A company has deployed Explicit Proxy over Tunnel (EPoT) for their VDI users They have configured Forward Proxy authentication using Okta Universal…

The inconsistent results observed during User Acceptance Testing (where marketing users sometimes

access gambling sites and sometimes are blocked) are likely due to the configuration of the Forward

Proxy.

Cookie Surrogate: The Cookie Surrogate is a mechanism used in Forward Proxy deployments to

maintain user context across multiple requests. It ensures that user-specific policies are consistently

applied even when multiple users share the same IP address (common in VDI environments).

Issue: If the Forward Proxy is not configured to use the Cookie Surrogate, it may lead to inconsistent

behavior. When different users log into the VDI server, their requests may not be associated with

their specific user context, resulting in varying policy enforcement.

Solution: Ensure that the Forward Proxy is properly configured to use the Cookie Surrogate, allowing

consistent policy enforcement based on individual user identities. Reference:

Netskope Security Cloud Operation & Administration (NSCO&A) - Classroom Training

Netskope Security Cloud Introductory Online Technical Training

Netskope Architectural Advantage Features