Netskope Community - Cloud Security & Cybersecurity Forum

Recent Discussions

Recent activity
Help others
Categories

Netskope Global Technical Success (GTS)Role Based Access Control v3 (RBAC v3) Netskope Cloud Version - 125 ObjectiveThis article explains the new capabilities introduced with RBAC V3, available starting from Netskope release R125 - Link RequirementTo enable RBAC V3, a backend flag needs to be enabled. Customers are requested to raise a support case ‘Case Type: How-To Question’ Author NotesIn the near future, this RBAC V3 will be rolled out to all tenants. DetailsNew features introduced with RBACv3(A). Roles for Rest API endpointsThe role definition remained unchanged in comparison to RBAC V2, however, each function has now a set of associated REST API endpoints, which are granted when selecting the functions, for example: ℹ️ For Users and Groups provisioning through SCIM, the below function will be needed: (B.) Roles for IP Allowlist Within the role, it is now possible to define an IP Allowlist. By assigning the role to an Administrative User (or Service Account), we wil

41 minutes ago

Davide MolinoNetskope Employee

CASB/SWG Inline

DLP - Scan documents for a particular keyword

Netskope Global Technical Success (GTS)DLP - Scan documents for a particular keyword Netskope Cloud Version - 125 ObjectiveThis article aims to detect all the downloaded/uploaded documents which contains a specific keyword PrerequisiteSWG or Next-Gen SWG with Standard DLP ContextA company would like to block all the upload activities related to files which contains the “confidential” keyword ConfigurationStep #1 - Define the DLP EntityPath: Netskope Tenant UI Policies >>> Profiles >>> DLP >>> DLP Rules >>> EntitiesDefine a new entity to identify the “confidential” work like below: ℹ️ With the confidential regex we’re matching all the files containing the “confidential” string Step #2 - Define the DLP RulePath: Netskope Tenant UI Policies >>> Profiles >>> DLP >>> DLP Rules >>> RulesEntity: Select the entity created at the Step #1 as shown above Exact match: No changes Advanced options: No changes Content:

3 hours ago

hshimizuNetskope Partner

Next Gen SWG

The function of setting specific condiftion onto SAML authentication bypass

Hi, all I’m Hiroaki Shimizu, SE of Macncia.I would like to confirm and gather whether there is a demand for the following functions or not.If there is a large demand, we will request it to Netskope.If you agree, please click the Like button.1.What my customer would like to achieveCustomer would like to communicate without SAML authentication for some destinations such as application update communication from a terminal such as a Windows server where the user is not always logged in. 2.Location of the functionSetting -> Security cloud platform ->SAML -> SettingIf the terminal IP is excluded from SAML authentication, the user is not authenticated by that terminal and is recognized as an IP address. 3.Current functionWhen bypassing with "SAML-Forward Proxy",・DOMAIN BYPASS and WEB CATEGORY BYPASS apply to all users・SOURCE/EGRESS IP ADDRESS BYPASS excludes all destinations from the specified IP4.Desired function・The condition of specific IP and specific destination could be set in

272

12 hours ago

Aaron_ZhangNetskope Employee

Discussions

May 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: We recently onboarded Netskope in our organization and need to understand the recommended best practice on analytics, especially how to improve our security posture using Advanced Analytics.A: There are 3 different “health check” dashboards in our community. All of them are great starting points for you to explore your environment, identify security gaps, and enhance your security posture. CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. With a focus on CASB, the dashboard covers multiple topics such as NewEdge Network, Traffic

110

14 hours ago

zmcinroy

Private Access for ZTNA

How do I configure NPA to work with On-Premise DNSSEC

Looking for any information about how to best configure steering for private app access when DNSSEC is enabled on the on prem DNS servers, or if this is even possible. I have verified my NPA publisher is able to query DNS and get proper RSIG response. However remote clients do not get a valid response from the domain even with the Netskope suggested Active Directory configuration from: Netskope Private Access for Microsoft Active Directory Domain Services - Netskope Knowledge PortalAll nslookups come back as unsecured and Non-authoritative

514

16 hours ago

LionelNetskope Partner

Additional Discussions

Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

1074

20 hours ago

Maho FujinoNetskope Partner

DLP

Unexpected Match in Email Address Detection Policy Using Regular Expression

When creating a policy to detect email addresses, I used the following regular expression:[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}However, the string "csv test" triggered a detection, even though it does not contain an "@" symbol and therefore should not match the expression above.Is there any limitation or specific behavior in how regular expressions are interpreted on the Netskope side that might explain this?

21 hours ago

rodborgesNetskope Partner

DLP

DLP Support for Claude.AI and Perplexity.AI

Hi, Some customers asked about DLP support for Claude.AI and Perplexity.AI.They are on the roadmap? If so, there’s any estimate on when will it be available? Regards,Rodrigo Borges

296

22 hours ago

Maho FujinoNetskope Partner

DLP

Regarding the definition of "activity"

What is the definition of "Formpost," which is one of the activity types?

212

1 day ago

Maho FujinoNetskope Partner

Private Access for ZTNA

ZTNA is not functioning as expected.

ZTNA is not functioning as expected.Here is what I have done so far: Built the Publisher Registered the Private App Created an RTP policy 2.Here is the configuration of the private app I created.3.Here is the configuration of the RTP policy I created. When I performed troubleshooting for the Private App, I encountered an error.However, the publisher status is shown as "connected."What could be the possible causes? Here is the error message. Here is the status of the publisher: it is showing as "connected".

381

1 day ago

hshimizuNetskope Partner

Next Gen SWG

The function of setting specific condiftion onto SAML authentication bypass

272

12 hours ago

LionelNetskope Partner

Additional Discussions

Single Sign-On BWAN / ZTNA

1074

20 hours ago

Maho FujinoNetskope Partner

DLP

Unexpected Match in Email Address Detection Policy Using Regular Expression

21 hours ago

rodborgesNetskope Partner

DLP

DLP Support for Claude.AI and Perplexity.AI

Hi, Some customers asked about DLP support for Claude.AI and Perplexity.AI.They are on the roadmap? If so, there’s any estimate on when will it be available? Regards,Rodrigo Borges

296

22 hours ago

Maho FujinoNetskope Partner

Private Access for ZTNA

ZTNA is not functioning as expected.

381

1 day ago

Maho FujinoNetskope Partner

CASB

how to configure MFA in the Action section of RTP

It was mentioned that the setting can be configured under Settings > Manage > Multi-Factor Authentication Integration, but in my environment, the Multi-Factor Authentication Integration tab does not appear, as shown in the screenshot below.Has there been an update?Could you let me know where I can configure this?https://docs.netskope.com/en/multi-factor-authentication/

353

1 day ago

jsoleilnorautoNew Member

Discussions

Monitoring the environmental impact of web usage

Hello,As part of an initiative to raise awareness of the digital impact within our organisation, we would like to set up a Netskope dashboard to identify web uses with a high carbon impact.Objective:To produce consumption indicators relating to user access to sites considered to have a high environmental footprint, including:Video streaming platforms, Social networks, Sites with high bandwidth or high data consumption rates.Do you already have dashboards on this topic?How can we do this? Identify the categories of applications/sites available in Netskope that correspond to these uses; Create or adapt a dashboard enabling us to: Monitor consumption (time, data volume, frequency of access, etc.) by site category; Isolate uses with a presumed high environmental impact;

Device "Last Event" Status Update

HiAnyone has issue with Device “Last Event” status not up-to-date despite it was ONLINE 24x7?The only time the status get updated when windows reboot. Then the status again never get updated.All the windows systems have this issue. Thank

6 days ago

steveMCNetskope Partner

Private Access for ZTNA

Can Active Directory GPO policies be applied to remote devices using ZTNA?

Recently, we’ve encountered a use case we hadn’t seen before. Can GPO policies be applied to remote devices using ZTNA?What could you share about this? From what we’ve seen, it seems possible. Any advice?

753

7 days ago

Maho FujinoNetskope Partner

Cloud Firewall

Blocking Zoom via Cloud Firewall (CFW)

Note: I understand that traffic to Zoom is generally recommended to be bypassed.If I want to prohibit the use of Zoom's camera and microphone features, what kind of policy should I write?I was under the impression that writing a blocking policy in CFW would be sufficient to block usage, but the traffic does not seem to be getting blocked. Here is the configuration I applied:Under Settings > Security Cloud Platform > App Definition > Cloud & Firewall Apps, I added the following configuration.After that, I created a block policy under Real-time Protection. I expected that Zoom’s camera and microphone functionalities would be disabled as a result of the policy.However, users are still able to use those features.I would appreciate it if you could point out any mistakes or misconfigurations in my setup.

231

7 days ago

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

DEM: Digital Experience Management forum

9 topics

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure to cloud risks by providing a 360° view of activity throughout the Netskope platform.

Dive into the Netskope Forums Community for comprehensive discussions on cloud security, network protection, and innovative cybersecurity solutions. Connect with experts and peers to share knowledge, experiences, and best practices in safeguarding digital assets and ensuring secure cloud adoption.