Recently active topics

Looking for nice well presentation for netskope with video shots

Hello everyone! We recently started having issues with Netskope where OWA and Outlook (new) will not sync emails without a manual sync. Outlook (classic) works just fine though.I have had Netskope on my device since May hand have had no issues until Dec 10th. Microsoft may have made some changes, but I'm looking for a fix on the Netskope side. This is affecting all of my users. I've tried temporarily adding steering exceptions for outlook domains, but it has not solved the issue. Thank you all for your help!!!

I have installed the Netskope client on both Windows and macOS devices. On some Windows laptops, a few users are experiencing a freezing issue—specifically, their laptops freeze shortly after startup.We have multiple security tools installed on these devices, including Kaspersky Endpoint Security. All Netskope-related applications, pop-IPs, domains, and subdomains have already been allowed in Kaspersky. The following IPs and paths are whitelisted:Allowed IPs/Ports:http://162.10.*:443/ https://162.10.*:443/ http://163.116.*:443/ https://163.116.*:443/ Allowed Application Paths:C:\Program Files (x86)\Netskope\* C:\Program Files (x86)\Netskope\STAgent C:\Program Files (x86)\Netskope\STAgent\nsdiag.exe C:\Program Files (x86)\Netskope\STAgent\nspacparser.exeC:\Program Files (x86)\Netskope\STAgent\stAgentSvc.exeC:\Program Files (x86)\Netskope\STAgent\stAgentUI.exeC:\Program Files (x86)\Netskope\STAgent\tloader.exe C:\Program Files\Netskope\EPDLP\* Allowed Domains: netskope.com *.netskope.c

Netskope Global Technical Success (GTS)Facebook - How to Block Facebook Video Streaming Netskope Cloud Version - 132 ObjectiveThis document aims to provide an understanding of how to block Facebook video streaming PrerequisiteNetskope SWG or NG-SWG license is required ContextOne of the common use cases related to Facebook is when a customer allows access to Facebook for a specific department for business purposes but wants to restrict video streaming. Do You Know?Netskope acknowledges Facebook as a Cloud Application and provides a pre-defined cloud app connector. As of Dec 10, 2025 with Netskope’s Facebook predefined connector, customers can exercise control over the following activities:Image iTraffic destined to the below domains will be counted under Netskope’s pre-defined Cloud App Connector for FacebookImage iiIf you look closely at the domain list, you will notice that Facebook uses its own CDNcdn.fbsbx.comfbcdn.netscontent-fra5-1.xx.fbcdn.netscontent-mad2-1.xx.fbcdn.netstatic.xx

How to allow google maps image, which is blocking under cloud storage category.

I can write an AA report with a CIDR, but not one excluding a CIDR.What happens is that I have to write two widgets, download to spreadsheet, match rows and then subtract. It would be far easier to just exclude a CIDR in a Widjet.

Does the Netskope client keep the SWG/NPA secure tunnels if the laptop/PC goes in sleep or hibernate mode?  Is there a recommendation? Thanks.

Netskope Global Technical Success (GTS)Netskope NPA Partner Tenant Access Configuration Netskope Cloud Version - 133 ObjectiveThis document provides a clear walkthrough of Netskope Partner Tenant Access and explains how users can connect to private apps in partner tenants without unenrolling from their primary tenant. It also covers the purpose of the feature, the supported platforms, and how this capability simplifies access for customers working across multiple partner environments. DefinitionsPrimary tenant: This is the customer’s main Netskope tenant where the user is enrolled. All SWG and other core security policies for that user are managed here.Partner tenant: This is the Netskope tenant owned by a partner organization. This tenant hosts the private applications the user needs to access and also holds the relevant access policies for those apps.Partner access: This is the feature that allows a user enrolled in their primary tenant to access private apps hosted in a partner tena

Hello,I need to block a specific application within the https://marketplace.visualstudio.com/ domain (VSCode Marketplace).I would like guidance on how to configure Netskope to block only this specific application without affecting access to the rest of the domain.Could you please advise on the recommended procedure for this type of blocking?Thank you.

Many of our clients have been in contact with Netskope with regards to the news of the latest Salesforce breaches involving Gainsight 3rd party plugin, what should be the main takeaways to our users regarding this breach in particular and how to protect against similar attacks.  For the latest and most accurate news on this, the most trustworthy and relevant news sources should be Gainsight incident advisory on their community site and the related Salesforce security advisory. Whilst the news are still very fresh and the investigation is ongoing at the time of writing this, we have a few interesting intelligence pieces available which are worth of note at this point:This hack is related to the earlier Salesloft drift attackThe tactics used by the attackers are similar to what was witnessed during the Salesloft Drift breach in the summer of 2025. According to bleepingcomputer.com, the same threat actor behind the Drift hacks has claimed responsibility for the hack. Netskope’s analysis a

現在、Intuneにてシングルユーザーモードで展開しておりますが、マルチユーザーモードでの配布を考えております。どのように展開すればいいのでしょうか。

Netskope Global Technical Success (GTS)Understanding Netskope Policy Enforcement with URL Shortened URLs Netskope Cloud Version - 132 ObjectiveThis document aims to provide an understanding of how Netskope Policy Enforcement works with URL-shortened URLs. PrerequisiteNetskope SWG or NG-SWG license is required ContextThere are many applications on the internet that provide URL-shortening services. Customers may need clarity on how Netskope policy enforcement behaves when a URL is shortened using such tools. This document aims to provide that understanding. Do You Know?Netskope has a predefined web category called "URL Shorteners”. As of December 03, 2025, Netskope identifies ~15 cloud applications within this category.DetailsLet’s assume a customer has configured a Realtime Policy to block a social media application such as Facebook. If an end-user tries to access Facebook through a URL shortener, Netskope will still evaluate each and every transaction. The next section explains the tra

Your Netskope Monthly Highlights – December 2025The latest updates, resources, and events – all in one place.Hi there,As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities. 🚀 Product Release UpdatesRelease 133 is here!Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.📄 Release Notes - December 2025 ✅ Pro Tip: Check for features relevant to your current configurations. ✅ Features not to miss out!This section highlights key innovations from recent Netskope releases that can significantly enhance your Adoption and Value Realization journey.Top 5 Highlights:NPA Partner access : Users can now access Private Applications across up to 20 Netskope tenants (partner, MSP, etc.) by simply toggling an option in the Client UI. No nee

Event Follow-Up: Unlocking value from recent Netskope releases Date: November 12, 2025Topic: Unlocking value from recent Netskope releases 🔍 Summary:Thank you to everyone who attended our  webinar, “Unlocking value from recent Netskope releases”, held on 12th November 2025.The webinar covered  a recap of key technical features from recent releases that you might have missed. We hope you found it insightful and valuable. During this session, we covered the below topics : Deep dive into how key Netskope features work and the problems they solve. Step-by-step guidance on configuring and enabling the most impactful features Demo of selected features to show their impact in action Resources, documentation, and next steps to help you maximize value 🎥 Webinar Recording:If you missed the session or would like to revisit the content, you can watch the recording below:Customer/Partner Recording 📝 Share Your Feedback:We’d love to hear your thoughts! Please take a minute to fill out our short s

Hi Teams, i’m try to find the CMD reference for publisher CLI to change the host name and username of default user on publisher ssh but cannot find in the knowledge KB from netskope. so i wonder is it possible to change the hostname of publisher and change the default username from ubuntu ?is they any issue if we change this parameter on publisher?i’m also need to change the same for cloud exchange server too.

The Netskope Cloud R133.0.0 documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Version 133.0.0.The key new or updated features are:AI Security AI Red Teaming AI Security Guardrails Netskope AI Gateway Next Generation API Data Protection ChatGPT Enterprise: Expanded Protection for Fine-Tuning and Memory Data Netskope Client Steering Controlled GA of Windows 64-bit Client Support Mandate Enrollment into Netskope Client Netskope Private Access (NPA) NPA Source IP Egress Criteria for Client Updated NPA Tunnel Re-auth Behavior Periodic Authentication for Real-time Policy Framework SaaS Security Posture Management (SSPM) Visibility of Connectivity Between SaaS App Instance and SSPM Submit your feedback via docs.netskope.com.

Hi All, Has anyone integrated Crowdstrike NG SIEM with Netskope. In Crowdstrike i can see that their is native integration with Netskope and require API Key.  API V2 Document which is available in Crowdstrike portal is outdated. In Netskope, we need to create role and then generate API key. Not sure which role we should assign in Netskope Tenant before generating API key.and  also correct me if role creation in Tenant Admin and generating API key is wrong method. Thank you in Advance.Govi33

Hello everyone.I recently implemented and installed Netskope SASE.Before Netskope, I was using Tailscale, and I encountered an issue where DNS queries (lookups) didn't work at all when running both the Netskope client and Tailscale on Ubuntu.Some say setting exit-node to false solved the problem for Tailscale, while others say setting an exception for Tailscale's Magic DNS (100.100.100.100) solved the problem for Netskope. Even after applying both settings, the problem persisted.If anyone has solved this issue, please help.

Netskope Global Technical Success (GTS)Block Websocket (WSS) Traffic Netskope Cloud Version - 132 ObjectiveHow to block Websocket Traffic via using Netskope Realtime Protection Policy PrerequisiteNetskope SWG or NG-SWG license is required ContextThere are many applications on the internet where the initial traffic begins as HTTPS but later switches to a WebSocket connection. Some customers may have a business use case to block WebSocket traffic. This document explains how to achieve this using a Netskope Realtime Protection Policy. Do You Know?Before we proceed further, there are a few important details about WebSockets that you should be aware of - Protocol Meaning Security Similar To Works on Port Number ws:// WebSocket No encryption http:// 80 wss:// WebSocket Secure Encrypted (TLS/SSL) https:// 443 wss:// stands for WebSocket Secure. It is the encrypted and secure ver

Hello!We have an enterprise license for Lovable AI at the company, but we want to block personal access and allow access only to those with the license. Currently, access to the license is via SSO.Since the application is not supported on Netskope, how can we achieve this license-based access control while blocking personal access?We've tried various methods using regex, HTTP headers, and attempts to block access through Google's provider and Git, but without success. When I click on Google login, for example, I'm redirected to their authentication page.

Background In today's digital age, businesses of all sizes rely on technology to operate efficiently and effectively. It is essential for IT security leaders to protect their rapidly expanding corporate infrastructure and distributed workforce. With the rise of cyber threats, cybersecurity has become a crucial component of business strategy & operations. One of the most critical aspects of cybersecurity is security hardening, which involves implementing measures to protect systems and data from potential attacks. What is Security Hardening Security hardening is a proactive cybersecurity approach aimed at fortifying the defenses of systems, networks, and applications. It involves configuring security controls inbuilt into product and controls provided by other solutions outside of the product such as perimeter security solutions i.e. firewalls, access restrictions, network restriction etc. to protect systems, services, applications against unauthorised access and abuse. Prot

Greetings All,I’ve had a persistent issue for several months with Netskope on macOS that I wanted to throw out here to see if anyone else had come across something similar. Intermittently devices with the Netskope client installed will lose all connectivity to the internet. In the logs I see usually around 50,000 of these messages in a span of just a few seconds`critical nsDNSProcessor.cpp:149 dnsProcessor Failed to get DNS resolver values`Usually as this happens all active connections are killed, like ongoing zoom calls, even though those aren’t being steered to Netskope.Before this I see the DTLS tunnel close down with this flownpadebuglog.log```[info] npaClientHandler.cpp:748:npaClientHandlerStop():0x0 Will shutdown NPA handler and dispatch thread, tunnelId = 7f8b47.[info] tcpclient.cpp:530:shutdown():0x1086a1160 Shutdown socket fd 45[info] npaClientHandler.cpp:755:operator()():0x0 The client handler is stopping and shutting down, userId = 502.[info] tcpclient.cpp:199:handleClose():

Hi Community,Does anyone know how to make the Google Antigravity Certificate Pinned App exception for MacOS?I have the issue from the beginning like Login step. I’m try to except the process name with any domain (*)Antigravity* antigravity* language_server_macos_armBut still can’t sign-in.