Skip to main content
  • EN

CASB

This is a discussion board on Netskope’s Cloud Access Security Broker (CASB) solution that enables rapid identification and management of cloud application usage, regardless of whether they are managed or unmanaged. Prevents sensitive data from being exfiltrated from your environment.

  • 127 Topics
  • 349 Replies
127 Topics
aplaza
Netskope Employee
aplazaNetskope Employee
published in CASB
Feeling the weight of managing SaaS and GenAI security? It doesn’t have to be complicated.

Streamline your security operations with a converged SaaS security solution built for today’s challenges.  Join Melody Nouri, Netskope's Product Marketing Manager, and Dev CK, Director of Product Management, as they reveal how Netskope's unified Cloud Access Security Broker (CASB) can help you navigate the ever-expanding SaaS and GenAI landscape with ease, offering the tools needed to streamline your security operations. Key Topics Covered: Identify gaps in current SaaS security tools and understand their limitations. Explore the essential capabilities needed to transform SaaS security with a unified CASB approach. Watch a live demo of key use cases showcasing Netskope’s LLM-powered risk categorization, helping you stay ahead of emerging threats and reduce alert fatigue. Discover how Netskope can enhance your security posture while boosting productivity. To learn more about how to stay ahead of threats without slowing productivity, register for our upcoming webinar below:   Simplify

120
aplaza
Netskope Employee
6 days ago
K
kdibbleNew Member III
asked in CASB
Internal collaborator count on API Data Protection policies

We are creating policies based on thresholds of internal users that are collaborators of a document. In doing that, we’ve ran into the following issues: 1.) We’ve seen in the alerts section that a lot of our alerts associated have a collaborator count that is different from what we see in the incidents section. For example, here you can see 135 collaborators. However if you look at the actual incident, this is only shared with 4 individual users, and a group of 64 users. That doesn’t add up to 135. We are seeing this for lots of alerts/incidents. 2.) In our DLP profiles, we have a a configuration for various exposure definitions. We are wondering if the following is an AND or OR in terms of the internal/external and # of internal users. The reason we ask is that it seemed that we were triggering on internal documents that are shared with less than 100 users. Let us know if there is any further clarification needed here.  

120
K
8 days ago
N
ngriffinNew Member
asked in CASB
Netskope API Programming with PowerShell - Getting 401 Unauthorized Error Code

I’m attempting to connect to the Netskope API via a PowerShell script. I’ve created an access token with the appropriate endpoint configured. The script is receiving a 401 response which indicates that I’m not authorized yet. I’m not sure how to present the access token in the header. Is there any documentation or examples on how to authorize to the API endpoint I’m trying to connect to? Here’s a snippet of my PowerShell script:# Variables$netskopeAccessToken = "<insert_access_token_here"$type = "File, Folder"$filter = "(app eq 'OneDrive') and (exposure eq 'External')"$netskopeUri = "https://<domain>.goskope.com/api/v2/ui/casbapi/inventory/resources"# API Header$headers = @{ 'Authorization' = 'api_key' + $netskopeAccessToken 'Accept' = 'application/json'}# API Body$body = @{ type = $type filter = $filter}$response = Invoke-RestMethod -Uri $netskopeUri -Method Get -Body $body -Headers $headers 

361
N
20 days ago
R
rmessinaNew Member III
posted in CASB
netskope installation for windows with scripted registration

We've been using netskope for a while here at the company and we have difficulty with the issue of the employee registering with the client. After reading the installation documentation on Linux, I was able to create a script for direct installation with the user's registration and it was a success. I researched a lot looking for a script to do the same in windows and I didn't find anything.Has anyone in the community been through this situation and managed to solve it? Remembering that we don't use AD.Thanks so much for everyone's help.

27714
G
1 month ago
J
jschueleNew Member III
asked in CASB
Netskope Client and Digital Guardian Agent Compatibility

Hi, anyone have experience running both the Netskope Client and Digital Guardian (DG) DLPE Agent at the same time? We are using Netskope for CASB and NPA. The DG Agent will have the WIP feature enabled for web traffic visibility. Thx

250
J
2 months ago
R
rohit_chandnaNew Member III
asked in CASB
How to block Upload and download whatsapp activity in Virtual desktop machines

How to block Upload and download whatsapp activity in Virtual desktop machines.We have already attempted to create a policy based on Cloud app, Custom app, and Category, but we are still unable to block upload/download activities on WhatsApp using the PAC file on the WVD machine.Any suggestion much appreciated.

500
R
2 months ago
J
jschueleNew Member III
asked in CASB
Jamf and Secure Enrollment

We use Jamf to deploy the NS Client to our Mac fleet. After enabling the new secure enrollment features (Settings > Security Cloud Platform > MDM Distribution > Secure Enrollment) and generating the access tokens, it appears we add them to our existing Jamf deployment policy. If I am reading the directions right the tokens must be renewed, and the Jamf policy updated, every 90 days by default. Is that correct? 

1972
ns-ssalomon
Netskope Employee
2 months ago
D
DbellNew Member
posted in CASB
Netskope Client disabled by User, how to enable via command line?

Migrated Content

22445
C
3 months ago
Jais100rbh
Netskope Partner
Jais100rbhNetskope Partner
asked in CASB
SAML Configuration working top to bottom

HEllo, I need help understanding the SAML configuration. Does it work with a top-to-bottom approach? I've set up a forward proxy SAML for two IDP domains (for example, abc.com and xyz.com) for Netskope client enrollment. However, when I try to enroll the Netskope client with the xyz domain, the authentication page redirects to abc.com. Upon checking bypass settings, I found that it's a global setting for all SAML configurations. I need a quick response to achieve and segregate authentication for both domains.

392
Jais100rbh
Netskope Partner
3 months ago
PaulJHerrmann
Netskope Partner
PaulJHerrmannNetskope Partner
posted in CASB
How to block Facebook Messenger while allowing access to Facebook

I have had success in the past creating an App Definition for LinkedIn Messenger to allow access to LinkedIn while blocking the messenger functionality through Domain:www.linkedin.com and Path: /messaging/,/voyager/api/messaging/. Has anyone had success replicating the same control to allow access to Facebook while blocking the messenger functionality? I have also tried blocking the Post activity for the Facebook application but that only seems to work for posts on the Facebook wall and does not apply any control to Facebook Messenger. 

3322
J
3 months ago
B
barrycuda72New Member
asked in CASB
Microsoft Company Portal on Windows will not sync.

If Netskope client is enabled, I cannot sync the company portal app (Microsoft Intune). it just fails.  Disable NS client and it works just fine.  All the default pinned apps for Microsoft Intune is enabled and assigned to the steering config my client is assigned.  Packet Capture shows that it is still trying to use the NS cert which I thought would be by-passed by the certificate exception.

15957
P
3 months ago
prajakta.yadav
Netskope Partner
prajakta.yadavNetskope Partner
asked in CASB
Policy enhancement

Hi, How to determine the maturity of policies in our tenant. For example, we have Netskope tenant with all policies implemented, then how to check whether these policies are enough or any enhancement is required further?

421
N
3 months ago
C
cgrahamNew Member III
asked in CASB
Usage report for Generative AI category includes Adobe?

As per title. Wondering why Adobe products have been included in the AI usage report. Adobe CC is categorised as “Web Design” and Adobe document cloud is “Business Process Management”.

271
S
Netskope Employee
4 months ago
J
jschueleNew Member III
asked in CASB
Classic vs Next Generation API Data Protection for Google Drive & OneDrive

I was reading the support articles for migrating to NextGen connectors for Google Drive and OneDrive and notice some features we currently use will no longer be supported (e.g. Disable Print & Download, Sharing Content to More than X External Collaborator, REST API Support, etc). Can you tell me why, or is coming at a later date? Thx

842
J
4 months ago
RubenSOC97
Netskope Partner
RubenSOC97Netskope Partner
posted in CASB
Delay synchronizing one drive

Hello people!I am having problems with netskope when synchronizing One Drive, and it takes a long time.And it only syncs if you manually stop the sync and re-activate it.Do you have any idea what could be happening?Best regards

310
RubenSOC97
Netskope Partner
4 months ago
rapchua
Netskope Partner
rapchuaNetskope Partner
asked in CASB
Netskope Client service Not Starting

Hello,We have installed Netskope client and encountering intermittent connections/service not starting properly once a machine booted up. This is happening for multiple users few weeks after deploying Netskope.Did anyone encounter the same issue? I am searching any related documentation/forums but I think I overlooked it. Thank you.

1562
rapchua
Netskope Partner
5 months ago
Jais100rbh
Netskope Partner
Jais100rbhNetskope Partner
asked in CASB
Issue with WhatsApp QR Code Scanning When Netskope Client is Enabled

An issue I have encountered with WhatsApp QR code scanning on my device when the Netskope client is enabled. The problem seems to be consistent and reproducible under the following circumstances:When attempting to scan the WhatsApp Web QR code using the mobile app, the camera opens but fails to recognize or scan the QR code. I am able to log into one WhatsApp account by scanning the QR code, but when attempting to log into another WhatsApp account on the same device using a different QR code, the scan fails, and I am unable to complete the login process. This issue occurs only when the Netskope client is active. Disabling the Netskope client allows both the QR code to be scanned without any problems.Given the critical role that both Netskope and WhatsApp play in our daily operations, this issue is impacting productivity.I would appreciate any assistance or guidance you can provide to resolve this matter. If you need any additional information or would like me to perform further diagnos

702
Jais100rbh
Netskope Partner
5 months ago
xavy2310
Netskope Partner
xavy2310Netskope Partner
posted in CASB
whatsapp app

I am reviewing and I notice that when I use the WhatsApp app and attach an image it is not sent, I do not have associated blocking policies and additionally create a real-time policy where permission is granted to upload and download files.If I enter through a browser, if it allows me to attach all the images, I wanted to check whether netskope restricts the sending of attachments through the App?

7708
maheshchavan
Netskope Partner
5 months ago
J
jschueleNew Member III
asked in CASB
Shared Google Drive not listed

A user has shared a Google Drive with me and an external partner. In Google Admin it shows as Active and I am a manager. The external partner has access, but I do not see it in API-Enabled Protection → Google Drive → Teams, or when I try to create a new DLP policy and choose subset of Team Drives. It is configured identically to the other shared drives in the list. What could be preventing it from being visible? It meets all the criteria outlined in the config guide…https://docs.netskope.com/en/netskope-help/data-security/api-data-protection/api-data-protection-for-google-drive/configure-google-drive-for-api-data-protection/#google-team-shared-drive-support 

260
J
5 months ago
J
jschueleNew Member III
asked in CASB
Azure OpenAI App Steering

I am using CASB Inline/API only right now (not SWG) and we use Azure OpenAI. I wanted to know is there a reason that Azure OpenAI is not a fully supported Cloud App (in the Generative AI category) that I can steer and control by DLP policy? I would also like to see it show up with our instance as well. Thx

341
ejang
Netskope Employee
5 months ago
D
deepakkNew Member III
asked in CASB
AI usage

How we can track AI traffic if it is part of featureset of some application? Nowdays every Application is releasing AI of there own like salesforce,stripe right How we can track those usage through netskope?

331
F
Netskope Employee
5 months ago
S
Netskope Employee
scarlileNetskope Employee
posted in CASB
Changing a CCI App tag using Rest API

As organisations take control of the SaaS applications they use and sanction, one key area is to tag applications as Sanctioned or Unsanctioned (or other tag names if you prefer). Tagging an application in the CCI is simple (see below), but laborious if you have many to do.https://docs.netskope.com/en/netskope-help/admin-console/cloud-confidence-index/tag-apps/ How to use an API for Application taggingGo to Settings/Tools/Rest API v2  Select API DocumentationSearch or scroll down to /api/v2/services/cci/tags/Click to try out the API Select the tag you want (using Sanctioned here) Select “Request body for patch app tagging” ( this gives some sample options on how to select the app by name or id) Edit the text to select the apps you want tagged (example here is for Box, Evernote & Dropbox) Click Execute  You will get a response back which will show whether the has succeeded or not, but also some info which might be useful for your API tool of choiceIf you get an error, check your

1420
S
Netskope Employee
5 months ago
J
jbookhammerNew Member
asked in CASB
Is there a way to get a user alert on sites like chatgpt without being in a dlp policy or threat protection prigile?

Hello,I was asked if Netskope could provide a user alert when visiting a site, for example, chatgpt that they acknowledge the risk and then either click proceed or stop. We do not have the SWG and I think it might be needed to accomplish this? If we dont have SWG is there a way to get this accomplished? 

1455
C
Netskope Employee
6 months ago
J
jschueleNew Member III
asked in CASB
Google Drive Retroactive Scan limit by Team

I created an API Data Protection DLP policy to look for a certain file type and it is limited to a certain Team. If I create a Retroactive scan using this policy will it only scan that Team, or the entire instance?

280
J
6 months ago
W
wilsonExplorer III
asked in CASB
Error using ServiceNow Reporting with Netskope

When using Netskope on a Macintosh, an error occurs saving reports with the “Classic UI” that does not occur when using the most recent UI (Screenshot attached).  Disabling Netskope gets rid of the problem. There is anecdotal reports of someone having this same problem on a Windows/Edge combination. I haven’t gathered enough data to create a Case with Netksope, so I wanted to see if anyone else has seen this phenomena. A Google search reveals two mentions of this error, but both talk about browser security.  Both talk about Cross Site Forgery tokens. Sometimes When Updating Records Browser Shows: Security Warning: Your submission token does not match session token - Support and Troubleshooting (servicenow.com) "Your submission token does not match your session... - ServiceNow Community  

240
W
6 months ago

Badge winners

Show all badges
Terms & ConditionsCookie settings