CASB

We are looking to deploy the Netskope client in our VDI environment. The VDI systems are running Windows 10 are non persistent with FSLogix, so upon logging out of the Virtual machine, the device is removed from the environment and then rebuit, thus a fresh machine that could be randomly assigned to any user. FSLogix allows the clients to maintain data they want persistent in their profile.I am wondering if there is any special configuration that I need to do when deploying the client to these VDI systems on the Golden Image/Master Build? Would this below suffice?******\servershareNetskopeNSClient-90.1.0.805.msi token=12345abcde host=addon-company.goskope.com mode=peruserconfig autoupdate=off /qn******Would there be anything else I need to do on the client? We use the above command to deploy to our physical Windows endpoints successfully.Thank you.

Dear All, We are migrating to Netskope Proxy and was wondering if it is possible to block IE11 traffic to the internet. We will still want to allow any intranet traffic (create rules as business case comes up supporting legacy app in the intranet). I am aware that this can be done by Applocker and AV policies but I was thinking that NetSkope CASB would be the ideal technology so that the configuration is dynamic enough to allow legacy app as required. This initiative is to align with ASCS Essential 8 maturity model. The closest info that I have is https://www.netskope.com/blog/ie-vulnerability Thanks in advance.  

We began updating a test group to client release 90 earlier in the week, and have experienced issues with VPN (Cisco Anyconnect) and launching web apps from Citrix (even on-prem hosted).  Just curious if anyone else has experienced issues with Client R90?

In case you missed it IDC came out with their 2021 MarketScape for Cloud Security Gateways earlier this month.  Cloud Security Gateways is IDC's category for CASB products.   Netskope CASB was recognized as surpassing all vendors in IDC’s criteria for both Strategies and Capabilities.  In the new report, IDC specifically points out Netskope’s ability to handle “advanced use cases,” including “compromised account, data exfiltration, and malicious/accidental insider threat detection.”  If you're interested you can get your copy of the excerpt covering Netskope Get your copy of the IDC report today.

Below is a link to a very simple Netskope tool that will perform a quick check on 17 different checks across 3 security categories: (1) Web & Cloud Categorization (2) Threat Protection and (3) Data Loss Protection.   https://netskopesecuritycheck.com/   A simple online tool to gauge the effectiveness of your initial Netskope security policies.

As we deply Big Sur, we have detected that it breaks WebEx and GITHUB Enterprise on AWS.Does anyone else have any other apps to report? Both of these are not a problem when we disabled the client.Strangely enough, we are not steering either (WebEx is disabled, GITHUB is an internal site), so this is a fundamental interaction problem.  @DaveKerr 

We moved federated domain name to our Netskope tenant SSL bypass instead of the client steering but when we did that it broke the Catalina Mac's getting to VPN. We are now getting a black page. Please see screen shot. Has anyone seen this?

Dear AllI need your kind input if you have experienced similar issue as under:I have installed the netskope client without full connectivity/routing at the backend. The client connects to the tenant only. The NS Client config states <Gateway IP: N/A (Explicit Proxy: 185.x.x.x) > The zscaler proxy PAC configuration is still active and the PROD config. Then purpose of installing the NS Client is to test the deployment and to scope co-existence and prestaging the NS Client.The client was installed on a laptop connecting to the organisation through SIM. The average data usage of that device spiked from 40GB and month to 530GB. Did anyone experienced similar issue at any stage with the NS Client.I am troubleshooting the data usage through the Win10 Data Usage feature.I was also wondering if the data usage can be tracked from the NS Tenant/console?Thanks in advance. 

Hi Everyone, We have a handful of users that are still on v78.  We would like to upgrade everyone's client to v87 by allowing the client to upgrade automatically in the client configuration settings.  If this feature is enabled in the tenant, will it remove the previous version and install / overwrite with the new version automatically or we would have to manually uninstall and manually reinstall ? Thanks,David

Dear AllWe are implementing Netskope and as part of implementation we might have to set an explicit proxy (browser) for the initial phase of  implementation. I am deploying the client and if an explicit proxy setting is required for all the Windows 10 fleet then I can always achieve through a GPO settings. But I was wondering if this settings can be pushed from the tenant. This info looks promising https://docs.netskope.com/en/explicit-proxy-217835.html but I don't have enough understanding to vouch this approach. Any thoughts would be very much appreciated.

Hello,   About 90% of our users are on MacOS BigSur with full admin privileges on their laptop.  With older clients (v81 or below); users can simply go to Network Preferences and Click disconnect to stop Netskope from intercepting 80/443 traffic.  I have tested on client v87 and this issue has been fixed.  But we noticed that users are finding more creative ways to disable Netskope by doing the following in terminal:(1) sudo chmod -x /Applications/Netskope Client.app/(2) Activity Monitor --> Search for Netskope Client --> Force QuitHow do we prevent such actions?Thanks!

Dear All,I am new to Netskope. I am in the process of deploying the Netskope client as a part of migration from zscaler to Netskope. I was wondering what is the best practice to check a successful client installation and connectivity from the Win10 devices without accessing the admin console.I am checking the Netskope Client Configuration screen and nslookup to the netskope server/appliance. Is there any better way to test connectivity and functions as a checklist for successful client install.Thanks in advance. 

Windows: "%ProgramFiles(x86)%NetskopeSTAgent sdiag.exe" -o "%USERPROFILE%DesktopNetskope.zip”   OSX: "/Library/Application Support/Netskope/STAgent/nsdiag" -o ~/Desktop/Netskope.zip

Is anyone else seeing issues with Microsoft API throttling for Netskope forensic and quarantine data using Microsoft Sharepoint.  Where the data is not available in Netskope tenate, due to Microsoft throttling kicking off error codes. If so How did you resolve the issue?  Was moving to Azure Blob the solution? 

How to monitor / enable the restriction for Chrome OS ? 

The Netskope Cloud Confidence Index tool allows gives you a readiness assessment of every application being accesse by your employees, contractors and other 3rd party users.   The CCI is adapted from the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM). factors in more than 50 security, audibility, and business continuity controls.   In many cases, customers want a customized search of (1) applications, (2) CCLS ratings, (3) <your custom tags>, (4) categories or (5) attributes.     HINT: within the CCI toolset of your tenant, you can select 'Advanced Search".   As you begin to type a specific criteria name, the autofill option will activate (see image).   some example advanced searches include:   <apps by name> type  app = Box or app = Dropbox <CCL rating> type ccl = medium <categories> type appcategory = 'Cloud Storage' <CCI attribute> type app-cci-app-tag = San

Tenant specific configuration These configurations are common configuration shared across all the users (as they are under one tenant). Netskope client service loads these common configurations as soon as it starts and updates on these configurations are done on events like policy change, config change (checked periodically). Config Location Netskope-client for Windows stores these configurations in “%PROGRAMDATA%/netskopestagent”.Netskope-client for MacOS stores these configurations in “/Library/Application Support/Netskope/STAgent” Config Files S.No. Config File Purpose Fetching Mandatory Config API Frequency API Timeout 1 nsconfig.json contains various tenant-level configurations When Config version changes (polls for latest config) On-demand config update (from nsdiag or UI) User Login-Event (done to identify if we have config of a higher priority user group) Yes (default is generated) v2/config/org/clientconfig?orgkey=<orgkey>&

Hi everyone   if you still haven't registered for this event, you still have time, it starts in 30 min....   May 26 , 2021 8:00am PDT   If you would like to attend the session please register with the following link https://events.netskope.com/highestimpactcasbtipsbestpract   please feel free to reach out if you have any questions.

Does anybody know how to change the name of a custom Certificate Pinned Application created for traffic steering, is that even possible?

Interested in checking out Netskope's FedRAMP status?   Click HERE.  

Collaboration & Messaging apps like Webex, Zoom, Teams, and Slack can be challenging for any organization to tackle. As these cloud resources are being consumed from remote locations maintaining control of what users can and cannot share has become more challenging. Furthermore, consider apps like QQ, WeChat, and KakaoTalk that use certificate pinning, and you quickly realize that control becomes a privacy concern. This doesn't always have to be the case, however in this battle for control its more important than ever to address privacy first.   Here are a few things to consider: Some applications leverage other Cloud Storage Resources to share content. For instance Cisco Webex Teams uses alternate domains for Cisco Spark Messaging and chat. MS Teams uses OneDrive, Zoom can use Google Drive. Mapping collaboration and messaging apps to Cloud Storage will minimize false negatives and make policy creation and testing much easier. De-sanctioning of cloud apps and understanding wh

The Cloud Confidence Index is a database of over 40,000 applications which have been evaluated based on 30+ objective criteria adapted from Cloud Security Alliance Guidance. These criteria measure and application's enterprise-readiness, taking into consideration an its security, audit-ability, and business continuity.   From time to time, you may feel a need request that an application be re-assessed by our CCI Research Team, or you identify that a NEW application is not on our list.  In those cases, please send your request, including (1) the application name and (2) the reason for the request, to the CCI Research (cci-request@netskope.com).