Netskope Community - Cloud Security & Cybersecurity Forum

Recent Discussions

Recent activity
Help others
Categories

From SSE to SASE: Transforming Connectivity with Netskope One SD-WAN

We know that managing legacy systems like MPLS and outdated VPNs can be a challenge.As we continue to build the future of SASE, we're dedicated to delivering a truly unified, single-vendor platform that makes your network more secure and agile. That's why we acquired our own SD-WAN solution in 2022, to simplify the journey for customers like you.Join Netskope CEO Sanjay Beri and CPO Parag Thakore and discover a practical way to evolve your network with SASE. You’ll learn how to simplify that process, reduce costs, and still deliver a high-performance, secure experience for your users.We'll dive into the practical steps of your SASE journey, including:Migrating from legacy networks to a unified SASE platform Simplifying branch infrastructure and securing IoT devices Delivering consistent zero-trust access everywhere

6 hours ago

Mandeep SinghNetskope Employee

GitHub

GitHub - Block Google SSO for login

Netskope Global Technical Success (GTS)GitHub - Block Google SSO for login Netskope Cloud Version - 130 ObjectiveGitHub - Block Google SSO for login PrerequisiteNetskope SWG and Next-Gen SWG license ContextGitHub provides Single Sign-On (SSO) integration with Google accounts. This knowledge base article focuses on preventing end-users from utilizing Google SSO to access GitHub. Do You Know?When an end-user attempts to log in to GitHub using Google SSO, the traffic redirects to accounts.google.com Netskope recognizes this domain under a predefined cloud app called Google Accounts. ConfigurationStep 1 - Create a custom URL categoryPath: Netskope Tenant UI >>> Policies >>> Profile - - - URL ListsPath: Netskope Tenant UI >>> Policies >>> Profile - - - Custom CategoriesStep 2 - Create a HTTP Header profilePath: Netskope Tenant UI >>> Policies >>> Profile - - - HTTP HeaderStep 3 - Create a Real-time protection policyPath: Netskope Tenan

120

8 hours ago

ThePiXNetskope Partner

Community Feedback

speedtest.goskope.com not usable on mobile

Hello, We want to report that the new https://speedtest.goskope.com/ is not usable on mobile (tested on safari) : first webpage open correctly but second page (run speedtest) is only partially visible and it is not possible to unzoom. It result that we can’t start the speedtest at all on mobile devices.We only tested on safari, maybe other community members can verify how it works on other browser.Can you please improve the website to be fully mobile-friendly ?

130

13 hours ago

Carl SuárezNetskope Employee

[Spanish Language] General

[Spanish Language] Enterprise Browser (EB) - Usando EB con el cliente de Netskope

Netskope Global Technical Success (GTS)Enterprise Browser (EB) - Usando EB con el cliente de Netskope Netskope Cloud Version - 130 ObjetivoUsando EB con el cliente de Netskope PrerrequisitoSe requiere licencia de Netskope SWG y Enterprise Browser ContextoConfiguración para utilizar el cliente de Netskope y Enterprise Browser El Enterprise Browser de Netskope cubre los siguientes casos de uso (v1.0)BYOD: Usuario corporativo que utiliza un dispositivo personal para una navegación corporativa segura BYOD: Usuario corporativo que utiliza un dispositivo personal para acceder a una aplicación SaaS corporativa Contratista en un dispositivo no administrado de Netskope (es decir, sin cliente de Netskope instalado) Contratista en un dispositivo administrado por Netskope (administrado, por ejemplo, cliente instalado y habilitado)Para el caso de uso en el que está instalado el Cliente NS (Caso de uso 4) hemos verificado que ambos pueden traba

23 hours ago

Carl SuárezNetskope Employee

[Spanish Language] WhatsApp

[Spanish Language] Implementación de bypass para el tráfico del agente nativo de WhatsApp en la plataforma Android

Netskope Global Technical Success (GTS)Caso de uso - Implementación de bypass para el tráfico del agente nativo de WhatsApp en la plataforma Android Netskope Cloud Version - 130 ObjetivoCrear una aplicación de certificado anclado “Certificate Pinned Application” para el agente nativo de WhatsApp de Android y agregarla en la “client steering configuration” de Netskope. PrerrequisitoSe requiere licencia Netskope CASB Inline/SWG ContextoCómo se puede excluir el tráfico de WhatsApp en dispositivos Android del enrutamiento a través de Netskope? DetallesWhatsApp, al ser una aplicación con certificado fijo “certificate-pinned app”, se puede excluir de la configuración de dirección “steering configuration” en dispositivos Android. Recreación del laboratorioPaso 1 - Clic sobre la opción “new certificate pinned app”Ruta: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> App Definition Paso 2 - Agregue los detalles requeridos. Application Name - [WhatsA

1 day ago

Carl SuárezNetskope Employee

[Spanish Language] DLP

[Spanish Language] EPDLP - Control de dispositivos: Impresora

Netskope Global Technical Success (GTS)EPDLP - Control de dispositivos: ImpresoraNetskope Cloud Version - 130 ObjetivoCapacidades actuales de Netskope para regular el acceso a las impresoras (desde macOS) PrerrequisitosSe requiere licencia de Netskope Endpoint DLP ContextoEn este artículo, exploramos las capacidades de Netskope en materia de DLP para endpoints. Analizaremos un caso práctico para comprender mejor sus capacidades y limitaciones.. Sabía que? Endpoint DLP le permite administrar y controlar endpoints para evitar que contenido confidencial se transfiera a dispositivos de almacenamiento USB o impresoras. Puede:Gobierne los dispositivos terminales mediante la creación de políticas de control de dispositivos, control de contenido y origen de archivos. Supervise las actividades de los endpoints y bloquee o active alertas cuando los usuarios intenten usar impresoras, transferir archivos confidenciales a dispositivos de almacenamiento USB, configurar impresoras e imprimir document

1 day ago

jerasomancillaNetskope Employee

[Spanish Language] General

[Spanish Language] Comprobación de seguridad de Netskope - Threat Protection

Netskope Global Technical Success (GTS)Comprobación de seguridad de Netskope - Threat Protection Netskope Cloud Version - 124 ObjetivoComprender y mejorar la seguridad de su nube Netskope con Netskope Security Check PrerrequisitoSe requiere una licencia Netskope SWG / NG SWG. Contexto Artículo principal En reconstrucción Se actualizará próximamente. DetallesComprobación de seguridad de Netskope - https://netskopesecuritycheck.com/ Hay un total de 17 comprobaciones de evaluación de seguridad distintas en la sección Protección contra amenazas. Nombre de la evaluación URL consultada Actividad realizada Predefinir categoría web Recomendaciones Ref. Link Bloquear la minería de criptomonedas ns-catid-589-sn.netskopetools.com/stop-icon.png Explorar Riesgo de seguridad Riesgo de seguridad: minería de criptomonedas El riesgo de seguridad y sus subcategorías deben bloquearse. Link

1 day ago

jerasomancillaNetskope Employee

[Spanish Language] ChatGPT

[Spanish Language] ChatGPT - Bloquear el inicio de sesión por teléfono

Netskope Global Technical Success (GTS)ChatGPT - Bloquear el inicio de sesión por teléfonoNetskope Cloud Version - 125ObjetivoChatGPT - Bloquear el inicio de sesión por teléfonoPrerrequisitoSe requiere una licencia Netskope CASB Inline & SWG.ContextoAdemás del SSO, ChatGPT también ofrece la opción de iniciar sesión mediante un teléfono. Este artículo de la base de conocimientos se centra en impedir que los usuarios finales utilicen el inicio de sesión por teléfono para acceder a ChatGPT.¿Sabe qué?Cuando un usuario final intenta iniciar sesión en ChatGPT utilizando el teléfono, el tráfico se redirige a una URL que contiene las siguientes cadenas ext-login-hint-phone use-new-phone-ui=true ConfiguraciónCrear una lista de URL y una categoría de URL personalizada Path: Netskope Tenant UI >>> Policies >>> Profile - - - WebLista de URL - Regex auth0?\.openai\.com.*ext-login-hint-phone.*use-new-phone-ui=true.* Crear una categoría personalizada con la lista de URL cr

1 day ago

mfarisNetskope Employee

Netskope Cloud Hotfix 130.1.0 Documentation Available Now!

The Netskope Cloud R130.1.0 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Hotfix Version 130.1.0.Submit your feedback via docs.netskope.com.

910

1 day ago

jerasomancillaNetskope Employee

[Spanish Language] General

[Spanish Language] Endpoint in REST API V2 para la gestión de usuarios y grupos

Netskope Global Technical Success (GTS)Endpoint in REST API V2 para la gestión de usuarios y grupos Netskope Cloud Version - 126ObjetivoUtilizar los endpoints REST API V2 SCIM para crear manualmente usuarios y grupos SCIM. ContextoLos usuarios creados manualmente no se designan automáticamente como usuarios SCIM. Por lo tanto, reciben el valor predeterminado steering configuration profile ("Default tenant config") y el valor predeterminado client configuration profile ("Default tenant config"). Esta asignación automática se produce porque la aplicación del perfil para la configuración del sistema operativo y del cliente requiere la pertenencia a un grupo. Como solución alternativa, podríamos aprovechar la API REST V2 para la creación de usuarios y grupos. De esta forma, los usuarios se convertirían en usuarios SCIM, lo que significa que podrían insertarse en grupos y, por lo tanto, aplicar perfiles de configuración y dirección personalizados. ⚠️ Importante Cualquier cambio nec

1 day ago

KrugerNew Member III

Next Gen SWG

Skope IT / Websites page

I was wondering if there is any documentation on what this page returns for sites visited. I find that some sites users visit will show here but the majority will not. I cannot find a difference between the sites that show here and ones that do not.. Like the sites are not blocked etc.. what is Netskope using to determine what gets presented to the “Websites:” Thanks

150

1 day ago

maxkorNew Member III

Private Access for ZTNA

Actions in browser access

Hello,I would like to know if it is possible to allow copy and paste when using ZTNA in browser access mode.If yes, could you please provide guidance on how to configure it?Thank you

365

1 day ago

irfanalamNew Member

Next Gen SWG

Netskope restricts the mac laptop from connecting to public Wi-Fi

Can anyone confirm whether Netskope enforces restrictions that prevent a Mac laptop from connecting to public Wi-Fi networks, while allowing successful connections to private Wi-Fi networks? If such a restriction exists, could you please advise which specific Netskope logs should be reviewed to verify whether the Mac laptop's access is being blocked or restricted on public Wi-Fi?

291

1 day ago

ccreedNew Member

Next Gen SWG

All Micrsoft delivery optimization regex actions

was just talking about this in another thread here. We have a URL list that resolves this. We haven't had to update it in awhile but it's easy enough if we have to.\b(?:\d{1,3}\.){3}\d{1,3}\b\/filestreamingservice\/files\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*\/filestreamingservice\/files\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*.intunewin.bin\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*\/ctldl.windowsupdate.com\/msdownload\/update\/v3\/static\/trustedr\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/pr\/.*\/Office\/Data\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/d\/msdownload\/.* so with this regex above for Microsoft Delivery Optimization what actions are you all allowing Browse, Download, Post, ect…??

250

6 days ago

MelanieWhiteNew Member

Community Feedback

Cannot Install Netskope on a computer

I found two machines in our tenant that were still on version 114 and 115. I have manually uninstalled from the Control Panel and gone through the Registry to remove Netskope entries. I’ve also tried using the Uninstall script but nothing is working. I’ve used the verbose logging switch at the end of the msi install script, which did show error codes of 1603 and I’ve seen 2203, but those look like they’re pointing to Windows Installer issues. That has indicated that either the older version (or orphaned files) are still present or there are permission issues. I’ve also found the Windows Installer service stopped. I still cannot get the msi install to work even after starting the Installer service. The System profile has full control on the folder the msi is located in. I’ve created a ticket through the Support Portal but nothing is working. We even tried disabling our AV software. I don’t want to have to re-image these two devices due to the user’s schedules and amount of tra

321

6 days ago

cesarNew Member

Private Access for ZTNA

Troubleshooting NPA Client on WSL Ubuntu 22.04

Hi, I'm having a hard time with the netskope client on Linux. This is a WSL2 installation, and a netskope agent is running on the windows host. But the windows agent status has no influence on the behavior of the guest linux one. Very often, the nsclient config outputs a normal status with tunnel up, and private access enabled. Unfortunately the show-pa show this : $ nsclient show-pastart process....Status: Connected (User Tunnel) Sent: 0 bytes Received: 78646 bytes and the nsdebuglog.log is spammen with this kind of errors : 2025/09/16 20:21:00.358996 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:01.381263 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:02.404470 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:25.547248 stAgentSvc p47489 t4755c error nsKernelUserShim.

340

8 days ago

MelanieWhiteNew Member

Additional Discussions

Version 123 has not enabled on a local computer when installed via an MDT image

Most of our devices are on version 129 but our image has not been updated from version 123 yet. Recently we’ve had two machines that have not been enabled after imaging until someone else has signed in to that machine. Both of those people, myself included, are Admins so I’m not sure if it’s that level of permission or just that someone else with an account in Netskope signed in. I know we can’t auto-update from version 123 to 129 without issues. My question is - once the computer is imaged, does it still take 15 - 20 minutes before an auto-update would happen and could the version differences cause the issue with 123 enabling without intervention?

9 days ago

secproceoNew Member

Private Access for ZTNA

Using NPA to Connect to Azure Databricks

Team, Good morning. I’m using NPA to connect to Azure Databricks via Private Link’s.My initial connection works fine but the connection fails on the second attempt.I must clear the cache on the endpoint and disable/enable all clients services in the Netskope console for the connection to work again.When the connection fails, I get the error message below. Has everyone experience this issue connecting to Azure Databricks using NPA?

522

9 days ago

zmcinroy

Private Access for ZTNA

"The certificate chain was issued by an authority that is not trusted" when using NPA to access SQL Server

Some of my users are reporting errors when trying to connect to a SQL Server over NPA. The connection is successful but is erroring out due to a cert trust issue: The SQL server has forced encryption turned on; I have verified that the remote host is able to connect over the required ports.Is there another configuration that is needed to allow NPA to work with SQL Server Forced Encryption, do I need to deploy the Netskope Cert to the SQL servers?

271

12 days ago

MSpaldingNew Member III

DLP

Generative AI and json/blob Uploads

I have been tasked with allowing our user population to have access to the Generative AI category while also protecting the company and our patients by preventing uploads of any files with PHI in them to anything other than our internal instance of Copilot.I have created Realtime policies that I believe achieve this goal, but I have encountered an issue where certain AI sites do not upload the file in a format which Netskope can see into. Specifically, Grok uploads files as a blob while Quillbot and Heidi Health AI upload the file in blob, json or webm formats.Is there a way for Netskope to be able to view these file uploads and apply our PHI profiles to the upload? I have not seen any documentation which addresses this, and I am curious if anyone else in the community is running into a similar problem.

1317

13 days ago

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

Next Gen SWG

352 topics

CASB

153 topics

Security Posture Management

40 topics

Private Access for ZTNA

207 topics

DLP

100 topics

Netskope Cloud Exchange (CE)

16 topics

Cloud Firewall

10 topics

DEM: Digital Experience Management forum

9 topics

Adoption Hub

Welcome to the Netskope Adoption Hub! This space is designed exclusively for Netskope customers to access tailored adoption resources, best practices, and guided onboarding materials. Discover how to maximize the value of your Netskope investment through step-by-step product journeys, community-shared use cases, and support from peers and experts.

Netskope StartSmartKit

2 topics

Monthly Updates Hub

4 topics

Webinar Vault

1 topic

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure to cloud risks by providing a 360° view of activity throughout the Netskope platform.

Discussions

107 topics

Dashboard Gallery

80 topics

Other Forums

Dive into the Netskope Forums Community for comprehensive discussions on cloud security, network protection, and innovative cybersecurity solutions. Connect with experts and peers to share knowledge, experiences, and best practices in safeguarding digital assets and ensuring secure cloud adoption.

Additional Discussions

194 topics

Artificial Intelligence and Machine Learning

26 topics

Netskope Threat Protection

15 topics

Community Resources

About the Netskope Community

9 topics

Introduce Yourself

57 topics

Community News & Announcements

136 topics

Learn

Education, Training, Certification, and Thought Leadership

Netskope Academy / Training Discussions

18 topics

Video Library

87 topics

Blogs

47 topics

Inside Netskope

63 topics

Community Feedback

15 topics

Advanced Analytics

Leandro Timotio de LimaNetskope Employee

Dashboard Gallery

Advanced Analytics - NPA Health / Visibility

Report with an overview of Publisher health and a summary of usage information by publisher, ports, users, and destinationsReport:Advanced Analytics - NPA Health / Visibility

582

7 days ago

Leandro Timotio de LimaNetskope Employee

Dashboard Gallery

Advanced Analytics - Shadow IT Visibility

This report provides an overview of applications used within the organization, organized by reputation.Advanced Analytics - Shadow IT Visibility

460

7 days ago

Aaron_ZhangNetskope Employee

Dashboard Gallery

Web Traffic Consumption Insights - Top Contributors

A simple dashboard that provides directional visibility into the top contributors (domains, apps, & users) of bandwidth consumption in your environment based on Transaction Events.

340

8 days ago

Aaron_ZhangNetskope Employee

Dashboard Gallery

Top Allowed & Blocked Websites by User Group & Organization Unit

  This dashboard provides visibility into top allowed & blocked websites and the corresponding URLs. "Allowed" & "Blocked" are determined using the "Action" filter in each widget, which can be further customized based on your environment.    The dashboard also includes the "User Group" & "Organization Unit" filters that can be used to target any particular AD groups in your environment.   

84110

8 days ago

jbookhammerNew Member

Discussions

What does the high medium low poor and row total mean in the application summary report in advanced analytics?

I am using out of the box AA reports and i have no idea what this is trying to tell me:

131

14 days ago

Aaron_ZhangNetskope Employee

Dashboard Gallery

Data Flow Investigation Dashboard V2

Please note that this dashboard requires Endpoint DLP enablement in your environment. Looking for a unified dashboard to monitor data movement in your environment? This Data Flow Investigation Dashboard V2 can help! The dashboard provides both high-level and granular visibility into the data movement in your environment from 3 dimensions: geolocation data flow (web transaction), cloud application data flow (app events), and endpoint data flow (endpoint traffic). Questions answered by this dashboard include:Which regions is my data moving from and to Which apps is my data moving from and which instances is the data moving through Which endpoint devices (e.g. USB drivers, printers, & bluetooth devices) is my data moving to How is the data movement volume trending over time What files/objects have been detected in the data movement, who are the users engaged, and what activities have been performed by the users The dashboard template is attached below. Feel free to try it out in your

3212

20 days ago

Aaron_ZhangNetskope Employee

Discussions

August 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: Is there a dashboard that can be used to monitor data movement?A: For sure! Our latest Data Flow Investigation Dashboard V2 is a great option. The dashboard provides both high-level and granular visibility into the data movement in your environment from 3 dimensions: geolocation data flow (web transaction), cloud application data flow (app events), and endpoint data flow (endpoint traffic). Together with this, we also provide a supplemental Control & Monitor Dashboard that helps you monitor sensitive data movement in your environment and better understand how Netskope DLP is controlling the sensitive data movement. Q: Is it possible to compare the number of use

200

22 days ago

Aaron_ZhangNetskope Employee

Discussions

Case Study - Merge Query

Merge Query allows you to combine data from different data collections, which helps you perform advanced analysis based on different data sources.Let’s take a look at a sample use case - identifying the device info of users triggering DLP alerts. While DLP alert data is stored in our Alerts data collection, device info is stored in a different place, the Devices data collection. To combine data from these two different data collections, Merge Query can help. To get started, simply create a widget that lists users triggering DLP alerts. Once the widget is saved to the dashboard, select “Explore from here.” This will direct us to the “explore” mode of this widget.On the top right corner, click the gear button and select “Merge results.” We will then be able to select a second data collection. Let’s select “Devices.” Next, let’s pick the data fields we need. Since we’re looking to combine DLP alert data with device info based on users, we select “User,” “Device ID,” and “Hostname” her

280

23 days ago

Aaron_ZhangNetskope Employee

Discussions

Why are some widgets failing to show data?

There are 4 typical types of widget errors in Advanced Analytics Type 1: Incompatible DataWhen the data type selected is not supported by the visual type, this error shows up. For example, when “# Users” is selected with the “Google Maps” visual, the widget cannot be loaded since this visual does not work without a “location” data field.To fix this, simply add a “location” data field, e.g. “Source Location,” to the widget. Type 2: Incompatible Visual TypeWhen the visual type selected cannot render the data, this error shows up. For example, if we use a pie chart to show a list of users based on their event count, the widget cannot be loaded since this visual can only display a maximum of 50 rows of data.To fix this, simply switch to a different visual type, e.g. table. Type 3: Query ErrorWhen your custom fields are misconfigured, a query error shows up.To fix this, check your custom fields and make sure they are configured correctly with no error message showing up. Type 4: Server/Plat

260

30 days ago

juergenNetskope Employee

Dashboard Gallery

DNS Security Dashboard

This new dashboard offers several widgets around DNS Security Reporting. The dashboard contains an overview sections, top blocked categories and domains, top allowed domains, traffic trends, top users and some filter options.

550

1 month ago