CASB

This is a discussion board on Netskope’s Cloud Access Security Broker (CASB) solution that enables rapid identification and management of cloud application usage, regardless of whether they are managed or unmanaged. Prevents sensitive data from being exfiltrated from your environment.

  • 120 Topics
  • 339 Replies

120 Topics

prajakta.yadav
Netskope Partner
prajakta.yadavNetskope Partner
asked in CASB

Policy enhancement

Hi, How to determine the maturity of policies in our tenant. For example, we have Netskope tenant with all policies implemented, then how to check whether these policies are enough or any enhancement is required further?

0
prajakta.yadav
Netskope Partner
2 days ago
C
cgrahamNew Member
asked in CASB

Usage report for Generative AI category includes Adobe?

As per title. Wondering why Adobe products have been included in the AI usage report. Adobe CC is categorised as “Web Design” and Adobe document cloud is “Business Process Management”.

1
S
Netskope Employee
9 days ago
B
barrycuda72New Member
asked in CASB

Microsoft Company Portal on Windows will not sync.

If Netskope client is enabled, I cannot sync the company portal app (Microsoft Intune). it just fails.  Disable NS client and it works just fine.  All the default pinned apps for Microsoft Intune is enabled and assigned to the steering config my client is assigned.  Packet Capture shows that it is still trying to use the NS cert which I thought would be by-passed by the certificate exception.

6
S
Netskope Employee
23 days ago
J
jschueleNew Member III
asked in CASB

Classic vs Next Generation API Data Protection for Google Drive & OneDrive

I was reading the support articles for migrating to NextGen connectors for Google Drive and OneDrive and notice some features we currently use will no longer be supported (e.g. Disable Print & Download, Sharing Content to More than X External Collaborator, REST API Support, etc). Can you tell me why, or is coming at a later date? Thx

2
J
1 month ago
RubenSOC97
Netskope Partner
RubenSOC97Netskope Partner
posted in CASB

Delay synchronizing one drive

Hello people!I am having problems with netskope when synchronizing One Drive, and it takes a long time.And it only syncs if you manually stop the sync and re-activate it.Do you have any idea what could be happening?Best regards

0
RubenSOC97
Netskope Partner
1 month ago
rapchua
Netskope Partner
rapchuaNetskope Partner
asked in CASB

Netskope Client service Not Starting

Hello,We have installed Netskope client and encountering intermittent connections/service not starting properly once a machine booted up. This is happening for multiple users few weeks after deploying Netskope.Did anyone encounter the same issue? I am searching any related documentation/forums but I think I overlooked it. Thank you.

2
rapchua
Netskope Partner
1 month ago
Jais100rbh
Netskope Partner
Jais100rbhNetskope Partner
asked in CASB

Issue with WhatsApp QR Code Scanning When Netskope Client is Enabled

An issue I have encountered with WhatsApp QR code scanning on my device when the Netskope client is enabled. The problem seems to be consistent and reproducible under the following circumstances:When attempting to scan the WhatsApp Web QR code using the mobile app, the camera opens but fails to recognize or scan the QR code. I am able to log into one WhatsApp account by scanning the QR code, but when attempting to log into another WhatsApp account on the same device using a different QR code, the scan fails, and I am unable to complete the login process. This issue occurs only when the Netskope client is active. Disabling the Netskope client allows both the QR code to be scanned without any problems.Given the critical role that both Netskope and WhatsApp play in our daily operations, this issue is impacting productivity.I would appreciate any assistance or guidance you can provide to resolve this matter. If you need any additional information or would like me to perform further diagnos

2
Jais100rbh
Netskope Partner
1 month ago
xavy2310
Netskope Partner
xavy2310Netskope Partner
posted in CASB

whatsapp app

I am reviewing and I notice that when I use the WhatsApp app and attach an image it is not sent, I do not have associated blocking policies and additionally create a real-time policy where permission is granted to upload and download files.If I enter through a browser, if it allows me to attach all the images, I wanted to check whether netskope restricts the sending of attachments through the App?

8
maheshchavan
Netskope Partner
1 month ago
J
jschueleNew Member III
asked in CASB

Shared Google Drive not listed

A user has shared a Google Drive with me and an external partner. In Google Admin it shows as Active and I am a manager. The external partner has access, but I do not see it in API-Enabled Protection → Google Drive → Teams, or when I try to create a new DLP policy and choose subset of Team Drives. It is configured identically to the other shared drives in the list. What could be preventing it from being visible? It meets all the criteria outlined in the config guide…https://docs.netskope.com/en/netskope-help/data-security/api-data-protection/api-data-protection-for-google-drive/configure-google-drive-for-api-data-protection/#google-team-shared-drive-support 

0
J
1 month ago
J
jschueleNew Member III
asked in CASB

Azure OpenAI App Steering

I am using CASB Inline/API only right now (not SWG) and we use Azure OpenAI. I wanted to know is there a reason that Azure OpenAI is not a fully supported Cloud App (in the Generative AI category) that I can steer and control by DLP policy? I would also like to see it show up with our instance as well. Thx

1
ejang
Netskope Employee
1 month ago
D
deepakkNew Member III
asked in CASB

AI usage

How we can track AI traffic if it is part of featureset of some application? Nowdays every Application is releasing AI of there own like salesforce,stripe right How we can track those usage through netskope?

1
F
Netskope Employee
1 month ago
S
Netskope Employee
scarlileNetskope Employee
posted in CASB

Changing a CCI App tag using Rest API

As organisations take control of the SaaS applications they use and sanction, one key area is to tag applications as Sanctioned or Unsanctioned (or other tag names if you prefer). Tagging an application in the CCI is simple (see below), but laborious if you have many to do.https://docs.netskope.com/en/netskope-help/admin-console/cloud-confidence-index/tag-apps/ How to use an API for Application taggingGo to Settings/Tools/Rest API v2  Select API DocumentationSearch or scroll down to /api/v2/services/cci/tags/Click to try out the API Select the tag you want (using Sanctioned here) Select “Request body for patch app tagging” ( this gives some sample options on how to select the app by name or id) Edit the text to select the apps you want tagged (example here is for Box, Evernote & Dropbox) Click Execute  You will get a response back which will show whether the has succeeded or not, but also some info which might be useful for your API tool of choiceIf you get an error, check your

0
S
Netskope Employee
2 months ago
J
jbookhammerNew Member
asked in CASB

Is there a way to get a user alert on sites like chatgpt without being in a dlp policy or threat protection prigile?

Hello,I was asked if Netskope could provide a user alert when visiting a site, for example, chatgpt that they acknowledge the risk and then either click proceed or stop. We do not have the SWG and I think it might be needed to accomplish this? If we dont have SWG is there a way to get this accomplished? 

5
C
Netskope Employee
2 months ago
J
jschueleNew Member III
asked in CASB

Google Drive Retroactive Scan limit by Team

I created an API Data Protection DLP policy to look for a certain file type and it is limited to a certain Team. If I create a Retroactive scan using this policy will it only scan that Team, or the entire instance?

0
J
2 months ago
W
wilsonExplorer III
asked in CASB

Error using ServiceNow Reporting with Netskope

When using Netskope on a Macintosh, an error occurs saving reports with the “Classic UI” that does not occur when using the most recent UI (Screenshot attached).  Disabling Netskope gets rid of the problem. There is anecdotal reports of someone having this same problem on a Windows/Edge combination. I haven’t gathered enough data to create a Case with Netksope, so I wanted to see if anyone else has seen this phenomena. A Google search reveals two mentions of this error, but both talk about browser security.  Both talk about Cross Site Forgery tokens. Sometimes When Updating Records Browser Shows: Security Warning: Your submission token does not match session token - Support and Troubleshooting (servicenow.com) "Your submission token does not match your session... - ServiceNow Community  

0
W
3 months ago
B
BrianNew Member
asked in CASB

create a Policy for non-citrix servers

Hey Community,I need to create a new client configuration for a Netskope client that disable the auto update for the on-prem device and the Netskope client in Citrix environment needs to be on for the same device. How could i do or fix this problem?

0
B
3 months ago
W
wilsonExplorer III
asked in CASB

Intune Bypass add manage.microsoft.com

Our experience indicates that “manage.microsoft.com” must be added to the Default Intune Certificate Pinned Application bypass entry

0
W
3 months ago
takumi
Netskope Partner
takumiNetskope Partner
asked in CASB

Difference of "View" and "View All" activities in some applications

I have found some applications such as X(formally twitter) and facebook has "view" and "view all" activities.maybe it depends on applications but I would like to how I can understand the differnce of them.

1
ejang
Netskope Employee
5 months ago
T
TwoodsNew Member III
asked in CASB

SNI Checking at the Client Configuration level

I am looking for thoughts on if people have enabled the setting in the Client Configuration for Perform SNI (Server Name Indication) check ?    We are migrating VPN technologies and have noticed some traffic occurring outside of the Netskope tunnel when we do not expect it.  We believe this setting to be the reason as it indicates that the initial three-way handshake for traffic occurs outside the tunnel to retrieve the hostname.   Additionally we have several third-party applications that we use Source IP allowlisting with and believe that this may be causing issues with some of those as well.   This was enabled (I believe) during our initial configuration and now want to gather pros and cons of having it enabled/disabled?

2
jforrest
Netskope Employee
5 months ago
G
gabrieldmeidaNew Member III
asked in CASB

kill Netskope Client

Hello, Today I discovery a user executing a script to kill process Netskope.He´s Admin local of computer (Macbook). Exist some way of block this script through of panel?if [ "$EUID" -ne 0 ] then echo "Please run as root" exitfiNETSKOPE_PIDS="`ps aux | grep -i /opt/netskope | awk '{print $2}' | sed '$d'`"for line in $NETSKOPE_PIDSdo kill -9 $linedone 

1
N
5 months ago
R
ruttrowgNew Member
asked in CASB

CASB 0365 policies needed

Hello group, I am new here, I did a search but did not find what I was looking for. Question: Any documentation on how to properly implement in the CASB section for Office 365? We want to eliminate or reduce the number of blocks we are seeing from attempts to update Office. It hits different sites out of the United States. (Policies, Real-time protection, CASB section) Thanks,

2
R
6 months ago
J
jschueleNew Member III
posted in CASB

Google Ecosystem Apps/Plug-ins

Where can I find more information about the CASB API Google Apps/Add-ins page? I am trying to figure how to use this information. Thx

1
J
6 months ago
W
wilsonExplorer III
posted in CASB

CCI App Score history

I have a CCI Score based policy, where certain categories are blocked with scores <=59.    Suddenly I have a corporate user being blocked - legitimately, and I think it is due to the score dropping.There used to show a history of scores over time per app, when did that go away?

1
W
6 months ago
M
munster
posted in CASB

Getting Certificate Error When Using eproxy-mytenant.goskope.com

Hi The way we setup the network, we will need eproxy to access Internet.  Surf internet worked well but Outlook email client keeps getting untrusted certificate error.  Is there certificate to be included? Thank

1
S
Netskope Employee
7 months ago
C
casaestradaNew Member
posted in CASB

Website block ALLOW via bypass password

Is there a way to allow employees to access a blocked website if they enter a password ??For context:I have staff who work with vendors and when they go to specific websites they get blocked based on our policy.  Is there a way to allow blocked websites to be accessed provided employee enters a bypass password ? Is there a way to change that password daily.

1
S
Netskope Employee
7 months ago

Badge winners

Show all badges
Terms & ConditionsCookie settings