Skip to main content
  • EN

CASB

This is a discussion board on Netskope’s Cloud Access Security Broker (CASB) solution that enables rapid identification and management of cloud application usage, regardless of whether they are managed or unmanaged. Prevents sensitive data from being exfiltrated from your environment.

  • 141 Topics
  • 367 Replies
141 Topics
E
ericwagnerNew Member III
posted in CASB
Real-time protection

I have an instance where I have a block in place for an application but I do not want to receive alerts for it. Is there a way to keep the block but disable the alert?

2900
qyost
L
LeahxNew Member
posted in CASB
Unsanctioned Apps Usage

Hi Community, I'm trying to understand how to allow certain users on a policy that has an Unsanctioned App. Basically, I don't want the whole organization to have access to it but only authorized users. Therefore, is there a way to allow this? I've tried to but I automatically get blocked even if there's a policy for the allowed users placed above the "Block Users to ___". Any suggestions would be great.

2702
qyost
N
ndudaExplorer
posted in CASB
Google Badge Label: Control who documents are shared with

We can't be the only ones out there fighting these limitations with Google and Netskope.Google has Badge Labels (like most collaboration services) but they are pretty much focused around doing DLP inspection. Essentially, assign a label of "Confidential" and specific DLP detections are done (i.e. Credit Card). What we would love to do is use labels as a way to enforce access control. With the new R107 release of Google Badge Label support, there isn't really any meaningful actions that can be used (that Google doesn't natively do already). We would love to detect if a label is detected to enforce access control to that document. For example, if we assign a label called "Important People Only" (which is made up of a handful of internal people and some external people) and someone assigned the label to a document Netskope will perform an action to update the people it is shared with to the people in the group called "Important People Only". Currently, the only actions are to re

2050
N
K
khernandezNew Member
posted in CASB
Microsoft Teams VoIP Traffic Bypass

I know it is not recommended to steer VoIP traffic to Netskope because it adds additional hops to reach the destination causing possible performance/audio drops.I tried bypassing MS Teams in the past in our environment and experienced slower speeds and conditional access issues. What would be the best way to bypass VoIP traffic on ports 3478-3481 to the authentication URL teams.microsoft.com with conditional access in mind?

8251
S
Netskope Employee
N
ndudaExplorer
asked in CASB
Google Drive API Restrictions based on Label

Has anyone been able to look for a specific google drive label (metadata) with an API policy using a DLP profile and then restrict/change access to the file? I feel like this worked a long time ago but we can't seem to get it going now.Essentially, when a user applies a specific label on a Google document (corporate google drive configured with API Introspection) we want to detect that label when the document is shared externally. The action will be to remove the external share.

2562
N
R
Netskope Partner
ramshiv98Netskope Partner
posted in CASB
User Login Failed - O365 Native apps on ipad

Hello folks, I hope you're all doing well with your schedules!I have one concern/issue with the o365 native iPad app.What is occurring here is that we have installed the Netskope client on the user's BYOD and the user is unable to login into their 0365 native apps on their iPad. When I checked Skope, it shows User Login FailedAnyone who has dealt with similar challenges or has suggestions about how to address them? Thank you in advance.

240
R
Netskope Partner
M
manishhtmediaNew Member
posted in CASB
Removal of proxy policies

Hi,We are facing some issues while we remove the user from the proxy group due to some exceptions. The policies applied on user is not getting reverted back.All restrictions are still getting applied. As a workaround we have to uninstall the client software and reinstall the same. Is there a better way to do this.

962
S
Netskope Employee
D
Dan_ZANew Member
posted in CASB
Linux Installation in IDP mode

I am currently adding the Netskope agent install to our build script for Ubuntu 22.04When installing via the normal method detailed here: Netskope Client For Linux - Netskope Knowledge PortalThe agent installs fine but I am unable to get the agent to talk to our tenant, I enter our tenant name as both the name or the ns-auth version but this doesn't work I get the following error:Unable to verify Organization name Please verify and try again client - ERR_ORGID_NOT_FOUNDWhen trying to install the agent via the NSClient.run -i | --idp line the script fails returning " --idp command not found"I am not the best with linux by any means so would appreciate any insight into getting this to work in IDP mode so we can have staff members using Ubuntu just login with their SAML credentials instead of the tenant needing to be linked.Thanks

11934
D
C
CuriousExplorer II
asked in CASB
Reporting on unsanctioned app usage

Hi Everyone,Am attempting to create a report of all unsanctioned application usage where corporate email addresses have been used, is this possible with standard reporting?Thank you

1302
C
W
wdeguaraNew Member III
posted in CASB
How often is the CCI reassessed for web sites ?

I've recently seen some cases of web sites being blocked automatically due to low CCI which suddenly become allowed days (or even hours) later.Today's example was https://todoist.com/ which was being blocked due to low CCI in the morning, and by the afternoon was allowed.How often is the CCI reassessed for web sites ?

910
S
Netskope Employee
C
CuriousExplorer II
asked in CASB
Deny corporate email usage with unsanctioned apps

Hi Netskopers, is it possible to deny employees logging into unsanctioned apps using a corporate email account?  Can see it is possible to permit or deny other activities such as upload/download. Would like permit usage of unsanctioned apps using personal email addresses/accounts but not with corporate email addresses/accounts.Thank you  

4063
C
Takashi_Ohmoto
Netskope Partner
Takashi_OhmotoNetskope Partner
posted in CASB
Does Compromised Credentials include credentials traded on the dark web?

What are the sources of the "Compromised Credentials" information?Does "Compromised Credentials" include credentials traded on the dark web?

2150
S
Netskope Employee
J
josruizNew Member III
posted in CASB
Duplicated Netskope Client "Unique Device ID" when deploy Windows Images by Golden Image

I need deploy Netskope Client with a Windows Golden ImageMy support team have a golden image and install Netskope client. Close the Image and deploy this imageBut in Netskope report I an see that appear Duplicated "Unique Device ID"This Duplicated "Unique Device ID" can deleted? having a duplicate GUI for the NEtskope client affects or notWhat is the best method to distribute the netskope agent using a golden image?

2871
S
Netskope Employee
A
akaridiNew Member
posted in CASB
Ability to block file uploads to Telegram web

I'm looking for a way to block file uploads using Telegram web. As Netskope is unable to detect "Uploads", it is not able to block uploads.  I tried blocking "Downloads" as this was an activity registered, when I tested, it failed.

3882
aramachandran
Netskope Employee
farhan
Netskope Partner
farhanNetskope Partner
posted in CASB
Better understanding of Sanctioned and unsanctioned

Hi team, I have a doubt whenever i tried to understand i get stucked and got confused in that.Correct me as per my understanding.The sanctioned application are those who only manages by our organization like o365, Gsuite salesforce who having a Admin privileges.Unsanctioned apps are those who not control by our organization like zippyshare anydesk pinterest facebook whatsapp etc.Also i get confused over managed and unmanaged application is that the managed apps are sanctioned apps and unmanaged are unsanctioned apps.For example Sanctioned apps are those who used by dialy bases on organiztion like some org used Gsuite and chatgpt again gsuite i sanctioned and chatgpt is unmanaged apps but the used both one for mailing and other is for info learning. on the second scenerio same org the unsantioned apps are o365 coz they are using gsuite on org. Please help me with this confusion with user example.

28344
farhan
Netskope Partner
M
Netskope Employee
MM_NSNetskope Employee
posted in CASB
Next Gen APIs and a better way of doing Retro Scans

Context: Next Gen APIs and Retro Scans   If you haven't noticed yet Netskope is adding more and more apps to the Next Gen API Platform. One of the greatest advantage it comes with is - Decoupling of your ongoing scan policies from retro scans. New way to do retro scan is to create a Retro Scan Policy Group. Now you can add multiple API-Enabled Protection policies to a single retro scan policy set and scan entire group with click of a button. Definitely a better way to do the retro scans.   Retro scans are now separate from ongoing policies. In the classic version you need to select an existing policy and start Retro Scan for the respective supported SaaS app. This decoupling makes sipping through SkopeIT alerts more effective. You can start retro scans in set of policies instead of individually scanning API-Enabled Protection policies one by one.   Just keep in mind that you need to create that first time API-Enabled Protection policy and add to the next-g

570
M
Netskope Employee
claudiochaves
Netskope Partner
claudiochavesNetskope Partner
posted in CASB
File Moves Report

Hello, Can I generate a report containing file movements (eg Google Drive CASB API) and also display the full path of that file? In Netskope IT -> Application Events it only shows the objects (files). It does not show the full file path. Thanks!

973
msouza
Netskope Employee
AllenWu
Netskope Partner
AllenWuNetskope Partner
posted in CASB
Adobe App and Service Licensing bypass

Hi All, I would like to initate a discussion on better DLP for Adoble product lines, and I believe many Netskope users here in Technology or design industries may have similar concerns.According to this article, to make sure licensed Adobe fuction correctly, we may need to allow many domains.https://helpx.adobe.com/enterprise/kb/network-endpoints.htmlHowever, a possible data breach may happen through these domain as well if we bypass all the listed domains from steering traffic, since a few are not restricted for enterprised-used.Has anyone successfully configured DLP policies for Adoble solutions?Ideally we would like to find a way to allow these domains for Adobe certification executable only, while still monitor possible file sharing or sensitive design files leakage scenarios.-AW

2951
A
Netskope Partner
C
chrisisinclairNew Member III
posted in CASB
Netskope Client Fails to AutoUpdate to V95

Currently we are facing an issue where a bunch of Windows 10 Netskope clients attempted to auto update from v94 to v95 based on the setting in the cloud console.  We had a large amount of upgrade failures where the person is then left with no Netskope client installed. We disabled the auto update functionality on our steering config once it started to become a major problem to prevent the rest of our users dealing with this.    We currently also use NPA for managing these machines remotely through SCCM and for access to internal resources and we require the Netskope client to be installed for any access to cloud resources. Essentially every user that this happened to is completely unable to work and fixing the issue after the fact becomes difficult as we were switching to relying on a VPN for remote access to Netskope.    Is anyone else facing this issue?

80910
B
B
bongoozyNew Member III
posted in CASB
Netskope client upgrade to v99 failing with 1603 error in STAUpdate.txt

Dear All,We have recently enabled cloud update from the console for version 99.0.0. with opt in dot upgrade. We have a fleet of 28K device. We are experiencing lot of broken client. As per the STAupdate.txt the client upgrade failed with 1603 exit code, rolled back but was left in a corrupted state.We have to uninstall the client and install the new version manually to resolve the issue. STAUpdate.txt file attached. Logged a support call with the managed service provider for Netskope and hopeful to get a prompt reply and solution. It has become a service desk nightmare. Is this a common issue for all netskope client versions? Any peer comment will be highly appreciated. 

3430
B
M
Netskope Employee
MM_NSNetskope Employee
posted in CASB
API Protection Integration. Many-to-One?- Yes. One-to-Many? Caution!

This post is about API Protection (previously known as API Introspection) integration best practice:   Can I integrate multiple instances of the  same SaaS app (e.g. My company's Sharepoint dev and Sharepoint prod) to one Netskope tenant? -Sure you can. And most customers do. There is no problem as long as you are within your license quota. For licensing questions reach out to your Sales team. -Having multiple SaaS apps in one tenant is also not uncommon (e.g. Box, Webex, Zoom, O365 in one Netskope tenant). Again it is just the license you need to purchase for additional SaaS app.   I have more than 2 Netskope tenants but I have only one SaaS app tenant. Can I have the same instance of one SaaS app integrated to multiple Netskope tenants? Caution! Even though the integration may succeed (i.e. the instance grant process turns green on both Netskope tenants) few immediate side effects I would like to alert you about - You are essentially doubling your API usage becaus

510
M
Netskope Employee
A
Ankitdongre1New Member III
asked in CASB
Difference between App events, page events, and alerts in skope IT?

What is the difference between App events, page events, and alerts into skope IT?

7221
W
A
Alam1New Member III
asked in CASB
Wants to block send Chats message/Text for WhatsApp Cloud App

Hello Everyone,  I am trying to block the upload and send chats for WhatsApp Cloud App. I have created the  cloud app policy for WhatsApp and selected the activity "upload" and set the action "block",when we tried to upload any file it gets blocked but we are not able to block send chats for same it is still allowing.I have also tried by creating "Chat, IM & other Communication" category and selected the activity upload, and set the action "block" but it did not worked as well. Please help on how we can block the send Chats for WhatsApp web. 

7007
qyost
S
Netskope Partner
Sumeet666Netskope Partner
posted in CASB
Whatsapp Web activity control

Hello Team, We want to block chat activity on Whatsapp web and allow the upload activity. How can we achieve this? 

1541
S
Netskope Employee
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
posted in CASB
Microsoft Office 365 Integrations - Privileges and Roles

Microsoft Office 365 Integrations - Privileges and Roles Hello good afternoon Netskope community. A doubt, to make SCIM integration with AzureAD for Users/Groups privisioning, with an Azure-AD user having the Application Administrator Role, he can manage enterprise applications for example SCIM and SSO usage for UI administration. Now I can't find the exact role, privilege and/or permissions or permissions that are required for an account to integrate with Onedrive, with Outlook, with Sharepoint, via API to be able to use API protection It speaks of "Global Administrator", please can you confirm me exactly the granular role that allows an account to perform this type of integration between Netskope and Office 365, I already tried with the same Role Application Administrator and does not allow me. Azure AD built-in roles:https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Thanks to all of you for your time, collaboration and good

1333
S
Netskope Employee

Badge Winners

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings