For a new Netskope tenant provisioned, to create a secure tenant configuration, you should

consider changing the following default settings:

B . Change Untrusted Root Certificate to Block: This setting will ensure that any traffic coming from

an untrusted root certificate is blocked, which is a critical security measure to prevent man-in-the-

middle attacks and other types of cyber threats1.

D . Change “Disallow concurrent logins by an Admin” to Enabled: This setting will prevent multiple

concurrent logins by the same admin account, which is an important security control to mitigate the

risk of unauthorized access. If an admin’s credentials are compromised, this setting will help limit the

potential damage by ensuring that only one session can be active at a time1.

These changes are part of the recommended security hardening guidelines for Netskope tenants to

enhance the overall security posture of the tenant environment.

Reference: The recommendations for changing default settings for a secure tenant configuration are

based on Netskope’s security hardening guidelines, which provide detailed instructions on how to

enhance the security of Netskope products and components deployed in customer environments1.