CASB

Hi all, Nice to meet you! I'm currently distributing Netskope clients on company computers (both Windows and Ubuntu). I have configured the Netskope clients to Google Workspace accounts.This works fine for users without a passkey (Yubikey), but if they enable one, the client doesn't complete the login process. Has anyone else experienced this issue and found a solution?Thank you.  

The Microsoft Office 365 Outlook.com Cert Pinned App in Steering configuration…What is the default (new/recently created tenants) for Custom App Domains?What is the value in your tenant for Custom App Domains? Curious if it is best practice and/or common to have this set to *, empty, or specific values. This question comes as the OOB Microsoft Office 365 Outlook.com contains the process below, that is used throughout additional Microsoft products (such as Teams and the Microsoft 365 Copilot app). If your Custom App Domains is set to * for the  Microsoft Office 365 Outlook.com Cert Pinned App in Steering configuration, then all traffic (regardless of the Microsoft app) will bypass Netskope inspection (including DLP policies).Process: msedgewebview2.exe

It was mentioned that the setting can be configured under Settings > Manage > Multi-Factor Authentication Integration, but in my environment, the Multi-Factor Authentication Integration tab does not appear, as shown in the screenshot below.Has there been an update?Could you let me know where I can configure this?https://docs.netskope.com/en/multi-factor-authentication/ 

we are managing multiple Kubernetes clusters hosted on GCP and AWS. While everything works as expected on Widows, users on macOS are facing connectivity issues when interacting with these clusters using tools like kubectl. when the Netskope client is enabled, users are encountering this error “Unable to connect to the server: tls: failed to verify certificate: x509: certificate signed by unknown authority”Since we are dealing with critical production workloads spread across multiple clusters. we want to avoid any manual modification of kubeconfig files. Can you suggest any possible solutions to resolve this issue.

We had someone upload files to their personal Dropbox account and the DLP incident forensic information is missing the file names; its replaced by a hash only. Is this a known issue, or feature?

Hello, I have 2 tenants, 1 for QA and 1 for production. Has anyone figured out a way to switch clients from one tenant to another without having to uninstall and reinstall? especially on a MAC system?

What could be the reason why the WhatsApp application is experiencing issues when uploading or downloading files on our iOS devices, even though there are no policies in place that should restrict these actions. How can i bypass the whatsapp application on iOS devices?, i haven’t found the procees that i need for the certificate pinned application config. Thanks for your comments  

Hi.I am a Netskope user in Japan. Currently, I am facing difficulties because the following cloud services in Japan cannot be controlled by CASB.It is causing significant inconvenience.I strongly request these services to be supported. Application Name: CryptobinURL:https://cryvia.cryptobin.jp/crypto/usr_index.action Application Name: Dokodemo Cabine,URL:https://dococab.tayoreru.com/login.html Application Name: HENNGE Secure Transfer  URL: https://transfer.hennge.com/#/login

I want to be able to route an internal app through NPA, but also be able to apply DLP policies to it. An example would be to present an authorized employee with a user consent notification popup at login. Or a DLP policy to prevent PHI from being posted, etc. Could this be done by creating both a Private App and a Cloud App using the same domain name?

I currently have DLP policies that monitor and control users interacting with the Google Gemini app/website. They now want to enable the Gemini feature in Google Workspace, which would then use the embedded feature in Google Meets, Google Docs, etc. Is there a way to monitor this additional traffic with Netskope? FYI, I already have the CASB API connector for Google Workspace, but its limited to Gdrive and Gmail..

Hi We have observed a significant increase in Fallback Action alerts, and are currently investigating ways to address this issue. These alerts primarily seem to be related to Microsoft updates. Advanced File Scanning has been disabled, yet we are still seeing Fallback Action alerts.As part of our troubleshooting, we have attempted to create steering bypass and allowed traffic related to Windows updates, but these steps have not resolved the issue.Any suggestions or further insight into addressing this would be greatly appreciated. 

This use case is about Generative AI, but I've run into this issue with other categories as well.  I create a Generative AI block and then I'm adding exceptions as needed by the business. The issue is that I have to create a URL list for those applications that do not show in "CloudApp" options. (ie. Grammarly).  What I don't understand is why is the app not available? I get that Netskope can't distinguish between activities within the app, but when I look at the Alerts and logs it's clearly categoring the URL to the application. I'm now forced to create a rather large URL list to allow Gram

Sumo Logic has a Netskope app that can be installed and configured to use API v2 to ingest logs. I created a new token in Netskope as described in the doc. I then installed the Netskope app and created the collector in Sumo Logic. It shows healthy, but there is an error saying “ 403 - error connecting to endpoint, received 403: {“message”: You cannot consume this service”}. Any ideas whats wrong? 

Hello, New to Netskope.  I was able to find the v1 API documentation https://docs.netskope.com/en/netskope-platform-rest-apis.html as well as the v2 API documentation https://<tenant>.goskope.com/apidocs/?include_beta_routes=0 We're looking to utilize the versatility of the v2 permission based token.  I didn't see the v1 API endpoints available in the v2 API documentationexample: https://docs.netskope.com/en/manage-quarantine-files.html for v1 wasn't in the v2Is there additional documentation that I'm missing?  or is there a roadmap/timeline to when the v1 endpoints will be available in v2? Thank you for your time and insight into this. -Han Park

Policy:User Alert Poor ReputationDescription:Example of how to create a rule to alert the end user about the use of a cloud application with poor reputationVideo:Leandro Timotio de LimaCustomer Success ManagerLinkedin

Team,Good afternoon.How can I add a clickable URL into the “User Notification” section in Netskope? I want to direct my users to go to a specific website. I would like the website URL to show in the block pop-up policy message. I did not see an option for this in the “INSERT VARIABLE” options. I think the syntax is something like <href=https://microsoft.com>See screenshotThanks. 

I can’t see a newly created Google team drive in API-Enabled Protection. It has the same configuration as the other drives that are visible in our tenant. I am also a Manager of the drive. I verified it is active in Google Admin as well. Any idea’s what could be wrong?

Policy:Block Tag Deny Description:Policy to block cloud applications using custom TAG Video: Leandro Timotio de LimaCustomer Success ManagerLinkedin

Hi, I have CASB API DLP policies configure for Slack and want to know how to exclude (whitelist) specific private channels from inspection? We are in the process of renaming our private channels with a keyword to let us know it approved to hold certain type of data. Right now its all or nothing..

Streamline your security operations with a converged SaaS security solution built for today’s challenges.  Join Melody Nouri, Netskope's Product Marketing Manager, and Dev CK, Director of Product Management, as they reveal how Netskope's unified Cloud Access Security Broker (CASB) can help you navigate the ever-expanding SaaS and GenAI landscape with ease, offering the tools needed to streamline your security operations. Key Topics Covered: Identify gaps in current SaaS security tools and understand their limitations. Explore the essential capabilities needed to transform SaaS security with a unified CASB approach. Watch a live demo of key use cases showcasing Netskope’s LLM-powered risk categorization, helping you stay ahead of emerging threats and reduce alert fatigue. Discover how Netskope can enhance your security posture while boosting productivity. To learn more about how to stay ahead of threats without slowing productivity, register for our upcoming webinar below:   Simplify

We are creating policies based on thresholds of internal users that are collaborators of a document. In doing that, we’ve ran into the following issues: 1.) We’ve seen in the alerts section that a lot of our alerts associated have a collaborator count that is different from what we see in the incidents section. For example, here you can see 135 collaborators. However if you look at the actual incident, this is only shared with 4 individual users, and a group of 64 users. That doesn’t add up to 135. We are seeing this for lots of alerts/incidents. 2.) In our DLP profiles, we have a a configuration for various exposure definitions. We are wondering if the following is an AND or OR in terms of the internal/external and # of internal users. The reason we ask is that it seemed that we were triggering on internal documents that are shared with less than 100 users. Let us know if there is any further clarification needed here.  

I’m attempting to connect to the Netskope API via a PowerShell script. I’ve created an access token with the appropriate endpoint configured. The script is receiving a 401 response which indicates that I’m not authorized yet. I’m not sure how to present the access token in the header. Is there any documentation or examples on how to authorize to the API endpoint I’m trying to connect to? Here’s a snippet of my PowerShell script:# Variables$netskopeAccessToken = "<insert_access_token_here"$type = "File, Folder"$filter = "(app eq 'OneDrive') and (exposure eq 'External')"$netskopeUri = "https://<domain>.goskope.com/api/v2/ui/casbapi/inventory/resources"# API Header$headers = @{ 'Authorization' = 'api_key' + $netskopeAccessToken 'Accept' = 'application/json'}# API Body$body = @{ type = $type filter = $filter}$response = Invoke-RestMethod -Uri $netskopeUri -Method Get -Body $body -Headers $headers 

We've been using netskope for a while here at the company and we have difficulty with the issue of the employee registering with the client. After reading the installation documentation on Linux, I was able to create a script for direct installation with the user's registration and it was a success. I researched a lot looking for a script to do the same in windows and I didn't find anything.Has anyone in the community been through this situation and managed to solve it? Remembering that we don't use AD.Thanks so much for everyone's help.

Hi, anyone have experience running both the Netskope Client and Digital Guardian (DG) DLPE Agent at the same time? We are using Netskope for CASB and NPA. The DG Agent will have the WIP feature enabled for web traffic visibility. Thx

How to block Upload and download whatsapp activity in Virtual desktop machines.We have already attempted to create a policy based on Cloud app, Custom app, and Category, but we are still unable to block upload/download activities on WhatsApp using the PAC file on the WVD machine.Any suggestion much appreciated.