A company's architecture includes a server subnet that is logically isolated from the rest of the network with no Internet access, no default…

For a server subnet that is isolated and requires content filtering for any server that might access

the Internet using a browser, the two Netskope deployment methods that would meet this

requirement are:

B . Deploy Data Plane on Premises (DPoP) with a proxy configuration on the servers: Deploying DPoP

would allow the isolated servers to connect to the Netskope cloud for content filtering through a

proxy configuration. This setup would enable the servers to have controlled access to the Internet for

content filtering purposes without requiring direct Internet access1.

C . Deploy IPsec or GRE tunnels in the segment to steer traffic from the servers to Netskope: By

deploying IPsec or GRE tunnels, the traffic from the servers can be securely directed to Netskope for

content filtering. This method is suitable for environments where servers do not have direct Internet

access, as the tunnel provides a secure path for traffic to reach Netskope’s cloud services1.

These deployment methods are designed to work in environments with strict network isolation and

provide the necessary content filtering capabilities for servers accessing the Internet.

Reference: The deployment methods and their suitability for isolated server subnets are based on

Netskope’s documentation and resources, which detail various deployment options and their use

cases21.