Drag the "Netskope Client (Roaming User)" shape. Use a dashed green line to connect the user laptop to the same NewEdge PoP, labeling it "IPsec over Internet."
On the far right, drag the "Microsoft 365" shape (from the Netskope ecosystem stencil) and an "Internal App Server" protected by "NPA Publisher." Connect the ZTNA arm of the SSE cloud to the publisher via a secure key icon. netskope visio stencils
From the Netskope stencil, locate the "GRE Tunnel" connector shape. Drag it between the On-Prem Router and the NewEdge PoP. Change the line color to bright orange to highlight steered traffic. Drag the "Netskope Client (Roaming User)" shape