CASB

Hello, Wondering if anyone has run into this before. I am testing a per user install and i am finding that the steering configuration is sticking between users. So if one user has steeringconfig1 and they logout and the next user has steeringconfig2, the user changes on the client, the client configuration changes, but the steering configuration does not. Has anyone else seen this prior? Nate

In case you didn't see the blog article published on May 10, here's some information on the new applications Netskope has added support for in our CASB API product. We started rolling out support for these new applications at the end of April: Workday Yammer Citrix ShareFile Okta With the addition of these four new applications, Netskope now supports a total of 23 applications in our CASB API product. If you're not familiar with, or not using our CASB API product (and only using CASB Inline as part of NG-SWG and/or Cloud Inline), there are significant additional benefits that an API based product delivers, both standalone and in conjunction with an inline solution. If you have only an inline deployment for CASB, or you’re just starting to look at CASB solutions, you may be wondering why you’d want or need a CASB API deployment. With API, CASB takes advantage of existing APIs in SaaS and IaaS applications to provide full granular context on data exposure and controls. Becaus

Hi Team, i have a question: during installation at the customer, it’s possible to convert the casbi license for dropbox to gmail license and maintain the same number of user?   Thanks a lot, A.

Using JAMF to deploy Netskope Client v93.0.1.944 to target Macs (10.14.6 through 12.3.1).   Installation is successful, but on Big Sur and higher, it can take up to 10 minutes for the client to automatically enable and download its configuration updates. If the Update link is clicked, the client downloads updates and enables itself.   If I run "/Library/Application Support/Netskope/STAgent/nsdiag -u" from Terminal, the client downloads updates and enables itself.   However, if I run that as a Execute Command or as an After script in the policy (or separately), I get the following message: "Failed to download configuration updates."   Any suggestions would be appreciated... thanks!

Hello Netskope community,    Last week I received an alert that malware was discovered by malware on a host. I reached out to owner of the host and asked him to remove the malware. The owner of the host removed confirmation however netskope portal is still showing that malware. How do I verify that the malware is removed and how does Netskope verify the malware is removed?   Thanks  

Hii community,   What is the incident creation criteria of an alert in Netskope?, what would be the process that will create an alert?   Thanks

Hii community,   I have noticed that in netskope platform, we are not able to see incidents but alerts so i had a question that "How do DLP incidents get converted into Netskope Alerts?".   Looking forward to answer. Thanks

We are looking to deploy the Netskope client in our VDI environment. The VDI systems are running Windows 10 are non persistent with FSLogix, so upon logging out of the Virtual machine, the device is removed from the environment and then rebuit, thus a fresh machine that could be randomly assigned to any user. FSLogix allows the clients to maintain data they want persistent in their profile.I am wondering if there is any special configuration that I need to do when deploying the client to these VDI systems on the Golden Image/Master Build? Would this below suffice?******\servershareNetskopeNSClient-90.1.0.805.msi token=12345abcde host=addon-company.goskope.com mode=peruserconfig autoupdate=off /qn******Would there be anything else I need to do on the client? We use the above command to deploy to our physical Windows endpoints successfully.Thank you.

Dear All, We are migrating to Netskope Proxy and was wondering if it is possible to block IE11 traffic to the internet. We will still want to allow any intranet traffic (create rules as business case comes up supporting legacy app in the intranet). I am aware that this can be done by Applocker and AV policies but I was thinking that NetSkope CASB would be the ideal technology so that the configuration is dynamic enough to allow legacy app as required. This initiative is to align with ASCS Essential 8 maturity model. The closest info that I have is https://www.netskope.com/blog/ie-vulnerability Thanks in advance.  

We began updating a test group to client release 90 earlier in the week, and have experienced issues with VPN (Cisco Anyconnect) and launching web apps from Citrix (even on-prem hosted).  Just curious if anyone else has experienced issues with Client R90?

In case you missed it IDC came out with their 2021 MarketScape for Cloud Security Gateways earlier this month.  Cloud Security Gateways is IDC's category for CASB products.   Netskope CASB was recognized as surpassing all vendors in IDC’s criteria for both Strategies and Capabilities.  In the new report, IDC specifically points out Netskope’s ability to handle “advanced use cases,” including “compromised account, data exfiltration, and malicious/accidental insider threat detection.”  If you're interested you can get your copy of the excerpt covering Netskope Get your copy of the IDC report today.

Below is a link to a very simple Netskope tool that will perform a quick check on 17 different checks across 3 security categories: (1) Web & Cloud Categorization (2) Threat Protection and (3) Data Loss Protection.   https://netskopesecuritycheck.com/   A simple online tool to gauge the effectiveness of your initial Netskope security policies.

As we deply Big Sur, we have detected that it breaks WebEx and GITHUB Enterprise on AWS.Does anyone else have any other apps to report? Both of these are not a problem when we disabled the client.Strangely enough, we are not steering either (WebEx is disabled, GITHUB is an internal site), so this is a fundamental interaction problem.  @DaveKerr 

We moved federated domain name to our Netskope tenant SSL bypass instead of the client steering but when we did that it broke the Catalina Mac's getting to VPN. We are now getting a black page. Please see screen shot. Has anyone seen this?

Dear AllI need your kind input if you have experienced similar issue as under:I have installed the netskope client without full connectivity/routing at the backend. The client connects to the tenant only. The NS Client config states <Gateway IP: N/A (Explicit Proxy: 185.x.x.x) > The zscaler proxy PAC configuration is still active and the PROD config. Then purpose of installing the NS Client is to test the deployment and to scope co-existence and prestaging the NS Client.The client was installed on a laptop connecting to the organisation through SIM. The average data usage of that device spiked from 40GB and month to 530GB. Did anyone experienced similar issue at any stage with the NS Client.I am troubleshooting the data usage through the Win10 Data Usage feature.I was also wondering if the data usage can be tracked from the NS Tenant/console?Thanks in advance. 

Hi Everyone, We have a handful of users that are still on v78.  We would like to upgrade everyone's client to v87 by allowing the client to upgrade automatically in the client configuration settings.  If this feature is enabled in the tenant, will it remove the previous version and install / overwrite with the new version automatically or we would have to manually uninstall and manually reinstall ? Thanks,David

Dear AllWe are implementing Netskope and as part of implementation we might have to set an explicit proxy (browser) for the initial phase of  implementation. I am deploying the client and if an explicit proxy setting is required for all the Windows 10 fleet then I can always achieve through a GPO settings. But I was wondering if this settings can be pushed from the tenant. This info looks promising https://docs.netskope.com/en/explicit-proxy-217835.html but I don't have enough understanding to vouch this approach. Any thoughts would be very much appreciated.

Hello,   About 90% of our users are on MacOS BigSur with full admin privileges on their laptop.  With older clients (v81 or below); users can simply go to Network Preferences and Click disconnect to stop Netskope from intercepting 80/443 traffic.  I have tested on client v87 and this issue has been fixed.  But we noticed that users are finding more creative ways to disable Netskope by doing the following in terminal:(1) sudo chmod -x /Applications/Netskope Client.app/(2) Activity Monitor --> Search for Netskope Client --> Force QuitHow do we prevent such actions?Thanks!

Dear All,I am new to Netskope. I am in the process of deploying the Netskope client as a part of migration from zscaler to Netskope. I was wondering what is the best practice to check a successful client installation and connectivity from the Win10 devices without accessing the admin console.I am checking the Netskope Client Configuration screen and nslookup to the netskope server/appliance. Is there any better way to test connectivity and functions as a checklist for successful client install.Thanks in advance. 

Windows: "%ProgramFiles(x86)%NetskopeSTAgent sdiag.exe" -o "%USERPROFILE%DesktopNetskope.zip”   OSX: "/Library/Application Support/Netskope/STAgent/nsdiag" -o ~/Desktop/Netskope.zip

Is anyone else seeing issues with Microsoft API throttling for Netskope forensic and quarantine data using Microsoft Sharepoint.  Where the data is not available in Netskope tenate, due to Microsoft throttling kicking off error codes. If so How did you resolve the issue?  Was moving to Azure Blob the solution? 

How to monitor / enable the restriction for Chrome OS ? 

The Netskope Cloud Confidence Index tool allows gives you a readiness assessment of every application being accesse by your employees, contractors and other 3rd party users.   The CCI is adapted from the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM). factors in more than 50 security, audibility, and business continuity controls.   In many cases, customers want a customized search of (1) applications, (2) CCLS ratings, (3) <your custom tags>, (4) categories or (5) attributes.     HINT: within the CCI toolset of your tenant, you can select 'Advanced Search".   As you begin to type a specific criteria name, the autofill option will activate (see image).   some example advanced searches include:   <apps by name> type  app = Box or app = Dropbox <CCL rating> type ccl = medium <categories> type appcategory = 'Cloud Storage' <CCI attribute> type app-cci-app-tag = San

Tenant specific configuration These configurations are common configuration shared across all the users (as they are under one tenant). Netskope client service loads these common configurations as soon as it starts and updates on these configurations are done on events like policy change, config change (checked periodically). Config Location Netskope-client for Windows stores these configurations in “%PROGRAMDATA%/netskopestagent”.Netskope-client for MacOS stores these configurations in “/Library/Application Support/Netskope/STAgent” Config Files S.No. Config File Purpose Fetching Mandatory Config API Frequency API Timeout 1 nsconfig.json contains various tenant-level configurations When Config version changes (polls for latest config) On-demand config update (from nsdiag or UI) User Login-Event (done to identify if we have config of a higher priority user group) Yes (default is generated) v2/config/org/clientconfig?orgkey=<orgkey>&

Hi everyone   if you still haven't registered for this event, you still have time, it starts in 30 min....   May 26 , 2021 8:00am PDT   If you would like to attend the session please register with the following link https://events.netskope.com/highestimpactcasbtipsbestpract   please feel free to reach out if you have any questions.