A support integrator reports that for over seven months, their customer's Netskope client has been conflicting with a DLP agent on macOS because the OS randomly prioritizes network proxies...

{
  "signal_id": "c7643271-b804-5bd9-aa1f-efdc30808baf",
  "signal_type": "reddit-company",
  "signal_subtype": "customerFeedback",
  "detected_at": "2026-09-06T16:28:38+00:00",
  "company": {
    "name": "Netskope",
    "domain": "netskope.com"
  },
  "data": {
    "nsfw": false,
    "stage": "none",
    "awards": 0,
    "timing": "ongoing_state",
    "topics": [
      "endpoint security",
      "proxy",
      "integration",
      "dlp",
      "macos"
    ],
    "post_id": "1w90rkc",
    "summary": "A support integrator reports that for over seven months, their customer's Netskope client has been conflicting with a DLP agent on macOS because the OS randomly prioritizes network proxies, causing security inspections to fail 50% of the time.",
    "category": "integration",
    "comments": [
      {
        "url": "https://www.reddit.com/r/macsysadmin/comments/1w90rkc/comment/p876dor/",
        "depth": 0,
        "score": 8,
        "author": "doktortaru",
        "excerpt": "MAC is a cosmetics brand.\nMac is an Apple Computer brand.",
        "posted_at": "2026-09-06T17:33:21.000Z",
        "author_url": "https://www.reddit.com/user/doktortaru/"
      },
      {
        "url": "https://www.reddit.com/r/macsysadmin/comments/1w90rkc/comment/p87qj9w/",
        "depth": 0,
        "score": 1,
        "author": "Henxt",
        "excerpt": "A question which I had multiple times if I look at our complex it environment. Unclear knowledge: order of the same network extension grade is chosen randomly by the os. Only known possibility would be NEFilterManager.grade inside each app but good luck asking vendors for it",
        "posted_at": "2026-09-06T19:02:33.000Z",
        "author_url": "https://www.reddit.com/user/Henxt/"
      },
      {
        "url": "https://www.reddit.com/r/macsysadmin/comments/1w90rkc/comment/p87qm4x/",
        "depth": 0,
        "score": 1,
        "author": "oneplane",
        "excerpt": "Technically, NetworkExtensions can be ordered so there is some sort of first-come-first-served kind of deal, realistically, those were never going to see all traffic anyway. There is one, and only one way to do web-related DLP and that is to have a non-public channel and then inspecting that channel.\n\n As for the implementations (whichever DLP you use vs. Netskope); if they are different types (NE",
        "posted_at": "2026-09-06T19:02:54.000Z",
        "author_url": "https://www.reddit.com/user/oneplane/"
      }
    ],
    "evidence": [
      "[post] Every Endpoint has a DLP agent and Netskope client (a proxy tool used to gain access to certain remote locations), all distributed via MDM.",
      "[post] At some point (more than 7 months ago) DLP agent and Netskope began to have conflicts.",
      "[post] MacOS itself randomly selects the proxy priority (where the DLP agent should always be on top), so that 50% of the time DLP content goes outside freely without any interception (specifically, into browsers)."
    ],
    "virality": "low",
    "post_date": "2026-09-06T16:28:38.000Z",
    "post_kind": "text",
    "post_text": "Hello guys!\n\nThere's a pretty niche question I have, but hopefully someone could shed some light on to where I could look for the answer.\n\nWe (as a support integrator) have a customer whos Endpoint pool is largely based on MAC laptops.\n\nEvery Endpoint has a DLP agent and Netskope client (a proxy tool used to gain access to certain remote locations), all distributed via MDM.\n\nDLP agent itself also works as a local proxy, where it directs all the uploaded files/raw data in order to perform content inspection.\n\nAt some point (more than 7 months ago) DLP agent and Netskope began to have conflicts.\n\nMacOS itself randomly selects the proxy priority (where the DLP agent should always be on top), so that 50% of the time DLP content goes outside freely without any interception (specifically, into browsers).\n\nAs any typical DLP agent, this one aims to replace every page's certificate with its own and its should be always the case.\n\n--------------\n\nWe've been through many options already, but the information on this topic is very scarce.\n\nIs there any way to force set that DLP agent as first priority for MacOS? Or is there any other way around we could try?\n\nThank you in advance for any tips!",
    "sentiment": "negative",
    "subreddit": "macsysadmin",
    "event_date": "2026-02",
    "post_flair": [
      "Configuration Profiles"
    ],
    "post_title": "MacOS - Endpoint Proxy conflict",
    "prominence": "core",
    "source_url": "https://www.reddit.com/r/macsysadmin/comments/1w90rkc/macos_endpoint_proxy_conflict/",
    "entity_role": "vendor",
    "post_author": "HotNeck634",
    "upvote_ratio": 0.8571428571428571,
    "mention_count": 1,
    "mention_surge": false,
    "subreddit_url": "https://www.reddit.com/r/macsysadmin/",
    "total_upvotes": 5,
    "comments_total": 6,
    "total_comments": 6,
    "event_date_text": "more than 7 months ago",
    "other_companies": [
      {
        "name": "Apple",
        "role": "partner",
        "domain": "apple.com"
      }
    ],
    "post_author_url": "https://www.reddit.com/user/HotNeck634/",
    "signal_category": "feedback",
    "comments_included": 3,
    "products_mentioned": [
      "Netskope client"
    ]
  }
}

curl https://signals.autobound.ai/v1/signals/c7643271-b804-5bd9-aa1f-efdc30808baf \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"netskope.com","limit":20}'