Skip to main content
  • EN

CASB

This is a discussion board on Netskope’s Cloud Access Security Broker (CASB) solution that enables rapid identification and management of cloud application usage, regardless of whether they are managed or unmanaged. Prevents sensitive data from being exfiltrated from your environment.

  • 130 Topics
  • 350 Replies
130 Topics
J
josruizNew Member III
posted in CASB
Duplicated Netskope Client "Unique Device ID" when deploy Windows Images by Golden Image

I need deploy Netskope Client with a Windows Golden ImageMy support team have a golden image and install Netskope client. Close the Image and deploy this imageBut in Netskope report I an see that appear Duplicated "Unique Device ID"This Duplicated "Unique Device ID" can deleted? having a duplicate GUI for the NEtskope client affects or notWhat is the best method to distribute the netskope agent using a golden image?

1510
S
Netskope Employee
1 year ago
A
akaridiNew Member
posted in CASB
Ability to block file uploads to Telegram web

I'm looking for a way to block file uploads using Telegram web. As Netskope is unable to detect "Uploads", it is not able to block uploads.  I tried blocking "Downloads" as this was an activity registered, when I tested, it failed.

3050
aramachandran
Netskope Employee
1 year ago
farhan
Netskope Partner
farhanNetskope Partner
posted in CASB
Better understanding of Sanctioned and unsanctioned

Hi team, I have a doubt whenever i tried to understand i get stucked and got confused in that.Correct me as per my understanding.The sanctioned application are those who only manages by our organization like o365, Gsuite salesforce who having a Admin privileges.Unsanctioned apps are those who not control by our organization like zippyshare anydesk pinterest facebook whatsapp etc.Also i get confused over managed and unmanaged application is that the managed apps are sanctioned apps and unmanaged are unsanctioned apps.For example Sanctioned apps are those who used by dialy bases on organiztion like some org used Gsuite and chatgpt again gsuite i sanctioned and chatgpt is unmanaged apps but the used both one for mailing and other is for info learning. on the second scenerio same org the unsantioned apps are o365 coz they are using gsuite on org. Please help me with this confusion with user example.

20494
farhan
Netskope Partner
1 year ago
J
jpark124New Member III
posted in CASB
v2 API documentation parity to v1 available endpoints

Hello, New to Netskope.  I was able to find the v1 API documentation https://docs.netskope.com/en/netskope-platform-rest-apis.html as well as the v2 API documentation https://<tenant>.goskope.com/apidocs/?include_beta_routes=0 We're looking to utilize the versatility of the v2 permission based token.  I didn't see the v1 API endpoints available in the v2 API documentationexample: https://docs.netskope.com/en/manage-quarantine-files.html for v1 wasn't in the v2Is there additional documentation that I'm missing?  or is there a roadmap/timeline to when the v1 endpoints will be available in v2? Thank you for your time and insight into this. -Han Park

2540
qyost
1 year ago
M
Netskope Employee
MM_NSNetskope Employee
posted in CASB
Next Gen APIs and a better way of doing Retro Scans

Context: Next Gen APIs and Retro Scans   If you haven't noticed yet Netskope is adding more and more apps to the Next Gen API Platform. One of the greatest advantage it comes with is - Decoupling of your ongoing scan policies from retro scans. New way to do retro scan is to create a Retro Scan Policy Group. Now you can add multiple API-Enabled Protection policies to a single retro scan policy set and scan entire group with click of a button. Definitely a better way to do the retro scans.   Retro scans are now separate from ongoing policies. In the classic version you need to select an existing policy and start Retro Scan for the respective supported SaaS app. This decoupling makes sipping through SkopeIT alerts more effective. You can start retro scans in set of policies instead of individually scanning API-Enabled Protection policies one by one.   Just keep in mind that you need to create that first time API-Enabled Protection policy and add to the next-g

420
M
Netskope Employee
1 year ago
C
Netskope Partner
claudiochavesNetskope Partner
posted in CASB
File Moves Report

Hello, Can I generate a report containing file movements (eg Google Drive CASB API) and also display the full path of that file? In Netskope IT -> Application Events it only shows the objects (files). It does not show the full file path. Thanks!

940
msouza
Netskope Employee
1 year ago
AllenWu
Netskope Partner
AllenWuNetskope Partner
posted in CASB
Adobe App and Service Licensing bypass

Hi All, I would like to initate a discussion on better DLP for Adoble product lines, and I believe many Netskope users here in Technology or design industries may have similar concerns.According to this article, to make sure licensed Adobe fuction correctly, we may need to allow many domains.https://helpx.adobe.com/enterprise/kb/network-endpoints.htmlHowever, a possible data breach may happen through these domain as well if we bypass all the listed domains from steering traffic, since a few are not restricted for enterprised-used.Has anyone successfully configured DLP policies for Adoble solutions?Ideally we would like to find a way to allow these domains for Adobe certification executable only, while still monitor possible file sharing or sensitive design files leakage scenarios.-AW

2140
A
Netskope Partner
1 year ago
C
chrisisinclairNew Member III
posted in CASB
Netskope Client Fails to AutoUpdate to V95

Currently we are facing an issue where a bunch of Windows 10 Netskope clients attempted to auto update from v94 to v95 based on the setting in the cloud console.  We had a large amount of upgrade failures where the person is then left with no Netskope client installed. We disabled the auto update functionality on our steering config once it started to become a major problem to prevent the rest of our users dealing with this.    We currently also use NPA for managing these machines remotely through SCCM and for access to internal resources and we require the Netskope client to be installed for any access to cloud resources. Essentially every user that this happened to is completely unable to work and fixing the issue after the fact becomes difficult as we were switching to relying on a VPN for remote access to Netskope.    Is anyone else facing this issue?

6970
B
1 year ago
B
bongoozyNew Member III
posted in CASB
Netskope client upgrade to v99 failing with 1603 error in STAUpdate.txt

Dear All,We have recently enabled cloud update from the console for version 99.0.0. with opt in dot upgrade. We have a fleet of 28K device. We are experiencing lot of broken client. As per the STAupdate.txt the client upgrade failed with 1603 exit code, rolled back but was left in a corrupted state.We have to uninstall the client and install the new version manually to resolve the issue. STAUpdate.txt file attached. Logged a support call with the managed service provider for Netskope and hopeful to get a prompt reply and solution. It has become a service desk nightmare. Is this a common issue for all netskope client versions? Any peer comment will be highly appreciated. 

2470
B
1 year ago
M
Netskope Employee
MM_NSNetskope Employee
posted in CASB
API Protection Integration. Many-to-One?- Yes. One-to-Many? Caution!

This post is about API Protection (previously known as API Introspection) integration best practice:   Can I integrate multiple instances of the  same SaaS app (e.g. My company's Sharepoint dev and Sharepoint prod) to one Netskope tenant? -Sure you can. And most customers do. There is no problem as long as you are within your license quota. For licensing questions reach out to your Sales team. -Having multiple SaaS apps in one tenant is also not uncommon (e.g. Box, Webex, Zoom, O365 in one Netskope tenant). Again it is just the license you need to purchase for additional SaaS app.   I have more than 2 Netskope tenants but I have only one SaaS app tenant. Can I have the same instance of one SaaS app integrated to multiple Netskope tenants? Caution! Even though the integration may succeed (i.e. the instance grant process turns green on both Netskope tenants) few immediate side effects I would like to alert you about - You are essentially doubling your API usage becaus

480
M
Netskope Employee
1 year ago
A
Ankitdongre1New Member III
asked in CASB
Difference between App events, page events, and alerts in skope IT?

What is the difference between App events, page events, and alerts into skope IT?

4960
W
1 year ago
A
Alam1New Member III
asked in CASB
Wants to block send Chats message/Text for WhatsApp Cloud App

Hello Everyone,  I am trying to block the upload and send chats for WhatsApp Cloud App. I have created the  cloud app policy for WhatsApp and selected the activity "upload" and set the action "block",when we tried to upload any file it gets blocked but we are not able to block send chats for same it is still allowing.I have also tried by creating "Chat, IM & other Communication" category and selected the activity upload, and set the action "block" but it did not worked as well. Please help on how we can block the send Chats for WhatsApp web. 

6020
qyost
1 year ago
S
Netskope Partner
Sumeet666Netskope Partner
posted in CASB
Whatsapp Web activity control

Hello Team, We want to block chat activity on Whatsapp web and allow the upload activity. How can we achieve this? 

1340
S
Netskope Employee
1 year ago
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
posted in CASB
Microsoft Office 365 Integrations - Privileges and Roles

Microsoft Office 365 Integrations - Privileges and Roles Hello good afternoon Netskope community. A doubt, to make SCIM integration with AzureAD for Users/Groups privisioning, with an Azure-AD user having the Application Administrator Role, he can manage enterprise applications for example SCIM and SSO usage for UI administration. Now I can't find the exact role, privilege and/or permissions or permissions that are required for an account to integrate with Onedrive, with Outlook, with Sharepoint, via API to be able to use API protection It speaks of "Global Administrator", please can you confirm me exactly the granular role that allows an account to perform this type of integration between Netskope and Office 365, I already tried with the same Role Application Administrator and does not allow me. Azure AD built-in roles:https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Thanks to all of you for your time, collaboration and good

1200
S
Netskope Employee
1 year ago
S
srivaraNew Member
posted in CASB
Query about upload in real time protection

Hello, I need to obtain information about the file extension included in the Documents option, within Netskope - Policies - Real time protection - Policy category survey solution -ACTIVITIES & CONSTRAINTS - Activities Upload - Documents.If there is any document with the other options, please also send it. Attached imageThank you

520
S
1 year ago
M
Melinda_LeeNew Member III
asked in CASB
Can you enable Netskope Client via command line?

Hello, I am testing the install script of Netskope via command line.  Every time i install the client is disabled, can I enable the client via command line?

37360
T
1 year ago
bruna
Netskope Partner
brunaNetskope Partner
posted in CASB
client netskope disabled after computer lockout

Gostaria de verificar se é possível realizar uma configuração no Netskope onde não fique inativo quando o usuário travar a máquina.Porque temos uma política de Acesso Condicional com exceção dos IPs Netskope, mas quando o usuário bloqueia a máquina e depois tenta acessar algum aplicativo assim que loga novamente, ele não pega o IP Netskope imediatamente e gera a mensagem de bloqueio. Somente depois de um tempo após obter o IP, o aplicativo autentica o usuário novamente.

600
qyost
1 year ago
A
AlfaBaneExplorer III
asked in CASB
Omit specific account from Real-Time Protection/Threat Protection policy

Hi all,  Wanted to get your thoughts on how to best approach something. We have a specific user account that's leverage for internal pen testing. As expected, there are Real-time Protection Policies that fire off alerts for this account's activity when active. We've had a request to see if it's possible to filter this account out of either the policies or the alerts. Is there currently a way to omit a given account from a specific policy or alert (triggering)? 

530
myee
Netskope Employee
1 year ago
J
jschueleNew Member III
asked in CASB
Limited Steering Config

I would like to create a new steering Config policy that will only have a limited amount of Cloud apps steered by the Netskope Agent so it doesn't affect a Teams work, but provide us a level of DLP coverage. Is there a way to add by category (e.g. Social, Webmail, Cloud Storage, Iaas/PaaS, etc) instead of individual Cloud Apps? I would have just sorted by category in the new steering config policy and deleted cloud apps that way, but sorting on that column is not allowed.

570
S
Netskope Employee
1 year ago
P
Props4UNew Member III
posted in CASB
Any ideas on error UPD errors and nsClientFLow

Hello,   New user here.. I have a Mac device that doesn't want to connect to the internet at all unless we disable NetSkope. I noticed a ton of errors in the logs that show this as well as UDP like the one below and well as the Network interface errors. Any help will be much appreciated   stAgentNE p3662 t6691 error nsClientFlow.mm:150 nsClientFLow Flow networkInterface is nil   stAgentNE p3662 t6691 info bypassAppMgrUDP.cpp:210 BypassAppMgr Blocking UDP connection from process: safari,

2006
matt-frank
Netskope Partner
1 year ago
R
rnahmensenNew Member
asked in CASB
Device assignment

Hello, We have a user that sets up our systems and they are then get the device assigned to them as the user. Is there a way to reconfigure this as it is now showing him on a lot of devices and dramatically skewing the application events and alerts? Thanks, Ron 

740
qyost
1 year ago
oscar
Netskope Partner
oscarNetskope Partner
posted in CASB
[HELP] [DLP] How to know where an item is being used?

Hello everyone, merry Xmas to all of you 🙂 I would like to be able to know where an item is being used/assigned. e.g. a DLP File Profile, a DLP Entity, a DLP Rule, etc. The only way I found is trying to delete the item. This will show an error message if the item is being used and will show a bunch of items using that item (I think it shows up to 15, if more you won't see them all).This can do the trick if you are totally sure the item is being used somewhere. Otherwise, you take the risk of deleting the item since the confirmation is displayed BEFORE NS checks the item is being used. Performing the usage check BEFORE asking for confirmation would prevent to accidentally delete an item if it is not being used. I hope you understand what I try to explain. Of course, having a "USAGE" button next to every item to display the information would be the best. In fact, this feature would be useful for the whole solution, not only DLP. Is this feature considered

980
oscar
Netskope Partner
1 year ago
E
ethackerNew Member
posted in CASB
Do retroactive scans under API Data Protection also scan for malware?

I see you can retroactively scan files in your SaaS tenant (OneDrive in my case) against DLP policies, but does that also scan for malware infected files?  Have dozens of files getting flagged in our OneDrive tenant as malware, but the problem is the inline CASB malware policies are what is detecting the files.  I would like to run a malware scan on all files retroactively on our tenant and quarantine anything malicious. However when i go to configure a retroactive scan, i only see options to detect DLP violations, not scan for threats/malware. 

680
ppasseri
Netskope Employee
1 year ago
R
Raghav_anandNew Member III
posted in CASB
Reporting dashboard

Hello, Can someone tell me how to get the entire incident dump from API query? Can you provide any sample API query and how to customize it? It is fine if the data is in json. We are looking for advanced reporting and would need additional columns than the one displayed in console hence want to explore what options will be present in query. 

650
ematchey
Netskope Employee
2 years ago
M
marmurrayNew Member III
posted in CASB
MacOS - Netskope SSL Errors

Hello, I am seeking some guidance as to how/where Netskope certificate files are imported onto MacOS. We have had numerous issues with Deloitte practitioners (mainly developers and individuals running code/CLI) where the Netskope cert prevents the application from running due to residing atop the cert chain, and therefore is not trusted by the application service. We have copies of the cert files (ca.deloitte.eu.goskope.com and caadmin.netskope.com) and have set the cert to Always Trust in Keychain; however, SSL errors are still being returned by the system. An example is below, using the brightcove.com service: 2022-09-27 09:10:16.604476-0600 USGA Dev[2698:26211] Task <BB14C893-A867-4C5C-977F-8624C991653B>.<1> finished with error [-1200] Error Domain=NSURLErrorDomain Code=-1200 "An SSL error has occurred and a secure connection to the server cannot be made." UserInfo={NSLocalizedRecoverySuggestion=Would you like to connect to the server anyway?, _kCFStreamErrorDo

19240
M
2 years ago

Badge winners

Show all badges
Terms & ConditionsCookie settings