Recently active topics

Dear Netskope-Team,First of all: I love the new SpeedTest Feature! SpeedTestBut I think something is not working correctly yet, because the download speed is always below 1 Mbit/s.Here my results:POP: DUS1Test ID: ypjx-9133686Latency: 11.20 msJitter: 2.75 msDown Speed: 0.25 mbpsUp Speed: 538.54 mbpsHTTP version: 1.1 Could you please help? Anybody in the community with the same problem? Best regards

Hi Team, Is it possible to integrate/ install AD agent so that we can apply client configuration based on OU. and Use Entra ID integration for SSO? Just for Sign-in.  Possible that we can use OU to provide access to private resources.? One way is to create groups and provide access to private resources and apply client configuration group or all users. Since we have multiple branch offices. we need to create many Groups and import in Entra ID.  So wondering if we can enable private access based on OU and apply client configuration based on OU as well.

It seems that users under SkopeIT are only displayed when accessing Cloud Apps or the Web.Events from Cloud Firewall or Private Apps are not included, resulting in limited visibility.Do you have any suggestions on how we can monitor user activity in these cases?

A report compiling information related to user access, allowing filters to be applied to analyze specific users/hosts.Report:Advanced Analytics - Relevant User Information (Access allowed)  

Report with an overview of Publisher health and a summary of usage information by publisher, ports, users, and destinationsReport:Advanced Analytics - NPA Health / Visibility  

Netskope Global Technical Success (GTS)Allow Only Google Ads & Sponsored Content Netskope Cloud Version - 130 ObjectiveIn some cases, customers may wish to allow Ads and Sponsored Content while blocking all other Online Ads. PrerequisiteNetskope SWG or Next-Gen SWG license Author NotesIt is recommended to review the articles listed below before proceeding further.Reference Article 1 - LinkReference Article 2 - Link ContextCustomers with a real-time policy blocking the ‘Web Category - Online Ads’ may wish to allow their end users to access Ads and Sponsored Content appearing during Google Search. This article provides a step-by-step process to achieve this business use case. Do You Know?As per the details covered in Reference Article 2, when an end user clicks on a sponsored link, the traffic first goes to www.google.com/aclk and is then redirected to the original destination. The URL www.google.com/aclk is mapped under web category ‘Online Ads’ To achieve the use-case we need to wh

When running a query against “/api/v2/infrastructure/publishers” the list of to be returned fields can be attached. However it seems that only fields from the first level of the JSON can be selected. Does anyone know, if other fields e.g. assessment[latency], can be referenced in the field-list as well? And how? Thanks Timo

Why sometimes on-premise detection shows “remote" and sometimes it shows “off-premise” when users are not in intranet, such as office environment.

There a lot of AI based browesrs, the likes of Comet by Perplexity, Atlas by Chatgpt etc. which have their own security parameters yet to be assessed and considered safe for use by Corporate Employees. There seem to be no pre defined category and these browsers are not yet identified as applications in Netskope. Is there a workaround to be able to block the applications?

Here's an article for Netskope on blocking Base64 encoded sensitive data using custom regex, along with the step-by-step DLP policy creation process. Blocking Base64 Encoded Sensitive Data with Netskope DLP: A Step-by-Step Guide In today's cloud-centric world, organizations face the persistent challenge of preventing sensitive data from leaving their control. While traditional DLP solutions are effective against clear-text data, a common evasion technique involves encoding sensitive information, particularly using Base64, to bypass detection. This article will demonstrate how Netskope's powerful DLP capabilities, combined with custom regular expressions, can effectively block the sharing of sensitive data transformed into Base64 encoded strings.The Challenge: Evading DLP with Base64 EncodingBase64 encoding is a method of representing binary data in an ASCII string format. While legitimate for many purposes, it can be misused to obscure sensitive information like credit card numbers, so

Hi there, I want to use Workato to create an Automation with Netksope. Specifically the OTP feature for disabling internet security. Aim:1. User clicks Disable Internet Security2. Launches web page to enter email address3. Email sends OTP or next page provides OTPSomething along the lines of the above. Can someone share if they have done something similar (with another Automation platform too) or can someone share what I would need for this?

Can we use Netskope NPA to enforce all user sessions to authenticate to all private applications using MFA (using our organization’s IdP)? Let’s say some of our internal applications do not support SSO and we wanted to use NPA to force users to authenticate using MFA (just for those apps that do not support SSO) How can we do that? Can we use Netskope SWG/CASB to do the same for external cloud/SaaS/web applications? In other words, enforce MFA (through our IdP) when those applications are not able to directly support our SSO?Any ideas on how to make this happen with Netskope NPA and SWG/CASB? Thanks!

The Netskope Cloud R131.1.0 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Hotfix Version 131.1.0.Submit your feedback via docs.netskope.com.

Hello Netskope Community, With the recent launch of Google’s AI mode in Google searches, I am looking for a way to block it using Netskope. I noticed that the URL pattern is different between the AI mode and the regular search results, however the wildcard matching cannot be used because of the way Netskope handles wildcards. I am not seeing an obvious way to use regex to match it, however if someone else does please let me know. I also explored matching the activity based on HTTP header and was unable to find a unique header field that I could match on (again if anyone knows different please let me know). My next plan of attack is to try making a custom CCI application using the Netskope App Activity recorder browser extension and block access to it, but I haven’t tried that yet. Does anyone have any other ideas?Thank you in advance. 

Netskope Global Technical Success (GTS)Google Search AI Mode - Block Web Access Netskope Cloud Version - 130 ObjectiveGoogle AI Mode - Block Web Access PrerequisiteNetskope SWG or NG-SWG license is required ContextIn May 2025, Google introduced the AI Mode feature on the Google Search page. Some customers may wish to disable this feature for their end users through Netskope. This article explains how to achieve this business use case.AndDo You Know?Google has its own AI chatbot — Google Gemini, and Netskope provides a predefined cloud app connector for it. Using this connector, customers can control the following activities within Google Gemini through Netskope.Google search AI Mode works in a different way. When you access it the traffic does not route to gemini.google.com Ref.  Request URLhttps://www.google.com/search?q=&sca_esv=ef441955f1d3bd14&source=hp&ei=SCr7aMWRCZet4-EPt6_M8QQ&iflsig=AOw8s4IAAAAAaPs4WNvpFgql5Ce05SIpOR-BpldfKaIg&aep=22&udm=50&ved=0ahUK

I have a regex URL list that blocks ai mode in Chrome but I cannot get the AI Mode button in the search bar to block or disable.  I reached out to our CSM who said they in turned reached out the the product team.  It sounds like this is in the works already but we want to block before waiting for their update.  Does anyone have any thoughts on how to do this?  I identified where the  element is within Developer Tools but of course changing that from false to true is temporary.  Injection JavaScript is beyond my scope.  Looking for any help anyone might have.  Thank you.

 Thanks ​@scarlile and ​@Kousain Raza for sharing this great idea and creating the step-by-step instructions!Advanced analytics allows you to build a dashboard with visual content from it’s widgets, as well as add some commentary.For key messages, diagrams, slides which may go alongside an AA dashboard, it is possible to insert images which have been encoded.See below for examples of the types of images which could be inserted. This can be done by using Base64 :-Base64 Encode and Decode - OnlineNote the images are not hosted anywhere - a code is given for the image & this code is inserted into the AA dashboard. InstructionsGo to Base64 Encode and Decode - Online and select “Encode” Upload image file to Base64 Encode and Decode - Online and select “Encode” Download the encoded file The encoded file will be in text format Take a copy of this text In Advanced Analytics, add a Text box and insert this text<body> <img alt="GeekforGeeks" src= "data:image/png;base64, <Inse

Report that presents an overview of the types of files being downloaded and uploaded and a more detailed overview for downloading and uploading executable files.Report:Advanced Analytics - File Type Download / Upload  

why does netskope selects the pop's in another country when GSLB is enabled

Thank you for your interest in Part II of our intermediate-level series: Building and Implementing a Robust Netskope DLP Program.The recording from the session, led by our SME, Ola Ajose, is now available. This session moves past the fundamentals, diving into deep technical configuration and the strategic steps required to elevate your DLP program to a mature, highly effective state.You can access the full recording here:  Customers Partners In this session, we covered: Module 3: Advanced Configuration: Sophisticated policy tuning, custom data identifiers, and advanced configuration options. Module 4: Maturing your DLP Program: Frameworks and metrics for continuous improvement and enhancing incident response. Module 5: Discovery vs Preventative Mode: Understanding the strategic implications and technical steps for transitioning to full policy enforcement. If you have any questions about your Netskope DLP deployment or the content covered, please don't hesitate to reach out.Best r

Curious if anyone has successfully triggered compromised credential alerts in recent months.We've noticed that there have been no detections of compromised credentials for several months. We've reached out to support and the L3 team, but no test samples have been provided to demonstrate the functionality in the console.We're wondering if anyone has observed any related events that could confirm this feature is functioning as expected.