Recently active topics

Your Netskope Monthly Highlights – March 2026The latest updates, resources, and events – all in one place.Hi there,As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities. 🚀 Product Release UpdatesRelease 135 is here!Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.📄 Release Notes - March 2026 ✅ Pro Tip: Check for features relevant to your current configurations. ✅ Features not to miss out!This section highlights key innovations from the recent Netskope release that can significantly enhance your Adoption and Value Realization journey.Top 5 Highlights:AI Guardrails : Announcing General Availability of AI Guardrails, a new AI security module that complements data protection and threat protection with protection from AI thr

Hiis it mandatory to provision on the tenant the users that will only have access to Browser Access apps? I mean, for third-party or contractors, that won’t install the Netskope Client and that only need access to browser access private apps, is needed to provision them via SCIM or manually?I have checked that having the user associated on the IdP, the user authenticates when trying to access the public URL of the BA private app, but if the user is not provisioned on the Netskope tenant, get a 401 error after authenticating even if the RTP policy allows “all users”The user only access the private app via BA after provisioning on the tenant. Is this correct? I wouldn’t like to provision all my contractors on the tenant Regards

In corporate environment there are scenario where endpoint machine needs to perform patching for their drivers, application, OS and sync-ing / upload files to corporate sanctioned file storage. How do we overcome the Advanced File Scanning’s DLP, File Profile and Threat Protection without editing the fall back behavior if we deem the destination or the source is sanctioned  ? I explore the options to use real time policy’s file constraints to overcome, however it seems to be not working just wish to check anyone have any idea to overcome it? Thanks in advance! 

The Netskope Cloud R135.0.0 documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Version 135.0.0.The key new or updated features are:AI Guardrails AI Prompt and Response Guardrails for Content Moderation and Protection from AI Threats AI Red Teaming AI Red Team Product CASB Real-time Protection Agentic Broker Next Generation API Data Protection General Availability of Smartsheet GitHub Activity Alerts and Dashboard Support SaaS Security Posture Management (SSPM) Discover and Risk Score Third-party Apps in Zoom Submit your feedback via docs.netskope.com.

We are experiencing an issue where Cursor AI traffic stops working when routed through Netskope with SSL decryption enabled. Specifically, the Cursor agent fails to function when traffic is inspected via Netskope.For security reasons, we do not want to bypass or exclude the Cursor AI domains from inspection. We would like to understand if there is a recommended solution that allows Cursor to function properly without bypassing SSL decryption.Could you please advise on: Any best practices for handling similar AI/agent-based applications under SSL inspection As part of our troubleshooting, we attempted lowering the HTTP version to 1.0. While this has resulted in partial functionality for some users, the issue is not fully resolved and the agent remains unstable. 

Hello,Is there a way we can create dashboard to track all the endpoints that are enabled vs disabled and the observed trend on how often does a user disable the client and enable it again (for example)? Thank you,Jennifer

Dear Valued Customer,Thank you to everyone who joined our recent session! Customer Success Webinar: Log streaming Transaction Event Streaming - Migration Path Update (APAC)What the webinar covers• What the transition involves• How to plan a smooth migration• Timelines and available support• Answers to common questions from current usersPresenter:Anvita Dwivedi — Product Manager, Data & Analytics, Netskope Watch the recording: Recording Link This session is especially useful for customers currently using Transaction Event Streaming to help you prepare early and ensure continuity in your workflows. If you still have questions after watching the recording, please reply in the comments — our team will be happy to help!

Dear All, Thank you to everyone who joined our recent session! Customer Success Webinar: Log streaming Transaction Event Streaming - Migration Path Update (NAM)What the webinar covers• What the transition involves• How to plan a smooth migration• Timelines and available support• Answers to common questions from current usersPresenter:Anvita Dwivedi — Product Manager, Data & Analytics, Netskope🎥 Watch the recording: Recording Link This session is especially useful for customers currently using Transaction Event Streaming to help you prepare early and ensure continuity in your workflows. If you still have questions after watching the recording, please reply in the comments — our team will be happy to help!

Are only predefined Profiles are Working? If Any Regex is there Kindly Provide!

Hi all, Hoping for some advice. We have a user that is experiencing intermittent issues with Google Workspace suite. Namely, when he is using Sheets, Docs, Drive, etc, it throws up errors such as; “Trying to connect”, “Working offline”, etc. We have disabled QUIC on the users browser. Nobody else has reported this issue.We have raised this with Netskope Support but we are stuck in an endless loop of capturing HARs and Netskope logs. As it is intermittent, it is difficult to capture logs at the right time / on a call with support team.Does anyone have any additional troubleshooting advice or have experienced the same thing?

 Hello Team 1. Executive SummaryCurrently, long-form PDF reports generated by Netskope (e.g., daily activity or security mail reports) fail to open correctly in industry-standard PDF viewers like Adobe Acrobat Reader. Users receive a critical warning: "The dimensions of this page are out-of-range. Page content might be truncated." This issue limits the ability for compliance and security teams to review, archive, and audit long reports using professional PDF tools. 2. Proposed SolutionsTo ensure cross-platform compatibility and adherence to international standards, we suggest the following enhancements to the PDF export engine:Option A (Pagination): Implement logic to automatically split "infinite-scroll" web reports into multiple standard-sized pages (e.g., A4 or Letter) once the content exceeds the 200-inch threshold.Option B (Scaling Factor): Upgrade the PDF export version to PDF 1.6+ and implement the /UserUnit parameter. This allows the engine to scale the coordinate system, enabl

Netskope Global Technical Success (GTS)Mozilla Firefox - Blocking Browser Extensions Netskope Cloud Version - 134 ObjectiveBlock Mozilla Firefox extensions and add-ons. PrerequisiteNetskope Next-Gen SWG license ContextThe business use case is to prevent users from installing browser extensions and add-ons in Mozilla Firefox Do You Know?Mozilla Firefox does offer a dedicated platform called the Mozilla Firefox Add-ons, where users can discover, download, and manage extensions and add-ons. ConfigurationBlock access to the Mozilla Firefox Add-ons – This stops users from browsing and installing extensions directly from the official site.Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> Policies >>> URL Lists >>> New URL ListsPath: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> Policies >>> Custom Categories >>> New CategoryPath: Netskope Tenant UI >>> Policies &

I have Slack API DLP policies generating incidents that include non-domain accounts in the “Shared With” field (e.g. mycompany, wf_bot_sd0fd333). This recently started as Agentic (AI) workflows have been created to automatically perform process functions within the app. I am currently unable to create either a Domain or Usr Profile to be used in a Exposure Exclusion because they don’t contain domains. This is creating an enormous amount of false-positive that must be triaged. Thoughts on what can be done, or whether this is something thats being worked on by Netskope? Thx

SummaryAllow administrators to configure an active/passive failover mode for publishers on a per-application basis, instead of the current active-active only model.Business justificationWe route SAP S/4HANA traffic (SAP GUI thick client) through two Private Access publishers. The SAP GUI client does not tolerate network path changes: any publisher switch immediately resets the TCP session, causing a SAP_GUI_DISCONNECT error.Hundreds of unique users experienced repeated disconnections due to publisher switching. Each Netskope "Change in Network" event triggered a PoP or publisher change, breaking the active SAP session.Current situationActive-active (current): redundancy is maintained, but publisher switching causes mass disconnections for session-sensitive applications. Single publisher (our workaround): disconnections are resolved, but redundancy is completely lost. If the publisher fails, all SAP access is down.We are forced to choose between reliability and availability.Requested fe

We have facing the issues private access re authentication issues. to resolved the issues we have restarted issues user machine. but restart option is not a solution. 

This feature is available in realtime protection. Can we make this expiration feature available in USB DLP as well so we dont need to manage removing the exemptions manually?

The Netskope Cloud R134.1.0 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Hotfix Version 134.1.0.Submit your feedback via docs.netskope.com.

Netskope Global Technical Success (GTS)YouTube – Allow Embedded Videos While Blocking Direct Youtube Access Netskope Cloud Version - 134 ObjectiveBlocking access to YouTube.com while allowing embedded YouTube videos on a 3rd party website. PrerequisiteNetskope Next-Gen SWG license ContextThere is a common use case where customers enforce a real-time blocking policy on streaming media, including YouTube, but still want to allow access to embedded YouTube videos on a 3rd party website. Do You Know?Netskope acknowledges Youtube as a Cloud Application and provides a pre-defined cloud app connector. As of Feb 17, 2026 with Netskope’s Youtube predefined connector, customers can exercise control over the following activities -Domains mapped under Youtube predefined connectorAuthor NotesAs an administrator, you need to understand how the YouTube video is embedded, as there are multiple ways to embed it. To identify a solution for this use-case, you must clearly understand how the YouTube video

Hello Everyone,I have a few questions regarding External User Access to On‑Prem Exchange via Netskope Private Access or Reverse Proxy.We are using Netskope Private Access (NPA) to publish our on‑premises Exchange Server behind a Netskope Publisher. Currently, only managed devices with the Netskope Client are allowed to access OWA and Outlook, and unmanaged devices are blocked who don’t have Netskope agent Installed — this is working as expected.This behavior is working as designed and aligns with our Zero Trust access policies.We now have a requirement to allow external users to access Outlook or OWA from non-managed devices and we have not exposed our OVA to Internet.Could you please confirm the following: Can Outlook or OWA access for external users be provided using Netskope Private Access without requiring the Netskope client on the user device? is there any other supported approach  to provide external user access to an on-premises Exchange server? Thank you for your confirmatio

Hi all, I have a question, that maybe it’s already managed in other ways but I don’t know.I have many apps that use the same port, example 8080, but I need to have different application segment because of security access. Is there a way to do in a different way? For example my think is to have one or more application segment and one or more real-time policies but create a “service group” with the port number and indicate it in the police and not in the private application segment.

Hi Community Happy New Year :)  I’m keen to understand if a Publisher Reboot is necessary every time a change is made to the local host file when using it for DNS resolution of applications hosted in Azure? It seems like a Publisher reboot is required when adding in entries? Is there a service that can be restarted instead for the changes to take effect? I’ve had a scrounge through the Community and Documentation pages but haven’t been successful in finding any info. Thanks in advance.