Recently active topics

How are others solving for this? 

Netskope Global Technical Success (GTS)Managing Access for Google Gemini Enterprise Instance Netskope Cloud Version - 130 ObjectiveManaging Access for Google Gemini in the Enterprise PrerequisiteNetskope CASB Inline & SWG license is required ContextGoogle, as a major cloud service provider, has introduced a generative AI chatbot platform called Google Gemini. While many other generative AI applications are often considered unsanctioned within enterprise environments, organizations that use Google Workspace (formerly G Suite) may wish to enable access to Google Gemini in a controlled, corporate context—while simultaneously blocking personal Gemini access and restricting other third-party AI tools.This article explores an approach to enabling secure access to Google Gemini for corporate users.Do You Know?Netskope introduced support for Google Gemini; however, it did not initially differentiate between personal and corporate instances. With the release of version R127 on June 10, 2025

Netskope Global Technical Success (GTS)Workaround - Microsoft 365 Copilot (Corporate) - Allow Only Corporate Instance Netskope Cloud Version - 130 ObjectiveThis article aims to assist with a workaround to achieve the use case of allowing only Corporate Instance of Microsoft 365 Copilot until the release of ‘Websocket for Non-DLP Activities’ feature. Please refer the Author Notes & Workaround section of the article PrerequisiteNetskope Next-Gen SWG license is required ContextMicrosoft suite customers want their end-user to access Microsoft Copilot but only their instance. All other Microsoft Copilot instances should be blocked. Do You Know?Microsoft Copilot is available for Personal and Corporate. Netskope has 2 predefined cloud app connectors for Microsoft Copilot.Microsoft Copilot for Personal Instances Microsoft 365 Copilot for Corporate Instances. Author NotesMicrosoft is integrating Copilot capabilities at the operating system level, within Office apps, the Edge browser, and ma

When I look at my Slack Channels some have “FC:” in the front of then name (e.g. FC:F063A1D5X9A:Test). What does FC mean? I was able to figure out that “DM” = direct message and “MPDM” = multi person direct message. I don’t see these defined in any Netskope documents though..

Hi Team, Wanted to know if we can restrict the USB file transfer to USB devices via EDLP? Use case- If a user attempts to transfer a file larger than 100MB, the action should be blocked. Thanks

Hi, I'm having a hard time with the netskope client on Linux. This is a WSL2 installation, and a netskope agent is running on the windows host. But the windows agent status has no influence on the behavior of the guest linux one. Very often, the nsclient config outputs a normal status with tunnel up, and private access enabled. Unfortunately the show-pa show this :  $ nsclient show-pastart process....Status: Connected (User Tunnel) Sent: 0 bytes Received: 78646 bytes and the nsdebuglog.log is spammen with this kind of errors : 2025/09/16 20:21:00.358996 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:01.381263 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:02.404470 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:25.547248 stAgentSvc p47489 t4755c error nsKernelUserShim.

I have a law enforcement customer that Plugs in equipment via USB and uses NDIS to emulate internet to those devices. This creates a new network adapter which forces the client to go into a disabled state. How do we get past this? Running the lates golden release - 

 was just talking about this in another thread here. We have a URL list that resolves this. We haven't had to update it in awhile but it's easy enough if we have to.\b(?:\d{1,3}\.){3}\d{1,3}\b\/filestreamingservice\/files\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*\/filestreamingservice\/files\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*.intunewin.bin\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*\/ctldl.windowsupdate.com\/msdownload\/update\/v3\/static\/trustedr\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/pr\/.*\/Office\/Data\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/d\/msdownload\/.*  so with this regex above for Microsoft Delivery Optimization what actions are you all allowing Browse, Download, Post, ect…??

Netskope Global Technical Success (GTS)DLP -   Corporate password detection Netskope Cloud Version - 130 ObjectiveLeverage Netskope's current abilities to detect corporate passwords and prevent exfiltration. PrerequisiteNetskope DLP license is required.Forensic Profile configured. ContextIn this knowledge base article, we'll explore Netskope's capabilities regarding DLP. We'll go through a use case to provide insights into its capabilities. Do You Know?Netskope’s Data Loss Prevention (DLP) engine uses advanced context- and content-aware detection to prevent sensitive data from leaking across cloud apps, web traffic, and private apps—all in real time? With over 3,000 pre-defined data identifiers, file fingerprinting, exact data match (EDM), and ML-enhanced detection, Netskope DLP goes far beyond simple keyword or regex matching. Use Case Step 1) Detecting corporate passwords requires a defined password structure.To detect corporate passwords, the company must provide a password creation

Hi there, I want to use Workato to create an Automation with Netksope. Specifically the OTP feature for disabling internet security. Aim:1. User clicks Disable Internet Security2. Launches web page to enter email address3. Email sends OTP or next page provides OTPSomething along the lines of the above. Can someone share if they have done something similar (with another Automation platform too) or can someone share what I would need for this?

I was wondering if there is any documentation on what this page returns for sites visited. I find that some sites users visit will show here but the majority will not. I cannot find a difference between the sites that show here and ones that do not.. Like the sites are not blocked etc.. what is Netskope using to determine what gets presented to the “Websites:” Thanks

I recall stumbling upon a Community article a while back for a regex chrome / edge pattern match used in app definition for a steering bypass.  For the life of me i cant find it, was looking to create a steering bypass for all processes except for Chrome, Edge , Safari and Firefox.anyone done this? (useful to have in some heavy dev environments for a limited group of folk)

In the complex landscape of cloud security, ensuring that sensitive data remains protected and that threats are neutralized is paramount. Netskope, as a leading Secure Access Service Edge (SASE) platform, employs sophisticated content inspection engines for both Data Loss Prevention (DLP) and Threat Protection. However, no system is infallible, and there are specific scenarios where these engines might fail to reach a definitive verdict. This is where "Fallback Actions" come into play.This article will break down the concept of Fallback Actions in Netskope, differentiating the conditions and implications for DLP and Threat Protection separately, while leveraging a clear tabular format for easy comparison.What is a Fallback Action in Netskope?A Fallback Action in Netskope is a pre-defined safety measure triggered when the content inspection engine — whether for DLP or Threat Protection — fails to complete its analysis on a file or transaction. Instead of leaving the outcome uncertain, t

Hello,I would like to know if it is possible to allow copy and paste when using ZTNA in browser access mode.If yes, could you please provide guidance on how to configure it?Thank you 

We know that managing legacy systems like MPLS and outdated VPNs can be a challenge.As we continue to build the future of SASE, we're dedicated to delivering a truly unified, single-vendor platform that makes your network more secure and agile. That's why we acquired our own SD-WAN solution in 2022, to simplify the journey for customers like you.Join Netskope CEO Sanjay Beri and CPO Parag Thakore and discover a practical way to evolve your network with SASE. You’ll learn how to simplify that process, reduce costs, and still deliver a high-performance, secure experience for your users.We'll dive into the practical steps of your SASE journey, including:Migrating from legacy networks to a unified SASE platform Simplifying branch infrastructure and securing IoT devices Delivering consistent zero-trust access everywhere 

Netskope Global Technical Success (GTS)GitHub - Block Google SSO for login Netskope Cloud Version - 130 ObjectiveGitHub - Block Google SSO for login PrerequisiteNetskope SWG and Next-Gen SWG license ContextGitHub provides Single Sign-On (SSO) integration with Google accounts. This knowledge base article focuses on preventing end-users from utilizing Google SSO to access GitHub. Do You Know?When an end-user attempts to log in to GitHub using Google SSO, the traffic redirects to accounts.google.com Netskope recognizes this domain under a predefined cloud app called Google Accounts.   ConfigurationStep 1 - Create a custom URL categoryPath: Netskope Tenant UI >>> Policies >>> Profile - - - URL ListsPath: Netskope Tenant UI >>> Policies >>> Profile - - - Custom CategoriesStep 2 - Create a HTTP Header profilePath: Netskope Tenant UI >>> Policies >>> Profile - - - HTTP HeaderStep 3 - Create a Real-time protection policyPath: Netskope Tenan

Hello, We want to report that the new https://speedtest.goskope.com/ is not usable on mobile (tested on safari) : first webpage open correctly but second page (run speedtest) is only partially visible and it is not possible to unzoom. It result that we can’t start the speedtest at all on mobile devices.We only tested on safari, maybe other community members can verify how it works on other browser.Can you please improve the website to be fully mobile-friendly ?  

                                                       Netskope Global Technical Success (GTS)Enterprise Browser (EB) - Usando EB con el cliente de Netskope Netskope Cloud Version - 130 ObjetivoUsando EB con el cliente de Netskope PrerrequisitoSe requiere licencia de Netskope SWG y Enterprise Browser ContextoConfiguración para utilizar el cliente de Netskope y Enterprise Browser El Enterprise Browser de Netskope cubre los siguientes casos de uso (v1.0)BYOD: Usuario corporativo que utiliza un dispositivo personal para una navegación corporativa segura BYOD: Usuario corporativo que utiliza un dispositivo personal para acceder a una aplicación SaaS corporativa Contratista en un dispositivo no administrado de Netskope (es decir, sin cliente de Netskope instalado)  Contratista en un dispositivo administrado por Netskope (administrado, por ejemplo, cliente instalado y habilitado)Para el caso de uso en el que está instalado el Cliente NS (Caso de uso 4) hemos verificado que ambos pueden traba

  Netskope Global Technical Success (GTS)Caso de uso - Implementación de bypass para el tráfico del agente nativo de WhatsApp en la plataforma Android Netskope Cloud Version - 130 ObjetivoCrear una aplicación de certificado anclado “Certificate Pinned Application” para el agente nativo de WhatsApp de Android y agregarla en la “client steering configuration” de Netskope. PrerrequisitoSe requiere licencia Netskope CASB Inline/SWG ContextoCómo se puede excluir el tráfico de WhatsApp en dispositivos Android del enrutamiento a través de Netskope? DetallesWhatsApp, al ser una aplicación con certificado fijo “certificate-pinned app”, se puede excluir de la configuración de dirección “steering configuration” en dispositivos Android. Recreación del laboratorioPaso 1 - Clic sobre la opción “new certificate pinned app”Ruta: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> App Definition  Paso 2 - Agregue los detalles requeridos. Application Name - [WhatsA

Netskope Global Technical Success (GTS)EPDLP - Control de dispositivos: ImpresoraNetskope Cloud Version - 130 ObjetivoCapacidades actuales de Netskope para regular el acceso a las impresoras (desde macOS) PrerrequisitosSe requiere licencia de Netskope Endpoint DLP ContextoEn este artículo, exploramos las capacidades de Netskope en materia de DLP para endpoints. Analizaremos un caso práctico para comprender mejor sus capacidades y limitaciones.. Sabía que? Endpoint DLP le permite administrar y controlar endpoints para evitar que contenido confidencial se transfiera a dispositivos de almacenamiento USB o impresoras. Puede:Gobierne los dispositivos terminales mediante la creación de políticas de control de dispositivos, control de contenido y origen de archivos. Supervise las actividades de los endpoints y bloquee o active alertas cuando los usuarios intenten usar impresoras, transferir archivos confidenciales a dispositivos de almacenamiento USB, configurar impresoras e imprimir document

 Netskope Global Technical Success (GTS)Comprobación de seguridad de Netskope - Threat Protection Netskope Cloud Version - 124 ObjetivoComprender y mejorar la seguridad de su nube Netskope con Netskope Security Check PrerrequisitoSe requiere una licencia Netskope SWG / NG SWG. Contexto  Artículo principal  En reconstrucción Se actualizará próximamente.   DetallesComprobación de seguridad de Netskope - https://netskopesecuritycheck.com/ Hay un total de 17 comprobaciones de evaluación de seguridad distintas en la sección Protección contra amenazas.   Nombre de la evaluación URL consultada Actividad realizada Predefinir categoría web Recomendaciones Ref. Link Bloquear la minería de criptomonedas ns-catid-589-sn.netskopetools.com/stop-icon.png Explorar Riesgo de seguridad Riesgo de seguridad: minería de criptomonedas El riesgo de seguridad y sus subcategorías deben bloquearse. Link

Netskope Global Technical Success (GTS)ChatGPT - Bloquear el inicio de sesión por teléfonoNetskope Cloud Version - 125ObjetivoChatGPT - Bloquear el inicio de sesión por teléfonoPrerrequisitoSe requiere una licencia Netskope CASB Inline & SWG.ContextoAdemás del SSO, ChatGPT también ofrece la opción de iniciar sesión mediante un teléfono. Este artículo de la base de conocimientos se centra en impedir que los usuarios finales utilicen el inicio de sesión por teléfono para acceder a ChatGPT.¿Sabe qué?Cuando un usuario final intenta iniciar sesión en ChatGPT utilizando el teléfono, el tráfico se redirige a una URL que contiene las siguientes cadenas ext-login-hint-phone use-new-phone-ui=true ConfiguraciónCrear una lista de URL y una categoría de URL personalizada Path: Netskope Tenant UI >>> Policies >>> Profile - - - WebLista de URL - Regex auth0?\.openai\.com.*ext-login-hint-phone.*use-new-phone-ui=true.* Crear una categoría personalizada con la lista de URL cr

The Netskope Cloud R130.1.0 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Hotfix Version 130.1.0.Submit your feedback via docs.netskope.com.

  Netskope Global Technical Success (GTS)Endpoint in REST API V2 para la gestión de usuarios y grupos  Netskope Cloud Version - 126ObjetivoUtilizar los endpoints  REST API V2 SCIM para crear manualmente usuarios y grupos SCIM. ContextoLos usuarios creados manualmente no se designan automáticamente como usuarios SCIM. Por lo tanto, reciben el valor predeterminado steering configuration profile ("Default tenant config") y el valor predeterminado client configuration profile ("Default tenant config"). Esta asignación automática se produce porque la aplicación del perfil para la configuración del sistema operativo y del cliente requiere la pertenencia a un grupo. Como solución alternativa, podríamos aprovechar la API REST V2 para la creación de usuarios y grupos. De esta forma, los usuarios se convertirían en usuarios SCIM, lo que significa que podrían insertarse en grupos y, por lo tanto, aplicar perfiles de configuración y dirección personalizados.  ⚠️ Importante Cualquier cambio nec