CASB

Hello Everyone,I am currently working on a requirement to block the chat feature on X.com. I have attempted to restrict access by blocking relevant URLs and applying regex patterns; however, these approaches have not been successful.I also tried identifying the exact destinations used by X.com for its chat functionality, but was unable to pinpoint them.Could anyone please assist or share guidance on how to effectively implement this use case?Thank you in advance for your support.

Are their plans to fully support Linear (linear.app) as a steered app, so I can build real-time CASB DLP policies for it? Or, will you be supporting it as a NextGen CASB API app? Thx

Hello Everyone,I have a few questions regarding  Reverse Proxy as a Service (RaaS) configuration with Microsoft Entra ID.We have configured Reverse Proxy as a Service (RaaS) with Microsoft Entra ID by following the official Netskope documentation below:Reference Document:https://docs.netskope.com/en/reverse-proxy-as-a-service-with-microsoft-entra-id-1 Configuration Summary Created an Enterprise Application in Microsoft Entra ID for Reverse Proxy Exchanged all required URLs and certificates between Entra ID and Netskope Configured SAML Reverse Proxy on Netskope and selected “Reverse Proxy as a Service” as the application type Shared the required URLs with the Entra application and completed Reverse Proxy configuration Reverse Proxy redirection is working as expected Created a DLP policy to block upload, download, and post actions for source code DLP policy is enforced successfully when traffic goes through Reverse Proxy for Cloud apps Observed Behavior From a managed device (w

how to monitor Citrix traffic in Netskope. I do not want to bypass the traffic. i want to just monitor the traffic for all my users

Hi Team,Quillpad is showing unknow in CCL is it safe to allow this translation app to our users. In virus total I don't see any malicious tag to the application/website. Please check and suggest.   Regards,Zakeriya Shaikh

Hello I have NextGen API for Microsoft outlook. For 12 of my users I want to steer the outlook traffic via netskope.I know it is the pinned app and got a bypass, but is there any way to steer via Netskope

Dears, Q1 : I appreciate your confirmation and guidance of how Netskope ATP sandbox license can integrate with MS Sharepoint to analyze upload/downloaded files ?Q2 : Also if Netskope sandbox can be used for manual file submission for analysis ?Thanks in advance,

With Netskope client enabled, macOS machines are failing to sync to Intune.  When I disable the client the sync works as normal.  I have all of the predefined cert pinned app exceptions for both Windows and macOS in place, and Windows machines have no issues.I found this thread in the community pages that discusses this issue on Windows, and one comment briefly discusses macOS but the thread is closed and I can’t see any of the replies so not even sure if there is more info in here I that can’t get to.  I did create and additional custom cert pinned app for macOS and included the below processes, and added ‘*’ to bypass all domains.  Nothing is working though.company portalomadmclientintunemdmagentmdmclientcompany portalmdmclientwdavdaemon_enterpriseHas anyone figured out how to get Netskope to not interfere with Company Portal on macOS?

I have Slack API DLP policies generating incidents that include non-domain accounts in the “Shared With” field (e.g. mycompany, wf_bot_sd0fd333). This recently started as Agentic (AI) workflows have been created to automatically perform process functions within the app. I am currently unable to create either a Domain or Usr Profile to be used in a Exposure Exclusion because they don’t contain domains. This is creating an enormous amount of false-positive that must be triaged. Thoughts on what can be done, or whether this is something thats being worked on by Netskope? Thx

Hi Team, Blocking login / post activity on clasue.ai portal is not working as expected. we see discovery only in the app catalog. we do not see the login traffic on Skope-IT/Application events. requesting you bring in this enhancement for claude.ai URL. more details on the case # 602972With regardsKarthikeyan N

Hello CommunityHas anyone attempted yet to detect via Netskope endpoint agent traffic toward internet-facing Clawdbots AI agents exposed via unauthenticated public endpoints?thanksAndrea

We've enabled the new transaction logs feature and sending it to our AWS S3.We have came across something which we wanted to point out which is the directory structure is in hours/days/month/year this is not how standard logging folders are created and is different from your old approach too. This can be an issue during manual searching or programatic querying in tools like AWS Athena. I suggest changing this to a normal directory structure to avoid these pains.

in one of our customer getting power shell attack in all users office 365 . how we can block .is it possible to block power shell access based on country using CASB or there is any other way to resolve this issue .

Hello,We are looking to control access to a social media site with cloud app access real time policy. However, the site doesn’t exist as a selectable CASB cloud app today and we have to fall back to using SWG policy instead.The site in question is www.weddingpro.com.Can we get a new cloud application created for this website?Thanks,Nick 

Just wanted to see if any of you are servicing customers that have recently implemented NinjaOne for endpoint management and patching. If so, how have you approached the third-party patching? cert pinned app bypass?  domain bypasses? ssl no decrypt policies?  mix of all of the above? We have our endpoint management team working but we just foresee a massive maintenance task in the future for the needed and potentially changing domains? A wildcard approach seems like too much of a security hole. 

Hello everyone! We recently started having issues with Netskope where OWA and Outlook (new) will not sync emails without a manual sync. Outlook (classic) works just fine though.I have had Netskope on my device since May hand have had no issues until Dec 10th. Microsoft may have made some changes, but I'm looking for a fix on the Netskope side. This is affecting all of my users. I've tried temporarily adding steering exceptions for outlook domains, but it has not solved the issue. Thank you all for your help!!!

Is anyone experiencing problems with Next Gen when it comes to policies for Google Workspace. Not sure if it is just me but it seems that I have had multiple things that don’t seem to work or just is not available. An example I created a policy to take action on specific resource IDs (not sure why Netskope is not using the Google Document ID) but the policy did not find the document at all. Did this with support on the line and they did not know when it was not working. I cannot create a policy to apply to specific owners I only have the all owners in the Collaboration section. I feel like this has not been through any QA testing for Google Workspace at all. 

Hello,I need to block a specific application within the https://marketplace.visualstudio.com/ domain (VSCode Marketplace).I would like guidance on how to configure Netskope to block only this specific application without affecting access to the rest of the domain.Could you please advise on the recommended procedure for this type of blocking?Thank you.

Does anyone know what the “Export User Key” is used for in Netskope? This feature is located in Setting>Security Cloud Platform>User section?I could not find any documentation on the use case for this feature. I’ve attached the screenshot below.  Is there a place to store the json file once the user key is downloaded?  Thanks.  

Starting a few months ago our company users have reported consistent and numerous blocks by Google to access our own Workspace tenant apps (Google Admin, Gemini, Gdrive, etc). The message received by the users say, “Our systems have detected unusual traffic from your computer network. Please try your request again later.” It then presents your network IP and says it does not equal the Netskope POP IP (e.g. 10.10.10.10 ≠ 163.116.140.55). This implies that Google no longer trusts the Netskope POP subnets and see’s the proxied traffic as a risk. Is Netskope aware of this issue and are you working with Google to remediate it? Thanks 

When I look at my Slack Channels some have “FC:” in the front of then name (e.g. FC:F063A1D5X9A:Test). What does FC mean? I was able to figure out that “DM” = direct message and “MPDM” = multi person direct message. I don’t see these defined in any Netskope documents though..

In working with the Netskope CASB, we’ve had analysts come up with the question “would this URL be blocked?”  I know we can go into Skope IT and do a URL Lookup to see what categories a URL is linked to and what policies “cover” it.  However, this doesn’t see to answer the fundamental question, “would it be blocked?”  There is the simple solution of, “just try it”, which will provide the answer, but this has some obvious downsides.  And it seems that the Netskope system must know if a URL is blocked or not, it will block browsing to a URL afterall.  Is there something I am missing in the interface which does this?  Or, is there a safe way to validate a URL from an analyst’s system, which doesn’t involve “ya, just try visiting a potentially malicious URL”?

I have the Netskope REST API Events v2 integration configured within Postman and queries are successful. I am wondering is there a method to limit the query by user, as well as number of days?My use case is as employees is leaving the company, I would like to just add there user name into the query, and have it pull the last 30 days of Alert, Application, and Incident logs for them, so I can export in CSV format. Thanks 

Is there any plans to add Google Agentspace (vertexaisearch.cloud.google.com) as a managed app connector we can steer? 

Hi Team,I’ve observed an issue where Outlook on the browser does not receive new emails when the Netskope client is enabled. However, at the same time, the Outlook desktop application continues to receive emails without any problem.This leads me to believe that the Netskope client might be interfering with mail synchronization on the browser. Could you please help investigate and provide a solution for this?