Optional) Click the ellipsis next to the tunnel entry to see additional options to edit and view tunnel configuration parameters.
       • The throughput capacity refers to the actual traffic going through the tunnel.
       • Save the probe IP address to be used later in the Prisma SD-WAN endpoint configuration for liveliness checks.