Netskope Threat Labs

POLICY-OTHER Generic.Reverse.Tunnel.LoclExpose.Tool connection attempt

IPS-SWG

1 SID: 150918

First seen
June 2025
Last seen
September 2026

Detects connections to the LocalExpose reverse tunnel service. Reverse tunnels expose internal services to the internet and can let operators reach machines behind the firewall, so this access warrants review.

No cross-references or related blog posts found for this signature.