Netskope Community - Cloud Security & Cybersecurity Forum

Recent Discussions

Recent activity
Help others
Categories

dinbarzilyNetskope Partner

Redirecting Large File Downloads to S3 or SharePoint – Policy Implementation Help

i have this Use Case For example, if a file is larger than 200 MB, I want it to be automatically redirected and uploaded to a SharePoint or S3 bucket.How can I achieve this using Netskope?

151

1 day ago

Aaron_ZhangNetskope Employee

Dashboard Gallery

Manage your application instances through instance tags

This dashboard provides visibility into application instances detected in your environment based on instance tags. The dashboard helps you quickly uncover unsanctioned & untagged application instances and the corresponding data movement. The dashboard template is attached below. Feel free to try it out in your own environment and share your thoughts & feedback! Looking for visibility into corporate vs. non-corporate instances? This article can help.

110

1 day ago

jjsarpiNew Member

Next Gen SWG

Netskope Client for External Service Providers

Hello everyone,Here's my problem: we have a bastion server on AWS (Active Directory authentication) that is restricted in terms of authorized IPs (at the AWS instance level), and we need mobile service providers (smartphone access points, for example, so no fixed IPs, and we can't open the entire internet without our authentication portal being blown up in 2 seconds) to be able to connect to it.The IP ranges of our Netskope server are authorized, so my question is: Would it be possible to create a specific Netskope client that service providers could activate when they need to connect to our bastion server and then deactivate it after ? Has anyone had a similar need? I asked the AI, and they told me it's possible. Theoretically, I should create a "mobility providers" user group where we could place the email addresses of our mobility providers for enrollment, but I don't have this menu, even though I'm a "tenant admin." Our Netskope account supports SWG and NPA.Thanks in advance if you

141

2 days ago

Juan SebastiánNetskope Employee

[Spanish Language] General

[Spanish Language] IPS - Mejores prácticas y puntos importantes

Netskope Global Technical Success (GTS)IPS - Mejores prácticas y puntos importantes Netskope Cloud Version - 117 ObjetivoProvide important information about IPS as well as best configuration practices Pre-requisitosNetskope Standard/Advanced Threat Protection with IPS enabled. If IPS is not currently enabled please get in touch with your CSM or Sales Team. No license is required. ContextoThe customer wants to ensure that IPS is correctly configuredConfiguraciónPuntos importantes sobre IPS (Sistema de Prevención de Intrusiones): La documentación detallada sobre cómo habilitar IPS se encuentra en este documento: https://docs.netskope.com/en/about-ips-settings/ Para confirmar si el IPS está habilitado en tu tenant, navega a Settings > Threat Protection. Allí podrás ver si el IPS está activo actualmente. El IPS de Netskope tiene dos modos de acción: Modo de Bloqueo y Modo Sólo Alerta. Esto se puede ver fácilmente en la pestaña de Signature Overrides: Mejores prácticas a tener en cuenta

2 days ago

Juan SebastiánNetskope Employee

[Spanish Language] General

[Spanish Language] Bloqueo de tráfico DNS sobre TLS usando Netskope

Netskope Global Technical Success (GTS)Bloqueo de tráfico DNS sobre TLS usando Netskope Netskope Cloud Version - 122 ObjectvoCrear una política para bloquear tráfico DNS sobre TLS usando Netskope Pre-requisitosLicencia CFW y NG-SWG son requeridas ContextoBloquear DNS sobre TLS asegura que todo el tráfico DNS sea enrutado a través de los servidores de la empresa, mejorando la visibilidad y el control. Previene la evasión de políticas y reduce los riesgos de seguridad provenientes de dominios maliciosos cifrados. ConfigurationDNS over HTTPS (DoH) y DNS over TLS (DoT) no son protocolos compatibles para el steering de Netskope (CASB, NG-SWG, NPA, CFW) y pueden ser explotados por actores maliciosos. Por lo tanto, Netskope recomienda encarecidamente configurar una política para dirigir y bloquear este tráfico.Este documento se centra en los pasos para configurar políticas para bloquear DoT. Para mejores prácticas sobre el manejo de DoH, por favor consulta:https://docs.netskope.com/en/best-pr

2 days ago

mcastroNetskope Employee

[Spanish Language] ChatGPT

[Spanish Language] Acceso a ChatGPT a través de cuenta corporativa únicamente

Netskope Global Technical Success (GTS)Caso de Uso - Acceso a ChatGPT a través de cuenta corporativa únicamente Netskope Cloud Version - 122 ObjectivoChatGPT se puede utilizar cuando el usuario final inicia sesión con su cuenta corporativa PrerequisitoSe requiere licencia CASB Inline ContextoAlgunos clientes han pagado suscripciones a ChatGPT para sus usuarios finales. Su objetivo es limitar el acceso a ChatGPT exclusivamente a sus cuentas corporativas.Sabías que?A partir del 22 de abril de 2024, Netskope reconoce ChatGPT como una cloud app y proporciona un conector predefinido.Con el conector predefinido para ChatGPT, los clientes pueden ejercer control sobre las siguientes actividades: El conector predefinido tiene la capacidad de detectar instancias Actualmente, ChatGPT 3.5 no requiere que los usuarios finales inicien sesión para su uso (versión gratuita) ConfiguraciónMarcado de instancia ChatGPTPor ejemplo, asumamos que "gmail.com" funciona como mi dominio corporativo oficial. Rut

2 days ago

Mario GarciaNetskope Employee

[Spanish Language] ChatGPT

[Spanish Language] Solo permitir Chat GPT y bloquear la demás IA Generativa

Netskope Global Technical Success (GTS)Caso de Uso - Solo permitir Chat GPT y bloquear la demás IA Generativa Netskope Cloud Version - 122 ObjetivoSolo permitir Chat GPT y bloquear la demás IA Generativa PrerequisitoSe requiere licencia CASB Y SWG ContextoExisten numerosas aplicaciones en la nube y sitios web clasificados bajo IA generativa. Un cliente específico desea permitir solo ChatGPT y bloquear el acceso a todas las demás aplicaciones en la nube y sitios web dentro de la categoría de IA generativa.Sabías que?Al 31 de diciembre de 2024, hay un total de 257 aplicaciones en la nube identificadas como IA generativa según la base de datos Netskope CCI.La casa matriz de ChatGPT es OpenAI.Netskope reconoce a OpenAI & ChatGPT como aplicaciones cloud y proporciona un conector predefinido para estas.Con el conector predefinido los clientes pueden ejercer control sobre las siguientes actividades: El tráfico a los subdominios/dominios resaltados en la imagen de arriba se considerará tr

2 days ago

mcastroNetskope Employee

[Spanish Language] General

[Spanish Language] Caso de Uso - Bloquear IA Generativa a nivel global

Netskope Global Technical Success (GTS)Caso de Uso - Bloquear IA Generativa a nivel global Netskope Cloud Version - 122 ObjetivoBloquear IA Generativa a nivel global PrerequisitoSe requiere licencia CASB ContextoCómo bloquear IA Generativa por medio de una política de Realtime ProtectionSabías que?Al 31 de diciembre de 2024, hay un total de 257 aplicaciones en la nube identificadas como IA generativa según la base de datos Netskope CCI. Recreación de laboratorioPolítica de Realtime ProtectionRuta - Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New PolicyEl usuario final intentó acceder a Chat GPT y recibió el siguiente mensajeVerificaciónCon vigencia inmediata, la Política de Real Time Protection bloqueará el acceso a todas las aplicaciones y sitios web en la nube categorizados como IA generativa. Términos y CondicionesToda la información documentada se somete a pruebas y verificación para garantizar su precisión.En el futuro, es posible que el

2 days ago

mcastroNetskope Employee

Youtube

[Spanish Language] Permitir una categoría específica de YouTube

Netskope Global Technical Success (GTS)Caso de Uso - Permitir una categoría específica de YouTube Netskope Cloud Version - 121 ObjetivoPermitir una categoría específica de YouTube PrerequisiteSe requiere licencia CASB ContextoComo sabemos, YouTube es una plataforma de streaming que ofrece contenido en varias categorías, como música, educación, juegos, noticias, deportes y más. Si un cliente desea restringir el acceso solo a una categoría específica, puede seguir los pasos a continuación. Sabías que?Netskope reconoce a Youtube como una aplicación cloud y proporciona un conector predefinido para esta?A partir del 18 de marzo de 2024, con este conector los clientes pueden ejercer control sobre las siguientes actividades: ConfiguraciónCada vídeo de YouTube está asignado a una categoría. Netskope clasifica los vídeos de YouTube como "Object Type." Ahora, consideremos que el requerimiento del negocio es permitir únicamente el “Object Type - Education" Crear una política de Realtime Protecti

2 days ago

mcastroNetskope Employee

[Spanish Language] General

[Spanish Language] Permitir solo canales específicos de Youtube

Netskope Global Technical Success (GTS)Caso de Uso - Permitir solo canales específicos de Youtube Netskope Cloud Version - 121 ObjetivoPermitir solo canales específicos de Youtube PrerequisitoSe requiere licencia de CASB Inline ContextoEl cliente ha implementado una Política de bloqueo global para YouTube, pero ha expresado la necesidad de incluir en ‘whitelist’ canales de YouTube específicos.ConfiguraciónPaso 1 - Especifique el nombre de la instancia del canal de YouTube que requiere inclusión en la ‘’whitelist’Ruta - Netskope Tenant UI >>> Skope IT >>> Application eventsPaso 2 - CCI - Youtube App TagRuta - Netskope Tenant UI >>> CCI >>> Cloud Apps >>> Youtube >>> Tags - - - - View MorePaso 3 - Cree una política de Real Time ProtectionRuta - Netskope Tenant UI >>> Policies >>> Real-time Protection1era Política 2da Política 3era Política Paso 4 - Orden de las políticas Términos y condicionesToda la información doc

2 days ago

dinbarzilyNetskope Partner

Next Gen SWG

Redirecting Large File Downloads to S3 or SharePoint – Policy Implementation Help

i have this Use Case For example, if a file is larger than 200 MB, I want it to be automatically redirected and uploaded to a SharePoint or S3 bucket.How can I achieve this using Netskope?

151

1 day ago

jjsarpiNew Member

Next Gen SWG

Netskope Client for External Service Providers

141

2 days ago

tinomNew Member III

Private Access for ZTNA

Printing via NPA, to an onprem printer

Searching the forums and I couldn’t find an answer. We have the need to print, to on-prem printers (via a print server), for remote users.I’ve created the Private App for the Print Server with the following portsTCP 135,137,139,445,631,9100UDP 135,137,139,445,631,9100But it doesn’t seem to be working. Although management (via mmc) of the print server is fine.Any idea?I don’t think I need to create a Private App for the printer(s) themselves, since the Print Server should be the connection manager / proxy for that traffic.

3 days ago

C VinothkannaNetskope Partner

Private Access for ZTNA

Matching Criteria limitation and Policy schedule option is not available for the Private application policies

We would like to control the Private application (Client based access) with Time bound & Geolocation for the users.The Client based Private application defined policy doesn’t have the source IP as match criteria for identifying the users Geolocation. The Private Application policy doesn’t have the policy schedule option like the Cloud app or the web access policies.We are expecting whether this can be achieved with the Netskope or addressed by Netskope in the future releases.Thank you.

222

6 days ago

MetgatzNKNetskope Partner

Next Gen SWG

Alternatives - Deployment/Enrollment with UPN - Based on Postman-SCIM - Users - Groups

Alternatives - Deployment/Enrollment with UPN - Based on Postman-SCIM - Users - GroupsHello community, how's it going? Good afternoon, I hope you're all well. I have a specific case to discuss:In a scenario where we have a complete refusal to touch anything in Azure AD or AD-onprem (nothing at all, no way - no agent, no directory import, no enterprise app, no ID entry, etc., nothing at all, it's not possible because there's absolutely no option), here we already know, we use our beloved Postman to use SCIM and start generating users/groups, so to speak, "manually." Then we have the AD users with UPNs, everyone happy without touching AD but with the AD-onprem UPN users, already in the Tenant using the Postman SCIM API.We can deploy with tools like System Center, DesktopCentral, or anything else for .msi files with UPN values. Everything's OK here too. We install, the Windows users of the AD domain start, and the UPN registration and enrollment are OK, as expected. Now, here's my big que

450

8 days ago

wilsonExplorer III

Next Gen SWG

Help.salesforce.com AI bot

Yes, I am going to create a case, but on the chance I can shortcut the process I thought I would ask here. Has anyone developed a solution for the AI chatbot at help.salesforce.com?We know we are going to have to SSL bypass, we just having figured out what URLs yet.

171

10 days ago

jamesbanNew Member III

Next Gen SWG

socks5 proxy support

Want to migrate from onprem proxy to NS proxy for SOCKS proxy use case. Can someone help with the key consideration before migration plan?

212

11 days ago

Mike BNew Member

CASB

SSL cert decryption issues.

hi all! We’ve been having great difficulties with Applications that are sensitive to SSL decryption. Namely Software developer tools. We have perhaps 2000 software devs, that could all potentially use a different dev tool, but many do use the same of course. The issue is, the developers are either unwilling to help work with us to get the Netskope certs included into their application cert store, or they are unable to help us due to unknown OS type knowledge. We have been charged with doing whatever we can to avoid any individualized “one off” type protections on the dev’s individual systems, as something that could be “deployed” would be very much more desirable. We do have tamper protection enabled, so I know we’ll have to provide the NetSkope certs to whatever solution we find. We have a few of their packages with a solution, but it usually requires us working with the user to implement. We also have some cert pinned apps setup, and a couple DND’s setup as well. Of

380

11 days ago

R3F1N3DNew Member

Private Access for ZTNA

Netskope on Azure Virtual Desktop

Hello Netskope Community, we want to use netskope on a azure virtual desktop environment which uses FSLOGIX.But sadly we don’t get it running. We configured the installation of the client in the golden image with the multisuser modecommand:tenant=igz domain=de.goskope.com installmode=IDP mode=peruserconfig enrollauthtoken=*token*enrollencryptiontoken=*token* autoupdate=on /qnthere would be a npavdimode as well but as far as I understood this mode is only needed when all users should use the same tunnel on the vdi.We want that the user on the vdi needs to logon to the client with his azure user, so he has his personal tunnel up with his own private app permissions. On the first logon on sessionhost A it works without any problems.If I relogon and get on sessionhost B my npa will not connecting anymore. We think that on the first logon my client genereates an encryption key to safe the client settings. And on sessionhost B this wont match anymore.we are getting the following errors in t

241

12 days ago

Vishal KumarNew Member

Private Access for ZTNA

Enabling MultiFactor Authentication support for Manage Engine

It would be great if Multi Factor Authentication Integration will be provided for Manage Engine. Our corporation is using Manage Engine for multiple applications for Multi Factor Authentication. If Integration of Netskope for Manage Engine will be supported/ provided, then we would be leveraged to use the same solution for Multi Factor especially for NPA. For NPA all forum & Garner suggest for enabling multi factor for best security strategy.

12 days ago

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

DEM: Digital Experience Management forum

9 topics

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure to cloud risks by providing a 360° view of activity throughout the Netskope platform.

Dive into the Netskope Forums Community for comprehensive discussions on cloud security, network protection, and innovative cybersecurity solutions. Connect with experts and peers to share knowledge, experiences, and best practices in safeguarding digital assets and ensuring secure cloud adoption.