Recently active topics

I would like to find out whether the Netskope POP IP addresses change frequently.We currently have a cloud-hosted application that only permits access from our organization’s public internet IP address. However, the monitoring TVs are connected to the same LAN as the User LAN and their traffic is routed through the Netskope tunnel.Due to this setup, the source public IP seen by the cloud application may become the Netskope tunnel IP instead of our normal internet public IP.Kindly advise on the following:Should we whitelist the Netskope tunnel/POP IP addresses on the cloud application side?Is there a way within the Netskope proxy configuration to bypass the Netskope tunnel for this specific application or traffic, so that it uses our normal public internet IP instead?If bypass is possible, what would be the recommended approach or best practice? 

We are deploying the Tanium Client but Netskope prevents the client from peering. Once you disable Netskope Tanium work as expected. There is no documentation on the support portal. 

Your Netskope Monthly Highlights – May 2026The latest updates, resources, and events – all in one place.Hi there,As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities. 🚀 Product Release UpdatesRelease 137 is here!Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.📄 Release Notes - May 2026 ✅ Pro Tip: Check for features relevant to your current configurations. ✅ Features not to miss out!This section highlights key innovations from the recent Netskope release that can significantly enhance your Adoption and Value Realization journey.Top Highlights:Deepfake Detection On-Demand API : You can now use APIs to submit audio, video, and image files and determine if the media contains Deepfake-generated content based on human voice

how to monitor Citrix traffic in Netskope. I do not want to bypass the traffic. i want to just monitor the traffic for all my users

New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Version 137.0.0.Release HighlightsThese are the highlights for this release, you can find them under section:SaaS Security Posture Management (SSPM)\tPrivileged User Visibility Enhancements\tNetskope Private Access (NPA)\tNPA AI Agent for App Audit – Self Service UISubmit your feedback via docs.netskope.com.

Hi Everyone,Thank you for Joining for the Advanced Analytics Office Hours – April session. We appreciate your interest and participation.If you were unable to attend or would like to revisit the discussion, you can access the session resources below:Webinar Recording:\tApril Office Hour Recording\t\tSession Recap & Key Takeaways:\tApril Office Hours Recap\tThe recap includes the main highlights, insights shared by the experts, and helpful resources discussed during the session.If you have any follow-up questions, feel free to reply to this email or continue the conversation in the community.Thank you again for participating in the session.

Is there a way to report out what network location profiles exist and what the IP addresses they contain?  Bonus points if it can be tied to what SSL policies!

Disclaimer and AdvisoryThis document and the guidance contained herein are provided by Netskope for informational purposes only and are intended to assist developers and administrators in configuring third-party tools to operate with the Netskope platform.\t"As-Is" Information: The information, scripts, and configuration examples are provided on an "as-is" basis. While Netskope makes a reasonable effort to ensure the accuracy of this information at the time of publication, we make no warranties, express or implied, regarding its completeness, accuracy, or suitability for any particular purpose.\t\t\tThird-Party Systems: The software, libraries, and tools discussed in this document are not owned, controlled, or maintained by Netskope. The configuration, commands, and behavior of these third-party systems are subject to change at any time without notice by their respective owners. Netskope assumes no responsibility for errors, omissions, or outdated information related to these third-party s

Hello.. I am trying to simply add a custom header to any and all users that have the Netskope Client installed.  Basically when they access our corporate website, I want Netskope to add a header “X-Employee” with a value of “true”.I thought the solution to this was to do the following:Go to Netskope settingsClick Manage, then “Header Insertion”Click “New Header Insertion Profile”Create new application with the custom header and value.Then I went to “Security Cloud Platform”, and created a new Cloud App rule, that used the application I created above, and the domains entry has the value of my corporate domain. (i.e. example.com).I still don’t see any headers being added to the outbound browser requests when accessing a site with that domain.  Am I missing some step?Thanks 

Netskope Cloud Exchange is cybersecurity industry’s leading technology integration platform empowering global organizations to unify their siloed security tools & optimize their ROI. We are announcing the general availability of Netskope Cloud Exchange (CE) v6.1.0 patch release with the following enhancements:Azure Key Vault\tAzure Key Vault secures passwords, cryptographic keys, and secrets with enhanced compliance, control, and global scalability to protect cloud apps seamlessly.\t\tCE now supports integration with Azure Key Vault. Please refer to Prerequisites for Azure Key Vault Secrets Manager - Netskope Knowledge Portal for more details. \t\tCRE Enhancements\tAdded normalization options at the schema editor to improve security context mapping \t\tAdded risk score/context stats in Risk Exchange Dashboard\t\tDLP (EDM & CFC) Module Enhancements\tAdded support for different delimiters in the EDM Module, like comma, pipe, semi-colon and custom delimiter.\t\tImproved rate limiting in the ED

Hello,We are using Netskope forward proxy since half a year, everything working fine. It is being used on physical machines as well as whithin our VDI Environment, hosted on premises (VMWare Horizon).We are starting to deploy NPA for mobility of our users.However, when a user is in NPA steering config and connects to a VM in the VDI environment, the connection breaks after 30s to 1min. VM is still accessible via RDP, but not via Horizon view (blast).Since the VDI is on premises, my idea would be to completely disabled NPA in the VDI environment, that way even if a user needs with NPA enabled on his physical machine needs to connect to a VM, they still can.Any idea how to do so ? A service to disable ? An installation script on the master ?ThanksBest regards,Jeremi

Device Tags for ClassificationAPI Guide for Integration PartnersIntroductionThe Netskope Device Classification API enables partners and administrators to programmatically manage device tags within their Netskope environment. Device tags provide a flexible classification mechanism to organize and apply policies to devices based on custom risk assessment, device type, department, or any other business classification criteria.This guide demonstrates how to view existing device tags, create new tags, apply them to devices, and manage tag lifecycle through RESTful API endpoints.We will use both Device Tags and Device Classification. Here is a short description of both. Device Classifications vs Device TagsDevice ClassificationsPurpose: Automatic, rule-based classification system How they work: You create rules that automatically apply classifications to devices based on conditions (OS type, presence of other tags, etc.) API Endpoints: Create: POST /api/v2/deviceclassification/tags Create ru

Event Follow-Up: Unlocking value from recent Netskope releases Date: March 25, 2026Topic: Unlocking value from recent Netskope releases 🔍 Summary:Thank you to everyone who attended our  webinar, “Unlocking value from recent Netskope releases”, held on 25th March 2026.The webinar covered a recap of key technical features from recent releases that you might have missed. We hope you found it insightful and valuable. During this session, we covered the below topics : Deep dive into how key Netskope features work and the problems they solve.\tStep-by-step guidance on configuring and enabling the most impactful features\tDemo of selected features to show their impact in action\tResources, documentation, and next steps to help you maximize value 🎥 Webinar Recording:If you missed the session or would like to revisit the content, you can watch the recording below:Customer/Partner Recording 📝 Share Your Feedback:We’d love to hear your thoughts! Please take a minute to fill out our short survey:\ud83d

In this special edition of our Inside Netskope series, our internal leadership team will share our Fusion Team Framework. Hear how we integrated security architects into IT delivery cadences to resolve decision-right friction at Netskope, and the Metrics/Artifacts that validated our shift.Our CIO and CISO will cover:\tThe Fusion Team Framework: An analysis of the shared charter and decision-rights model used to align CIO and CISO priorities\t\t\tArchitectural Integration: A look at embedding security architects directly into IT delivery cadences to eliminate deployment friction\t\t\tOperational Metrics: A review of real-world data, including UAR cycle-time compression and SLA compliance for JML (Joiner/Mover/Leaver) processes\t\t\tGovernance Artifacts: A deep dive into orphaned account remediation rates and the technical documentation powering the shift from theory to practice\tFor more information, check out this article.    View past events in this series!

Dear Netskope TeamI am currently experiencing issues with Microsoft Teams calls while Netskope client is enabled. Specifically, the calls go on hold, and once I disable Netskope, the Microsoft Teams calls are fine without any issues.Could you please advise any ports needs to allow on firewall.  RegardsMohammed Anwar

Hi Team,We are exploring how to enforce Data Loss Prevention (DLP) controls on the Grammarly browser extension in Chrome and Edge. While our existing DLP policy successfully restricts sensitive data uploads within the Grammarly application itself, the same restrictions are not being applied to the Grammarly extension.Thanks & RegardsManisha Joshi

Objective: Develop a comprehensive guide for configuring SAML-based Single Sign-On (SSO) between PingFederate and the Netskope Admin Console.Overview: This documentation will outline the methodology for enabling secure administrative access to Netskope using PingFederate as the Identity Provider (IdP).Prerequisites:\tNetskope Tenant: Local administrator privileges are required to modify SAML settings within the Netskope console.\t\t\tPingFederate: Administrative access to the PingFederate environment to configure the Service Provider (SP) connection.\tWorkflow:Step 1 - Click on Application button in the top barStep 2 - Once the application page loads, click on SP Connections.Step 3 - In the SP Connections, Click on Create Connection. A SP (Service Provider) Connection is a configuration set that allows PingFederate (acting as the Identity Provider or IdP) to securely communicate and share identity data with an external application or service.Step 4 - Select Do not use a template for this co

Objective: Develop a comprehensive configuration guide for SCIM provisioning between PingFederate and Netskope.Scope: This guide will detail the end-to-end process for automating user provisioning via the SCIM protocol.Prerequisites:\tNetskope: Administrative access to the local tenant is required to configure SCIM settings.\t\t\tPingFederate: Administrative privileges within the PingFederate environment to manage application integration.\tWorkflow:Step 1 - Login to your PingFederate Application using your login credentials.Step 2 - If it's your first time login then you will be asked to reset your password. Else, continue to the next step.Step 3 - Once you login successfully, you will see the home screen. In the home screen, you will find all the required actions items. Step 4 - Now, before enabling the SCIM integration, we need a service account for the PingFederate application to communicate with the netskope tenant. Login to your tenant which needs to be integrated for SSO / SCIM. URL w

Hello,we have a user using intensively Power BI but sync data takes time.Without the Netskope client there is no more latency.What can we do to improve this Power BI latencies with the Netskope client.?  

hi team,Based on the certificate check available in the documentation i tried including the intermediate certificate and root certificate in one single pem file but when i tried importing the file in chrome im getting this error “Import is only supported for a single certificate” 

In order to migrate from URL list to Destination profiles, I need the Destinations API to support deduping values the way the current URL API does when you append values to a list. If I call the URL endpoint: /api/v2/policy/urllist/{id}/append And add the same site, example ....www.bad.com. The api automatically dupes the entry and only adds it if it doesn't exist. This is helpful because some of our URL list are automated via threat intel feeds. While we try to dedup the IOCs before updating the URL list, some do get through, but the URL api handles it. But with destination profiles, if you call /api/v2/profiles/destinations{id}/values and your payload is to append. Example:{ "details": false, "interactive": true, "operation": { "op": "append", "values": [ "www.bad.com" ] }} It doesn't dedup and just continues to add to the list.So, may I missing something? Is there some query parameter or destination profile api endpoint I should be calling to dedup? Or do I need to

I am dismayed that upon seeing the below notice when logging into the tenant, the linked Help page says “The migration guide is still in progress and will be available soon “  Netskope should consider holding off doing this due to a lack of proper documentation \tPolicy Update: Automated Migration of Steering Exceptions\t\tNetskope is decoupling Steering Configurations from Proxy processing to provide more granular, visible control over traffic handling.What is changing?\tAutomated Policy Creation: Starting in 136.0.0, Netskope will automatically convert existing steering exceptions into explicit SSL "Do Not Decrypt" and RTP "Allow" policies.\t\tNo Traffic Disruption: Your current bypass behaviors and traffic flows remain identical.\t\tEasy Identification: Migrated policies will be prefixed with "ns-migrate" and logged under "Netskope Migration" in your audit trail.\t\tNon-standard Ports: Non-standard ports are no longer controlled by Steering Configurations and can be managed by Service Objects

The Netskope Cloud R136.1 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Version 136.1.0Submit your feedback via docs.netskope.com.