Additional Discussions

Is it possible for future upgrade announcements to include dates that each DataPlane is expected to see impact?Currently the ManagementPlanes are called out to specific days, but the DataPlanes are only identified regionally and assigned to multiple days.We create internal Change tickets referencing vendor changes off of most every planned change announcement that comes from Netskope.   Being able to state expected impact on a specific day, would be a huge benefit over three separate changes that might have impact. 

Hi Team, I have encounter a query regarding the netskope posture check as we are trying to showcased the use cased of managed and unmanged device where the user dont have and NGAV on there system it would be unmanaged and unable to access internet. While customer asked if netskope support the update status of there antivirus where the antivirus is installed but the Antivirus is not updated than also the user machine shows unmamaned in that status. Please let me know if this can be enable or ANy additional license required. Also i tried to configure the device classfication for NGAV still the client machine shows the status unmanaged i took the .exe from the task manager in details where exe is running. I will attached the profile snip as well testing policy as well. Please help me to resolve the same. 

Hi all, thanks for reading. I'm using Entity advanced filter options to remove false positives caused by a regex.The problem I'm observing is it seems the case-sensitive option set in the upper part of the config dialog does not apply to the regex defined as filters. ** Please check the attached picture as a dummy example of the issue I'm facing.Attached Example: The entity is set as case-sensitive. The filter is supposed to exclude any string not starting by 3 lower-case letters ([a-z]{3}). The observed behaviour is excluding strings not starting by 3 letters ([a-zA-Z]{3}) though, like it was case-insensitive (ignoring the setting above). Could you please confirm the regex defined as filters are hardcoded as case-insensitive?If so, is it planned to change this behaviour? Thanks in advance,Òscar

Hello folks,We need to set a report for a CISO with general information and trends about threats, policy hits, DLP alerts among other data.Is there any automated way to deliver this with Netskope?

Hi, Is there extra configuration needed/supported for resolving private DNS from within Docker container running on Debian 11 Host with Netskope ON ? On the Debian 11 Host itself, private app resolves OK.However the running Docker Container is unable to resolve private apps DNS. container resolv.conf root@f5eaa8f3589c:~# cat /etc/resolv.confnameserver 127.0.0.11options ndots:0 in Windows 10 host, running Docker Container resolves private app DNS OK.My internal network router is 192.168.1.1 > cat/etc/resolv.conf# DNS requests are forwarded to the host. DHCP DNS options are ignorednameserver 192.168.65.7  Workaround:use "host" networkdocker run --name swiss-army-knife4 --net="host" -itd leodotcloud/swiss-army-knife    

Hello Team, I have a few questions on Netskope Plane. 1) on which plane is customer data stored?2) What data is available on the data plane?3) What data is available on the management plane?

Hello all,I am facing a "strange" issue with my netskope client.At my company, we do use a PAC file.The problem is, I am gettnig the following error message: 2023/09/14 10:51:27.803 stAgentUI p25c8 t2640 info proxy.cpp:72 nsUtil Proxy settings: auto detect 1, PAC http://tstwwstf80l02.testgroup.euroclear.com/wpad.dat, static webproxypie.beprod01.eoc.test:80002023/09/14 10:51:27.807 stAgentUI p25c8 t2640 warn proxy.cpp:155 nsUtil Failed to auto detect proxy or download PAC file, error 121662023/09/14 10:51:27.807 stAgentUI p25c8 t2640 info proxy.cpp:214 nsUtil Using static proxy: webproxypie.beprod01.eoc.test:80002023/09/14 10:51:27.808 stAgentUI p25c8 t2640 info config.cpp:5427 Config System proxy configuration Detected , System proxy Count 1,Pac Server Host N/A The netskope client is not able to download the PAC file. From the browser itself, I can reach: http://tstwwstf80l02.testgroup.euroclear.com/wpad.dat and download it manually.  Any idea?Thanks

Dear Valued customers,    In this post we would like to share about our Global Technical Success team. This team is based in multiple time zones and provides variety of Technical Resources for Netskope Administrators. So that they are successful in faster adoption of their Netskope Cloud Security solution. 2-minute video without Demo 5-minute video with Demo

One of the things I enjoy discussing the most with Netskope administrators and users is integrations.  Netskope’s Cloud Exchange and REST API allow for a wide range of Netskope provided and custom integrations.  These integrations range from threat intelligence and risk sharing to automated ticket creation in your service management platform.  You can also utilize Netskope’s integrations to monitor Netskope events and platform status with your collaboration tools such as Slack and Microsoft Teams.  I provide two examples of this with Microsoft Teams.  The first integration allows you to receive status notifications from the Netskope Trust Portal to Microsoft Teams while the second allows you to generate Teams messages to specified channels when a specific policy triggers and a user enters a justification.   Let’s take a look.    Monitoring the Netskope Trust Portal With Netskope Teams Netskope publishes platform status updates on maintenance, clo

"Netskope NewEdge is the world’s largest, highest-performing security private cloud and powers the inline and API-driven security services of the Netskope Security Cloud. NewEdge provides customers with unparalleled service coverage, performance and resilience. Today NewEdge is powered by data centers in 70 regions with new data centers being added every month.  By taking full control over routing, peering and data center location decisions, NewEdge achieves the lowest possible latency and round trip times for web, cloud & software-as-a-service (SaaS) access." “Will the business-critical enterprise app traffic also be treated as regular internet traffic, leading to traffic delays and poor user experience?” is a concern that most security practitioners have when evaluating SASE. This technical brief will address this concern by analyzing the use of SASE, with the  benefits of underlying internet peering to deliver the prominently used enterprise application in Cloud.  For example, T

I have tried to add the "Time Actively Spent on Sites" widget to my dashboard but for some reason the data wont sync in real time and no matter what user I pick it's the same numbers. How can I get it to sync with the data in real time? 

Hello Team,   Recently we have checking on the Netskope agent installed machines and found agents are running on the version 76 and below 93. We have also enabled the auto-upgrade option. So it looks like some machines are upgrade the client automatically. But some machines are not upgrading to the newer version. We tried enabling and disabling the client both from the end-user side and Netskope console settings but still agent not upgraded. Is there any way to make the client upgrade manually.

Hello Team, We are planning to roll out Netskope clients via the Sapphire tool, however, we are not getting any related/supported documents in docs.netskope.com.  Kindly help us here for the smooth deployment and share the related docs.

Although there is no max limit to query imposed having a short query is succinct and efficient.   SkopeIT "AND" parameter is handy when it comes to writing SkopeIT queries.   If your parameter is constant but only the value is different a better operator to use would be "In"   This will shorten your query and search will be more efficient.   Here is an example of using IN operator. If you were to use AND imagine the length of the query if you were to add 100's of values!   Note that parameter values are included in single quote separated by comma. The parameter (here " dlp_incident_id" ) is entered only once.   SkopeIT query: (dlp_incident_id in ['863060765611108610','8203483362870297256'] and status neq 'Resolved - Policy Updated')   Thanks to Paul Knight who suggested the alternative.

Is there a way to download all the dashboard data at once for one specific user rather than all the users in the data? For example, when drilling in the data for specific user to show all the data for that user data rather than downloading it separately?

Hello all, I'm not sure if I can post this issue hear or not. Does anyone have an issue of Netskope Client communication issue with the Console? Most Mac OS machines are failing to report to the console when the machines are online. All our endpoint devices are running on 105 client versions. Till now no resolutions from support. Does anyone have this issue? Till now are uninstalling the ns client and reinstalling it. But I don't think it is not the recommended solution. 

I'm working with one of our admins that has been seeing an concerning behavior for some time now. when editing or reviewing real-time protection policies, data in existing policies will change accompanied by an "auto populating" message Here's his report from today: for example when i look at NPA-PeoplesoftUpdate-PROD-support, the destination is NAC-PeoplesoftHR-PROD-supportbut when i look at the policy itself, it auto changes the dest to the nonprod, and pops up the, "auto-populated" box at the top Has anyone here ecountered anything like this before? It happens regardless of browser for him.   

Hello Team, Hope you're doing fine. Could anyone please help me to get the URL with all the List of the Netskope POP accompanied with region, Public IP addresses, Development Status, ....Thank you in advance. Warmest Regards,Ali 

Netskope Private Access and Cloud Exchange running in AWS Overview Using Netskope’s Private Access (NPA) can help secure workloads in AWS like deploying Netskope’s Cloud Exchange there. In this solutions guide NPA is used to front end a Cloud Exchange server that doesn’t have direct inbound internet access.    Requirements Netskope tenant with a NPA license Amazon Web Services account Setup Steps Netskope  Configure a Netskope Publisher in your Tenant   Amazon Web Services Deploy EC2 Netskope Publisher   Cloud Exchange Setting up Cloud Exchange in AWS Deploy EC2 Ubuntu Server Add Access to Cloud Exchange via NPA Setup Cloud Exchange on Ubuntu Server   Verify Netskope Tenant sees your publisher Check your client for the NPA tunnel Try to access cloud exchange on your private IP Configure a Netskope Publisher in your Tenant Go to your Netskope Tenant > Settings > Security Cloud Platform > Publishers Click New Publisher     &n

Hi all, i set up the Cloud Exchange in SSO with Azure AD. When a user authenticates to AzureAD via username and password, the SSO login on the cloud exchange works correctly. If the user logs in to AzureAD with windows Hello and with biometric recognition, SSO login on Cloud Exchange does not work. It could be a problem related to the type of token issued by Azure AD and consequently to a parameter that Netskope CE does not recognize. Has anyone had the same problem? Thanks.

During the internal discussions around Real-time Protection Policies, the question came up about leveraging a the process of exporting "All Policies as JSON" as a potential backup/restore point of the our Real-time Protection Policies. Has anyone had similar conversations, use-cases, needs? Just curious how the JSON export could be used. 

I am running into a repeatable issue with mongodb and rabbitmq not starting upon reboot.   DetailsFresh install of Cloud Exchange 3.2 on Ubuntu 20.04.4 LTS Docker installed from the Ubuntu installation options during OS installation Installed into /home/{user}/netskope/ta_cloud_exchange Upon initial ./start all containers start normally. After server reboot, rabbitmq and mongodb fail to start running docker-compose up will start them successfully, but get a bad gateway when attempting to login to the GUI The custom_plugins directory is set to 755  Is anyone else seeing this issue, or have any recommendations? 

I'm posting this here because I haven't got a response on the ticket I raised earlier today even though I have already escalated it! Is there anyone else having issues with the NS client after upgrading to 105.0.0.1362 on Mac? NS is no longer steering web traffic after upgrading the client. Is this a known issue!? Can someone from the support team respond to my ticket #00279994?

Application Risk Exchange ServiceNow Summary Netskope’s Cloud Confidence Index (CCI) is a database of more than 54,000 cloud apps that Netskope has evaluated based on 48+ objective criteria adapted from Cloud Security Alliance Guidance. These criteria measure apps enterprise-readiness, taking into consideration an apps security, audit-ability, and business continuity.   The Cloud Exchange Application Risk Exchange integration with ServiceNow shares this application CCI score with ServiceNow providing additional information about applications in ServiceNow’s company database.   Requirements Netskope tenant ServiceNow account   Walkthrough Netskope Cloud Exchange Review applications in Cloud Exchange ARE Create business rule   ServiceNow View in ServiceNow Search for shared application CCI    Review applications in Cloud Exchange ARE You can view the entire list of applications being brought into Cloud Exchange from your Netskope tenant including the

What are the limitations of CASB in NGSWG (Next-Generation Secure Web Gateway), and what are the limitations of DLP (Data Loss Prevention) in NGSWG? Additionally, what is the difference in functionality when purchasing only advanced DLP with NGSWG, and what are the use cases and benefits if one opts to purchase advanced CASB with NGSWG?Meaning i am the customer who buys NGSWG next year i buy only the advance CASB what are the use cases or what more granular control i get with this also same goes for DLP vice versa.