Recently active topics

Dear Team, We have implemented a policy to block the sharing of source code when a user attempts to send it via file attachments (such as TXT, PDF, DOC, etc.) to personal email domains like @gmail.com. The policy is working as expected when the source code is shared directly as plain text within the email or message body. However, when the same source code is included inside a file attachment and sent, the policy does not trigger. We have already raised this concern with the Netskope Support team, and the response received was that this use case is not supported. However, we request you to please re-check and confirm if there is any possible way to achieve this requirement. Note:We are able to block uploads entirely, but our specific requirement is to block the transfer only when the to_user does not belong to the corporate domain. We request you to please help us understand why this behaviour is occurring and assist in resolving the issue, as this use case is critical and needs to be

As we wrap up 2025, it’s the perfect moment to pause, reflect, and celebrate what we’ve built together as a community 💙Thanks to your curiosity, collaboration, and willingness to help one another, the Netskope Community had an incredible year of growth and impact. ✨ Here’s what YOU made possible in 2025: 📝 2,069 posts created (+20%)💬 1,010 replies shared (+18%)🧵 1,059 topics started (+21%)👍 1,577 likes exchanged (+19%)🏆 367 helpfulness votes recognising quality content 🌍 Community Reach & Engagement👀 995,935 total page views — just a heartbeat away from 1 MILLION! 🎯👥 365,796 unique visitors (+56%)🧑‍💻 3,379 registered visitors (+25%)🌐 362,417 guest visitors exploring community knowledge Every question asked, every answer posted, every like given—it all adds up. These numbers represent real people helping real customers solve real challenges, faster and better. 🙏 Thank you for showing up, sharing generously, and making this community a trusted destination for learning a

 Ref Link Quarterly Product Release Webinar – December 2025 | Community   

There is a business need to have a desktop shortcut created to complete Re-authenticate Private Access.

Hello Community, Is it possible to implement Netskope in a workgroup environment? The customer doesn't have any AD or IDP solution in their environment and have a distributed environment.If possible what would be procedure? 

Currently, Netskope identifies certain IP addresses as malicious based on threat intelligence; however, due to the absence of SNI inspection, traffic to these IPs is sometimes allowed to pass through. This behavior results in an inconsistent security posture because malicious IPs should be blocked unconditionally to minimize risk.We kindly request a feature enhancement to ensure that any traffic destined for an IP flagged as malicious is blocked unconditionally, regardless of whether SNI visibility is available or not.This improvement would strengthen the security logic by guaranteeing that malicious IPs never bypass protection simply because SNI information is missing or cannot be inspected.Impact: Prevents risky connections to known malicious IP addresses even when SNI cannot be inspected Aligns enforcement with expected security best practices Minimizes potential attack vectors and reduces security gaps You previously advised us to enable the backend flag “Block Single Destinati

Hi All, Has anyone integrated Crowdstrike NG SIEM with Netskope. In Crowdstrike i can see that their is native integration with Netskope and require API Key.  API V2 Document which is available in Crowdstrike portal is outdated. In Netskope, we need to create role and then generate API key. Not sure which role we should assign in Netskope Tenant before generating API key.and  also correct me if role creation in Tenant Admin and generating API key is wrong method. Thank you in Advance.Govi33

Hello everyone! We recently started having issues with Netskope where OWA and Outlook (new) will not sync emails without a manual sync. Outlook (classic) works just fine though.I have had Netskope on my device since May hand have had no issues until Dec 10th. Microsoft may have made some changes, but I'm looking for a fix on the Netskope side. This is affecting all of my users. I've tried temporarily adding steering exceptions for outlook domains, but it has not solved the issue. Thank you all for your help!!!

We are trying to install the netskope clinet via IDP using the below command. But somehow it is not successful. msiexec /I NSClient.msi tenant=XXX domain=goskope.com installmode=IDP mode=peruserconfig enrollauthtoken=XXX enrollencryptiontoken=XXX (/qn - we removed the qn just ot see the live progress what is happening). With Email-Invite it is working on the same PC, but we are trying to install via IDP for bulk installation without users intervention to enter the credentials. We have configred the token at MDM distribution and also created the SAML authentication under Forward Proxy. When we see the logs and didn’t found anything resolvable. "event_details": "Installed client version 132.0.7.2513",        "actor": "System"    }}2025/11/26 11:13:04.911 stAgentSvc p155c tc24 info addonmanapi.cpp:756 addonmanapi posting client status2025/11/26 11:13:04.911 stAgentSvc p155c tc24 error addonmanapi.cpp:759 addonmanapi Post Client Status addon userkey is empty2025/11/26 11:13:04.911 stAgentS

Hello!We have an enterprise license for Lovable AI at the company, but we want to block personal access and allow access only to those with the license. Currently, access to the license is via SSO.Since the application is not supported on Netskope, how can we achieve this license-based access control while blocking personal access?We've tried various methods using regex, HTTP headers, and attempts to block access through Google's provider and Git, but without success. When I click on Google login, for example, I'm redirected to their authentication page.

Hello Team,I am working on SSL inspection with Netskope in our organization (Bogotá, Colombia) and encountered the following issue when accessing a specific domain: Domain: jarvis.grupokonecta.co Netskope error message excerpt: IncompleteCertChain (unable to get local issuer certificate) … Blocked by SSL_INCOMPLETE_CHAIN Verification error: unable to get certificate for issuer = ‘/C=BE/O=GlobalSign nv-sa/CN=GlobalSign GCC R3 DV TLS CA 2020’, subject = ‘/CN=.grupokonecta.co’, altnames = DNS:.grupokonecta.co, DNS:grupokonecta.co’, caissuers = ‘http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt’, sslerrdesc = ‘unable to get local issuer certificate’ I have verified via openssl s_client -connect jarvis.grupokonecta.co:443 -servername jarvis.grupokonecta.co -showcerts and online tools such as SSL Labs, and indeed the certificate chain appears incomplete (missing or not served correctly by the server). What we have reviewed so far: The server certificate for *.grupokonecta.co i

I have installed the Netskope client on both Windows and macOS devices. On some Windows laptops, a few users are experiencing a freezing issue—specifically, their laptops freeze shortly after startup.We have multiple security tools installed on these devices, including Kaspersky Endpoint Security. All Netskope-related applications, pop-IPs, domains, and subdomains have already been allowed in Kaspersky. The following IPs and paths are whitelisted:Allowed IPs/Ports:http://162.10.*:443/ https://162.10.*:443/ http://163.116.*:443/ https://163.116.*:443/ Allowed Application Paths:C:\Program Files (x86)\Netskope\* C:\Program Files (x86)\Netskope\STAgent C:\Program Files (x86)\Netskope\STAgent\nsdiag.exe C:\Program Files (x86)\Netskope\STAgent\nspacparser.exeC:\Program Files (x86)\Netskope\STAgent\stAgentSvc.exeC:\Program Files (x86)\Netskope\STAgent\stAgentUI.exeC:\Program Files (x86)\Netskope\STAgent\tloader.exe C:\Program Files\Netskope\EPDLP\* Allowed Domains: netskope.com *.netskope.c

I would like to get some clarification on a Netskope SWG + DLP deployment scenario.We have established a firewall tunnel to the Netskope cloud and integrated ADFS for user authentication. Both corporate-managed devices and BYOD devices (phones and personal laptops) are connected to the same LAN and their traffic is forwarded to Netskope through the tunnel.My question is regarding BYOD behavior: When ADFS authentication is enabled, are BYOD devices expected to experience browsing or authentication issues? How does Netskope handle user identification and authentication for non-domain-joined devices in this setup? Are there recommended best practices for handling BYOD traffic when using ADFS with a firewall-based forwarding architecture? Any guidance or real-world experience would be appreciated.

現在、Intuneにてシングルユーザーモードで展開しておりますが、マルチユーザーモードでの配布を考えております。どのように展開すればいいのでしょうか。

Is anyone experiencing problems with Next Gen when it comes to policies for Google Workspace. Not sure if it is just me but it seems that I have had multiple things that don’t seem to work or just is not available. An example I created a policy to take action on specific resource IDs (not sure why Netskope is not using the Google Document ID) but the policy did not find the document at all. Did this with support on the line and they did not know when it was not working. I cannot create a policy to apply to specific owners I only have the all owners in the Collaboration section. I feel like this has not been through any QA testing for Google Workspace at all. 

We've enabled the new transaction logs feature and sending it to our AWS S3.We have came across something which we wanted to point out which is the directory structure is in hours/days/month/year this is not how standard logging folders are created and is different from your old approach too. This can be an issue during manual searching or programatic querying in tools like AWS Athena. I suggest changing this to a normal directory structure to avoid these pains.

Netskope Microsoft Purview Integration with AI AgentsOverviewThis solution implements an integration with Netskope and Microsoft Purview for DLP enforcement and uses an AI Agent in Security Copilot to ask questions about the policies on both systems and about any alerts that might be happening. The Netskope One for Microsoft Purview DLP setup is documented here https://docs.netskope.com/en/netskope-one-for-microsoft-purview-dlpI will be covering the Microsoft side and how the two work together. There is one thing to note on the Purview DLP integration. You will see in that documentation that  Entra ID user provisioning within Netskope is a prerequisite. When setting up you create an Enterprise Application in Entra. The application you set up is touched again in the Purview setup in step 5 where you will need to re-grant permissions.PrerequisitesNetskope tenant account Microsoft Purview Microsoft E5 licenseArchitecture FlowVia Netskope policy, web traffic will be sent to Microsoft Purvi

Looking for nice well presentation for netskope with video shots

Netskope Global Technical Success (GTS)Facebook - How to Block Facebook Video Streaming Netskope Cloud Version - 132 ObjectiveThis document aims to provide an understanding of how to block Facebook video streaming PrerequisiteNetskope SWG or NG-SWG license is required ContextOne of the common use cases related to Facebook is when a customer allows access to Facebook for a specific department for business purposes but wants to restrict video streaming. Do You Know?Netskope acknowledges Facebook as a Cloud Application and provides a pre-defined cloud app connector. As of Dec 10, 2025 with Netskope’s Facebook predefined connector, customers can exercise control over the following activities:Image iTraffic destined to the below domains will be counted under Netskope’s pre-defined Cloud App Connector for FacebookImage iiIf you look closely at the domain list, you will notice that Facebook uses its own CDNcdn.fbsbx.comfbcdn.netscontent-fra5-1.xx.fbcdn.netscontent-mad2-1.xx.fbcdn.netstatic.xx

How to allow google maps image, which is blocking under cloud storage category.

I can write an AA report with a CIDR, but not one excluding a CIDR.What happens is that I have to write two widgets, download to spreadsheet, match rows and then subtract. It would be far easier to just exclude a CIDR in a Widjet.

Does the Netskope client keep the SWG/NPA secure tunnels if the laptop/PC goes in sleep or hibernate mode?  Is there a recommendation? Thanks.

Netskope Global Technical Success (GTS)Netskope NPA Partner Tenant Access Configuration Netskope Cloud Version - 133 ObjectiveThis document provides a clear walkthrough of Netskope Partner Tenant Access and explains how users can connect to private apps in partner tenants without unenrolling from their primary tenant. It also covers the purpose of the feature, the supported platforms, and how this capability simplifies access for customers working across multiple partner environments. DefinitionsPrimary tenant: This is the customer’s main Netskope tenant where the user is enrolled. All SWG and other core security policies for that user are managed here.Partner tenant: This is the Netskope tenant owned by a partner organization. This tenant hosts the private applications the user needs to access and also holds the relevant access policies for those apps.Partner access: This is the feature that allows a user enrolled in their primary tenant to access private apps hosted in a partner tena

Hello,I need to block a specific application within the https://marketplace.visualstudio.com/ domain (VSCode Marketplace).I would like guidance on how to configure Netskope to block only this specific application without affecting access to the rest of the domain.Could you please advise on the recommended procedure for this type of blocking?Thank you.