You configured a pair of IPsec funnels from the enterprise edge firewall to a Netskope...

When applications steered through an IPsec tunnel are non-functional, it is often due to the lack of proper trust establishment between the end-user devices and the Netskope data plane. The solution is to install the Netskope root and intermediate certificates on the end-user devices ©. This ensures that the devices recognize and trust the encrypted connection established by the IPsec tunnel, allowing the HTTPS SaaS applications to function correctly. Without these certificates, the devices may not be able to verify the security of the connection, leading to application failures.

References: This solution is based on standard practices for securing IPsec tunnels and ensuring device compatibility with encrypted traffic steering, as outlined in Netskope’s documentation on traffic steering and IPsec configuration