Recently active topics

Hi Everyone,Thank you for registering for the Advanced Analytics Office Hours – March session. We appreciate your interest and participation. If you were unable to attend or would like to revisit the discussion, you can access the session resources below:Webinar Recording:March Office Hour Recording Session Recap & Key Takeaways:March Office Hours Recap The recap includes the main highlights, insights shared by the experts, and helpful resources discussed during the session.If you have any follow-up questions, feel free to reply to this email or continue the conversation in the community.Thank you again for participating in the session.

Thank you in advance - as a security measure, I was wondering if rather than bypassing traffic to AWS Workspaces from Netskope, might it be possible instead to source anchor traffic from our AWS Netskope publishers and configure IP restrictions from the AWS-end, such that access to our Workspaces tenant was restricted to our AWS/Netskope publishers? We’d ideally only like for access to AWS Workspaces to be driven from Netskope client-driven endpoints.

We have two major releases to announce for our ServiceNow ecosystem — the brand-new Netskope CMDB Integration app, now available on the ServiceNow Store, and version 3.0 of the Netskope SecOps (SIR) app, which brings significant new capabilities to security operations workflows.Whether you're an IT operations team looking to bridge your CMDB with Netskope's Zero Trust visibility, or a SOC team wanting richer incident response automation — there's something here for everyone. PART 1 — NEW APP Introducing the Netskope CMDB Integration AppThe Netskope CMDB Integration app is a first-of-its-kind release that connects Netskope's Security Service Edge (SSE) platform directly to ServiceNow's Configuration Management Database. This app is purpose-built for IT and security operations teams who want Netskope's asset, policy, and access data living natively within their ServiceNow CMDB — no custom scripts, no middleware, no manual exports.  1.  Private App Bidirectional SyncThe CMDB app supports

Hello I have NextGen API for Microsoft outlook. For 12 of my users I want to steer the outlook traffic via netskope.I know it is the pinned app and got a bypass, but is there any way to steer via Netskope

SUBJECT- Issue with Activity Control Policy for Banking/Finance URLs in Netskope Hello Team,Today, I created a policy related to custom URLs for banking and finance/accounting websites. I selected specific domains to control user activity and configured the policy properly.However, I am unable to control activities on banking websites in particular. I am not sure why this is happening.When I perform a URL lookup in Netskope, it shows that the traffic is being steered to Netskope, so the steering is working.If anyone knows how to resolve this issue—especially for banking sites—please guide me

Generated with the assistance of Claude Opus 4.6 (Anthropic) -- but any slop is my fault for not managing context.Summary We need a per-user, one-time enrollment token mechanism for IdP-mode enrollments on devices that cannot receive tokens via MDM (mostly Chrome or Linux laptops, unmanaged or “lightly managed” endpoints). The current Secure Enrollment model provides tenant-wide shared tokens distributed via MDM. We have specific questions about how Enforced/Not Enforced status interacts with IdP vs UPN enrollment, and whether per-user scoped tokens are available or planned. EnvironmentTenant: XXXX.goskope.com Secure Enrollment Service: Enabled Token set 1: Created Jan 2026, Status: Enforced (auth + encryption), Expiry: roughly 1 yr Token set 2: Created Mar 2026, Status: Not Enforced (auth + encryption), Expiry: roughly1yr Secure Configuration Service: Enabled IdP: Okta (SAML Forward Proxy configured with Client Enrollment access method) Deployment modes: UPN via Intune/Jamf (Windows/m

 Netskope Global Technical Success (GTS)Block Claude Web Chat and Desktop App While Allowing Claude Code CLI on Windows Netskope Cloud Version - 135OverviewAnthropic's Claude is accessible through multiple clients: the Claude.ai web interface, the Claude Desktop application, and developer-oriented tools such as Claude Code CLI. In enterprise environments, IT and security teams often need to permit programmatic API access (e.g., Claude Code for developer workflows) while blocking direct consumer-grade access channels that may bypass DLP and AI governance controls.This article explains how to use Netskope's HTTP Header Profile feature within Real-time Protection policies to differentiate between these clients based on their User-Agent strings. The configuration results in a three-policy stack that:Allows Claude Code CLI traffic (API-driven, header-governed developer access) Blocks Claude Web Chat (browser-based claude.ai conversations) Blocks the Claude Desktop App (Electron-based deskto

Hear from our security engineers as they demonstrate how CE's three integration pillars of Cloud Threat Exchange (CTE), Cloud Ticket Orchestrator (CTO), and Cloud Risk Exchange (CRE) connect Netskope to the tools we already rely on, turning isolated signals into coordinated, automated action.Learn how to: Automatically ingest curated threat feeds and STIX-formatted IOCs from Feedly's AI-powered intelligence engine and any TAXII-compliant source Bidirectionally share email-borne threat indicators from Mimecast and endpoint-detected IOCs from CrowdStrike Falcon Propagate AWS infrastructure threat findings from GuardDuty and supply chain risk signals from GitHub directly into Netskope's threat intelligence pipeline Feed Mimecast email threat signals into Netskope's User Confidence Index (UCI), dynamically adjusting cloud access policies For more information, check out our blog post.    View past events in this series! Check out some customer questions below, or feel free to comment

Hi everyone,I’m looking for a solution to define a policy in Netskope Standard edition to give me an alert on shared folders that are unsafely shared among external and al internal users.I’ve already have a policy in place for files but I can’t find a way to define it specifically for folders. I’ll appreciate it if anyone has a comment on the solution.

Why is information shared with the community now being reviewed by a moderator?Are there any criteria that need to be followed?

We have been informed by the Support team that if you create cases on behalf of customers, the SLA associated with the customer’s purchased support level will not be honored.Quoted from Support, with company information masked:“Also, regarding the SLA request, the reason is that the case was raised by a vendor account rather than the customer.Please sync with your account team for any further queries.”

Dear Partner fellows,We have been informed by the Support team that if you create cases on behalf of customers, the SLA associated with the customer’s purchased support level will not be honored.Quoted from Support, with company information masked:“Also, regarding the SLA request, the reason is that the case was raised by a vendor account rather than the customer.Please sync with your account team for any further queries.”

Dear Partner fellows,We have been informed by the Support team that if you create cases on behalf of customers, the SLA associated with the customer’s purchased support level will not be honored.Quoted from Support, with company information masked:“Also, regarding the SLA request, the reason is that the case was raised by a vendor account rather than the customer.Please sync with your account team for any further queries.”

Disclaimer and AdvisoryThis document and the guidance contained herein are provided by Netskope for informational purposes only and are intended to assist developers and administrators in configuring third-party tools to operate with the Netskope platform. "As-Is" Information: The information, scripts, and configuration examples are provided on an "as-is" basis. While Netskope makes a reasonable effort to ensure the accuracy of this information at the time of publication, we make no warranties, express or implied, regarding its completeness, accuracy, or suitability for any particular purpose. Third-Party Systems: The software, libraries, and tools discussed in this document are not owned, controlled, or maintained by Netskope. The configuration, commands, and behavior of these third-party systems are subject to change at any time without notice by their respective owners. Netskope assumes no responsibility for errors, omissions, or outdated information related to these third-party s

Hello everyone,I’m looking for guidance on how best to handle chat bots within business web applications, particularly when they are being blocked under Online Ads filtering.For example, we use the Blackbaud web application. While the main application functions as expected, the embedded chat bot is being blocked because it is categorized as Online Ads. The chat bot is an important feature, as it is used to create support cases for the application.Additionally, I’ve included screenshots from SkopeIT and had a couple of related questions:Is it normal for the same application to appear under multiple App Categories? What is the difference between a URL and a Page as shown in SkopeIT?Any insights or best practices would be appreciated. Business WebAppChat bot on Business WebApp 

Hi Team,Some of our customers would like the view under Settings → Cloud Security Platform → Devices to update (almost) in real time.Especially when selecting a specific device and clicking the refresh button, it often takes “forever” — if it has any effect at all — for the display to update and show which tunnels are currently online.The timestamp shown in the top left is current, but it does not reflect the actual status.This would be particularly helpful in troubleshooting situations.Our local SE mentioned that since this is not on the roadmap, we should submit a feature request for it. Thank you very much and best regards,Marco

This is a demo covering how Netskope provides full visibility, control, and protection for genAI app usage. Learn more.

 This is a demo of the Netskope One Agentic Broker, which provides unified visibility and real-time protection for the autonomous AI ecosystem by decoding and securing Model Context Protocol (MCP) traffic between AI agents and data sources. Learn more about Netskope One Agentic Broker.

 Netskope One AI Guardrails provides real-time content moderation for every interaction, securing the enterprise against emerging AI-specific threats including prompt injection and jailbreak attempts, and unsafe use. Learn more.Netskope One AI Gateway secures the API traffic fueling your AI-powered applications. By centralizing authentication, traffic management, and content inspection between private apps and LLMs, we ensure autonomous agentic data flows remain governed and secure. Learn more.

Author:  Stevan Pierce & Madhura SridharDate: March 16, 2026Modern security teams are drowning in “partial truths.”Your email gateway flags suspicious links. Your EDR finds a questionable process. Your SASE platform sees risky SaaS behavior. Your IAM solution logs a strange login pattern. Each tool is doing its job yet each is also speaking its own language, in its own console, with its own definition of “risk.”The result is a familiar and frustrating reality:Analysts jump between dashboards Teams argue over whose alert is “right” Critical context is trapped in silos And incident response lags behind the adversaryAt Netskope, we faced this exact problem in our own environment. As “Customer Zero,” our security team not only secures Netskope but also pushes our own platform to its limits, trying to solve the same challenges our customers wrestle with every day. This is where Netskope Cloud Exchange (CE) comes in.Cloud Exchange is how we connect the Netskope One platform with the tool

 Proactively identify and address vulnerabilities in private AI deployments. Automate adversarial simulations to find and fix vulnerabilities, to ensure your AI is resilient and production-ready before it reaches your users. Learn more about Netskope One AI Red Teaming.

Hello Netskope Community,Managing endpoint client software across an entire organization is a critical task. A key part of this is having a clear strategy for updates and, when necessary, rollbacks. This guide outlines Netskope's recommended best practices for managing client versions to ensure stability, minimize risk, and maintain business continuity. Understanding the Netskope Client's Upgrade Behavior A common question we see is, "How do I roll back the Netskope Client?"It's important to know that the Netskope Client does not have a native, in-place "downgrade" feature. The installer is designed to prevent an older version from being installed over a newer one to maintain system and configuration integrity.The Official Rollback Procedure:If you need to revert to a previous client version, the required process is a full uninstall and reinstall, orchestrated by your endpoint management tool (e.g., Intune, Jamf, SCCM). Obtain the Installer: Download the specific client version you wis

Hi,What is the script to use to deploy netskope client for macos ?Our IDP is Google Workspace and the saml conf has been setup on GWS and Netskope (saml-forward-proxy). Our MDM is Addigy.Best regardsMathias 

Netskope Global Technical Success (GTS)Different Ways to Disable the Netskope Internet Access Tunnel (SWG) Netskope Cloud Version - 135 OverviewThe Netskope Client steers endpoint traffic through two separate tunnel types: the Internet Access tunnel, which inspects web and SaaS traffic via Netskope's NewEdge network, and the Private Access (NPA) tunnel, which enables zero-trust access to private applications.This document focuses exclusively on methods available to disable the Internet Access tunnel. There are five distinct options that an administrator can enable in the Netskope tenant, each offering a different balance of security, control, and user impact. Prerequisites:All the mentioned options are configured in the Netskope tenant under Settings > Security Cloud Platform > Netskope Client > Client Configuration. If you do not see any of these options, reach out to your Netskope representative or open a support ticket to have them enabled. Make sure your Netskope client is