CASB

I need deploy Netskope Client with a Windows Golden ImageMy support team have a golden image and install Netskope client. Close the Image and deploy this imageBut in Netskope report I an see that appear Duplicated "Unique Device ID"This Duplicated "Unique Device ID" can deleted? having a duplicate GUI for the NEtskope client affects or notWhat is the best method to distribute the netskope agent using a golden image?

I'm looking for a way to block file uploads using Telegram web. As Netskope is unable to detect "Uploads", it is not able to block uploads.  I tried blocking "Downloads" as this was an activity registered, when I tested, it failed.

Hi team, I have a doubt whenever i tried to understand i get stucked and got confused in that.Correct me as per my understanding.The sanctioned application are those who only manages by our organization like o365, Gsuite salesforce who having a Admin privileges.Unsanctioned apps are those who not control by our organization like zippyshare anydesk pinterest facebook whatsapp etc.Also i get confused over managed and unmanaged application is that the managed apps are sanctioned apps and unmanaged are unsanctioned apps.For example Sanctioned apps are those who used by dialy bases on organiztion like some org used Gsuite and chatgpt again gsuite i sanctioned and chatgpt is unmanaged apps but the used both one for mailing and other is for info learning. on the second scenerio same org the unsantioned apps are o365 coz they are using gsuite on org. Please help me with this confusion with user example.

Context: Next Gen APIs and Retro Scans   If you haven't noticed yet Netskope is adding more and more apps to the Next Gen API Platform. One of the greatest advantage it comes with is - Decoupling of your ongoing scan policies from retro scans. New way to do retro scan is to create a Retro Scan Policy Group. Now you can add multiple API-Enabled Protection policies to a single retro scan policy set and scan entire group with click of a button. Definitely a better way to do the retro scans.   Retro scans are now separate from ongoing policies. In the classic version you need to select an existing policy and start Retro Scan for the respective supported SaaS app. This decoupling makes sipping through SkopeIT alerts more effective. You can start retro scans in set of policies instead of individually scanning API-Enabled Protection policies one by one.   Just keep in mind that you need to create that first time API-Enabled Protection policy and add to the next-g

Hello, Can I generate a report containing file movements (eg Google Drive CASB API) and also display the full path of that file? In Netskope IT -> Application Events it only shows the objects (files). It does not show the full file path. Thanks!

Hi All, I would like to initate a discussion on better DLP for Adoble product lines, and I believe many Netskope users here in Technology or design industries may have similar concerns.According to this article, to make sure licensed Adobe fuction correctly, we may need to allow many domains.https://helpx.adobe.com/enterprise/kb/network-endpoints.htmlHowever, a possible data breach may happen through these domain as well if we bypass all the listed domains from steering traffic, since a few are not restricted for enterprised-used.Has anyone successfully configured DLP policies for Adoble solutions?Ideally we would like to find a way to allow these domains for Adobe certification executable only, while still monitor possible file sharing or sensitive design files leakage scenarios.-AW

Currently we are facing an issue where a bunch of Windows 10 Netskope clients attempted to auto update from v94 to v95 based on the setting in the cloud console.  We had a large amount of upgrade failures where the person is then left with no Netskope client installed. We disabled the auto update functionality on our steering config once it started to become a major problem to prevent the rest of our users dealing with this.    We currently also use NPA for managing these machines remotely through SCCM and for access to internal resources and we require the Netskope client to be installed for any access to cloud resources. Essentially every user that this happened to is completely unable to work and fixing the issue after the fact becomes difficult as we were switching to relying on a VPN for remote access to Netskope.    Is anyone else facing this issue?

Dear All,We have recently enabled cloud update from the console for version 99.0.0. with opt in dot upgrade. We have a fleet of 28K device. We are experiencing lot of broken client. As per the STAupdate.txt the client upgrade failed with 1603 exit code, rolled back but was left in a corrupted state.We have to uninstall the client and install the new version manually to resolve the issue. STAUpdate.txt file attached. Logged a support call with the managed service provider for Netskope and hopeful to get a prompt reply and solution. It has become a service desk nightmare. Is this a common issue for all netskope client versions? Any peer comment will be highly appreciated. 

This post is about API Protection (previously known as API Introspection) integration best practice:   Can I integrate multiple instances of the  same SaaS app (e.g. My company's Sharepoint dev and Sharepoint prod) to one Netskope tenant? -Sure you can. And most customers do. There is no problem as long as you are within your license quota. For licensing questions reach out to your Sales team. -Having multiple SaaS apps in one tenant is also not uncommon (e.g. Box, Webex, Zoom, O365 in one Netskope tenant). Again it is just the license you need to purchase for additional SaaS app.   I have more than 2 Netskope tenants but I have only one SaaS app tenant. Can I have the same instance of one SaaS app integrated to multiple Netskope tenants? Caution! Even though the integration may succeed (i.e. the instance grant process turns green on both Netskope tenants) few immediate side effects I would like to alert you about - You are essentially doubling your API usage becaus

What is the difference between App events, page events, and alerts into skope IT?

Hello Everyone,  I am trying to block the upload and send chats for WhatsApp Cloud App. I have created the  cloud app policy for WhatsApp and selected the activity "upload" and set the action "block",when we tried to upload any file it gets blocked but we are not able to block send chats for same it is still allowing.I have also tried by creating "Chat, IM & other Communication" category and selected the activity upload, and set the action "block" but it did not worked as well. Please help on how we can block the send Chats for WhatsApp web. 

Hello Team, We want to block chat activity on Whatsapp web and allow the upload activity. How can we achieve this? 

Microsoft Office 365 Integrations - Privileges and Roles Hello good afternoon Netskope community. A doubt, to make SCIM integration with AzureAD for Users/Groups privisioning, with an Azure-AD user having the Application Administrator Role, he can manage enterprise applications for example SCIM and SSO usage for UI administration. Now I can't find the exact role, privilege and/or permissions or permissions that are required for an account to integrate with Onedrive, with Outlook, with Sharepoint, via API to be able to use API protection It speaks of "Global Administrator", please can you confirm me exactly the granular role that allows an account to perform this type of integration between Netskope and Office 365, I already tried with the same Role Application Administrator and does not allow me. Azure AD built-in roles:https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Thanks to all of you for your time, collaboration and good

Hello, I need to obtain information about the file extension included in the Documents option, within Netskope - Policies - Real time protection - Policy category survey solution -ACTIVITIES & CONSTRAINTS - Activities Upload - Documents.If there is any document with the other options, please also send it. Attached imageThank you

Hello, I am testing the install script of Netskope via command line.  Every time i install the client is disabled, can I enable the client via command line?

Gostaria de verificar se é possível realizar uma configuração no Netskope onde não fique inativo quando o usuário travar a máquina.Porque temos uma política de Acesso Condicional com exceção dos IPs Netskope, mas quando o usuário bloqueia a máquina e depois tenta acessar algum aplicativo assim que loga novamente, ele não pega o IP Netskope imediatamente e gera a mensagem de bloqueio. Somente depois de um tempo após obter o IP, o aplicativo autentica o usuário novamente.

Hi all,  Wanted to get your thoughts on how to best approach something. We have a specific user account that's leverage for internal pen testing. As expected, there are Real-time Protection Policies that fire off alerts for this account's activity when active. We've had a request to see if it's possible to filter this account out of either the policies or the alerts. Is there currently a way to omit a given account from a specific policy or alert (triggering)? 

I would like to create a new steering Config policy that will only have a limited amount of Cloud apps steered by the Netskope Agent so it doesn't affect a Teams work, but provide us a level of DLP coverage. Is there a way to add by category (e.g. Social, Webmail, Cloud Storage, Iaas/PaaS, etc) instead of individual Cloud Apps? I would have just sorted by category in the new steering config policy and deleted cloud apps that way, but sorting on that column is not allowed.

Hello,   New user here.. I have a Mac device that doesn't want to connect to the internet at all unless we disable NetSkope. I noticed a ton of errors in the logs that show this as well as UDP like the one below and well as the Network interface errors. Any help will be much appreciated   stAgentNE p3662 t6691 error nsClientFlow.mm:150 nsClientFLow Flow networkInterface is nil   stAgentNE p3662 t6691 info bypassAppMgrUDP.cpp:210 BypassAppMgr Blocking UDP connection from process: safari,

Hello, We have a user that sets up our systems and they are then get the device assigned to them as the user. Is there a way to reconfigure this as it is now showing him on a lot of devices and dramatically skewing the application events and alerts? Thanks, Ron 

Hello everyone, merry Xmas to all of you 🙂 I would like to be able to know where an item is being used/assigned. e.g. a DLP File Profile, a DLP Entity, a DLP Rule, etc. The only way I found is trying to delete the item. This will show an error message if the item is being used and will show a bunch of items using that item (I think it shows up to 15, if more you won't see them all).This can do the trick if you are totally sure the item is being used somewhere. Otherwise, you take the risk of deleting the item since the confirmation is displayed BEFORE NS checks the item is being used. Performing the usage check BEFORE asking for confirmation would prevent to accidentally delete an item if it is not being used. I hope you understand what I try to explain. Of course, having a "USAGE" button next to every item to display the information would be the best. In fact, this feature would be useful for the whole solution, not only DLP. Is this feature considered

I see you can retroactively scan files in your SaaS tenant (OneDrive in my case) against DLP policies, but does that also scan for malware infected files?  Have dozens of files getting flagged in our OneDrive tenant as malware, but the problem is the inline CASB malware policies are what is detecting the files.  I would like to run a malware scan on all files retroactively on our tenant and quarantine anything malicious. However when i go to configure a retroactive scan, i only see options to detect DLP violations, not scan for threats/malware. 

Hello, Can someone tell me how to get the entire incident dump from API query? Can you provide any sample API query and how to customize it? It is fine if the data is in json. We are looking for advanced reporting and would need additional columns than the one displayed in console hence want to explore what options will be present in query. 

Hello, I am seeking some guidance as to how/where Netskope certificate files are imported onto MacOS. We have had numerous issues with Deloitte practitioners (mainly developers and individuals running code/CLI) where the Netskope cert prevents the application from running due to residing atop the cert chain, and therefore is not trusted by the application service. We have copies of the cert files (ca.deloitte.eu.goskope.com and caadmin.netskope.com) and have set the cert to Always Trust in Keychain; however, SSL errors are still being returned by the system. An example is below, using the brightcove.com service: 2022-09-27 09:10:16.604476-0600 USGA Dev[2698:26211] Task <BB14C893-A867-4C5C-977F-8624C991653B>.<1> finished with error [-1200] Error Domain=NSURLErrorDomain Code=-1200 "An SSL error has occurred and a secure connection to the server cannot be made." UserInfo={NSLocalizedRecoverySuggestion=Would you like to connect to the server anyway?, _kCFStreamErrorDo

Hello , Is any one seeing performance degradation in their  internet access when  netskope  is enabled ? ( netskope client version 90.x) I have opened case now as so many users reported to gather today, vs few early this week. RP