Netskope Community - Cloud Security & Cybersecurity Forum

Recent Discussions

Recent activity
Help others
Categories

CuriousExplorer II

Which Windows Firewall Profile is selected when Publishing Active Directory

Hi Netskopers, For those of you which have published Active Directory via NPA, using the following guide...Netskope Private Access for Microsoft Active Directory Domain Services - Netskope Knowledge Portal The Windows client can then always connect to and authenticate with AD (since its always available via NPA). Due to this, Windows is always applying the less restrictive Domain Firewall Profile even when the remote device is connected to an untrusted network (home wifi, public cafe etc). Normally the more restrictive Public Firewall Profile would be applied. Is this a concern for others?Have you solved this somehow?Are there any other options other than make the Domain Profile more restrictive.

1 day ago

Wilfredo Marchena LuzonNetskope Employee

DLP

Case Insights - DLP Exceptions

Netskope Global Technical Success (GTS)Case Insights - DLP Exceptions Netskope Cloud Version - 126What is this article about?As a new initiative, this report examines the most recurrent “How-to” questions raised by customers and managed by Netskope Global Technical Success (GTS) Team. Netskope DLP ExceptionCases concerning the creation of Data Loss Prevention exceptions are frequent. To illustrate the exception generation process, I will outline two past engagements. Customer #1This customer implemented a policy to block any profanity language when sending and uploading content via emails, the policy had Netskope DLP predefined profile named: “DLP-Profanity” blocking activities such as Upload, and Send, for instance:Path: Netskope Tenant UI >>> Policies >>> Real-time ProtectionAfter creating and enabling the policy, they noticed that for some reason an user with last name “fuks” was triggering this DLP Profile when the user was found in some internal sheets. For this

1 day ago

Rohit_BhaskarNetskope Employee

Community News & Announcements

Webinar Recording is Available Now!! "Threat Protection - Expert - Integrations Part 1

If you missed the recent technical workshop, "Threat Protection - Expert - Integrations Part 1 - Cloud Exchange Integrations", the recording is now available!This session, led by Mark Pray, Sr Product Adoption Expert at Netskope, was an invaluable opportunity to dive deep into maximizing your Netskope Cloud Security solution through powerful Cloud Exchange integrations.As an extension of our regular technical workshops, these sessions are designed to help you get the most out of your Netskope investment.In this recording, you'll learn:Key Integration Use Cases Step-by-Step Integration Examples Q&A insights from Netskope Experts Best Practices & Real-World Use CasesEnhance your threat protection strategy and learn how to leverage the full potential of Netskope with Cloud Exchange. Access the recording today! Kindly use below recording links a per your convenience : Customers Partners

1 day ago

Mandeep SinghNetskope Employee

Browser Control

Google Chrome - Whitelist Specific Traffic from Chrome Extensions

Netskope Global Technical Success (GTS)Google Chrome - Whitelist Specific Traffic from Chrome Extensions Netskope Cloud Version - 126 ObjectiveWhitelist traffic from designated Chrome extensions while restricting all other network traffic. PrerequisiteNetskope Next-Gen SWG license ContextThis article addresses the requirement to whitelist traffic from selected business-approved Google Chrome extensions, while blocking traffic from all other extensions. Author NotesKindly review the parent articles first Google Chrome - Blocking Traffic from Chrome Extensions Link ConfigurationThe configuration below is designed to meet a specific business requirementExample -Allow traffic only from the Grammarly Google Chrome extension While blocking all other Google Chrome extensions. Step 1 - Create a HTTP Header ProfilePath: Netskope Tenant UI >>> Policies >>> Profiles - - - HTTP Header >>> New HTTP Header Profile Step 2 - Create Realtime Protection Policie

150

1 day ago

steff94New Member III

Additional Discussions

New netskope SpeedTest speedtest.goskope.com - download speed not correct?!

Dear Netskope-Team,First of all: I love the new SpeedTest Feature! SpeedTestBut I think something is not working correctly yet, because the download speed is always below 1 Mbit/s.Here my results:POP: DUS1Test ID: ypjx-9133686Latency: 11.20 msJitter: 2.75 msDown Speed: 0.25 mbpsUp Speed: 538.54 mbpsHTTP version: 1.1 Could you please help? Anybody in the community with the same problem? Best regards

130

2 days ago

KrugerNew Member III

Next Gen SWG

All allowed web traffic

Hello, I am trying to figure out the best way to query/view all allowed web traffic for a user or users. I found this posted:--By default, we do not log allowed traffic. If traffic is blocked, it is logged, and you can view that traffic under Skope-IT alerts. If you wish to log allowed web traffic, you do not need to create a new policy; simply change the action of the existing policy to 'alert' to log all traffic matching that specific policy-- But when we enabled alerting it shows a lot of activities for the allowed traffic but not all of the typical browsing traffic. Is this viewable in the Tennant? ie: if someone just goes to a typical website and clicks around.. It does not seem to just log that browse action. Thanks

313

2 days ago

Zarmin ShaikhNetskope Employee

Real-Time Protection: Key Policies

Netskope Offering to Threat Management

Netskope Global Technical Success (GTS)Netskope Offering to Threat Management Netskope Cloud Version - 126 ObjectiveThis article aims to guide customers on how to effectively leverage Netskope’s security capabilities to prevent threats across their cloud and web environments. ContextIn today’s hybrid work environment, organizations face an increasingly complex threat landscape—ranging from insider threats to risky web destinations, security risk Websites access, etc. As cloud adoption continues to rise, the need for visibility and real-time threat protection across all user activity has never been greater. Netskope provides a modern, cloud-native security platform designed to help organizations prevent threats without compromising performance or user experience. This article walks you through key Netskope features and configurations that can significantly reduce your attack surface and enhance overall security posture. We’ll explore critical tools that Netskope Offers to protect users

560

2 days ago

Mandeep SinghNetskope Employee

Browser Control

Google Chrome - Blocking Traffic from Chrome Extensions

Netskope Global Technical Success (GTS)Google Chrome - Blocking Traffic from Chrome Extensions Netskope Cloud Version - 126 ObjectiveBlock Google Chrome Extensions Traffic PrerequisiteNetskope Next-Gen SWG license ContextThe business use case is to block all traffic originating from Google Chrome extensions, regardless of the destination. Do You Know?The origin of all traffic which is being generated by Google Chrome extensions starts with ‘Chrome-extension’ ConfigurationStep 1 - Create a HTTP Header ProfilePath: Netskope Tenant UI >>> Policies >>> Profiles - - - HTTP Header >>> New HTTP Header Profile Step 2 - Create a Realtime Protection PolicyPath: Netskope Tenant UI >>> Policies >>> Realtime Protection Policy >>> New Policy VerificationTo perform testing, I installed Grammarly on Google Chrome and here are the results Author NotesWith the controls implemented as described above, there will be no impact on regular browser traffi

1080

2 days ago

Mandeep SinghNetskope Employee

Browser Control

Google Chrome - Blocking Chrome Extensions

Netskope Global Technical Success (GTS)Google Chrome - Blocking Chrome Extensions Netskope Cloud Version - 126 ObjectiveBlock Google Chrome Extensions Installation and Download PrerequisiteNetskope Next-Gen SWG license ContextThe business use case is to prevent users from installing browser extensions and add-ons in Google Chrome. Do You Know?Google Chrome holds ~68% of the global web browser market share, making it the industry leader. Ref. - Link Google Chrome offers a dedicated platform called the Chrome Web Store, where users can discover, download, and manage extensions and add-ons. Netskope acknowledges Chrome Web Store as a Cloud Application and provides a pre-defined cloud app connector As of June 05, 2025 with Netskope’s Chrome Web Store predefined connector, customers can exercise control over the following activities: Google Chrome extensions are packaged in the .CRX (Chrome Extension) file format. ConfigurationTo block Google Chrome extension installation and download, you

270

2 days ago

dazmacmainNew Member III

Discussions

How Can I Improve Netskope's Performance?

I have just started a new company.We have brand new Cisco Cat 9500 and 9300 MGig switches. With Netskope installed on our computer have run a speed test and getting 100Mbps connected to the Internet with Netskope enabled. With Netskope disabled we are getting speeds of up to 700Mbps connected to the internet. Is there a reason why this is so slow, has it got to do with deep packet inspection? Can anything be done to speed this up? I am new to Netskope and our security team are in charge of this.

27702

3 days ago

CuriousExplorer II

Private Access for ZTNA

Which Windows Firewall Profile is selected when Publishing Active Directory

1 day ago

steff94New Member III

Additional Discussions

New netskope SpeedTest speedtest.goskope.com - download speed not correct?!

130

2 days ago

KrugerNew Member III

Next Gen SWG

All allowed web traffic

313

2 days ago

dazmacmainNew Member III

Discussions

How Can I Improve Netskope's Performance?

27702

3 days ago

wilsonExplorer III

Discussions

Combining private apps and Netskope Categories

Basically I want to write a report for the # of users of AI applications, including public Chat GPT vs the Corporate ChatGPT (which is only available via authentication but on the Internet) I have added it as an app in the Steering Configurations and it shows up separately as an App in SKOPEIT, but I can’t add it to the catalog category. Is the answer to add a custom web Category and generating enough traffic for page events?

312

8 days ago

DarrylHNew Member

Next Gen SWG

SWG & Microsoft Safelinks causing SSL_Mismatch

Hi all,Has anyone had any issues with using the Netskope proxy and Microsoft Safelinks?We currently use Microsoft safelinks to protect clicks within the Microsoft suite.It is sporadic, but if a user clicks a link within an email, (typically marketing emails) Netskope correctly blocks access due to a SSL mismatch.if we use the safelink decoder to get the actual URL, we can get to the website without any issues.its two popular products, so i’m assuming others have this same issue, any ideas? We don’t want to bypass the SSL Host Mismatch error. thanks

781

9 days ago

maxkorNew Member III

Discussions

Error – "Failed to save enrollment tokens"

Hi all,While attempting to install the Netskope agent using the provided BAT file, I encountered the following error:"Failed to save enrollment tokens"In addition, when retrying the process, I also receive the following error in the enrollment window:"Configuration download failed. Please authenticate again."Steps I have already taken: Ran the BAT file as Administrator Verified proper network connectivity Attempted the installation on a different machine note:install mode IDP thanks

481

11 days ago

Maho FujinoNetskope Partner

DLP

Understanding Netskope DLP’s Approach to Language Support and Keyword Detection

I understand that Netskope’s DLP supports multiple languages and offers high detection accuracy. Could you please share whether the keyword matching inspection is performed using external libraries, or if Netskope uses an in-house developed engine?If external libraries are being used, would it be possible for you to disclose information about them?I am particularly interested in how Netskope has addressed challenges such as multilingual support and detecting word boundaries accurately.

140

11 days ago

Maho FujinoNetskope Partner

Private Access for ZTNA

Dynamic Steering

I have configured Dynamic Steering.Here are the steps I took: In the Client Config, I specified the internal web server (192.168.10.156). In Traffic Steering, I enabled the Dynamic Steering option. However, after completing the above configurations, when I check the configuration of a server located in the same network as the web server set in step 1, it shows On-premises check: Remote.Could you please advise on how to resolve this issue? Step1 Step2 It shows On-premises check: Remote

471

12 days ago

LionelNetskope Partner

Additional Discussions

Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

1174

18 days ago

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

DEM: Digital Experience Management forum

9 topics

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure to cloud risks by providing a 360° view of activity throughout the Netskope platform.

Dive into the Netskope Forums Community for comprehensive discussions on cloud security, network protection, and innovative cybersecurity solutions. Connect with experts and peers to share knowledge, experiences, and best practices in safeguarding digital assets and ensuring secure cloud adoption.