Recently active topics

Hear from our internal IT and security team as we share how we deployed Netskope Enterprise Browser within our managed endpoints here at Netskope. We will cover: Overview of high impact use cases  Deployment to Windows Endpoints: Leveraging Intune with the focus on Auto Enrollment deployment internally Deployment to MacOS Endpoints: Leveraging Kandji with the focus on Auto Enrollment deployment internally Troubleshooting deployment issues and remediation examples Alternative Deployment Method: Manual user invite—Non managed device user install and enrollment  For more information, check out our resources below: Deploying to Mac Fleet | Deploying to Windows Fleet | Enterprise Browser Usage Dashboard | Enterprise Browser Risk Dashboard | How to Import a Dashboard into Advanced Analytics  View past events in this series! Check out some customer questions below, or feel free to comment and continue the discussion!  Q: Do users need admin permission to install?A: Users do not need l

Hi all, I have a question, that maybe it’s already managed in other ways but I don’t know.I have many apps that use the same port, example 8080, but I need to have different application segment because of security access. Is there a way to do in a different way? For example my think is to have one or more application segment and one or more real-time policies but create a “service group” with the port number and indicate it in the police and not in the private application segment.

Hello Netskope Community,Managing endpoint client software across an entire organization is a critical task. A key part of this is having a clear strategy for updates and, when necessary, rollbacks. This guide outlines Netskope's recommended best practices for managing client versions to ensure stability, minimize risk, and maintain business continuity. Understanding the Netskope Client's Upgrade Behavior A common question we see is, "How do I roll back the Netskope Client?"It's important to know that the Netskope Client does not have a native, in-place "downgrade" feature. The installer is designed to prevent an older version from being installed over a newer one to maintain system and configuration integrity.The Official Rollback Procedure:If you need to revert to a previous client version, the required process is a full uninstall and reinstall, orchestrated by your endpoint management tool (e.g., Intune, Jamf, SCCM). Obtain the Installer: Download the specific client version you wis

Netskope Global Technical Success (GTS)Google Lens - Block Web Access Netskope Cloud Version - 134 ObjectiveGoogle Lens - Block Web Access PrerequisiteNetskope SWG or NG-SWG license is required ContextOn Google Search, Google provides the Google Lens service. The business requirement is to block access to this service.ConfigurationStep 1: Create a custom URL categoryPath: Netskope Tenant UI >>> Policies >>> Profile - - - URL Lists*.lens.google.comPath: Netskope Tenant UI >>> Policies >>> Profile - - - Custom CategoriesStep 2: Realtime protection policyPath: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New PolicyVerificationAccess Google LensGoogle Lens allows users to upload a file or provide a page link. The moment an end user attempts to use either of these features, the traffic will be blocked.Note - User Notification format used above Link Author NotesIt is recommended to review the below KB articles as

Hello Everyone,I have a few questions regarding External User Access to On‑Prem Exchange via Netskope Private Access or Reverse Proxy.We are using Netskope Private Access (NPA) to publish our on‑premises Exchange Server behind a Netskope Publisher. Currently, only managed devices with the Netskope Client are allowed to access OWA and Outlook, and unmanaged devices are blocked who don’t have Netskope agent Installed — this is working as expected.This behavior is working as designed and aligns with our Zero Trust access policies.We now have a requirement to allow external users to access Outlook or OWA from non-managed devices and we have not exposed our OVA to Internet.Could you please confirm the following: Can Outlook or OWA access for external users be provided using Netskope Private Access without requiring the Netskope client on the user device? is there any other supported approach  to provide external user access to an on-premises Exchange server? Thank you for your confirmatio

Hello Everyone,I have a few questions regarding  Reverse Proxy as a Service (RaaS) configuration with Microsoft Entra ID.We have configured Reverse Proxy as a Service (RaaS) with Microsoft Entra ID by following the official Netskope documentation below:Reference Document:https://docs.netskope.com/en/reverse-proxy-as-a-service-with-microsoft-entra-id-1 Configuration Summary Created an Enterprise Application in Microsoft Entra ID for Reverse Proxy Exchanged all required URLs and certificates between Entra ID and Netskope Configured SAML Reverse Proxy on Netskope and selected “Reverse Proxy as a Service” as the application type Shared the required URLs with the Entra application and completed Reverse Proxy configuration Reverse Proxy redirection is working as expected Created a DLP policy to block upload, download, and post actions for source code DLP policy is enforced successfully when traffic goes through Reverse Proxy for Cloud apps Observed Behavior From a managed device (w

Hello all.In SkopeIT > Page Events, I have some doubts about the meaning of “session - duration”.For web traffic we have session duration great than 0 if we have some bytes exchanged and it’s value seems consistent with end - start interval. For CloudApp traffic we have session duration values that differ greatly from end -start intervals  So what does session duration represent for each traffic type with respect to end - start interval ?ThankyouFrancesco 

Thee following topic covering how to block Google AI mode has been posted )How to Block Google AI Mode? | Community ) but now with Google presenting poor quality AI responses via “AI Overview” on nearly all AI searches, we are looking for a way to block these search results without completely blocking Google Search.There is a known way to block “AI Overview” by appending “&udm=14” to the search request URI, however Netskope does not appear to have any support for inline modification of URI’s. Has anyone been able to work around this limitation or found another way (such as HTTP header insertion) to block the “AI Overview”? 

With Netskope client enabled, macOS machines are failing to sync to Intune.  When I disable the client the sync works as normal.  I have all of the predefined cert pinned app exceptions for both Windows and macOS in place, and Windows machines have no issues.I found this thread in the community pages that discusses this issue on Windows, and one comment briefly discusses macOS but the thread is closed and I can’t see any of the replies so not even sure if there is more info in here I that can’t get to.  I did create and additional custom cert pinned app for macOS and included the below processes, and added ‘*’ to bypass all domains.  Nothing is working though.company portalomadmclientintunemdmagentmdmclientcompany portalmdmclientwdavdaemon_enterpriseHas anyone figured out how to get Netskope to not interfere with Company Portal on macOS?

Your Netskope Monthly Highlights – February 2026The latest updates, resources, and events – all in one place.Hi there,As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities. 🚀 Product Release UpdatesRelease 134 is here!Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.📄 Release Notes - February 2026 ✅ Pro Tip: Check for features relevant to your current configurations. ✅ Features not to miss out!This section highlights key innovations from the recent Netskope release that can significantly enhance your Adoption and Value Realization journey.Top Highlights:Threat Hunting Module : The new Threat Hunting license provides you with hunting grade detections, which you can enable/disable at your discretion to provide valuable vi

Hi Community Happy New Year :)  I’m keen to understand if a Publisher Reboot is necessary every time a change is made to the local host file when using it for DNS resolution of applications hosted in Azure? It seems like a Publisher reboot is required when adding in entries? Is there a service that can be restarted instead for the changes to take effect? I’ve had a scrounge through the Community and Documentation pages but haven’t been successful in finding any info. Thanks in advance.

Hi Team, Blocking login / post activity on clasue.ai portal is not working as expected. we see discovery only in the app catalog. we do not see the login traffic on Skope-IT/Application events. requesting you bring in this enhancement for claude.ai URL. more details on the case # 602972With regardsKarthikeyan N

This article helps you better understand the functions of different time filter conditions in Advanced Analytics. Data shown in this article is generated on Feb 5, 2026. Is in the lastThis condition sets relative dates to your data. For example, “is in the last 7 days” returns data from the last 7 days, including today.  To exclude today’s data, select “is in the last 7 complete days” instead. Please note that the results are controlled by your data retention period. Incomplete data will be returned if your retention period is shorter than the time filter period selected. Is on the dayThis condition sets an absolute date to your data. For example, “is on the day 2026/02/04” returns data on Feb 4, 2026, from 00:00 to 23:59. Please note that there is a 1-2 hours data ingestion delay in Advanced Analytics. If you input today’s date using this condition, data returned will be incomplete. Is in rangeThis condition sets an absolute range to your data. For example, “is in range 2026/02/02 unt

OverviewThis guide provides step-by-step instructions for integrating OneLogin with Netskope Security Posture Management (SSPM) using the Bring Your Own App (BYOA) feature. BYOA allows you to extend SSPM's security monitoring capabilities to custom SaaS applications that are not natively supported by Netskope.BenefitsExtended Coverage: Monitor OneLogin's security posture alongside other SaaS applications Centralized Monitoring: Single pane of view for all SSPM-supported and custom apps Integrated Reporting: Unified reporting and alerting across all monitored applications Custom Rules: Create custom security rules using Netskope Governance Language (NGL)PrerequisitesNetskope tenant with BYOA feature enabled (contact Netskope support) OneLogin administrator account with API access Access to Netskope SSPM APIs (see Swagger documentation at https://<your-tenant>.goskope.com/apidocs/)Table of ContentsStep 1: Register & Onboard Custom App in Netskope SSPM Step 2: Create API Credent

In the world of modern cybersecurity, speed and scale aren’t just "nice-to-haves"—they are requirements. As organizations grow, so does the volume of telemetry. If you’re a Netskope customer, you already know that our platform generates incredible insights into your data movement and threat landscape. However,the real magic happens when you can automate the response to those insights at scale.Today, I want to highlight two new incredible workflows in Tines created by my colleague, Andre Srinivasan. These stories represent the "gold standard" of how to bridge the gap between cloud security and automated response.1. Create Tines Cases for Netskope DLP Incidents (with AI!)View Story in Tines LibraryThis workflow is a game-changer for SOC teams. It doesn’t just pull DLP incidents; it uses Tines’ AI Agent action to intelligently parse the incident details and automatically create a Tines Case.Instead of an analyst manually triaging all sensitive data movement, the AI agent can help summariz

The Netskope Cloud R134.0.0 documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Version 134.0.0.The key new or updated features are:Next Generation API Data Protection Deferred Policy Action Enterprise Browser Enterprise Browser and NPA Integration SaaS Security Posture Management (SSPM) Discover and Risk Score 3rd-Party Apps in GitHub Deep Visibility into SaaS Users Threat Protection Threat Hunting Module Submit your feedback via docs.netskope.com.

Netskope Cloud Exchange is cybersecurity industry’s leading technology integration platform empowering global organizations to unify their siloed security tools & optimize their ROI.We are announcing the general availability of Netskope Cloud Exchange (CE) v6.0.1 patch release with the business critical security updates described atRisk Assessment, Remediation, and Mitigation Plan for Netskope Cloud Exchange Deployments - Netskope Knowledge PortalBased on recent security market research data, 42% of cloud environments (87K potentially vulnerable instances) worldwide have at least one instance of MongoDB in a version vulnerable to CVE-2025-14847, including both publicly exposed and internal resources.We strongly recommend customers to deploy/upgrade/migrate to CE v6.0.1 with critical bug fixes latest & greatest security updates to strengthen the security posture of their digital ecosystem.Please refer to the CE v6.0.1 release notes at Netskope Cloud Exchange Release Notes Versio

Please tell your CSM/TAM you support IDEA-839 - local account / non-interactive supportThe IDEA has been accepted but does not have a schedule for implementation. If you are using Active Directory to establish identity on workstations, local accounts will bypass policy - allowing the computer to browse the internet without policy restriction nor SSL inspection for DLP or malicious code. If you have non-interactive devices, like servers, the only viable solution is to shift network traffic to Netskope via IPSEC. That lacks the reporting and accountability functionality, and application-level bypasses.  This IDEA seeks to have another solution possibility.

Netskope Global Technical Success (GTS)Application Firewall 2 – Policy Improvements and Controlling application Netskope Cloud Version - 133 ObjectiveDiscuss enhanced version of Netskope’s firewall engine - Application Firewall 2 PrerequisiteNetskope Cloud Firewall License ContextNetskope introduced Application Firewall 2 – Policy Improvements and Controlling Applications in Release 133 Link. This knowledge base article outlines the key changes, the rationale behind these enhancements, and provides comprehensive A–Z details related to Application Firewall 2. DetailsWhat is Application Firewall 1?                                                                                                                             Application Firewall 1 refers to the legacy method of creating custom Cloud Firewall applications. In this approach, customers with a Netskope Cloud Firewall license created firewall applications using App DefinitionPath: Netskope Tenant UI >>> Settings >>&

Hi there,I am currently exploring the AI Guardrails and Red Teaming features.I've noticed that AI Guardrails allows for natural language-based configurations through the "Matched Prompts / Responses" feature. However, it seems that AI Red Teaming does not yet support performing attacks based on LLM natural language.Regarding this, I have two questions: Are there any plans to provide natural language-based or custom prompt attack capabilities within AI Red Teaming? Separately, is there a roadmap for a feature that suggests specific Guardrail configurations based on the "Failed" items in AI Red Teaming test results? I believe these features would greatly enhance the synergy between testing and mitigation. I look forward to your feedback.Best regards,

Hello CommunityHas anyone attempted yet to detect via Netskope endpoint agent traffic toward internet-facing Clawdbots AI agents exposed via unauthenticated public endpoints?thanksAndrea

While accessing any sites on incognito mode is very slow for initial time. Once the page is loaded, all the sites are loading normally on new tabs. Once we reopen the browser with incognito mode again, the same issue happening again for initial time.any suggestions?

Hello,I received the IoC list shared by my partner, but accessing it requires a username and password.However, for the Web Page IoC Scraper Plugin, credentials should not be necessary.Is there any alternative solution available?