Short answer
FirstNet moves you in phases: map your Netskope policies, rebuild them in Cloudflare, pilot a team, then switch over before your renewal date.
In detail: Moving from Netskope to Cloudflare Zero Trust
How the move runs:
- Inventory: FirstNet lists your current web, CASB, DLP and private access policies, identity groups and steering set-up
- Mapping: each control is matched to its Cloudflare equivalent: Cloudflare Gateway for web filtering, Cloudflare Access with Cloudflare Tunnel for private apps, CASB and DLP for SaaS, AI tools and data
- Pilot: one team moves to the Cloudflare One Client while everyone else stays on Netskope
- Cutover: the remaining users move in waves, then the old client is removed
Plan the switch around your Netskope renewal date, so you do not pay for both platforms longer than needed. Identity stays the same: Cloudflare uses your existing Microsoft Entra ID, Okta or Google groups.
FirstNet still supports existing Netskope customers until they move.