Recently active topics

How do I decrypt/read the TLS traffic in Advance Debug Logs while using Wireshark? 

Netskope Global Technical Success (GTS)Netskope Socks5 Proxy - General Q/A Netskope Cloud Version - 132 ObjectiveNetskope Socks5 Proxy - General Q/A Pre-requisiteNetskope Cloud Firewall License with Socks5 Proxy Feature enabled ContextThis document contains general Q&A related to Netskope Socks5 Proxy Feature Author NotesTo have a practical understanding about Netskope Socks5 Proxy, Please review the following KB article:   Let’s beginQuestion 1: What is Socks protocol?Answer: Socks is a protocol that allows connections to any destination through a proxy server. Many customers prefer not to expose their machines directly to internet traffic, so they use a proxy to establish external connections. In such cases, customers use a Socks proxy as a secure boundary between their internal and external networks. Question 2: How can Socks Proxy feature be enabled?Answer: Socks Proxy feature is supported only for Cloud Firewall tenants. Enable ‘Socks5 Proxy' by raising a support case. Once en

Netskope Global Technical Success (GTS)Netskope Socks5 Proxy for FTP Clients Netskope Cloud Version - 132 ObjectiveApplying Inline controls on FTP Clients to block access to unwanted FTP Servers PrerequisiteNetskope Cloud Firewall License with Socks5 Proxy Feature enabled ContextThis article explains how a SOCKS Proxy can be used to route traffic from FTP clients to enforce inline controls such as blocking access to unauthorized FTP servers or restricting file uploads. Do You Know?The need for SOCKS5 Proxy support is driven by a critical security gap in Non-Web traffic. By forcing all users through the SOCKS5 proxy, companies can gain granular control to restrict access to only approved protocols and destinations. Netskope already has an explicit proxy for Web traffic but not for Non-Web traffic and this is what the SOCKS5 Proxy is for. It provides connectivity to applications/traffic coming from airgap environments. Non-web traffic like FTP, SFTP, SSH, etc on TCP over IPSec, GRE, or N

Hello,I have a DLP policy that blocks the upload of unlabeled documents. The issue I’m facing is that when I try to upload a PPTX file that is labeled with Microsoft Purview Information Protection (MPIP), the upload is blocked by this policy.It’s important to note that not all PPTX files are blocked—only some of them.What I’ve noticed is that, for the blocked files, the “True file type” is detected as “ZIP archive.” In contrast, for files where the label is recognized and the upload is allowed, the “True file type” is shown as “Microsoft PowerPoint 2007 XML.”Has anyone encountered this problem before? Your help would be very much appreciated.Thanks, 

Hello,I am running VirtualBox in NAT mode on my machine with the Netskope Client installed on the host. The VMs inside VirtualBox are failing to connect or update due to SSL/Certificate errors caused by Netskope's inspection.I want to bypass SSL Decryption specifically for the VirtualBox application, but I do not want to bypass traffic for the whole machine or use a broad IP-based exception. Thanks.

What is currently supported to passthrough Phish-Resistant MFA methods like passkeys from unmanaged devices over Reverse proxy, universal reverse proxy and NPA browser access steering methods? We are moving to enforcing phish-resistanct MFA and need to understand what is supported and what has been tested. If this is not currently supported, is this on the roadmap or would this require the use of enterprise browser?  

Does anyone know what the “Export User Key” is used for in Netskope? This feature is located in Setting>Security Cloud Platform>User section?I could not find any documentation on the use case for this feature. I’ve attached the screenshot below.  Is there a place to store the json file once the user key is downloaded?  Thanks.  

Use Case: Create reporting to show users who are and those who are not using paid subscriptions Assume there's three AD groups, each targeting a specific AI tool. For this example, we can say Copilot 365, Claude and ChatGPT.  Please help provide guidance to create resorting/dashboards for this example use case.

Summary.Reviewed https://community.netskope.com/casb-swg-inline-92/netskope-inline-dlp-with-microsoft-information-protect-mip-labels-6942?tid=6942&fid=92It is clear from this article, that we could label a document Confidential, put in a DLP policy that blocks the label "Confidental" into public AI sites, and that document would be prevented (when used in appropriate specific connector situations, with possible adherence to generic connectors.But the question is - if someone were to copy and paste text from a labeled document, and directly pasted it into a prompt, would the DLP block still occur?

Hear from our internal security team as they share how we use Enterprise Browser to provide the granular visibility and control needed to secure all web activity at Netskope.  We will cover: Preventing Data Loss (DLP): How to enforce real-time policies to stop data exfiltration by controlling copy/paste, screen captures, file downloads, and printing, all within the Enterprise Browser. Securing Unmanaged Devices: Strategies for safely enabling BYOD and third-party contractor access to corporate apps without requiring an installed agent or VDI.   Advanced Threat Protection: Blocking phishing, malware, and malicious websites at the browser level before they can impact the endpoint or network as well as control 3rd party browser extensions. Enforcing Zero Trust Access: Integrating with your identity provider to apply adaptive access controls and ensure only authorized users access specific applications. For more information, check out our blog post.  View past events in this series! 

The recent security incident involving Salesloft has highlighted the importance of robust cybersecurity measures to counter supply chain attacks. This document provides an overview of what happened in the Salesloft supply chain attack targeting Salesforce, elaborates on what should we know about supply chain vulnerabilities, and outlines how Netskope SSPM can contribute in preventing such attacks from happening in the first place. What is Salesloft? Salesloft is a Revenue Orchestration Platform which supports the utilization of the Drift AI chat agent to integrate with corporate applications like Salesforce. The Salesloft Git repositories were the initial component compromised, where improperly stored secrets allowed the threat actor to gain access to the vendor infrastructure where they were able to pivot into the OAuth tokens used to integrate with Salesforce. This access was valuable because the integration required permissions to read sensitive data—such as customer records and cre

EntraIDやjamf　Proでマルチユーザーモードでの展開方法が知りたい

Team,Good morning. Is there a reason I'm getting DNS Leakage? Did I forget something in my configuration  See screenshots below.  All "DNS Traffic" is enabled in the steering configuration. DNS Profile is configured with resolver IP of 162.10.1.1 Real-Time Policy is configured. Thanks.  Expand Post

Netskope Global Technical Success (GTS)Microsoft m365 Copilot | Option 'Create' - Block Web Access Netskope Cloud Version - 131 ObjectiveMicrosoft m365 Copilot - Option 'Create' - Block Web Access PrerequisiteNetskope SWG or NG-SWG license is required ContextMicrosoft m365 Copilot provides an inbuilt ‘Create’ function that can generate images, infographics, stories, and more. This functionality is separate from the Copilot chatbot engine. Customers may have a use case where they want to allow all Copilot services except the ‘Create’ feature. This KB article explains how to achieve this using Netskope.Link - https://m365.cloud.microsoft/createDo You Know?When you first navigate to https://m365.cloud.microsoft/ and then click on ‘Create’ option, the traffic is redirected to https://m365.cloud.microsoft/create, and in the backend services from another URL https://designerapp.officeapps.live.com/designerapp/TraceRequest.ashx are invoked. Given this pattern, sub-domain designerapp.officeapp

Hello Team,I am working on SSL inspection with Netskope in our organization (Bogotá, Colombia) and encountered the following issue when accessing a specific domain: Domain: jarvis.grupokonecta.co Netskope error message excerpt: IncompleteCertChain (unable to get local issuer certificate) … Blocked by SSL_INCOMPLETE_CHAIN Verification error: unable to get certificate for issuer = ‘/C=BE/O=GlobalSign nv-sa/CN=GlobalSign GCC R3 DV TLS CA 2020’, subject = ‘/CN=.grupokonecta.co’, altnames = DNS:.grupokonecta.co, DNS:grupokonecta.co’, caissuers = ‘http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt’, sslerrdesc = ‘unable to get local issuer certificate’ I have verified via openssl s_client -connect jarvis.grupokonecta.co:443 -servername jarvis.grupokonecta.co -showcerts and online tools such as SSL Labs, and indeed the certificate chain appears incomplete (missing or not served correctly by the server). What we have reviewed so far: The server certificate for *.grupokonecta.co i

Every time we deploy an Intune image to a new device, the Netskope client registers but will fail when downloading the client configuration.  We have to manually uninstall the client and then send a new invite to the user to reinstall the client.

Thee following topic covering how to block Google AI mode has been posted )How to Block Google AI Mode? | Community ) but now with Google presenting poor quality AI responses via “AI Overview” on nearly all AI searches, we are looking for a way to block these search results without completely blocking Google Search.There is a known way to block “AI Overview” by appending “&udm=14” to the search request URI, however Netskope does not appear to have any support for inline modification of URI’s. Has anyone been able to work around this limitation or found another way (such as HTTP header insertion) to block the “AI Overview”? 

Your Netskope Monthly Highlights – November 2025The latest updates, resources, and events – all in one place.Hi there,As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities. 🚀 Product Release UpdatesRelease 132 is here!Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.📄 Release Notes - November 2025 ✅ Pro Tip: Check for features relevant to your current configurations. ✅ Features not to miss out!This section highlights key innovations from recent Netskope releases that can significantly enhance your Adoption and Value Realisation journey.Top 5 Highlights:Localization Zones – Deliver a native language and localized content experience while maintaining seamless access across regions. Suppress Alerts in Real-time Protection

Netskope Global Technical Success (GTS)  ObjectiveEnsure that sensitive data is identified, monitored, and protected across all environments, including cloud services, web traffic, email, and private applications , by applying appropriate Data Loss Prevention (DLP) controls and policies based on Netskope’s capabilities. PrerequisiteA Netskope Next-Gen Advance DLP license is required to enable inline DLP inspection, as well as API Data Protection capabilities for sanctioned SaaS applications. Context Organizations across industries must prevent the unauthorized exposure of sensitive data such as PII, PCI, PHI, or intellectual property.Netskope DLP provides visibility and control over sensitive information moving across sanctioned and unsanctioned cloud applications, web uploads, email, and endpoint traffic.Key objectives include: Preventing accidental or intentional data leaks to personal or unsanctioned apps. Maintaining compliance with regulations such as PCI DSS, HIPAA, GDPR, SOX,

■ご質問内容・F/Wなどで除外しないとIntune条件付きアクセスでMacOSが正しく判定できない場合のNetskopeの設定方法 ■大前提条件・Jamf ProとMicrosoft社のIntuneを連携して利用しております。 ■問題点１）MacOSに限りEntraID時でNetskopeを無効化しなければデバイス情報をMicrosoft社に渡せなく　　EntraIDの準拠がされない状況が発生しております。　　⇒対応策：弊社ではEntraIDに登録時にはNetskopeを無効化して準拠している。　　　　　　　  準拠後はNetskopeを有効化している。 ２）Microsoft社 Intune条件付きアクセスで準拠したMacOSに限りSharepoint上のページにアクセスする場合　　デバイス情報をIntune側に渡せなくてデバイス登録をしてくださいとエラーが発生してしまいます。　⇒対応策：一時的に条件付きアクセスのサイトでアクセスする場合はNetskopeを無効化しております。

Report for viewing email applications and instances being used, risk score, activities, and applied policies.Report:Advanced Analytics - Webmail Usage (Last 7 Days)  

Hi Team, Is it possible to integrate/ install AD agent so that we can apply client configuration based on OU. and Use Entra ID integration for SSO? Just for Sign-in.  Possible that we can use OU to provide access to private resources.? One way is to create groups and provide access to private resources and apply client configuration group or all users. Since we have multiple branch offices. we need to create many Groups and import in Entra ID.  So wondering if we can enable private access based on OU and apply client configuration based on OU as well.

Does anyone have any experience with allowing Partner Access for a 3rd party? We are thinking through building out device classification rules for a potential Partner Access use-case and it got me thinking about this topic. what will we see in Devices in our tenant for these devices? I assume we won’t have any “enable”/”disable” options but want to be sure safeguarding our partner safeguarding our environment