Skip to main content
  • EN

Dashboard Gallery

Use a library of pre-built dashboards designed for visualizing risk factors such as data loss, geolocation of data, and insider activity to identify where the problems lie.

  • 76 Topics
  • 113 Replies
76 Topics
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
User/Organization Unit Investigation Dashboard

Looking for an all-in-one dashboard that helps you quickly uncover risky/suspicious user activities in your environment? Our User/Organization Unit Investigation dashboard is here to help!This is a user-centric dashboard that helps you investigate risky/suspicious activities performed by users, user groups, and organization units in your environment from 3 dimensions: Application UsageDLP AlertsWeb Traffic With this dashboard, you can:Understand how are the cloud applications being used in your environment and investigate risky/suspicious activities Monitor DLP alerts triggered by users and uncover insider threats Monitor web transactions generated and identify anomalous traffic The dashboard template is attached below. Feel free to view it in your own environment and let us know if you have any questions, comments, or feedback! 

4520
Aaron_Zhang
Netskope Employee
D
dkolb-netskope
asked in Dashboard Gallery
Advanced Analytics - Number of users with Endpoint DLP enabled versus Number of users at company

Hello,I was wondering if there is a way to see the number of users with endpoint DLP enabled versus the amount of total users in our company through the analytics dashboard?We tried to import a AD group that everyone has and then we have one for when the endpoint DLP is enabled for the user, so I was wondering if there is a way in Advanced Analytics where we can show that percentage of users enrolled versus the amount of employees?I attempted to use the devices section to create the widget based on user group and # of users, however when I do “Devices Event Date is any time” it does not populate the correct amount of users for any of the categories.Thank you in advance!

971
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
2024 Netskope Recap

As 2024 is coming to an end, it’s a good time to reflect on your security landscape with our Netskope Recap Dashboard!The dashboard provides a year end reflection on your organization’s security posture. Topics covered include: Threat Protection Application Risk Management Security Policy Assessment 2025 Call to Action Use this dashboard to recognize your successes and areas for improvement, ensuring you’re better prepared for the evolving security challenges in 2025! Please note that the 13-month data retention is required to view the full results in this dashboard. If you’re interested in extending your retention period, please reach out to your Netskope account representative.  

5260
Aaron_Zhang
Netskope Employee
ematchey
Netskope Employee
ematcheyNetskope Employee
published in Dashboard Gallery
China Traffic Insights

Netskope administrators often need visibility into user-level and app-level data transfer volumes within China in order to help them track utilization.The objective of this dashboard, attached below, is to provide insights into data consumption volumes in China, assisting customers in optimizing their steering and security policies. Specifically, this report helps to identify the primary users and websites responsible for consuming the largest amount of data transferred in China within a specific time period.  

6702
Aaron_Zhang
Netskope Employee
M
Netskope Employee
mnekkarNetskope Employee
published in Dashboard Gallery
Data Flow Investigation Dashboard

This dashboard gives a view of how data is moving in your organization. It allows you to filter for a specific application, user, or activity. Using this dashboard, you can answer questions like: Who are the top users moving data and where are they moving the data to? Who is uploading or downloading data into specific applications, such as Box?  What are the activities taking place in a specific application, such as Google Drive? Where is a specific user moving data from and to?  Also, the dashboard’s Sankey Chart allows you to understand how data is flowing from the user to the action. You can see the flow from user to from user to application to instance to activity to action. The best use for this widget is to filter for a specific user to see what data they are moving and to where.The dashboard is attached below. Feel free to view it in your own environment and share any comments/feedback. Please also let us know if you want any additional fields/data to be added to the dashboard.

5551
J
M
Netskope Employee
marguelloNetskope Employee
published in Dashboard Gallery
Use AA to help to find Admin Disabled Users that were not Re-Enabled

By following the instructions you can use this Dashboard to collect information you can process in a Spreadsheet type software (e.g. Excel, Google Sheets) to look for Admin Disabled users that might still be disabled. I hope you find it useful.

3700
M
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Advanced UEBA Dashboard

 Thanks @lgibson for providing this great idea! Looking for visibility into Advanced UEBA with machine learning detections that automatically learn the baselines for different users and raise alerts when there are anomalous behaviors? Our latest Advanced UEBA Dashboard is here to help!  This dashboard provides detailed visibility into the alerts generated by Advanced UEBA policies, which helps you perform user investigation & alert validation on this topic. With the dashboard, you can better understand why these alerts are being triggered and if your policies are working effectively.  By default, the dashboard starts with a summary of Advanced UEBA alerts triggered in the last 30 days, including # alerts triggered, # apps with these alerts, and # users triggering these alerts. The # UCI Threshold Alerts triggered are highlighted, which is a starting point for your user investigation.Advanced UEBA automatically computes the User Confidence Index (UCI) score for every user on the pla

10900
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
AI Usage with App Instances

 July 2024 Update:This dashboard is now available in Netskope Library. Based on the AI Usage Dashboard in Netskope Library, we developed this updated version with App Instance data added. With this dashboard, you can get additional visibility into the App Instances used to access AI Apps/Sites in your environment, which helps you identify if your traffic is moving within your corporate environment only, or through a public llm. The dashboard is attached below. Feel free to import and view it in your own environment. Let us know if you have any questions or feedback!

7331
W
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
User Behavior Analytics (UBA) Dashboard

  The latest User Behavior Analytics (UBA) Dashboard is now available in the Netskope Library. This dashboard can be used to monitor UBA alerts and refine your UBA policies.     In addition to an overview of UBA alerts, the dashboard also provides detailed visibility into each UBA alert triggered, which helps reduce investigation time for anomalous user activities in your environment.     The dashboard can be found in the Netskope Library. Feel free to copy and view it in your own environment. Let us know if you have any questions!  

4131
2
lzhi
Netskope Employee
lzhiNetskope Employee
published in Dashboard Gallery
Disabled Client Dashboard

Check out the Disabled Client Dashboard! We’ve created this dashboard in response to several use cases related to disabled devices in the environment. This dashboard allows you to explore the following questions:How many devices are disabled? What percentage of the devices in the environment are disabled? Why are the devices disabled? How many users are disabling their devices? Who are these users? How long have the devices been disabled?Here are the main sections of the dashboard:Number and Percentage of Currently Disabled DevicesThese widgets show the number and percentage of currently disabled devices in your environment. They also indicate how many users have disabled devices, helping you understand the current client status.Number of Users by Status Change ReasonThe “# Users by Status Change Reason” widget helps you understand the reasons behind device status changes in your environment, highlighting the reasons with the largest number of users. For example, the screenshot shows t

12860
lzhi
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Identify Office Locations by Source IP Addresses

  This dashboard helps you understand if individuals in your organization are working at the assigned office locations by converting Source IP Addresses to Office Locations.    Let's take a look at a sample use case. When doing budget planning for next year, Netskope wants to understand how many of their employees are working at the office on a weekly basis. Source IP is a good starting point, but Netskope is looking for a better view into the exact "office name" for each IP. This dashboard can help!   In the edit mode of the first widget "User Source Locations," we can find the custom dimension "Office Location" by expanding the "Custom Fields" section on the left hand side.   This custom dimension converts Source IP to the corresponding Office Location. By clicking "Edit," we will then be able to further customize it based on our needs.    Here, we have Source IP = 104.x.xx.xxx with the corresponding Office Location = STL Office. In this case, if

7822
W
aramachandran
Netskope Employee
aramachandranNetskope Employee
published in Dashboard Gallery
Users located in Risky Countries

Despite the chagrin of employees, Return to office (RTO) is the rage these days. Employees are expected to work from their designated locations, and not expected to work from a beach in the Bahamas (say), when they had promised the employer that they would be working from the corporate office located in Miami.  Why is this important? - Potential violation of contractual agreements, tax purposes, and of course - security and handling of sensitive information. Now how do you determine if a user is not flouting company rules and working from unapproved locations ? Netskope can help you here, by alerting you on the source location of end-users via UEBA policies and visualizing them using an Advanced Analytics Dashboard(NAA).   We have pre-populated standard UEBA policies that can generate alerts when users work from ‘risky countries’ - (you can append the default list in the policy and add to it countries you do not want people to work from)Visualizing the alerts generated is simple using

6730
aramachandran
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Device Client Overview Dashboard

Netskope Advanced Analytics makes device data collection available for analysis through the latest Device Client Overview Client Dashboard. The dashboard helps you better understand and manage the deployment of Netskope Client in your environment. Some of the key metrics captured by this dashboard include:Getting an aggregated view of the number of corporate-managed devices that have installed the Netskope Client, and insights into the status of devices with the Client enabled, disabled, or uninstalled Understanding the trends of Client version updates over time and determining how many devices are on unsupported, supported or golden release versions Identifying devices disconnected for a long period of time Investigating and troubleshooting users’ Client activities by leveraging historical data Use this dashboard to enhance your device security posture, generate comprehensive risk insights, perform compliance assessments based on your corporate policies, and implement greater control

17304
B
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Application Risk Management

This dashboard aims to surface the application risk in your environment. Use the dashboard to better understand:What applications are being used in your environment Are any of them unmanaged, untagged, or risky Is there any sensitive or risky data movement through these applicationsLet’s take a look in our demo environment. The dashboard starts with a summary of applications being used. Here we can see 295 applications are detected, and 275 of them are unmanaged. Out of these applications, we can get visibility into how many of them are rated as “excellent,” “high,” “medium,” “low,” and “poor” in terms of risk (Cloud Confidence Level). This will help us decide how many “risky” and “less risky” applications are being used in our environment. In the meantime, we can also see how much data is moving to these “risky” and “less risky” applications. The dashboard then provides detailed information about risky applications and traffic detected, which allows us to perform deep investigations o

6510
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Updated Application Category Dashboard

This dashboard provides detailed visibility into the application categories detected in your environment, including:Top used applications, both managed and unmanaged, in each category Risky applications, traffic, & data movement in each category Application instance tags Policies & alerts triggered by applications in each categoryUse this dashboard to:Better understand top used applications in each category to reduce app redundancy Identify the usage of unmanaged & risky applications in each category Monitor sensitive & risky traffic/data movement in each category The dashboard is attached below. Feel free to download and view it in your own environment. Let us know if you have any questions!

6040
Aaron_Zhang
Netskope Employee
ematchey
Netskope Employee
ematcheyNetskope Employee
posted in Dashboard Gallery
Cloud Firewall Dashboard

This dashboard can be used to have an overview of Cloud Firewall in terms of users, traffic, policies, top allowed protocols, top blocked protocols, top users and source IP for allowed and blocked traffic, top blocked DNS domains, top users with blocked DNS domains, top DNS allowed domains, etc.   Please note, this post was created quickly and will be updated in the coming days & weeks. 

2732
Aaron_Zhang
Netskope Employee
E
Netskope Employee
eoakesonNetskope Employee
published in Dashboard Gallery
Cloud Firewall Dashboard - Updated

This is an update to the already improved Cloud Firewall Dashboard that was uploaded last year. I've made a few tweaks to improve the filtering for more efficient usage. This improves upon the Cloud Firewall Discovery dashboard in the Netskope Library by now having users, traffic, policies, top allowed protocols, top blocked protocols, top users and source IP for allowed and blocked traffic, top blocked DNS domains, top users with blocked DNS domains, top DNS allowed domains, etc. You can now filter all of the data or different widgets independently depending on your needs:More visibility into DNS specific activities, especially if you're using Cloud Firewall's DNS Security:Give it a try!  

4134
qyost
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Advanced Analytics Training Dashboard

 This dashboard provides a great starting point for you to get started with Advanced Analytics. You will find links to various training resources like training video library, knowledge portal, and support site.The dashboard is now available in Netskope Library.  

3270
Aaron_Zhang
Netskope Employee
qyost
qyostExplorer III
asked in Dashboard Gallery
Advanced Analytics - Persistent Customization

I hope I'm overlooking something basic again, but...I would really love to see a way that some properties could be defined once and reused across multiple reports.   Not just at the widget level.   I'm thinking more granular.   I would love to just define a custom extraction once and have it available in the Custom section for every future explore of the same logtype.    Similarly, I would love to define "my domains" (or any other relatively static value) as a variable and have it available for every future report. This would be especially useful for the Netskope Library.   Many of the default reports all have the same "copy this report, edit that, and save a new version" guidance; but often what is being edited is the same 2 -3 sets of data.   If these were able to reference a common variable, there would be no need to reverse engineer the reports every time a new version is released.  

962
qyost
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Address duplicate data/rows in your visual

  Duplicate data can sometimes blow up a visual. For example, Aaron is looking for a list of apps detected in his environment and the corresponding category of each app, so he created a table with "Application" and "Category" using Advanced Analytics.    The table works, but also brings a problem. Some apps (e.g. ChatGPT) have multiple categories, which generates many duplicate rows in the table. For each app displayed, Aaron wants to know if there are any methods to show all categories in a single cell of the table.   We can do this with the "List" feature. In the widget edit mode, click the 3-dot button next to "Category," select "Aggregate," and then hit "List of unique values."   A custom field "List of Category" will be created automatically. By removing the original "Category" field and apply the new "List of Category," all categories for each app will be displayed in a single cell. Issue resolved! Duplicate rows are now removed.    This solu

1180
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Webmail Traffic

  This dashboard provides visibility into Webmail Traffic, including Activity, From User, To User, Object Name, and Policy Action. Feel free to import and view it in your own environment.   

3490
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Dashboard Gallery
Advanced Analytics Top Dashboards

 When leveraging Advanced Analytics on your use cases, the existing dashboards in Netskope Library & Community are always good starting points. While you can find any dashboards you are interested in by searching particular keywords or tags, we strongly recommend checking our top dashboards below: CASB Health Check Dashboard: This dashboard helps you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to its full potential. The specific focus of this dashboard is operationalization of the CASB product.NG-SWG Health Check Dashboard: This dashboard shares the same purpose with the CASB dashboard above, but with a focus on NG-SWG product. Cloud Risk Assessment - QBR Dashboard (in Netskope Library): This dashboard provides a high-level overview of the risk assessment in your environment, including visibility into cloud traffic, cloud threats, high risk user activities, etc. It answers the question “how users and data have been protected by

12310
Aaron_Zhang
Netskope Employee
bob
Netskope Employee
bobNetskope Employee
published in Dashboard Gallery
Microsoft 365 Dashboard

This dashboard is ideal for monitoring overall activity in Microsoft 365. Some of the questions this dashboard answers include:   • How much is Microsoft 365 being used?• What Microsoft 365 instances are being used?• Who are the active users? What activities are they performing? • What are the DLP violations tied to Microsoft 365?• What malware events are tied to Microsoft 365?• What is the compliance posture of Microsoft 365?         

2860
bob
Netskope Employee
V
vahidNew Member
posted in Dashboard Gallery
Netskope for Google Workspace

Hello Everyone,Could someone guide me on how to integrate this report into our dashboard? Here's the link for reference:https://www.youtube.com/watch?v=SBQg6EaeWTU&ab_channel=NetskopeThanks in advance for your assistance!

1383
V
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
2023 Israel-Hamas War: Understand your organization’s traffic bound for/from affected regions

  With events rapidly unfolding in Israel and Gaza, it is important for organizations to get visibility into their traffic bound for these regions or originating from them. Use these two dashboards to understand traffic coming from and destined for Israel (Country Code: IL) and Palestinian Territory (Country Code: PS).    The dashboards provide insights into:   Visuals to understand which traffic flows (events) are sourced from and destined for Israel and Palestinian Territory Originating user and application context for the generated traffic Threats (i.e. Alerts) detected , along with the types of threats, policies, and resulting actions (blocks, allows, etc.) Traffic flows (events) from and to any countries of interest by adjusting the dashboard filters on top       Please Note:   With the exception of the Policies, Alerts & Actions visualization, this dashboard does not distinguish between blocked/allowed traffic. Further analysis is

1620
Aaron_Zhang
Netskope Employee

Badge Winners

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings