Netskope is configured in a Always on connection which means the client is always connected to Netskope cloud either the user is in office or at home 

There is a dedicated tunnel configured from the firewall to the Netskope cloud which