We have VDAs in azure and use netskope. If we visit youtube we are forced to login to prove we’re not a bot. Same behavior if we egress from msft or netskope. Physical machines don’t get this prompt, with or without netskope. Any ideas? Biggest difference is local win10 vs win10 multisession

The IP you are getting to them is seen as an aggregator. When google sites see too much traffic from the same IP they will do that challenge to prove you are not a VPN bot proxy.

Correct but my public ip will be the same on the vda as a physical machine where it doesn’t happen

Not necessarily. Netskope uses multiple ip addresses for egress, so your local machine may use a different ip than the machine in azure. Go to whatismyip.com from local and from inside a VDA to get the ips.

Hitting the same NS data center and getting same public ip