Skip to main content
  • EN

CASB

This is a discussion board on Netskope’s Cloud Access Security Broker (CASB) solution that enables rapid identification and management of cloud application usage, regardless of whether they are managed or unmanaged. Prevents sensitive data from being exfiltrated from your environment.

  • 130 Topics
  • 350 Replies
130 Topics
S
Netskope Employee
scarlileNetskope Employee
posted in CASB
Changing a CCI App tag using Rest API

As organisations take control of the SaaS applications they use and sanction, one key area is to tag applications as Sanctioned or Unsanctioned (or other tag names if you prefer). Tagging an application in the CCI is simple (see below), but laborious if you have many to do.https://docs.netskope.com/en/netskope-help/admin-console/cloud-confidence-index/tag-apps/ How to use an API for Application taggingGo to Settings/Tools/Rest API v2  Select API DocumentationSearch or scroll down to /api/v2/services/cci/tags/Click to try out the API Select the tag you want (using Sanctioned here) Select “Request body for patch app tagging” ( this gives some sample options on how to select the app by name or id) Edit the text to select the apps you want tagged (example here is for Box, Evernote & Dropbox) Click Execute  You will get a response back which will show whether the has succeeded or not, but also some info which might be useful for your API tool of choiceIf you get an error, check your

1590
S
Netskope Employee
6 months ago
J
jbookhammerNew Member
asked in CASB
Is there a way to get a user alert on sites like chatgpt without being in a dlp policy or threat protection prigile?

Hello,I was asked if Netskope could provide a user alert when visiting a site, for example, chatgpt that they acknowledge the risk and then either click proceed or stop. We do not have the SWG and I think it might be needed to accomplish this? If we dont have SWG is there a way to get this accomplished? 

1535
C
Netskope Employee
7 months ago
J
jschueleNew Member III
asked in CASB
Google Drive Retroactive Scan limit by Team

I created an API Data Protection DLP policy to look for a certain file type and it is limited to a certain Team. If I create a Retroactive scan using this policy will it only scan that Team, or the entire instance?

280
J
7 months ago
W
wilsonExplorer III
asked in CASB
Error using ServiceNow Reporting with Netskope

When using Netskope on a Macintosh, an error occurs saving reports with the “Classic UI” that does not occur when using the most recent UI (Screenshot attached).  Disabling Netskope gets rid of the problem. There is anecdotal reports of someone having this same problem on a Windows/Edge combination. I haven’t gathered enough data to create a Case with Netksope, so I wanted to see if anyone else has seen this phenomena. A Google search reveals two mentions of this error, but both talk about browser security.  Both talk about Cross Site Forgery tokens. Sometimes When Updating Records Browser Shows: Security Warning: Your submission token does not match session token - Support and Troubleshooting (servicenow.com) "Your submission token does not match your session... - ServiceNow Community  

240
W
7 months ago
B
BrianNew Member
asked in CASB
create a Policy for non-citrix servers

Hey Community,I need to create a new client configuration for a Netskope client that disable the auto update for the on-prem device and the Netskope client in Citrix environment needs to be on for the same device. How could i do or fix this problem?

520
B
8 months ago
W
wilsonExplorer III
asked in CASB
Intune Bypass add manage.microsoft.com

Our experience indicates that “manage.microsoft.com” must be added to the Default Intune Certificate Pinned Application bypass entry

4590
W
8 months ago
takumi
Netskope Partner
takumiNetskope Partner
asked in CASB
Difference of "View" and "View All" activities in some applications

I have found some applications such as X(formally twitter) and facebook has "view" and "view all" activities.maybe it depends on applications but I would like to how I can understand the differnce of them.

1191
ejang
Netskope Employee
9 months ago
T
TwoodsNew Member III
asked in CASB
SNI Checking at the Client Configuration level

I am looking for thoughts on if people have enabled the setting in the Client Configuration for Perform SNI (Server Name Indication) check ?    We are migrating VPN technologies and have noticed some traffic occurring outside of the Netskope tunnel when we do not expect it.  We believe this setting to be the reason as it indicates that the initial three-way handshake for traffic occurs outside the tunnel to retrieve the hostname.   Additionally we have several third-party applications that we use Source IP allowlisting with and believe that this may be causing issues with some of those as well.   This was enabled (I believe) during our initial configuration and now want to gather pros and cons of having it enabled/disabled?

7462
jforrest
Netskope Employee
10 months ago
G
gabrieldmeidaNew Member III
asked in CASB
kill Netskope Client

Hello, Today I discovery a user executing a script to kill process Netskope.He´s Admin local of computer (Macbook). Exist some way of block this script through of panel?if [ "$EUID" -ne 0 ] then echo "Please run as root" exitfiNETSKOPE_PIDS="`ps aux | grep -i /opt/netskope | awk '{print $2}' | sed '$d'`"for line in $NETSKOPE_PIDSdo kill -9 $linedone 

8761
N
10 months ago
R
ruttrowgNew Member
asked in CASB
CASB 0365 policies needed

Hello group, I am new here, I did a search but did not find what I was looking for. Question: Any documentation on how to properly implement in the CASB section for Office 365? We want to eliminate or reduce the number of blocks we are seeing from attempts to update Office. It hits different sites out of the United States. (Policies, Real-time protection, CASB section) Thanks,

1030
R
10 months ago
J
jschueleNew Member III
posted in CASB
Google Ecosystem Apps/Plug-ins

Where can I find more information about the CASB API Google Apps/Add-ins page? I am trying to figure how to use this information. Thx

470
J
11 months ago
W
wilsonExplorer III
posted in CASB
CCI App Score history

I have a CCI Score based policy, where certain categories are blocked with scores <=59.    Suddenly I have a corporate user being blocked - legitimately, and I think it is due to the score dropping.There used to show a history of scores over time per app, when did that go away?

830
W
11 months ago
M
munster
posted in CASB
Getting Certificate Error When Using eproxy-mytenant.goskope.com

Hi The way we setup the network, we will need eproxy to access Internet.  Surf internet worked well but Outlook email client keeps getting untrusted certificate error.  Is there certificate to be included? Thank

4040
S
Netskope Employee
11 months ago
C
casaestradaNew Member
posted in CASB
Website block ALLOW via bypass password

Is there a way to allow employees to access a blocked website if they enter a password ??For context:I have staff who work with vendors and when they go to specific websites they get blocked based on our policy.  Is there a way to allow blocked websites to be accessed provided employee enters a bypass password ? Is there a way to change that password daily.

910
S
Netskope Employee
1 year ago
K
Netskope Partner
kunalgandhiNetskope Partner
posted in CASB
Github applications is showing browsing activity

The requirement is :- User should able to access a corporate instance of Git-hub but not any other instance of git-hub. I have created app instance for a corporate instance of Git-hub and configured the policy to allow all activities.  2nd policy after that is to block all activities for the application Git-hub ( to match all other git-hub instances) with this, I am not getting an expected resultWhen user is accessing corporate instance, Netskope is showing Browsing activity and getting blocked in 2nd policy.I have checked the list of activities for app Git-hub but there is no Browsing activity mentioned Any expert comments and guidance here pls...  

420
P
1 year ago
jason
Netskope Employee
jasonNetskope Employee
posted in CASB
Netskope Client Configuration overview

Tenant specific configuration These configurations are common configuration shared across all the users (as they are under one tenant). Netskope client service loads these common configurations as soon as it starts and updates on these configurations are done on events like policy change, config change (checked periodically). Config Location Netskope-client for Windows stores these configurations in “%PROGRAMDATA%/netskopestagent”. Netskope-client for MacOS stores these configurations in “/Library/Application Support/Netskope/STAgent” Config Files S.No. Config File Purpose Fetching Mandatory Config API Frequency API Timeout 1 nsconfig.json contains various tenant-level configurations When Config version changes (polls for latest config) On-demand config update (from nsdiag or UI) User Login-Event (done to identify if we have config of a higher priority user group) Yes (default is generated) v2/config/org/clientconfig?orgkey=<orgkey>&h

17141
P
1 year ago
J
jschueleNew Member III
asked in CASB
Github API Data Protection Whitelist

I have a DLP policy looking for specific data objects in Github using a regex, but it is triggering on known test data. Any ideas on how I can configure the DLP policy to ignore my spreadsheet of known test objects? For instance create an incident for ABC123, but ignore ABC111. Thx

1264
S
Netskope Employee
1 year ago
W
wdeguaraNew Member III
posted in CASB
Winzip files from external party not able to be extracted

We've started noticing an issue with Winzip files downloaded from 3rd party web sites, where extracting the ZIP fails with the attached error message.    "Central and local discovery mismatch for file"  (example in attached screenshot)The zip can be successfully extracted if the Netskope service is disabled on the user's computer. 

2160
S
Netskope Employee
1 year ago
P
Netskope Partner
Paradox07Netskope Partner
posted in CASB
Issue with google drive application

Hi People, We have created a instance awareness policy to restrict user to block upload on personal google drive instances which is working fine on the browser but can't even hit the policy with google drive desktop application via file explorer's auto-sync. Below is the policy details: Please let me know what else is needed to be added here!!  

4510
S
Netskope Employee
1 year ago
D
deepakkNew Member III
posted in CASB
Unsanctioned Application

how do we segregate sanctioned applications from normal websites?As of now, we need to identify  unsanctioned applications installed on the User machine rather than they are browsing websites?

880
kvarshney
1 year ago
Natedog0024
Natedog0024New Member
asked in CASB
HTTP Header Profiles and comma separation

Hello, Has anyone had issues using comma separation in the referrer field of an HTTP request header? I attempted to use more than one URL comma separating them in the same field per NetSkope documentation, but it broke the URL that was already there and didn't work for the new one. I tried different variations with no luck. I had to create a new header profile for one url..  Any one else?

2160
M
1 year ago
J
jbookhammerNew Member
posted in CASB
Netskope stopped pulling YouTube views

I can't seem to figure out what happened but Youtube stopped being pulled into our unsanctioned cloud apps on 11/15. I tried watching a video and usually it appears in the alert right away but the only alerts showing up are from 11/15. Nothing changed on our end that we know of.

2120
rthomson
Netskope Employee
1 year ago
W
wilsonExplorer III
posted in CASB
ServiceNow, Cloud Exchange

Does anyone currently send CPSM (CIS findings) over to ServiceNow? If so, I would be interested in hearing the experience, any lessons learned, and finally where in ServiceNow the data lands.

520
C
1 year ago
P
Netskope Partner
Paradox07Netskope Partner
posted in CASB
Client enrollment pop-up not working in linux and mac

Hi People, I have configured and pushed my client in idp mode via jumpcloud idp and mdm solutions in windows, mac and linux OS. The Enrollment dialog box is popping up even after user closes it which is the expected behavior and it's working fine in windows. But for linux and MacOS if the user closes it, it doesn't automatically opens up again breaking the enrollment flow. Is there any way to fix this behavior for linux and MacOS?

2570
P
Netskope Partner
1 year ago
A
Netskope Partner
akashsaxenaNetskope Partner
posted in CASB
Getting issue while blocking WHatsApp

I am facing issues while attempting to block WhatsApp. I have created a cloud app policy to block WhatsApp, and it is successfully blocking the WhatsApp web. However, on  WhatsApp application uploading is getting blocked, but I am still able to send text messages.Is there a way to block text messages as well? I haven't found any corresponding events in the Netskope logs for sending messages.

3400
A
Netskope Partner
1 year ago

Badge winners

Show all badges
Terms & ConditionsCookie settings