Additional Discussions

Hi All. We are trying to setup SCIM  with netskope and facing below error:-If we unbind the idp group from Netskope SSO app, the user is removed from Netskope but the idp group remains in Netskope and is orphaned with no association.Binding the idp group to SSO app again,this association doesn't work but user is synced over to Netskope with no group assignments.If we remove all the members from a group provisioned by idp in Netskope(via GUI) .Again provisioning that group gives a error saying (group already exists ) .(groupid being returned is different)Do we have any limitation from Netkope such as idp provisioned groups should not be managed through Netskope GUI?Could anyone help me this. 

Hello, I am looking for the hardware requirements for the Netskope client. For PCs, and mobile devices. how much memory?how much drive space? CPU? etc. Can anyone assist ?

When I go to the Community Events page, anyone else getting a calendar that just hangs trying to list events? Stay current on Netskope's events lineup. 

Hello, I have a rather annoying problem with my Netskope Windows and MAC OS clients: the configuration update is done randomly. On the clients, the config update sometimes happens, only to fail.Looking in the DEBUG log, and running nsdiag -u in the STAgent, I get these errors: 2024/01/23 09:52:52.456 nsdiag p5684 t58fc info ConfigSync.cpp:32 CConfigSync check for configuration update started 2024/01/23 09:52:52.472 stAgentSvc p1c08 t23e8 error config.cpp:8081 Config failed to download config version 2024/01/23 09:52:52.472 stAgentSvc p1c08 t23e8 error config.cpp:9509 Config [sessId 1] failed to download config version. 2024/01/23 09:52:52.472 nsdiag p5684 t58fc error nsdiag.cpp:1707 CNSDiag Failed to check for configuration updates. I have no output firewall filtering, and I have no proxy or PAC proxy in my environment.Do you have any suggestions for me? Thanks!

Hi Team, Can we configure the NS agent with PAC where PAC file automatically updated in to the user machine or is there any manual work we need to do. Please let me know the architecture for both On-premise and roaming user We need NS with PAC or anything NS with E proxy or workaround. i know explicit proxy over client./Netskope Client Split proxy with EPOC. Please let me know how i can and what are there pre-requisites.

Does anyone know if after install, the client can be changed to not update from the Portal?During install the switch autoupdate=on was used and now we would like to revert to "off". Is there a way to do it other than reinstall the agent? I know how to limit from the Portal itself but for my needs I want to know if there is a way to revert the autoupdate=on feature after installed.

Netskope API integration with Aruba EdgeConnect SD-WAN Overview This integration enables you to automatically configure tunnels from Aruba EdgeConnect SD-WAN routers to Netskope’s security service edge (SSE). Aruba’s SD-WAN will build tunnels to the closest primary and secondary Netskope POP with the ease that you would expect from Aruba SD-WAN Orchestration.  SSE defines the set of security services that help deliver on the security vision of SASE. These security services include firewall-as-a-service (FWaaS), secure web gateway (SWG), cloud access security broker (CASB), zero trust network access (ZTNA) and related security functions such as remote browser isolation (RBI), data loss prevention (DLP) and cloud & SaaS security posture management (CSPM/SSPM). Requirements Netskope tenant with API tunnels enabled Aruba SDWAN Orchestrator running >9.3 Setup steps Netskope Pre-requirements Generate API token   Aruba Tunnel Setup Traffic Steering / Business Intent Ove

Hi team,I need to understand that how the Netskope traffic steer there traffic without any proxy setting on the machine or the any additional certificate please let me know its create an SSL tunnel through Data plane for HTTP/HTTPS traffic Also please let me know how  Netskope validate the user is correct. For example if admin send an email invite to user name james and james take the john laptop (organization managed laptop) login webmail to his laptop and install the agent how NS will verify that its an john laptop not james. (AD is integrated). 

Hello everyone, looking to deploy NS client using the Endpoint mgmt tool Automox using what they call a Worklet. Worklets allow Admins to create, automate custom tasks on endpoints, it's based on Powershell and Bash scripting.

Good morning, We have a URL that, due to its function, should not leave any record of being navigated by users.All users have the Netskope client installed and we have performed bypass steering so that the traffic is not inspected.Is there any way to exempt URL from going through the Netskope client and therefore not leave any record in the Netskope console?Thank you very much

Dear Team, For the Mac user's Netskope client installation, we are getting the wrong gateway on the user's client configuration as the "gateway-bom1.goskope.com". The traffic is not tunneling through the Netskope tenant but the client configuration is showing as an enable. We also have not received the logs in Skope-IT alerts for all Mac users. In nsdebuglog.log, found the error as "failed to open file for reading: /Library/Application Support/Netskope/STAgent/l4config.json, err:2" Kindly help us on this issues. 

I wanted to check the route where the webinars in Spanish are located within the Netskope portal.

Self Remediation for Cert Errors / Communication Breaks when steering within Netskope

We are scanning an Oracle database from our Purview account, and during the scan, approximately 60% of the identified assets are being classified as "Classified Assets."   However, when we navigate to Data Estate Insights, each of these assets is displaying "No Match Found" under the Classification section.  This seems contradictory and is causing concerns about the accuracy of our data classification. We have thoroughly reviewed and verified our classification rules within Purview, ensuring they are aligned with the data patterns in our Oracle database. The rules have been executed successfully, We have data reader rules on the Oracle database and tables so, we can view the tables too and the schemas generated from the scanned assets are also 100% correct. Please helppppppp. @anyone with Azure Purview Knowledge@jaroslawmazurek 

Netskope and IDC are teaming up to capture the state of IT, NetOps and SecOps facing WFH, SaaS, cloud, SD-WAN and SSE/SASE. The hypothesis: infra and user experience are more dynamic, less predictable and harder to manage. We are collecting anonymous data from thousands of enterprises to get a clear picture.   Exchange your experience, help your peers: With a 5 minute, confidential survey you’ll get our benchmark report Compare your reality to industry norms Ask an expert analyst   Share your view Be one of the first 25 experts to answer and get a $50 Amazon gift card.The Goal We will quantify: What impacts user experience the most? How long does it take to troubleshoot and resolve issues? How much is automated? How much does it really help?   By sharing your expert insight, you’ll be the first to get the full results.   If you have any questions, please let me know,   Thanks,   Scott     

Has anyone come across the need to specify source ports for firewall rules in Netskope Cloud Firewall?Just wondering as MS Teams has a bunch of source ports required for real-time media traffic i.e. 50000-50059 (destinations being dynamic in-nature as well as destination ports being in the dynamic range too) Doesn't seem like you can specify source ports in Netskope Cloud firewall (as yet)? I wonder if there's an enhancement request for this 

Hi Team, I have successfully installed the netskope client on one of my windows machine using the following scripts: curl https://download-colortokens.goskope.com/dlr/win/get -o ./NSClient.msi && msiexec /I NSClient.msi host={host} token={token} Now, I want to uninstall the same using similar way i.e. via scripts.Is there any way by which it can be achieved?

Hello,I'm trying to query IPsec tunnel status via API v2, but the response I get via the swagger UI is {"status": 405, "result": "method not allowed, please remove IPSec tunnels from webui to proceed further"} The token is good as other endpoints work and the /api/v2/steering/ipsec/ endpoint is allowed for this token.Any clue why I'm getting this response? -JD

Hi everyone, I would like to know if it would be possible to proceed with the installation of the Netskope client without activating it immediately. If there is a possibility to install the software at a preliminary stage and then proceed with activation at a later stage. Thank you all in advance,gianikl12 😁

As we expand out the number of devices running the Netskope client, we are seeing a percentage of devices that have issues where it appears that the client is enabled, but has not communicated in days.  we generally see this after an automatic update.  Has anyone else run into this?  What processes do admins use for monitoring the health of the Netskope agents and ensuring that they are Enabled and reporting correctly.

Apreciados clientes,   En esta publicación, nos gustaría compartir información sobre nuestro equipo de Global Technical Success. Este equipo está ubicado en diferentes zonas horarias y ofrece una variedad de recursos técnicos para los administradores de Netskope. Esto garantiza que tengan éxito en la adopción de forma rápida en su solución de seguridad en la nube de Netskope.   Para cualquier pregunta adicional, contáctenos en tsm-feedback@netskope.com.   Spanish   Portuguese   Mario Jr.

Our end-user devices have been exclusively Windows. Netskope (CASB+SWG) has been implemented her for several years now. We have a small dept of Mac users (less than 10) that for the most part have been segmented off. Internal discussions are ongoing about bringing these devices into the "managed" loop. I wanted to see if there are any special considerations or "lessons learned" you all could share in terms of Mac devices. 

Is possible integrate Cloud Exchange (Log Shiper, Risk Exchange) with Cortex  Palo alto?,  what would be the range? how would it integrate? 

Hello Community Members,I hope you are all doing well. I've come across an issue that I believe some of you might have encountered as well, and I'd like to seek your insights and solutions on this matter. I recently encountered a rather peculiar problem with Netskope. Whenever I open web pages that I access via the browser, they suddenly appear in German, even though I expect them to be in Italian. I wonder if this problem is related to server-side configurations or if it is something internal to Netskope itself. Any suggestions or ideas to solve the problem would be greatly appreciated.I thank you in advance for your assistance. I look forward to learning from your experiences and expertise. 

What's up guys I'm testing sending syslog to SIEM splunk. I know that splunk has the plugin, but I'm testing it this way.1) Does anyone know if we have any history of problems or incompatibility? I did the configuration:- Plugin, using TCP protocol, port 514.- Business rules using "all"- SIEM Mappings and apparently the log is being sent 2 I installed wireshark and the logs are arriving on the SIEM server. Is there some incompatibility? Any tips?