Skip to main content
  • EN

Additional Discussions

Welcome to our Additional Discussions Forum! Here, you can engage in lively conversations and exchange ideas on a wide range of topics that go beyond the scope of our product forums

  • 179 Topics
  • 413 Replies
179 Topics
S
secproceoNew Member
asked in Additional Discussions
Netskope Administration Using SSO

Team,Good evening.I followed the instructions below, but Netskope only creates a “TenantAdmin” role in the console using SSO. Is there a way to utilize the other roles created in Netskope, such as “DelegatedAdmin” and “Compliance Officer,” etc.? I can log into Netskope using an SSO account created in Azure with no problem. The issue is the account always shows up as “TenantAdmin” for the role.   Thanks. 

204
S
5 days ago
2
2022RossNew Member
asked in Additional Discussions
NS Anget not getting Sterring Config

Deployed NS agent via intune to windows 10 machines ~4000. the deployement was successful however we seen a rise in agents on machines not steering traffic as intended.Example 1​​​​​This is very random and given the users are machines are part of the right groups and OU Troubleshooting Done:1. Enough Licenses ---check 2. User part of the right group ---check3. Device sync fine with intune ---check 4, windows up to date  --------check 5. manually update version ----Done6. unstallting agent -----Done ( sometimes this fixes the issue when intune reinstalls agent) Any help will be appriciated   

160
2
6 days ago
D
dkolb-netskope
asked in Additional Discussions
Netskope CA certificates

Does Netskope notify us when their signing CA certificates are changed/updated? Recently we have had an issue where we needed to manually upload the certs for a tool and I was curious if Netskope notifies all of their customers when this certificate is renewed or being changed.Let me know if anyone has experienced the signing CA’s changing/updating and if Netskope notifies anyone.Thanks in advance!

501
D
12 days ago
M
mattwalkerNew Member
asked in Additional Discussions
IDP Install for non-domain joined sytems

Hi All!  Hoping someone can help pin down an issue we're running into with deployment of the Netskope Client via IdP. FWIW - We're using Okta as our IdP.  IdP Install reference: https://docs.netskope.com/en/netskope-help/netskope-client/netskope-client-deployment-options/deploy-netskope-client-via-idp/We have the Okta account set up in Settings>Security Cloud Platform>Forward Proxy SAML. We also have the .msi file on the computer. We run the following install script:  msiexec /I NSClient.msi tenant=**MASKED** domain=goskope.com installmode=IDP mode=peruserconfig autoupdate=on /qn After running the script, the Netskope client installs, and the user is prompted to enter in their Okta credentials. The user completes Okta authentication (we can see the successful log within Okta) but then the Netskope enrollment window flashes to a "Hmmm... can't reach this page" error.   Has anyone here run into a similar issue or know how

4444
S
Netskope Employee
28 days ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

422
D
Netskope Employee
1 month ago
dburgess23
Netskope Partner
dburgess23Netskope Partner
asked in Additional Discussions
Admin having issues

Anyone have this issue? 

100
dburgess23
Netskope Partner
1 month ago
T
Netskope Partner
TED_tsukaharaNetskope Partner
posted in Additional Discussions
Request：A notification when the Secure Enrollment token is nearing its expiration date.

【Background】With the activation of Secure Enrollment, authentication tokens must be renewed each time before their expiration. Engineers need to confirm the pre-expiration notifications for the tokens and carry out the necessary tasks to address any identified issues. 【Request】We request a notification when the Secure Enrollment token is nearing its expiration date.We would also like the ability to configure how many days in advance the notification is sent.  

531
S
Netskope Employee
1 month ago
D
dkolb-netskope
asked in Additional Discussions
Secure Enrollment Authentication Token Question

Hello,I was wondering if the Secure Enrollment Authentication Token gave a warning before expiring?I could not find any documentation that said there would be any banners or notifications when the token is about to expire so I wanted to know if there is some sort of warning for it.Thanks in advance!

821
S
Netskope Employee
2 months ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Device Classification: Verification of Certification Chain, Expiration, CRL

Hello,In the context of implementing a Device Classification profile, we can verify the presence of a certificate. Currently, the presence of a certificate is sufficient to meet the criteria.Is it possible to extend this verification by checking the certification chain, expiration date, etc.

271
Rohit_Bhaskar
Netskope Employee
2 months ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
On-Premise Detection

Hello,In the context of On-Premise detection, it is currently possible to use a DNS/http request. To validate detection, it is necessary to depend on the tested resources.The slightest network disturbance can lead to poor detection of the user's location Is it possible to use the Public IP to identify the user's locality? This IP is visible to the agent.

521
Rohit_Bhaskar
Netskope Employee
2 months ago
A
AlfaBaneExplorer III
posted in Additional Discussions
Single mode -vs- Multi-user mode installation

Hello all,    I wanted to see if anyone had any use-case, pros/cons, intent, etc information in terms of client installations. Beyond "Optional parameter. Use this parameter when installing in a multi-user system", I've been unable to find any additional information or context.    For reference, when we deploy the client or provision devices, the Netskope client MSI is installed with a mode=peruserconfig parameter. While our devices can be used by any user in our environment with appropriate access, there are next to no devices that are intended to be regularly used by multiple users.    I just wanted to reach out and see what your experiences have been. 

16375
monika
Netskope Partner
2 months ago
Kmaheshwari
Netskope Employee
KmaheshwariNetskope Employee
published in Additional Discussions
Netskope Sentinel One Device ClassificationNetskope, Sentinel One, Device Classification

Integrating SentinelOne and Netskope to leverage threat detection and enforce device classification provides a robust endpoint-to-cloud security approach.This integration facilitates effective device classification and management, enabling consistent security policies across both cloud and endpoint environments. Requirements:SentinelOne Admin Access Netskope Tenant Implementation:SentinelOne ConfigurationConfigure the script on SentinelOne Tenant > Remote Ops > Create New Click on Upload New Script and provide the script details Upload the script Script content:This script will create an empty file with a specific file name in a specific directory that Netskope's client will look at and It will be created when there is high risk as determined by SentinelOne - and when the Netskope client sees this, it will be able to match on the device and respond appropriately. # Define the directory and file path$targetDirectory = "C:\ProgramData\Sentinel\Addons\SentinelRSO"$filePath = Join-Pa

720
Kmaheshwari
Netskope Employee
2 months ago
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
posted in Additional Discussions
Cribl Netskope Events and Alerts Integration

Cribl Netskope Events and Alerts Integration Netskope’s Events and Alerts can be pulled into Cribl via the Netskope REST v2 APIs. You can use Cribl Stream to filter and redirect to the destination of your liking. Note: Netskope Steaming Events (WebTx) aren’t supported currently. RequirementsNetskope tenant with API v2 enabled Cribl Stream accountSetup StepsNetskope Generate API token CriblCreate Data Source VerifySave and Run NetskopeGenerate API tokenIn your Netskope tenant go to Settings > Tools > REST API v2 > New Token  Add permission scopes to the token. You will need to add all scopes that you want to pull. In my example, I am going to grab all Events and Alerts. Give your token a name, and expiration period. Use the following scopes Events/api/v2/events/dataexport/events/application/api/v2/events/dataexport/events/audit/api/v2/events/dataexport/events/incident/api/v2/events/dataexport/events/infrastructure/api/v2/events/dataexport/events/network/api/v2/events/dataexport

17054
Gary-Jenkins
Netskope Employee
2 months ago
S
smzothoNew Member III
posted in Additional Discussions
Netskope randomly disabling

Hi Team I'm really happy to be part of this wonderfully community, my name is Simphiwe.We have many of our users whose Neskope gets disabled randomly and when this happens they lose access to a number of important applications within the organization. The only way to temporarily fix this is to restart the Netskope service or to completely restart the computer. However this is a short-time fix. I just want to know what are the main causes of Netskope getting disabled and how to fix this ? Thank you  

30325
M
2 months ago