Additional Discussions

Do you need to configure your VMWare Velocloud SDWAN endpoints to connect to Netskope via IPSec tunnels, to complete your SASE solution? Then the attached guide is for you.   The guide contains step-by-step instructions for configuring Velocloud Orchestrator and the Netskope cloud.

If you need to connect to Netskope from your Cisco router using GRE, the attached guide is for you.

Hi community members!   We are curious to hear where everyone is in their ZTNA journey, please fill out this quick survey or post your journey in the comments below. We look forward to hearing from you!  

So we have the agent deployed out to our widows and Macs in our environment. We have followed the Best practice guides for bypassing the VPN traffic with Netskope but we are still having issues connecting to the VPN on the Mac's. Anyone else run into this issue? 

Has anyone experienced any issue while trying to configure the QRadar Rest API plugin to communicate to a Netskope tenant though a Proxy that requires authentication? Important Notes: - The Rest API plugin configuration is set as follows: Use Proxy = Yes          - As the the proxy requires authentication, the Proxy Username and Proxy Password fields are configured. - The Rest API was successfully tested from the QRadar console command line using curl.  It really looks like an issue with the Rest API plugin. Your comments and experience on this topic much appreciated. Thank you in advance.

Hello, We are trying to work on how we have exeptions set up in our tenant. Does anyone know if you are able to download all of the items you have added to the exclusion list in Traffic Steering?

For our Macintosh computers, running Big Sur 11.4 - we have now spent hours trying to figure out peruserconfig mode, juggling WS1 configurarions, system extension files, client side modifications, and generally attempting every possible way to get this Netskope Client software to work under VMWare's Airwatch / Workspace One MDM (and even done manually using macOS Terminal). Nothing works reliably to completion.  We have engaged Netskope 3rd party support, to no avail. Netskope have online instructions, but these do not seem to be sufficient to cover a fully working setup. Indeed, if you compare them to their own JAMF instructions, you see almost a 2 to 1 difference in the length of the instructions. Note: our org knows it can use the email invite method, we have that working to be fair. But it's far from Mgmt.'s first choice, so we are very much hoping for a viable peruserconfig mode methodology.  Referring to the online instructions at: https://

Netskope Use Case Video Requests

We currently have a need to allow access to a subset of micsosoft ips which are currently housed in brazil. We have a country block and a country allow group but do not want to provide full access to all sites in that country. What is the best way to allow the traffic in Netskope based on the ips that microsoft has provided for Brazil which seem to be in the 52.109.88.0/24 range?

I'm wondering how can I become Netskope Cloud Security Specialist. I've seen many people nowadays on LinkedIn posting their certificates but I cant find any information on how to become one. I tried finding a trainjng in Academy and Netskope Instructor led Trainings for Admin and Integrator Certification but unable to find Specialist. Can someone help me in this. Thanks in advance.

End user Performance monitoring is quickly becoming essential to IT Operations teams. While approaches vary, typical capabilities include information on response time, latency, and availability. Overall, the goal of end user  Performance monitoring is to help Service Desk, End User Services, and IT Ops, Applications, and End User Services teams identify potential user problem areas quickly, preferably, before users even notice. 

Having NS Client deployed/installed pre-Big Sur works great. We've even managed to update the install script to grab the local user logged in, append our email domain and auto enroll with iDP. The challenge now is upgrading to Big Sur relies on a user accepting the system extension, which not everyone is doing. Curious how others are addressing this.

The evolution of the Netskope platform arguably led to the creation of the Secure Access Service Edge concept by Gartner (we did it first). @mferguson has produced a great video that describes the Netskope platform and how it delivers the requirements of a SASE solution. Check it out here https://youtu.be/8_-YEDm-ygw.

Hello, I'm not an advanced user or deployer but I don't know where else to ask this question. My workplace is using Netskope. Can anyone tell me why only the Waterfox browser is blocking most websites? Even ahdictionary.com is blocked as a security risk. It's a little rough as this is our required dictionary.   Thank you for any help.

Is there anyone who has success creating dlp rules using the canned identifiers for PHI? I'm struggling to get a basic combination of First Name, Last Name, Medical Condition to match my test file. I can match and have policy hit for individual identifiers but what I add them in combination using boolean (ANY or NEAR) I get no hits. Specifically the combo with FirstName (Given Name) and LastName (Surname) I'm unable to match on. Ultimately Im trying to match something like this. (FirstName AND LastName) AND Medical Condition. here is s record from my test file (xlsx)Name                                    Medical ConditionPhone NumberAccount NumBob White                          &n

API-enabled Protection provides policy and access control, risk anomalies forensics, and data governance. The following sections walk you through each key benefit of API-enabled Protection and how to get the most out of your API-enabled Protection policies.     The link below redirects you Netskope's support article listing the possible Here are the possible actions AND restriction options for each supported cloud app:  https://support.netskope.com/hc/en-us/articles/360006797713-API-enabled-Protection-Overview  

Question: Does Netskope support insert watermark on documents?

Generally speaking, it is best practice to use service accounts when connecting to APIs, as the API would break if  specific admin credentials were to be disabled or deleted.

Though we built the Cloud Threat Exchange module of Cloud Exchange originally to facilitate the automated sharing between plugged-in security stack components of customer-specific threat indicators of compromise, including malURL, IP addresses involved in attacks, and malware filehashes, the tool is being used to meet other needs.  The Github plug-in we built within CTE scans designated GitHub repositories for the files each contains, and extracts the filehashes of the code and documentation. It then pushes this information into Netskope, specifically into the custom file list created by the admin and invoked within the Netskope CTE plugin configured to work the the customer tenant and that file. This information about files that are both *safe* and *proprietary* can then be used by the Netskope tenant and its exact data match (EDM) DLP function to prevent the uncontrolled sharing of these files in real-time. The same plug-in can be repurposed to look at code repos with Gitlab or

Many of our customers indicate that the only "essential" integrations are with identity providers, due to the nature of our identity-centric inline policy engine. Is this true for you?

Welcome to the Additional Discussions board! This is a place for us to discuss Advanced Analytics, DLP, Threat Protection, IaaS, and all other things cyber security & networking. Once we have critical mass around a conversation, we can create a new discussion board to specialize in your favorite topics. Happy posting!

<Thanks to Steve Johnson, SEM, North East for this Dashboard and the directions below.>   ----------------------------------------------------------------------------------------------------------------------- OVERVIEW: When using the "Risk Management: Cloud Services" Dashboard, located in the Advanced Analytics library,  you will want to customize the Report to focus on your specific "managed" and "unmanaged" cloud applications.  Below the steps to customize this dashboard to meet your needs.   -----------------------------------------------------------------------------------------------------------------------   PRELIMINARY STEPS: Clone the Dashboard using the following steps: https://support.netskope.com/hc/en-us/articles/360056831574-Netskope-Library Tagging Sanctioned vs. Unsanctioned Applications by using SkopeIT is the first policy oriented task to accomplish. Do not continue until this is done. Everything else builds upon this tagging

Question: Does Netskope store the entire file in forensics when we receive a DLP violation?