You are building an architecture plan to roll out Netskope for on-premises devices. You determine that tunnels are the best way to achieve this task…

When using IPsec tunnels, especially in the context of deploying Netskope for on-premises devices,

several factors must be considered to ensure a secure and efficient architecture:

Cipher support on tunnel-initiating devices (A): It is crucial to ensure that the devices initiating the

IPsec tunnels support the ciphers used by Netskope. This compatibility is necessary for establishing

secure connections.

Bandwidth considerations (B): The bandwidth available for the IPsec tunnels will affect the data

throughput and performance of the connection. Adequate bandwidth must be allocated to handle

the expected traffic without causing bottlenecks.

The impact of threat scanning performance (D): The performance of threat scanning can be affected

by the encryption and decryption processes in IPsec tunnels. It is important to consider how the

threat scanning capabilities will perform under the additional load of encrypted traffic.

These elements are essential for the successful implementation of IPsec tunnels in a Netskope

architecture plan for on-premises devices12.

Reference: The considerations for using IPsec tunnels are outlined in the Netskope Knowledge Portal

and Community discussions, which provide guidance on deployment and validation of IPsec tunnels,

including cipher support, bandwidth management, and maintaining threat scanning performance