Skip to main content
  • EN
  • Home
  • Advanced Analytics

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure to cloud risks by providing a 360° view of activity throughout the Netskope platform.

136 Topics
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
2024 Netskope Recap

As 2024 is coming to an end, it’s a good time to reflect on your security landscape with our Netskope Recap Dashboard!The dashboard provides a year end reflection on your organization’s security posture. Topics covered include: Threat Protection Application Risk Management Security Policy Assessment 2025 Call to Action Use this dashboard to recognize your successes and areas for improvement, ensuring you’re better prepared for the evolving security challenges in 2025! Please note that the 13-month data retention is required to view the full results in this dashboard. If you’re interested in extending your retention period, please reach out to your Netskope account representative.  

1650
Aaron_Zhang
Netskope Employee
24 days ago
ematchey
Netskope Employee
ematcheyNetskope Employee
published in Dashboard Gallery
China Traffic Insights

Netskope administrators often need visibility into user-level and app-level data transfer volumes within China in order to help them track utilization.The objective of this dashboard, attached below, is to provide insights into data consumption volumes in China, assisting customers in optimizing their steering and security policies. Specifically, this report helps to identify the primary users and websites responsible for consuming the largest amount of data transferred in China within a specific time period.  

4272
Aaron_Zhang
Netskope Employee
1 month ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
November 2024 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! “Getting started” questionsHow to best use Advanced Analytics?  How to draw actionable insights from Advanced Analytics?  How can we leverage Advanced Analytics to drive valuable, data-driven decisions? How to use Advanced Analytics to monitor and enhance our security posture? A: There are 3 different “health check” dashboards in our community. All of them are great starting points for you to explore Advanced Analytics, draw actionable insights, and enhance your security posture.  CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. Wi

340
Aaron_Zhang
Netskope Employee
1 month ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Security Health Check (Self-Service) Dashboard

 Looking to quickly pinpoint the security concerns in your environment? Take a look into our Security Health Check (Self-Service) Dashboard!  This is a one-stop dashboard which allows you to perform self-service health checks and to locate security concerns/gaps in your environment. The dashboard is expanded from 2 dimensions: 1) How Netskope is protecting your environment; 2) What Netskope is protecting your environment from.  The dashboard covers 9 major topics, which helps you identify & investigate: NewEdge Network & Traffic SteeringPOP utilization in restricted regions Unexpected access methods Device & Client ManagementUsers disabling Netskope Client Old/unsupported Client versions being used Alerts & PoliciesAlerts, alert types, policies triggered Top users triggering alerts (and the corresponding activities) SSL/TLS InspectionLow SSL inspection rate Unexpected bypassed traffic Coaching PoliciesIncorrect/unexpected coaching policies detected Justification reasons

15733
Aaron_Zhang
Netskope Employee
2 months ago
ematchey
Netskope Employee
ematcheyNetskope Employee
published in Dashboard Gallery
Updated NG-SWG Health Check Dashboard

 An updated version of the NG-SWG Health Check dashboard is now available! The purpose of this dashboard is to help you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to it's full potential. The specific focus of this dashboard is operationalization of the NG-SWG product. Below you will find a breakdown of some of the views in this dashboard.  The first set of widgets focus on the NewEdge network and the POPs in use by your organization. These views help you determine if you need to optimize your POP selection settings.    Next you can see the number of users protected and steering methods used. Are the total users protected close to 100% of your organization size? Do you see the expected # of users protected? Are the access methods listed the expected ones? If not, these are red flags and we encourage to check the recommendations to resolve your issue.   Please Note: Customization is required for the “% of Users Protected”. Use the f

12972
ematchey
Netskope Employee
7 months ago
ematchey
Netskope Employee
ematcheyNetskope Employee
published in Dashboard Gallery
Updated CASB Health Check Dashboard Operation

An updated version of the CASB Health Check dashboard is now available!The purpose of this dashboard is to help you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to it's full potential. The specific focus of this dashboard is operationalization of the CASB product. Below you will find a breakdown of some of the views in this dashboard.  The first set of widgets focus on the NewEdge network and the POPs in use by your organization. These views help you determine if you need to optimize your POP selection settings.    Next you can see the number of users protected and steering methods used. Are the total users protected close to 100% of your organization size? Do you see the expected # of users protected? Are the access methods listed the expected ones? If not, these are red flags and we encourage to check the recommendations to resolve your issue.Please Note: Customization is required for the “% of Users Protected”. Use the following

12560
ematchey
Netskope Employee
10 months ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
Advanced Analytics Training Resources

 Please follow the 3 steps below to quickly get started with Advanced Analytics: Step 1: Reference Netskope Advanced Analytics - Getting Started to get started using Advanced Analytics in 5 minutes. Step 2: Watch “Getting Started” Webinar to understand what Advanced Analytics is all about.  Step 3: Visit our Video Library for more features and advanced use cases with Advanced Analytics.Don’t forget the Netskope Community is your friend. Here you can post your questions and get answers in Discussions, view the latest dashboards in Dashboard Gallery, and register for our monthly Advanced Analytics Office Hours. --------------------------------- If you need technical support, please visit our Support Portal. You can request your end-user account on the support portal by sending email to support@netskope.com. A demo of Netskope Support Portal can be found here.  

10510
Aaron_Zhang
Netskope Employee
1 year ago
E
elawaetzExplorer III
asked in Discussions
Cloud Exchange Logshipper Syslog integration with Darktrace?

Has anyone had any luck with Syslog integration from Cloud Exchange into Darktrace?Darktrace describes the expected format like this:Darktrace expects the Netskope Web Gateway data to include the string "darktrace_netskope" followed by a JSON formatted representation of the Netskope logging. The order of fields within the JSON is not important. For example: darktrace_netskope {"src_time": "Fri Jan 1 00:10:00 2021","userkey": "user.name@company.com","dst_region": "Region","category": "Business","src_longitude": 52.2,"transaction_id": 0,"ur_normalized": "user.name@company.com","src_latitude": 0.12,"dst_longitude": 52.2,"domain": "www.example.org","dst_zipcode": "555555","access_method": "Client","src_timezone": "Global/UTC","ccl": "unknown","bypass_reason": "SSL policy matched","user_generated": "yes","dst_country": "ZZ","srcip": "198.51.100.1","site": "example","traffic_type": "Web","src_region": "Region","user": "user.name@example.org","appcategory": "Business","page_id": 0,"insertion_

48315
S
3 days ago
T
tpimpaoNew Member III
asked in Discussions
How to Retain "Total Bytes" Visibility with DND Policy for Network Locations?

Hi everyone,I'm reaching out to see if anyone has encountered a similar situation or has suggestions for our use case.We’re using Network Locations in Netskope to control the traffic of specific servers to the internet. These Network Locations are allowed to access only a limited set of URLs, and we apply a DND (Do Not Decrypt) policy to this traffic because we don’t want to decrypt it.The challenge we’re facing is that when the DND policy is applied, we lose visibility of the "Total Bytes" metric for all connections originating from this Network Location.Has anyone dealt with this issue before? Is there a way to retain the Total Bytes visibility while keeping the DND policy in place?Thanks in advance for your insights and help!

50
T
5 days ago
D
dkolb-netskope
asked in Dashboard Gallery
Advanced Analytics - Number of users with Endpoint DLP enabled versus Number of users at company

Hello,I was wondering if there is a way to see the number of users with endpoint DLP enabled versus the amount of total users in our company through the analytics dashboard?We tried to import a AD group that everyone has and then we have one for when the endpoint DLP is enabled for the user, so I was wondering if there is a way in Advanced Analytics where we can show that percentage of users enrolled versus the amount of employees?I attempted to use the devices section to create the widget based on user group and # of users, however when I do “Devices Event Date is any time” it does not populate the correct amount of users for any of the categories.Thank you in advance!

351
Aaron_Zhang
Netskope Employee
14 days ago
C
cjcarewNew Member
asked in Discussions
V2 API Pagination

Hi Folks,Apologies if this is a simpleton question, however it’s doing my head in. I have the api working and am able to use the dataexport endpoint to extract malware alerts. My issue is that I only receive one record in the response and I know there is 115 in the time period of the search. The record I receive is the very first in the results. I can confirm that by checking in the console.My (hopefully simple) question is what is the format of the api query to iterate through the results so that the full list can be retrieved? I’ve tried ?operation=next&index=(the index name supplied in the first query). However that returns an empty response.I’d appreciate any guidance.Regards,Campbell

1123
R
1 month ago
J
jschueleNew Member III
asked in Discussions
Netskope Client for iPad

I saw the article on support for the Netskope Client on iPad. When I use the email invite though there is link for the iOS Client, only the iOS Profile. I see a note about this issue, but don’t understand what it wants me to do. How do I enable the default email template? I’m sure I changed it years ago, but can’t remember where.. Can someone clarify how I get it visible in the email invite?– If you are unable to see the link to download Netskope Client for iOS in the email invite, use the default email template that includes the link to download Netskope Client for iOS. 

712
R
1 month ago
T
TwoodsNew Member III
asked in Discussions
Policy Schedule alerting or Reporting

We have Policy schedules set on several policies to force re-evaluation of access periodically.  Do others use these?   Has anyone created an Advanced Analytics report or alert that can be set to proactively notify you when these time windows are coming due?

90
T
1 month ago
Michael Horne OCD
Netskope Partner
Michael Horne OCDNetskope Partner
asked in Discussions
Creating reports / widgets that filter based on Tunnels

Hello all,I am looking at creating reports to help identify bandwidth utilisation for customer sites.  We want to identify what applications and sites are generating the most traffic.  If the previous product it was simple to filter based on a location (which is a way to reference the IPsec tunnels used to connect a site to the cloud).  Netskope seems to be less location focused.  Ideally I would like to filter a widget or Dashboard using a filter that is a list of the IPsec Tunnels.  Is there a simple way to do this?I can filter based on countries, but the customer has multiple sites in some countries. The source locations reference towns or cities that do not match up with the customer site. In France the even have multiple sites in the same city. Filtering by IP CIDR allows only filtering by a single CIDR network. It is not possible to filter based on a defined network location. The only solution I have at the moment is the source egress public IP address.  This works as it clearly

80
Michael Horne OCD
Netskope Partner
1 month ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
October 2024 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: We saw CASB, NG-SWG, and Self-Service health check dashboards in Netskope community. What’s the difference and how to best use each of them?A: There are 3 different “health check” dashboards with different purposes & use cases in our community:CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. With a focus on CASB, the dashboard covers multiple topics such as NewEdge Network, Traffic Steering, SSL Inspection, Application Risk Management, Malware Protection, and DLP, which answers the question “how Netskope is protecting your e

500
Aaron_Zhang
Netskope Employee
2 months ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Top Allowed & Blocked Websites by User Group & Organization Unit

  This dashboard provides visibility into top allowed & blocked websites and the corresponding URLs. "Allowed" & "Blocked" are determined using the "Action" filter in each widget, which can be further customized based on your environment.    The dashboard also includes the "User Group" & "Organization Unit" filters that can be used to target any particular AD groups in your environment.       

4363
prajakta.yadav
Netskope Partner
3 months ago
S
secproceoNew Member
asked in Discussions
Netskope Client for iOS

Can the Netskope client be installed for iOS (iPad) without using Intune? I need to install it for one device. If so, are there instructions? Thanks. 

773
S
3 months ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
September 2024 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Secure Client Enrollment (Rogue Device) DashboardBy providing visibility into users with multiple devices & device classifications, this dashboard helps you identify “rogue devices” in your environment. For more details about how to best use the dashboard, please view this video.The dashboard can be found here. Admin Disabled User DashboardBased on the Device Data, this dashboard allows you to identify “admin disabled” users who have not yet been re-enabled. Detailed instructions about how to best use the dashboard are provided.The dashboard can be found here. POP Usage DashboardBased on Application Events, this dashboard provides visibility into Netskope Host POP

500
Aaron_Zhang
Netskope Employee
3 months ago
M
Netskope Employee
mnekkarNetskope Employee
published in Dashboard Gallery
Data Flow Investigation Dashboard

This dashboard gives a view of how data is moving in your organization. It allows you to filter for a specific application, user, or activity. Using this dashboard, you can answer questions like: Who are the top users moving data and where are they moving the data to? Who is uploading or downloading data into specific applications, such as Box?  What are the activities taking place in a specific application, such as Google Drive? Where is a specific user moving data from and to?  Also, the dashboard’s Sankey Chart allows you to understand how data is flowing from the user to the action. You can see the flow from user to from user to application to instance to activity to action. The best use for this widget is to filter for a specific user to see what data they are moving and to where.The dashboard is attached below. Feel free to view it in your own environment and share any comments/feedback. Please also let us know if you want any additional fields/data to be added to the dashboard.

3831
J
3 months ago
Rohit_Bhaskar
Netskope Employee
Rohit_BhaskarNetskope Employee
published in Dashboard Gallery
NSKPSA-2024-001 - DashboardDashboard

The dashboard can be used to detect and identify any rogue devices in the customer environment where NSClient is deployed. This dashboard can be used for Netskope released security advisory as NSKPSA-2024-001

12474
A
4 months ago
M
Netskope Employee
marguelloNetskope Employee
published in Dashboard Gallery
Use AA to help to find Admin Disabled Users that were not Re-Enabled

By following the instructions you can use this Dashboard to collect information you can process in a Spreadsheet type software (e.g. Excel, Google Sheets) to look for Admin Disabled users that might still be disabled. I hope you find it useful.

2450
M
Netskope Employee
4 months ago
lzhi
Netskope Employee
lzhiNetskope Employee
posted in Discussions
August 2024 Office Hours Recap

Hello Folks,  Below you can find a recap of questions asked at the August office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar! Q: Are there any recommended “getting started” dashboards for new users?A: The CASB & NG-SWG Dashboards are designed to help you maximize the ROI of your Netskope CASB investment by highlighting ways to fully utilize Netskope’s features. This dashboard includes to-do lists, recommendations, and best practices, making it valuable for leadership reporting. It also helps you understand if your controls are working effectively by showing trends and showcasing the value of your team’s work.The Security Health Check (Self-Service) Dashboard offers a comprehensive self-service tool for performing health checks and identifying security concerns or gaps in your environment. It covers two main dim

320
lzhi
Netskope Employee
4 months ago
jonathanpereira-claro
jonathanpereira-claroNew Member
posted in Discussions
Order by on advanced analytics

Hi, team! I created a bunch of widgets with really useful data but I'm unable to find order by fields to avoid a bar graph with a roller-coaster look. Any help would be great!

161
Aaron_Zhang
Netskope Employee
4 months ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Advanced UEBA Dashboard

 Thanks @lgibson for providing this great idea! Looking for visibility into Advanced UEBA with machine learning detections that automatically learn the baselines for different users and raise alerts when there are anomalous behaviors? Our latest Advanced UEBA Dashboard is here to help!  This dashboard provides detailed visibility into the alerts generated by Advanced UEBA policies, which helps you perform user investigation & alert validation on this topic. With the dashboard, you can better understand why these alerts are being triggered and if your policies are working effectively.  By default, the dashboard starts with a summary of Advanced UEBA alerts triggered in the last 30 days, including # alerts triggered, # apps with these alerts, and # users triggering these alerts. The # UCI Threshold Alerts triggered are highlighted, which is a starting point for your user investigation.Advanced UEBA automatically computes the User Confidence Index (UCI) score for every user on the pla

6400
Aaron_Zhang
Netskope Employee
5 months ago
D
dazmacmainNew Member III
asked in Discussions
How Can I Improve Netskope's Performance?

I have just started a new company.We have brand new Cisco Cat 9500 and 9300 MGig switches. With Netskope installed on our computer have run a speed test and getting 100Mbps connected to the Internet with Netskope enabled.  With Netskope disabled we are getting speeds of up to 700Mbps connected to the internet. Is there a reason why this is so slow, has it got to do with deep packet inspection? Can anything be done to speed this up? I am new to Netskope and our security team are in charge of this. 

16483
S
5 months ago

Badge winners

Show all badges
Terms & ConditionsCookie settings