Community Feedback

Hola comunidad,Estoy revisando la implementación de SCIM User Provisioning con RBACv3 en Netskope, específicamente para un entorno donde Google Workspace Al revisar la documentación disponible de Netskope, encontré guías específicas para el aprovisionamiento mediante SCIM con:User Provisioning with Okta https://docs.netskope.com/en/integration-with-okta-for-user-provisioning User Provisioning with Microsoft Entra ID https://docs.netskope.com/en/integration-with-entra-id-for-user-provisioningEn ambos escenarios se documenta la integración para realizar el aprovisionamiento de usuarios y grupos hacia Netskope mediante SCIM.Para Google Workspace encontré las siguientes referencias:Netskope Admin SSO – Google IDP Integration, orientada al acceso administrativo al tenant de Netskope mediante SSO/SAML:   Netskope User Provisioning with Secure LDAP to Google Cloud Identity, que documenta el aprovisionamiento utilizando Secure LDAP:   Sin embargo, mi duda es específicamente sobre una integrac

Hello Everyone,Hope All are doing well.I have some query regarding SAML-Forward Proxy Secure Enrollment..We’ve successfully completed the integration of Netskope Forward Proxy with Microsoft Entra ID (SAML), and everything is functioning as expected.Configuration Summary Microsoft Entra ID Created Enterprise Application Completed SCIM Provisioning Verified user synchronization on Netskope Configured Single Sign-On (SAML) for Netskope Forward Proxy Netskope Configured SAML Forward Proxy and exchanged certificates successfully Tested the configuration using the SAML Forward Proxy test button — validation completed successfully ✅  Client Enrollment BehaviorAfter deploying the Netskope Client agent, users are prompted to authenticate using Microsoft Entra ID credentials via SAML. During the enrollment process, however, the configuration download fails, displaying an Enrollment Error message.To isolate the issue, we temporarily disabled Secure Enrollment under

In order to migrate from URL list to Destination profiles, I need the Destinations API to support deduping values the way the current URL API does when you append values to a list. If I call the URL endpoint: /api/v2/policy/urllist/{id}/append And add the same site, example ....www.bad.com. The api automatically dupes the entry and only adds it if it doesn't exist. This is helpful because some of our URL list are automated via threat intel feeds. While we try to dedup the IOCs before updating the URL list, some do get through, but the URL api handles it. But with destination profiles, if you call /api/v2/profiles/destinations{id}/values and your payload is to append. Example:{ "details": false, "interactive": true, "operation": { "op": "append", "values": [ "www.bad.com" ] }} It doesn't dedup and just continues to add to the list.So, may I missing something? Is there some query parameter or destination profile api endpoint I should be calling to dedup? Or do I need to

Hi Team,We are currently facing an issue on 2–3 devices where the installation fails with the error:“Installation failed to download the configuration. Check your internet connection and try again.”Although the affected users have an active internet connection and no VPN is connected, the issue still persists. All configurations appear to be correct from our end.I have attached a screenshot of the error for reference.Has anyone encountered this issue before or have any suggestions on how to resolve it?  

Hi all,The Mission: The Netskope User Research team is looking for hands-on Insider Threat Analysts for a deep-dive study. 🎯 WHAT WE WANT TO LEARN: How you detect, investigate, and respond to internal risksWhat data you collect Which tools are used Detailed Workflows on investigation & response👥 WHO SHOULD APPLY? Active Netskope Customers: You use Netskope as part of your security stack. Practitioners: You spend a significant portion of your week managing internal risks or conducting investigations. 💻 SESSION DETAILS: 60 min 1:1 via Zoom 🎁 RECOGNITION: $50 gift cardSIGN UP VIA THIS LINK: https://forms.gle/WL6vsZ8KRPt7wChB8

We had integrated Netskope and Azure/O365 services and we are facing issues sometimes as We add the user to the security group which is added to an NPA but at the user end it takes time longer than usual and sometimes it required manual entry to share/extend access Need more information on it

現在、Intuneにてシングルユーザーモードで展開しておりますが、マルチユーザーモードでの配布を考えております。どのように展開すればいいのでしょうか。

 Collaboration Opportunity: Help Us Design the Next Generation of Data VisibilityThe Netskope UX & Product Team is kicking off a strategic study to fundamentally improve how data security professionals gain visibility into their data landscape and manage data risk across the entire enterprise. Our goal is to co-create this new experience with our users. We are looking for:Role: Data Protection / Security team members or similar operational roles who have a need for visibility into their data landscape Company: All sizes, regions, and industries are welcomeSession Details:Format: Remote, 1-hour collaborative workshop over Zoom. Reward: Each participant will receive a $50 gift card as a thank you for their valuable time and expertise.Ready to influence the future of data protection at Netskope? Sign up here: https://forms.gle/aizQVGaWL6yCanzX9

Hello,The company I work for has been using Netskope’s API in an effort to automate the management of “compromised credentials” incidents. I would like to be able to auto-acknowledge some lower gravity breaches. However, I notice that the V2 REST API does not provide any way to do such a thing.This feature existed in the V1 API, but since it is soon-to-be deprecated, it is not a suitable solution. This V1 endpoint also seems to be lacking some finer capabilities, since the only acceptable variable is “user”, so I assume it would acknowledge all credentials incidents of a single user instead of one specific incident.Therefore, an endpoint that allows to acknowledge a specific compromised credentials incident from its “incident_id” would be better suited. Feel free to react in the comments if you want more information about this issue, I wish everyone a good weekend

I raised a NS Support ticket, but it’s not currently possible at this moment in time - so raising a Feature Request/Idea instead. Current workaround is SAML + JIT to create users > custom built Okta Workflows using a full Tenant Admin scoped API token to disable Admins in Netskope. Update the Netskope Admin app in Okta (https://www.okta.com/integrations/netskope-admin-console/) to support Admin SCIM:to support all CRUD actions allow group assignment of NetSkope rolesWith that - allow the creation of Role/SvcAcc/API token scoped to only Admin Manage permissions - for least privileged access - like what is possible for NS End User Enrolment (https://docs.netskope.com/en/scim-user-provisioning-with-rbacv3)

Hello, We want to report that the new https://speedtest.goskope.com/ is not usable on mobile (tested on safari) : first webpage open correctly but second page (run speedtest) is only partially visible and it is not possible to unzoom. It result that we can’t start the speedtest at all on mobile devices.We only tested on safari, maybe other community members can verify how it works on other browser.Can you please improve the website to be fully mobile-friendly ?  

I found two machines in our tenant that were still on version 114 and 115.  I have manually uninstalled from the Control Panel and gone through the Registry to remove Netskope entries.  I’ve also tried using the Uninstall script but nothing is working.  I’ve used the verbose logging switch at the end of the msi install script, which did show error codes of 1603 and I’ve seen 2203, but those look like they’re pointing to Windows Installer issues.  That has indicated that either the older version (or orphaned files) are still present or there are permission issues.  I’ve also found the Windows Installer service stopped.  I still cannot get the msi install to work even after starting the Installer service.  The System profile has full control on the folder the msi is located in.  I’ve created a ticket through the Support Portal but nothing is working.  We even tried disabling our AV software.  I don’t want to have to re-image these two devices due to the user’s schedules and amount of tra

Team,I have noticed the standard report section of Netskope is very less use or not been used very limited number of reports in std report. all we need to do the query and i check the reports use cases. The TSM team focused only the Advance analytics. If you want to compete with your competitor like zscalar and palo alto they are having very upper hand into it which amaze the CISO and when i might get lower rank in customer POC request the Netskope team or TSM to create more use cases specific to std reports only or do some changes on that if their is already a usecases docs please guide me.

Hello Team. The customer tells me that to install Netskope on Manjaro, they are following these steps:The partial solution our developers found to make Netskope work with Linux Manjaro is as follows:1. The following packages must be installed (using pacman):- linux612 6.12.34-1- linux612-headers 6.12.34-12.  Each time the machine is turned on, go to the Netskope icon in the toolbar and apply “Updates” in the settings.This way, Netskope works normally on Manjaro.What is your opinion on this? Best regards :)

Hello Team. The customer tells me that to install Netskope on Manjaro, they are following these steps:The partial solution our developers found to make Netskope work with Linux Manjaro is as follows:1. The following packages must be installed (using pacman):- linux612 6.12.34-1- linux612-headers 6.12.34-12.  Each time the machine is turned on, go to the Netskope icon in the toolbar and apply “Updates” in the settings.This way, Netskope works normally on Manjaro.What is your opinion on this? Best regards :)

Hello team,I have two questions about using the Netskope Directory Importer with our current environment:Multi‑Domain SynchronizationWe are migrating from the domain ejemplo.co to ejemplo.com. Since we manage users and groups in Google Workspace (and do not use Active Directory), I’d like to confirm: Can the Directory Importer sync both domains simultaneously (ejemplo.co and ejemplo.com)? If that’s not supported, what is the recommended best practice?Note: Directory Importer supports only one base DN per LDAP configuration, so typically one importer is required per domain community.netskope.com+14community.netskope.com+14community.netskope.com+14community.netskope.com. Importing Groups with External UsersWe currently maintain a “Providers” group in Google Workspace that includes users from external domains, such as user@apple.com. Specifically: Is it possible to import such groups—including external users—using Directory Importer? What configuration steps or restrictions should we

Hi,I have a customer environment with only a few end users, and there is no Active Directory (AD) or LDAP server managing the users, nor is there an IdP or any SAML environment in place.I have suggested installing the Netskope client via email invitation. However, it seems that there is a single computer shared by three different users, each with their own Windows session and email address.If I send three separate email invitations to each end user, will they be able to install the Netskope client on their respective Windows sessions, with the appropriate user settings?Thanks!

Hi Netskope community,We recently have been creating support cases, but I notice we don't get an email containing an online form to enter feedback about how the case was handled.Is there a way to submit feedback via online form or email? 

Can we restrict access to Google Workspace (admin.google.com) so that only systems with the Netskope agent installed can access it? In other words, can we ensure that only devices with the Netskope agent can log in to the Google Admin Console?

📣 CALLING ALL INCIDENT RESPONDERS! 📣We want to hear from you! We're conducting a study to better understand how DLP incidents are handled and identify ways to improve the experience. Your insights will help shape future enhancements to make DLP incident management more effective and user-friendly.🎯 WHAT WE’RE LOOKING TO LEARN:How you handle and prioritize DLP incidents within your organization. Challenges in investigation, triage, and response workflows. Opportunities to improve efficiency and streamline incident management across tools.👥 WHO CAN PARTICIPATE?If your responsibilities include handling Netskope DLP incidents—whether through management, investigation, or remediation—we’d love to hear from you!💻 SESSION DETAILS:Format: Virtual session over Zoom Duration: ~60 minutes🎁 THANK YOU GIFT:As a token of our appreciation, participants will receive a $50 gift card. If interested & fit the criteria, please sign up with this interest form!

HiI did bookmark a couple of weeks ago the links from a community posts named “Simplifying NPA: End-to-End workflow”.These were 3 posts (part 1 to part 3) with a really good and detalied explanation of how the NPA  service works, and when I’ve tried to check them again I get a 404 page not found message indicating that “the page you are looking for might have been removed, is temporarily unavailable, or the name has been changed.”i have tried to look for these wonderfull posts via tags, name and so on, but it seems that they do not exist anymore, I have also tried to ask this same thing mailing to community@netskope.com as the 404 webpage suggest, but it seems that this account doesn’t allow to receive emails…So I hacet thought to just ask here if anybody remembers these posts or know what happened to them or how to access them again…The bookmarked links I have are the following:Simplifying NPA: End-to-End workflow - Part 1 | CommunitySimplifying NPA: End-to-End workflow - Part 2 | Com

Hi all! We are working on a research project to learn more about Advanced Analytics such as:  users, consumers, and beneficiaries  use cases E2E workflow (from onboarding to constructing the data to consumption of data) & Improvements to NAA  Participant Criteria: Regular consumer of AA Dashboards, Bonus + if you create dashboards yourself!Logistics: These sessions will be virtual over Zoom and last ~45 minutes! As a token of our appreciation, we will send you a $50 gift card via a link after our call. You are free to accept, decline, or exchange the gift. If you are interested & fit the criteria, please sign up with this interest form!

Hi, At the moment, downloads of files (for instance .exe files) are not logged in the "Page Events" unless the file was downloaded from an application recognized in Netskope.The problem with this is that malware can be hosted in any websites or web servers (using IP only for instance) that are not categorized as applications. This creates a gap in visibility when the user downloads something malicious from a source like that, making investigations much harder.So, my suggestion would be to log download events for non-application events as well. 

We’re searching for a name for this elite group of advocates.  If you have any ideas on what you’d like to be called, instead of a Netskope Champion or MVP, please use the feedback board to give us your ideas. Netskope Heroes? 

Found that any "bullet" in posting in body section of the post is converted into Number Bullet type. Please fix this.   Example  This is "disc" bullet type