Netskope Community - Cloud Security & Cybersecurity Forum

Recent Discussions

Recent activity
Help others
Categories

AllenWuNetskope Partner

How-to Retrieve Group Membership from SAML Assertion?

Wonder if anyone enabled this feature and know how to configure.Description on docs.netskope.com is limited.https://docs.netskope.com/en/known-issues-in-release-123-0-0#retrieve-group-membership-from-saml-assertionRetrieve Group Membership from SAML AssertionNetskope has introduced the ability to leverage group information from SAML assertion responses to streamline policy enforcement and group management. Here are the key responsibilities: Auto populating SAML groups: Automatically populate group memberships based on “memberof” values in the SAML assertion response for group-based policy creation . Pre-defined SAML groups: Netskope Administrators can create SAML groups using “memberof” values from the SAML assertion response and configure policies in advance even before intercepting user traffic Friendly group name mapping: Netskope administrators can manually map SAML attribute values to user-friendly group names for simplified management and improved clarity in policy configurat

522

14 hours ago

C VinothkannaNetskope Partner

Artificial Intelligence and Machine Learning

UEBA predefined policy clone option

We would like to define the UEBA policies for the group of users matching to the File count.Example, if the User group “A” has the threshold of deleting 5 files as a count & User group “B” has the threshold of deleting 10 files as a count.We have identified the Predefined UEBA policy “Bulk Delete”. however, we can’t use it for the different user group with different file count.Could it be possible to add template or the clone the predefined policies for the custom configuration? If we have use the UEBA custom policy, file count is not available which has activity as a condition.

1 day ago

C VinothkannaNetskope Partner

Private Access for ZTNA

Matching Criteria limitation and Policy schedule option is not available for the Private application policies

We would like to control the Private application (Client based access) with Time bound & Geolocation for the users.The Client based Private application defined policy doesn’t have the source IP as match criteria for identifying the users Geolocation. The Private Application policy doesn’t have the policy schedule option like the Cloud app or the web access policies.We are expecting whether this can be achieved with the Netskope or addressed by Netskope in the future releases.Thank you.

1 day ago

Rohit_BhaskarNetskope Employee

About the Netskope Community

🛡️ Community Access: User Moderation in Place

Hey Netskope Community Members! 👋 Just a quick heads-up for all new members (and a reminder for existing ones) — to keep the Netskope Community safe and valuable for our customers and partners, we manually review and approve every new user who joins. This means:✅ We verify all registrations to ensure you're a Netskope customer or partner⏳ It can take up to 12 hours for your account to be approved🧑‍💻 Once approved, you’ll have full access to post, comment, and submit ideas If you’ve just signed up and don’t see full access yet — hang tight, our team is on it!And if it's been more than 12 hours or you're running into issues:📩 Reach out to Rohit Bhaskar📧 Or email us anytime at community@netskope.comThanks for your patience — this process helps us keep the community helpful, focused, and secure for everyone who’s part of the Netskope journey. 🙌

1 day ago

Rohit_BhaskarNetskope Employee

About the Netskope Community

💡 How to Submit an Idea in the Netskope Community

We're excited to hear your feedback and feature requests — your ideas help shape the future of our products! Here’s a quick guide on how you can submit your ideas directly through the Netskope Community:✅ Steps to Submit an Idea: Log in/Signup to community.netskope.com. Navigate to the Ideas section. Click on “Submit an Idea”. Fill in your idea title, provide a detailed description, and choose the relevant category or product area. Hit Submit — and that’s it! Our Product and CX teams will review your suggestion. 🛡️ Note on Access & Moderation:To ensure a high-quality experience, all community users are moderated. This means: Only Netskope customers and partners are approved for posting ideas and discussions. New users may experience a short delay while access is verified and approved. If you’re unable to see the Submit Idea option or face any issues:👉 Please reach out to Rohit Bhaskar directly📧 Or email us at community@netskope.com Your input is invaluable — thank you

1 day ago

DanielViteriNetskope Partner

Discussions

NSClient Reinstalltion withou tamperproof password

Hello,I’m having an issue with a Netskope Client on a windows machine and I would like to reinstall the agent but unfortunatelly I don’t remember the password configured for antitampering. As the NsClient is not connecting to the tenant changing the antitampering password is not an option. What else could I do to reinstall the NsClient on the user machine.

141

1 day ago

MSpaldingNew Member III

Netskope Cloud Exchange (CE)

[Cloud Exchange] Docker & Podman versions not recognized at install

Please let me know if there is another community thread for this issue, but I could not find one when searching.When I attempt to install CE v5.1.1, I get a failure for Docker and Podman because the installer cannot recognize the versions. However, I have confirmed that these services are installed. Do they need to exist in a specific file path in order for the installer to see them?

101

1 day ago

jschueleNew Member III

DLP

Last Event time 55 years ago

Since deploying the latest golden release of the NS client (v126.0.0.2387) the Last Event field for all systems shows 55 years ago. Is this going to be fixed?

242

2 days ago

Rohit_BhaskarNetskope Employee

Community News & Announcements

Webinar Recording is Available Now!! Threat Protection - Expert - Integrations Part 2

If you missed the recent technical workshop, "Threat Protection - Expert - Integrations Part 2 - Cloud Exchange Integrations", the recording is now available!This session, led by Mark Pray, Sr Product Adoption Expert at Netskope, was an invaluable opportunity to dive deep into maximizing your Netskope Cloud Security solution through powerful Cloud Exchange integrations.As an extension of our regular technical workshops, these sessions are designed to help you get the most out of your Netskope investment.In this recording, you'll learn: Advanced Integration Use Cases Deep-Dive: Automation and Custom Workflows Best Practices for Optimization Live Q&A with Netskope Experts Real-World Scenarios & Troubleshooting Tips Enhance your threat protection strategy and learn how to leverage the full potential of Netskope with Cloud Exchange. Access the recording today! Kindly use below recording links a per your convenience : Customers Partners

2 days ago

mkoyfmanNetskope Employee

Next Gen SWG

Configuring CLI-based Tools and Development Frameworks to work with Netskope SSL Interception

If Netskope is deployed inline (for CASB or Web), some CLI tools will not work because they use certificate bundles distributed with those tools (i.e. Python distribution, for example), and they do not access system certificate store where Netskope client installs Netskope root CA. The guidance below will allow you to enable those tools to seamlessly work with Netskope SSL interception.In order for these tools to trust Netskope-signed certificates, they need to be configured to trust Netskope Certificate Authority (CA). This is typically accomplished by setting certain environment variables to point to Netskope CA to allow for smooth SSL operation.The variables need to be set to point to the following files that contain Netskope CA:On a Mac: /Library/Application Support/Netskope/STAgent/data/nscacert.pemOn Windows: %ProgramData%\Netskope\STAgent\data\nscacert.pemFor example to set REQUESTS_CA_BUNDLE variable on a Mac to point to the Netskope root CA, you can run this command:export REQ

131269

2 days ago

AllenWuNetskope Partner

Next Gen SWG

How-to Retrieve Group Membership from SAML Assertion?

522

14 hours ago

C VinothkannaNetskope Partner

Artificial Intelligence and Machine Learning

UEBA predefined policy clone option

1 day ago

C VinothkannaNetskope Partner

Private Access for ZTNA

Matching Criteria limitation and Policy schedule option is not available for the Private application policies

1 day ago

DanielViteriNetskope Partner

Discussions

NSClient Reinstalltion withou tamperproof password

141

1 day ago

MSpaldingNew Member III

Netskope Cloud Exchange (CE)

[Cloud Exchange] Docker & Podman versions not recognized at install

101

1 day ago

cubiaz55New Member III

Next Gen SWG

Netskope ASN For Okta Whitelisting

Looking to create an allow list for access to Okta when egressing from one of Netskope’s PoP’s and I came across ASN 55256, Netskope’s ASN. Okta allows you to use an ASN for allow listing purposes, however I am looking for some community feedback if others have used this ASN for this. Is it a good solution? things to be mindful of? etc. Thanks!

2 days ago

kpattersonAONew Member

Next Gen SWG

How to Block Google AI Mode?

Hello Netskope Community, With the recent launch of Google’s AI mode in Google searches, I am looking for a way to block it using Netskope. I noticed that the URL pattern is different between the AI mode and the regular search results, however the wildcard matching cannot be used because of the way Netskope handles wildcards. I am not seeing an obvious way to use regex to match it, however if someone else does please let me know. I also explored matching the activity based on HTTP header and was unable to find a unique header field that I could match on (again if anyone knows different please let me know). My next plan of attack is to try making a custom CCI application using the Netskope App Activity recorder browser extension and block access to it, but I haven’t tried that yet. Does anyone have any other ideas?Thank you in advance.

291

3 days ago

mdecampsNew Member

Next Gen SWG

How to disable Netskope Agent remotely ?

Hello,How to provide a Service Desk the capability to disable Netskope agent for users without giving them an access to the Netskope console and without providing them the password to disable the agent (because we enable password protection against user agent deactivation) ?

1916

4 days ago

maxkorNew Member III

Private Access for ZTNA

Browser Access- Concurrent Users

I wanted to confirm if there's a way to view users and the applications, they are connected to in real time using Netskope Publisher. Linux Command Line: Commands or scripts that can display real-time connections, including the users and applications they are connected to. Netskope Dashboard: Any dashboard view or feature that provides live monitoring of users and applications. Thanks!

571

4 days ago

bntrotterNew Member

Artificial Intelligence and Machine Learning

Witness.AI Best Practices

Are there any Best Practice documentation with Witness.AI generatice ai compliance tool integration along side or working in tandum with Netskope?

160

5 days ago

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

DEM: Digital Experience Management forum

9 topics

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure to cloud risks by providing a 360° view of activity throughout the Netskope platform.

Dive into the Netskope Forums Community for comprehensive discussions on cloud security, network protection, and innovative cybersecurity solutions. Connect with experts and peers to share knowledge, experiences, and best practices in safeguarding digital assets and ensuring secure cloud adoption.