Advanced Analytics

Aaron_ZhangNetskope Employee

"Conditionally" schedule a widget

Let's take a look at a real use case: "I want to create a widget of all users with 1000+ alerts and schedule it to be delivered on a daily basis only when there are users detected. How can I do this in Advanced Analytics?" This question can be addressed by applying "conditional schedule" to the widget. We start by creating a widget with “Alerts” data collection. The only two fields needed are “User” and “# Alerts.” To get users with 1000+ alerts, apply the filter “# Alerts is greater than 1000.” Once the widget is completed, click the gear button and choose “Save and schedule,” you will then be able to save the widget to your personal or group folder.

1961

Aaron_ZhangNetskope Employee

Endpoint DLP Monitoring Dashboard

This is a simple dashboard that helps you monitor endpoint DLP policy violations in your environment. Use this dashboard to drill into endpoint DLP alerts and better understand:How endpoint DLP alerts are trending over time What policies have been triggered, who are the users triggering these policy violations, what files/objects have been exposed, and what policy actions have been takenThe dashboard also comes with an “Endpoint File Movement Deep Dive” section that provides detailed visibility into file movement to endpoint devices (e.g. USB drivers, printers, & bluetooth devices).

2470

Aaron_ZhangNetskope Employee

Webmail SMTP DLP Insights

This dashboard provides visibility into webmail traffic captured by Netskope SMTP Proxy and the corresponding DLP policy violations. Use this dashboard to better understand:What email aliases/alternate email addresses (From User) are being used by users in your organization What DLP policy violations have been triggered by the webmail traffic Who are the users generating this traffic and triggering the policy violations What actions have been taken by your DLP policies

1900

Aaron_ZhangNetskope Employee

Data Flow Investigation Dashboard V2 - Control & Monitor

Based on Data Flow Investigation Dashboard V2, this supplemental dashboard helps you monitor sensitive data movement in your environment and better understand how Netskope DLP is controlling the sensitive data movement.

1890

Aaron_ZhangNetskope Employee

Security Health Check (Self-Service) Dashboard

Security Health Check (Self-Service) Dashboard V2 UpdateAdded Netskope Client visibility that uncovers devices & users currently running on disabled Netskope Client and unsupported Client versions. Looking to quickly pinpoint the security concerns in your environment? Take a look into our Security Health Check (Self-Service) Dashboard! This is a one-stop dashboard which allows you to perform self-service health checks and to locate security concerns/gaps in your environment. The dashboard is expanded from 2 dimensions: 1) How Netskope is protecting your environment; 2) What Netskope is protecting your environment from. The dashbo

325511

Aaron_ZhangNetskope Employee

July 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: Are there any recommended dashboards for security operations monitoring?A: There are 3 different “health check” dashboards in our community. All of them are great starting points for you to monitor security operations.

460

Aaron_ZhangNetskope Employee

Manage your application instances through instance tags

This dashboard provides visibility into application instances detected in your environment based on instance tags. The dashboard helps you quickly uncover unsanctioned & untagged application instances and the corresponding data movement. The dashboard template is attached below. Feel free to try it out in your own environment and share your thoughts & feedback! Looking for visibility into corporate vs. non-corporate instances? This article can help.

2741

Aaron_ZhangNetskope Employee

Custom Fields - Sample Use Cases

This article will walk you through the 3 major types of custom fields in Advanced Analytics and showcase how to use them to address advanced use cases. A sample dashboard is attached to help you better understand the process. Get StartedTo start creating a custom field, simply click the “+ Add” button next to “Custom Fields.” You will then be able to select from the 3 major types of custom fields: Custom Dimension, Custom Measure, & Table Calculation.

1110

Aaron_ZhangNetskope Employee

Monitor bandwidth consumption with Advanced Analytics

The “Transaction Events” data collection in Advanced Analytics allows you to monitor bandwidth consumption in your environment. This article will show you how to draw actionable insights from bandwidth data with 3 typical use cases. Monitor Bandwidth Consumption by SitesMalicious/suspicious site visits can bring huge security concerns to your organization. By monitoring bandwidth data by sites, you can easily uncover malicious/suspicious sites with high volume of bandwidth consumption in your environment, which helps you optimize your security policies and avoid uncontrolled access to those sites.

6622

DanielViteriNetskope Partner

NSClient Reinstalltion withou tamperproof password

Hello,I’m having an issue with a Netskope Client on a windows machine and I would like to reinstall the agent but unfortunatelly I don’t remember the password configured for antitampering. As the NsClient is not connecting to the tenant changing the antitampering password is not an option. What else could I do to reinstall the NsClient on the user machine.

1172

mabidNetskope Employee

Microsoft’s SSE Netskope SD-WAN Configuration Guide

OverviewThe integration of Netskope SD-WAN with Microsoft's SSE solution facilitates inspection of internet bound originating from SD-WAN branches/VNETs destined for internet applications routed through Microsoft's SSE solution.This guide encompasses a step by step guide to connecting Netskope SD WAN appliances to Microsoft's SSE solution, specifically for SaaS/internet applications. Microsoft Entra Internet Access traffic, alongside Microsoft Entra Access, are integral components of Microsoft's SSE solution: Global Secure Access. Microsoft Entra Internet Access ensures secure access to internet and SaaS apps, providing robust protection for

2910

secproceoNetskope Partner

Netskope and JAMF Plist Updates

I had a user change her last name which changed her email address. It appears the JAMF “plist” is not updating. I checked Netskope and her updated name and email address is synced with SCIM. I can manually send the Netskope client invite to the user and everything works as expected. When the Netskope client is deployment through JAMF it appears the “plist” has the users previous email address which will not work. It appears everything on the Netskope side is updated and correct. Has everyone experience this issue? Is there a JAMF “plist” reset? Thanks.

660

Ashwani pandeyNetskope Employee

SSL Traffic Insights

Check out this new updated SSL Traffic Insights dashboard that offers comprehensive visibility into all HTTP traffic. This dashboard displays whether traffic is encrypted or not and identifies the policies, categories, applications, and hostnames that are not being decrypted, allowing you to focus your attention on those areas. The dashboard also includes a trendline feature. This will help you identify any sudden spikes or gradual decreases in traffic inspection, enabling you to review and address them proactively.

2544

Aaron_ZhangNetskope Employee

June 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: How to monitor app instances using Advanced Analytics?A: There are 2 recommended dashboards for instance monitoring. The

350

Aaron_ZhangNetskope Employee

Enterprise Browser Usage Monitoring Dashboard

🚀 Netskope One Enterprise Browser is a game-changer! While enjoying the secure and seamless web browsing experience with Enterprise Browser, a common question is being asked by many users: “How is Enterprise Browser being used in my organization?” Our latest Enterprise Browser Usage Monitoring dashboard will help answer this question.The dashboard contains four sections that drill into Enterprise Browser usage from two aspects: operations and security. [Op

4842

deepakkNew Member III

Many sites didn't load or take time to load When netskope enabled at several times

We’ve observed that several websites either take a long time to load or fail to load entirely when Netskope is enabled. However, the same sites work smoothly once Netskope is disabled. Since the issue is intermittent and not easily reproducible, identifying the root cause has been challenging.A recent example involved LinkedIn Sales Navigator, where some users reported the site not loading. Upon analyzing HAR logs, we noticed that the licdn.com domain was significantly delayed when Netskope was active.We tested a couple of solutions, both of which proved effective for different user sets: Implemented an SSL Do Not Decrypt (DND) rule for the licdn.com domain Assigned a client configuration policy with MTU set to 1494 for affected users We’ve encountered similar issues with other services such as AWS S3, MoveInSync, and Box Notes (for box

2292

Level Up Your Cloud Security: Integrating Netskope and AWS Security Hub 2.0

mgulledgeNetskope Employee

posted in Discussions

Cloud security is a shared responsibility, and for organizations leveraging both Netskope and Amazon Web Services (AWS), the synergy between these platforms creates a robust defense. A significant advancement in this partnership lies in plans for Netskope to ingest OCSF-formatted, cloud security findings directly from AWS Security Hub. This integration is pivotal, as it allows Netskope to correlate its determination of user risk and access and the workloads they use to then unleash its inline protection capabilities when called for. By understanding the security posture of AWS environments through Security Hub's comprehensive insights, Netskope can dynamically adjust its enforcement, preventing access to compromised resources and ensuring that only secure interactions occur within the cloud. Netskope's Zero Trust Network Access (ZTNA) solution plays a critical role in this dynamic security model, providing a secure and adaptive way to connect users to workloads and ser

1000

dazmacmainNew Member III

How Can I Improve Netskope's Performance?

I have just started a new company.We have brand new Cisco Cat 9500 and 9300 MGig switches. With Netskope installed on our computer have run a speed test and getting 100Mbps connected to the Internet with Netskope enabled. With Netskope disabled we are getting speeds of up to 700Mbps connected to the internet. Is there a reason why this is so slow, has it got to do with deep packet inspection? Can anything be done to speed this up? I am new to Netskope and our security team are in charge of this.

35702

KmaheshwariNetskope Employee

Sending Alerts and Events to Microsoft Sentinel using the Codeless Connector Platform

Sending Alerts and Events to Microsoft Sentinel using the Codeless Connector Framework Seamless Log Shipping: Unlocking Netskope’s Native Integration with Microsoft SentinelIn today’s security landscape, visibility and real-time insights into your organization’s data are critical for effective threat hunting and incident management. To meet these needs, Netskope has developed a native integration with Microsoft Sentinel using the Codeless Connector Framework—allowing organizations to easily stream all CASB alerts, DLP incidents, and threat logs into Microsoft’s cloud-native SIEM. This blog explores how this new integration simplifies log shipping and delivers a scalable, cost-efficient way to leverage Microsoft Sentinel without deploying additional infrastructure like Cloud Exchange. Why This Matters for Security TeamsSecurity teams are constantly battling an increasing volume

42262

wilsonExplorer III

Combining private apps and Netskope Categories

Basically I want to write a report for the # of users of AI applications, including public Chat GPT vs the Corporate ChatGPT (which is only available via authentication but on the Internet) I have added it as an app in the Steering Configurations and it shows up separately as an App in SKOPEIT, but I can’t add it to the catalog category. Is the answer to add a custom web Category and generating enough traffic for page events?

702

maxkorNew Member III

Error – "Failed to save enrollment tokens"

Hi all,While attempting to install the Netskope agent using the provided BAT file, I encountered the following error:"Failed to save enrollment tokens"In addition, when retrying the process, I also receive the following error in the enrollment window:"Configuration download failed. Please authenticate again."Steps I have already taken: Ran the BAT file as Administrator Verified proper network connectivity Attempted the installation on a different machine note:install mode IDP thanks

2091

Aaron_ZhangNetskope Employee

May 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: We recently onboarded Netskope in our organization and need to understand the recommended best practice on analytics, especially how to improve our security posture using Advanced Analytics.A: There are 3 different “health check” dashboards in our community. All of

760

6 months ago

jsoleilnorautoNew Member