Netskope Community - Cloud Security & Cybersecurity Forum

Recent activity
Help others
Categories

wilsonExplorer III

Next Gen SWG

Network locations information extraction

Is there a way to dump out the Network Locations and which IP address are contained in each?

4 hours ago

aplazaNetskope Employee

Video Library

Inside Netskope 11: Identify, Troubleshoot, and Resolve Common Netskope Client-related IssuesInside Netskope

Hear from our internal security team as they discuss the systematic approach we take at Netskope to diagnose and resolve client issues effectively. Key Topics:Understanding Netskope Client Architecture – How the client interacts with cloud security services and network components. Common Client Issues and Root Causes – Connectivity failures, latency, and policy misconfigurations. Troubleshooting Tools and Logs – Leveraging Netskope Client Debug Logs, Packet Captures, and Browser Developer Tools. Best Practices for Resolution – Steps to address common client-side issues and optimize deployment. DEMO: Using the Netskope Client itself to troubleshoot issues on the OS and applications.For more information, check out our blog post. View past events in this series!

5 hours ago

mfriedzzNew Member

Dashboard Gallery

Have Alert Stop Button by Default populate the Justification Note Field

Hello,When a user presses the Stop button and input is option, the Alert Justification field reverts to “not entered by user”Our Audit team does not like that justification, and it looks like the Stop might have failed. Can we have the Justification field just say Stop Button pressed? We would also like a field to search on that has a Stop or Proceed Column Populated, to make it easier for reporting. Thank You,

5 hours ago

AlfaBaneExplorer III

Private Access for ZTNA

Avaya Softphone over NPA

We're gradually expanding our NPA footprint in our company. Recently the first user needing the use of Avaya One-X Agent was looped in and the log-in fails. We've had the app configured for some time now but no testers until now. I have some internal discussions going with the involved teams but wanted to reach out here to see if anyone has any useful tips/experience implementing NPA access to a softphone solution. Of course, Avaya related products would be ideal, but any information would be welcomed. 

2563

5 hours ago

ppasseriNetskope Employee

Netskope Threat Protection

Using Netskope to Mitigate the Risk of Phishing KitsBlog

Table of ContentsIntroduction How a Reverse Proxy Phishing Kit Works Mitigation Strategy 1: Conditional Access on the Target Application Mitigation Strategy 2: Remote Browser Isolation Mitigation Strategy 3: DLP Profile Conclusion IntroductionAn emerging trend in the threat landscape is the growing availability of phishing tools that act as man-in-the-middle proxies (also known as AiTM - Attacker in The Middlle), allowing attackers to intercept login credentials and session cookies, thereby bypassing two-factor authentication (2FA) protections. Originally designed for penetration testing, they have evolved into a popular method for cybercriminals to execute phishing attacks.Common examples of phishing kits include Evilginx2.The challenge with phishing kits acting as man-in-the-middle proxies resides on the fact they they are completely transparent to users and to security tools as well. There is no real difference between the phishing page and the real login page, and additionally ther

370

14 hours ago

Carl SuárezNetskope Employee

[Spanish] Microsoft O365 Suite

[Spanish Language] Aplicación Nativa de Microsoft Outlook - Limitaciones

Netskope Global Technical Success (GTS)[Spanish Language] Aplicación Nativa de Microsoft Outlook - Limitaciones Netskope Cloud Version - 125 ObjetivoEntendiendo las limitaciones de la aplicación nativa de Microsoft Outlook. PrerrequisitosSe requiere licencia de Netskope SWG ó NG SWG ContextoEste documento está dirigido a clientes que deseen aplicar las Políticas de Protección en Tiempo Real de Netskope junto con los controles de Prevención de Pérdida de Datos (DLP) a la aplicación nativa de Microsoft Outlook. Ofrece una descripción general de las limitaciones y consideraciones actuales sobre el uso de estos controles con la aplicación nativa de Microsoft Outlook. ¿Sabía que?La aplicación nativa de Microsoft Outlook está disponible para ambas plataformas de escritorio -Windows macOSMicrosoft tiene 2 versiones de Outlook -Microsoft Outlook Classic (versión antigua) Microsoft New OutlookOutlook Classic es la aplicación nativa de Windows con todas las funciones y compatibilidad sin conexió

21 hours ago

mfarisNetskope Employee

Netskope Cloud Hotfix 125.1.0 Documentation Available Now!

The Netskope Cloud R125.1.0 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Hotfix Version 125.1.0.Submit your feedback via docs.netskope.com.

720

1 day ago

Gary-JenkinsNetskope Employee

Blogs

Add user and group via scim API

This one is more for my tech partners than for customers. If you tie your idp into your Netskope tenant you would never do this. This is really just for a lab environment. This will create users and groups that you can then use in policy. Create API token for scimGo to Settings > Tools > REST API v2 > New Token Create an API token that has the two scim endpoints added. With the token copied and stored somewhere. Go to API Documentation. Add the token to the Authorize In the scim section use the apis to view and create the users/groups. Adding a userStart by adding the user. Be sure to change the userNamePOST /api/v2/scim/Users{ "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:User" ], "userName": "taylorkelce", "name": { "familyName": "kelce", "givenName": "taylor" }, "active": true, "emails": [ { "value": "taylor@eras.tour", "primary": true } ], "externalId": "User-Ext_id", "meta": { "resourceType": "User" }} Search for your user

11694

1 day ago

drftordieNew Member

Next Gen SWG

Netskope Slowing internet down especially Meeting Softwares (Google Meet, Slack Huddle etc.)

I have a subset of users on Mac device that are telling me that meetings (Google Meet, Slack Huddle etc.) are very choppy. I have added google.meet.com and Slack URLS to the steering domain bypass. But still having issues, I see in alot of these users logs:Tunnel down due to errorDetected Dead PeerThe below is seen the most:Tunnel down due to errorTunnel Down Due to SSL Error I have had users disable IPv6, power cycle their home modem and router, some have contacted their ISP and click renew DCHP many times. Any thoughts?

262

1 day ago

KmaheshwariNetskope Employee

Welcome to the Netskope Community Common Articles space

Netskope Incident Creation in ServiceNowServicenow, DLP

The Netskope Security Operations app allows customers to create security incidents from alerts. Below are the key features included in this direct integration:Security incident creation from all alerts except DLP Populating discovered applications in your ServiceNow CMDB application table from your Netskope Tenant Pulling User Risk scores from your Netskope Tenant. Pulling URL categories list and allowing users to share back hashes and URLs to Netskope. Sandbox report request: allows users to scan malicious files and get the report for the same In addition to the above features, there is a new feature that allows users to map security incidents to any table in their ServiceNow Instance. This feature supports any table, allowing the customer to select the table of their choice. Previously, they could only use the Security Incident table for Incident Creation.Requirements:Netskope Tenant ServiceNow Instance Prerequisites:Install the Netskope App for Security Incident Responder - https://

100

1 day ago

wilsonExplorer III

Next Gen SWG

Network locations information extraction

Is there a way to dump out the Network Locations and which IP address are contained in each?

4 hours ago

mfriedzzNew Member

Dashboard Gallery

Have Alert Stop Button by Default populate the Justification Note Field

5 hours ago

drftordieNew Member

Next Gen SWG

Netskope Slowing internet down especially Meeting Softwares (Google Meet, Slack Huddle etc.)

262

1 day ago

munster

Additional Discussions

Access China GOV website

HiSome of the China Gov websites have IP restriction that only allow coming China IPs.As we are connected via JP POP, China website will deny the access. I believe FProxy can mitigate this issue, can share China FProxy IP to use?Thank

1 day ago

ccreedNew Member

Next Gen SWG

Enhancement WEB UI SWG

Under Security Cloud Platform > Traffic Steering > App Definitions add ability to Disable. currently only supports edit and delete

2 days ago

ToruIshizakiNew Member III

CASB

Expansion of CASB-Controlled Services

Hi.I am a Netskope user in Japan. Currently, I am facing difficulties because the following cloud services in Japan cannot be controlled by CASB.It is causing significant inconvenience.I strongly request these services to be supported. Application Name: CryptobinURL:https://cryvia.cryptobin.jp/crypto/usr_index.action Application Name: Dokodemo Cabine,URL:https://dococab.tayoreru.com/login.html Application Name: HENNGE Secure Transfer URL: https://transfer.hennge.com/#/login

140

2 days ago

steff94New Member III

Next Gen SWG

Disable outgoing XFF-Header to hide public ip of clients?

Hi all, because of privacy reasons, we don’t want Netskope to pass along the X-Forwarded-For-Header containing the public IP address of our users to the Internet.. The following website tests can be used to prove that Netskope always provides this information.notskope.comBrowser Spy (gaijin.at) How can we disable this Feature of Netskope? We don’t want Netskope to pass along the original public IP of our users ...The setting for the XFF Header unser Settings → Security CLoud Plattform is set to “Do not trust” but it has obviously nothing todo with our problem: In our current on-premise proxy we had the option to remove theXFF Information:

4694

3 days ago

SivaExplorer III

Discussions

Report on Device Classification and Client configuration

Hi there, is there a report to list Device Classification and Client configuration values for all NSClient devices?

242

4 days ago

ElTetuNew Member III

Next Gen SWG

Forward Proxy vs Reverse Proxy on clientless scenario

Hi,If a customer has a corporate site where they configure Cloud Explicit Proxy as a steering method and they have clientless devices, such as servers, and the customer wants all traffic to be authenticated, what is the difference between configuring a SAML Forward Proxy account to authenticate this traffic and configuring a Reverse Proxy as a Service on the Netskope tenant? Additionally, which option is the best approach?If the clientless device is a BYOD from a third-party worker, I assume that the best option would be to use the Reverse Proxy so that they don’t need to change the proxy settings on the device. But what about servers or corporate-managed clientless devices? What kind of authentication method should be used for them, and what are the differences, if any, between these methods? Thanks! Regards

502

6 days ago

RobinTNew Member

Private Access for ZTNA

Is re-auth feature useful in a windows corporate workstation context

Hi Netskope community, I’ve deployed NPA for my company for several years now, with the re-auth feature enabled (every X days). This feature is leading to some difficulties in autopilot context + comes with few “bug” here and there, with complains from few users requiring to manually re-auth. While reviewing those problems, I’m challenging the utility of this feature in my context:I have Windows 11 environment, all devices hybrid joined when the auth expired, there is a popup appearing, getting the local windows auth token automatically and disappearing by itself after few seconds I have a conditional access rule in azure disabled MFA for NPA app when it comes from trusted corporate device. Nobody in the company had to enter credentials because the auth is always OK since it comes from local windows session.In this situation, for windows corporate laptop, I’m wondering if there is any reason to enable this feature from a security standpoint.I know that Netskope is recommending to acti

362

6 days ago

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

DEM: Digital Experience Management forum

9 topics

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure to cloud risks by providing a 360° view of activity throughout the Netskope platform.

Dive into the Netskope Forums Community for comprehensive discussions on cloud security, network protection, and innovative cybersecurity solutions. Connect with experts and peers to share knowledge, experiences, and best practices in safeguarding digital assets and ensuring secure cloud adoption.