You recently began deploying Netskope at your company.

By default, Netskope’s steering configuration includes pre-defined exceptions for certain application domains and cloud services to prevent disruption during initial deployments. One of these default exceptions includes a steering bypass for Microsoft’s cloud storage domains, which effectively prevents OneDrive traffic from being inspected by Netskope. If Real-time Protection policies for OneDrive are not being enforced despite being correctly configured, the most likely cause is that a default steering exception is bypassing the traffic before it reaches the policy engine. Removing the default steering exception for these domains ensures that OneDrive traffic is properly tunneled to Netskope and subjected to policy evaluation. Disabling SSL rules or modifying certificate-pinned application settings would not resolve a fundamental steering bypass issue.