A company's architecture includes a server subnet that is logically isolated from the rest of...

For a server subnet that is isolated and requires content filtering for any server that might access the Internet using a browser, the two Netskope deployment methods that would meet this requirement are:

B. Deploy Data Plane on Premises (DPoP) with a proxy configuration on the servers: Deploying DPoP would allow the isolated servers to connect to the Netskope cloud forcontent filtering through a proxy configuration.This setup would enable the servers to have controlled access to the Internet for content filtering purposes without requiring direct Internet access1.

C. Deploy IPsec or GRE tunnels in the segment to steer traffic from the servers to Netskope: By deploying IPsec or GRE tunnels, the traffic from the servers can be securely directed to Netskope for content filtering.This method is suitable for environments where servers do not have direct Internet access, as the tunnel provides a secure path for traffic to reach Netskope’s cloud services1.

These deployment methods are designed to work in environments with strict network isolation and provide the necessary content filtering capabilities for servers accessing the Internet.

References: The deployment methods and their suitability for isolated server subnets are based on Netskope’s documentation and resources, which detail various deployment options and their use cases21.