Advanced Analytics

Hello  I’m trying to workout the impact of enabling RBI for the following categories uncategorised, New registered Domain, no content but need to workout how many alerts these categories have triggered to assess the risk on enabling RBI. Anyone have a AA Dashboard on users alerts/ domainsThank you 

The dashboard can be used to detect and identify any rogue devices in the customer environment where NSClient is deployed. This dashboard can be used for Netskope released security advisory as NSKPSA-2024-001

When using Advanced Analytics, you don’t have to create everything from scratch. Our existing dashboards are always great starting points for your use cases. You can easily save widgets from existing dashboards to your own dashboards by following these steps:Step 1: Find the widget you need from the existing dashboard Step 2: "Explore" the widget Step 3: Save the visual to an existing dashboard

Seamless Log Shipping: Unlocking Netskope’s Native Integration with Microsoft SentinelIn today’s security landscape, visibility and real-time insights into your organization’s data are critical for effective threat hunting and incident management. To meet these needs, Netskope has developed a native integration with Microsoft Sentinel using the Codeless Connector Platform—allowing organizations to easily stream all Netskope Web Transaction Logs into Microsoft’s cloud-native SIEM. This blog explores how this new integration seamlessly pulls in near real time all of your organizations Web Transactions to a single Log Analytics table.  In this architecture data is pushed from Netskope to the customer Storage Blob Container. Every time a file is written either containing Web Transactions or Netskope Alerts and Events a blob notification is sent to Event Grid. Once the notification is seen by Event Grid, the blob URI is then sent to a s

How to Download all Marketplace Apps grouped for Teams

Hi there, is there a report to list Device Classification and Client configuration values for all NSClient devices? 

Is it possible to generate following reports in Advanced Analytics Dashboard?List all devices that have shown no activity within the last 7 days List all users accounts with no activity within the last 7 daysExample: Out of 50 devices/users following 10 devices/users have not used Netskope for last 7 days.Devices    Users    Netskope EventsHost 1      User1                   0Host 2      User2                   0Host 3      User3                   0Host 4      User4                   0Host 5      User5                   0Host 6      User6                   0Host 7      User7                   0Host 8      User8                   0Host 9      User9                   0Host 10    User10                 0 

Good day,Anyone know of a dashboard or advanced analytics report that can look for Netskope clients that have not checked in after X period of time? For compliance reasons, we want to make sure we are tracking down inactive devices and clients.Thanks in advance!

Hello all,Before we will deploy secure enrollment feature I have a question regarding secure enrollment.Is there a re-installation script available? Would you recommend running it on all devices? What would be the potential impact of doing so?Additionally, I’d like to clarify the following scenario:If a different user logs in to my computer for the first time after we enable secure enrollment, will they encounter any errors?   

As of now i am looking into disabled user dashboard but not able to find out the report and not able to fetch from data since it is giving error maximum row limit reached.how we can get top 20 user list who have disabled there agent for longest time

A unique appid exists for private apps but not internet apps. RequirementAdd a new field at app level for internet apps that can be exported so clients can record a reference to their CMBD system.  

We are attempting to get more of our team involved in managing certain aspects of Netskope.  As such, they would like to have access to Advanced Analytics in order to create and maintain dashboards and generate reports.  They would only need Read access to the main management console of Netskope.  I am trying to determine if any of the existing roles would work for this purpose, and which one would give them what they need with the minimum privs required for the task.  I am thinking one of these three may work;Restricted Admin: Has read-only access to all functions. Cloud Intelligence Analyst: Has access only to reporting and analytics. Application Risk Analyst: Can run reports and analytics and read the CCI.I wasn’t able to find an article that broke down the roles into great detail, but please let me know if I missed that.  If App Risk Analyst will let them at least view policies or SkopeIt, that may be enough.  But i

Is there a list of recommend behavior analytics polices that Netskope recommend turning on instead of turning every policy?

Hello, is there a way in advanced analytics to find unique values of a field with count. Similar to stats in splunk? 

I am working on something that I my brain should be so simple but i am just missing something. We have blocked DeepSeek from our environment. What I have been asked to deliver is a 90-trending report showing Access Allowed, Access Blocked over a 90-day period in a trend line. I am using the #Blocked Events but calculating the Allowed is getting it to show the trend line is where I am having issues.  Thanks for help! 

Updated with changed URL for Netskope Information Sources Netskope has a lot of really useful portals with great information & guidance.  But sometimes you forget to bookmark them, or can’t find them when you need them most. This dashboard can be imported onto your tenant and serve as a roadmap if you’re not quite sure where to go.  docs.netskope.com - Netskope Documentation support.netskope.com - Need to raise or check a support case trust.netskope.com - Netskope Service status notify.netskope.com - Upcoming changes in app and web categories community.netskope.com - Sharing information with other Netskope Users Product Learning Paths Monthly Release Notes threatlibrary.netskopethreatlabs.com - Netskope Threat Library netskopesecuritycheck.com - Netskope Security Check speedtest.goskope.com - Which POP is a user connected, egress IP & speedtest Te

Hello Community,is it normal that the data in AA is delayed? Sometimes the latest event is from an hour ago, sometimes two?Best regards