Advanced Analytics

As 2024 is coming to an end, it’s a good time to reflect on your security landscape with our Netskope Recap Dashboard!The dashboard provides a year end reflection on your organization’s security posture. Topics covered include: Threat Protection Application Risk Management Security Policy Assessment 2025 Call to Action Use this dashboard to recognize your successes and areas for improvement, ensuring you’re better prepared for the evolving security challenges in 2025! Please note that the 13-month data retention is required to view the full results in this dashboard. If you’re interested in extending your retention period, please reach out to your Netskope account representative.  

Netskope administrators often need visibility into user-level and app-level data transfer volumes within China in order to help them track utilization.The objective of this dashboard, attached below, is to provide insights into data consumption volumes in China, assisting customers in optimizing their steering and security policies. Specifically, this report helps to identify the primary users and websites responsible for consuming the largest amount of data transferred in China within a specific time period.  

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! “Getting started” questionsHow to best use Advanced Analytics?  How to draw actionable insights from Advanced Analytics?  How can we leverage Advanced Analytics to drive valuable, data-driven decisions? How to use Advanced Analytics to monitor and enhance our security posture? A: There are 3 different “health check” dashboards in our community. All of them are great starting points for you to explore Advanced Analytics, draw actionable insights, and enhance your security posture.  CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. Wi

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: We saw CASB, NG-SWG, and Self-Service health check dashboards in Netskope community. What’s the difference and how to best use each of them?A: There are 3 different “health check” dashboards with different purposes & use cases in our community:CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. With a focus on CASB, the dashboard covers multiple topics such as NewEdge Network, Traffic Steering, SSL Inspection, Application Risk Management, Malware Protection, and DLP, which answers the question “how Netskope is protecting your e

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Secure Client Enrollment (Rogue Device) DashboardBy providing visibility into users with multiple devices & device classifications, this dashboard helps you identify “rogue devices” in your environment. For more details about how to best use the dashboard, please view this video.The dashboard can be found here. Admin Disabled User DashboardBased on the Device Data, this dashboard allows you to identify “admin disabled” users who have not yet been re-enabled. Detailed instructions about how to best use the dashboard are provided.The dashboard can be found here. POP Usage DashboardBased on Application Events, this dashboard provides visibility into Netskope Host POP

This dashboard gives a view of how data is moving in your organization. It allows you to filter for a specific application, user, or activity. Using this dashboard, you can answer questions like: Who are the top users moving data and where are they moving the data to? Who is uploading or downloading data into specific applications, such as Box?  What are the activities taking place in a specific application, such as Google Drive? Where is a specific user moving data from and to?  Also, the dashboard’s Sankey Chart allows you to understand how data is flowing from the user to the action. You can see the flow from user to from user to application to instance to activity to action. The best use for this widget is to filter for a specific user to see what data they are moving and to where.The dashboard is attached below. Feel free to view it in your own environment and share any comments/feedback. Please also let us know if you want any additional fields/data to be added to the dashboard.

By following the instructions you can use this Dashboard to collect information you can process in a Spreadsheet type software (e.g. Excel, Google Sheets) to look for Admin Disabled users that might still be disabled. I hope you find it useful.

 Thanks @lgibson for providing this great idea! Looking for visibility into Advanced UEBA with machine learning detections that automatically learn the baselines for different users and raise alerts when there are anomalous behaviors? Our latest Advanced UEBA Dashboard is here to help!  This dashboard provides detailed visibility into the alerts generated by Advanced UEBA policies, which helps you perform user investigation & alert validation on this topic. With the dashboard, you can better understand why these alerts are being triggered and if your policies are working effectively.  By default, the dashboard starts with a summary of Advanced UEBA alerts triggered in the last 30 days, including # alerts triggered, # apps with these alerts, and # users triggering these alerts. The # UCI Threshold Alerts triggered are highlighted, which is a starting point for your user investigation.Advanced UEBA automatically computes the User Confidence Index (UCI) score for every user on the pla

 July 2024 Update:This dashboard is now available in Netskope Library. Based on the AI Usage Dashboard in Netskope Library, we developed this updated version with App Instance data added. With this dashboard, you can get additional visibility into the App Instances used to access AI Apps/Sites in your environment, which helps you identify if your traffic is moving within your corporate environment only, or through a public llm. The dashboard is attached below. Feel free to import and view it in your own environment. Let us know if you have any questions or feedback!

  The latest User Behavior Analytics (UBA) Dashboard is now available in the Netskope Library. This dashboard can be used to monitor UBA alerts and refine your UBA policies.     In addition to an overview of UBA alerts, the dashboard also provides detailed visibility into each UBA alert triggered, which helps reduce investigation time for anomalous user activities in your environment.     The dashboard can be found in the Netskope Library. Feel free to copy and view it in your own environment. Let us know if you have any questions!  

Check out the Disabled Client Dashboard! We’ve created this dashboard in response to several use cases related to disabled devices in the environment. This dashboard allows you to explore the following questions:How many devices are disabled? What percentage of the devices in the environment are disabled? Why are the devices disabled? How many users are disabling their devices? Who are these users? How long have the devices been disabled?Here are the main sections of the dashboard:Number and Percentage of Currently Disabled DevicesThese widgets show the number and percentage of currently disabled devices in your environment. They also indicate how many users have disabled devices, helping you understand the current client status.Number of Users by Status Change ReasonThe “# Users by Status Change Reason” widget helps you understand the reasons behind device status changes in your environment, highlighting the reasons with the largest number of users. For example, the screenshot shows t

  This dashboard helps you understand if individuals in your organization are working at the assigned office locations by converting Source IP Addresses to Office Locations.    Let's take a look at a sample use case. When doing budget planning for next year, Netskope wants to understand how many of their employees are working at the office on a weekly basis. Source IP is a good starting point, but Netskope is looking for a better view into the exact "office name" for each IP. This dashboard can help!   In the edit mode of the first widget "User Source Locations," we can find the custom dimension "Office Location" by expanding the "Custom Fields" section on the left hand side.   This custom dimension converts Source IP to the corresponding Office Location. By clicking "Edit," we will then be able to further customize it based on our needs.    Here, we have Source IP = 104.x.xx.xxx with the corresponding Office Location = STL Office. In this case, if