Discussions

 Hello Team 1. Executive SummaryCurrently, long-form PDF reports generated by Netskope (e.g., daily activity or security mail reports) fail to open correctly in industry-standard PDF viewers like Adobe Acrobat Reader. Users receive a critical warning: "The dimensions of this page are out-of-range. Page content might be truncated." This issue limits the ability for compliance and security teams to review, archive, and audit long reports using professional PDF tools. 2. Proposed SolutionsTo ensure cross-platform compatibility and adherence to international standards, we suggest the following enhancements to the PDF export engine:Option A (Pagination): Implement logic to automatically split "infinite-scroll" web reports into multiple standard-sized pages (e.g., A4 or Letter) once the content exceeds the 200-inch threshold.Option B (Scaling Factor): Upgrade the PDF export version to PDF 1.6+ and implement the /UserUnit parameter. This allows the engine to scale the coordinate system, enabl

This article helps you better understand the functions of different time filter conditions in Advanced Analytics. Data shown in this article is generated on Feb 5, 2026. Is in the lastThis condition sets relative dates to your data. For example, “is in the last 7 days” returns data from the last 7 days, including today.  To exclude today’s data, select “is in the last 7 complete days” instead. Please note that the results are controlled by your data retention period. Incomplete data will be returned if your retention period is shorter than the time filter period selected. Is on the dayThis condition sets an absolute date to your data. For example, “is on the day 2026/02/04” returns data on Feb 4, 2026, from 00:00 to 23:59. Please note that there is a 1-2 hours data ingestion delay in Advanced Analytics. If you input today’s date using this condition, data returned will be incomplete. Is in rangeThis condition sets an absolute range to your data. For example, “is in range 2026/02/02 unt

IntroductionOnce you have deployed the Netskope Web Transactions connector and data is flowing into Microsoft Sentinel, the next step is to unlock the full value of your security data through visualization and automated threat detection.This guide covers the deployment of two essential components:Netskope Web Transactions Workbook — A comprehensive dashboard providing visibility into user activity, application usage, traffic patterns, and security insights  Netskope Analytics Rules — 10 pre-built detection rules covering impossible travel, data exfiltration, Shadow IT, policy violations, and more PrerequisitesBefore proceeding, ensure you have: Requirement Description Netskope Connector Data connector deployed and showing "Connected" status Data Flowing Logs appearing in NetskopeWebTransactions_CL table Permissions Microsoft Sentinel Contributor role (minimum) Historical Data Some rules require 7 days of baseline dat

Use Case: Create reporting to show users who are and those who are not using paid subscriptions Assume there's three AD groups, each targeting a specific AI tool. For this example, we can say Copilot 365, Claude and ChatGPT.  Please help provide guidance to create resorting/dashboards for this example use case.

I can write an AA report with a CIDR, but not one excluding a CIDR.What happens is that I have to write two widgets, download to spreadsheet, match rows and then subtract. It would be far easier to just exclude a CIDR in a Widjet.

■ご質問内容・F/Wなどで除外しないとIntune条件付きアクセスでMacOSが正しく判定できない場合のNetskopeの設定方法 ■大前提条件・Jamf ProとMicrosoft社のIntuneを連携して利用しております。 ■問題点１）MacOSに限りEntraID時でNetskopeを無効化しなければデバイス情報をMicrosoft社に渡せなく　　EntraIDの準拠がされない状況が発生しております。　　⇒対応策：弊社ではEntraIDに登録時にはNetskopeを無効化して準拠している。　　　　　　　  準拠後はNetskopeを有効化している。 ２）Microsoft社 Intune条件付きアクセスで準拠したMacOSに限りSharepoint上のページにアクセスする場合　　デバイス情報をIntune側に渡せなくてデバイス登録をしてくださいとエラーが発生してしまいます。　⇒対応策：一時的に条件付きアクセスのサイトでアクセスする場合はNetskopeを無効化しております。

 Thanks ​@scarlile and ​@Kousain Raza for sharing this great idea and creating the step-by-step instructions!Advanced analytics allows you to build a dashboard with visual content from it’s widgets, as well as add some commentary.For key messages, diagrams, slides which may go alongside an AA dashboard, it is possible to insert images which have been encoded.See below for examples of the types of images which could be inserted. This can be done by using Base64 :-Base64 Encode and Decode - OnlineNote the images are not hosted anywhere - a code is given for the image & this code is inserted into the AA dashboard. InstructionsGo to Base64 Encode and Decode - Online and select “Encode” Upload image file to Base64 Encode and Decode - Online and select “Encode” Download the encoded file The encoded file will be in text format Take a copy of this text In Advanced Analytics, add a Text box and insert this text<body> <img alt="GeekforGeeks" src= "data:image/png;base64, <Inse

Hello Everyone,Could someone guide me on how to integrate this report into our dashboard? Here's the link for reference:https://www.youtube.com/watch?v=SBQg6EaeWTU&ab_channel=Netskope  I saw a topic where someone had a question about how to create one and it wasn't answered.  could share the file

I am using out of the box AA reports and i have no idea what this is trying to tell me:  

Merge Query allows you to combine data from different data collections, which helps you perform advanced analysis based on different data sources.Let’s take a look at a sample use case - identifying the device info of users triggering DLP alerts. While DLP alert data is stored in our Alerts data collection, device info is stored in a different place, the Devices data collection. To combine data from these two different data collections, Merge Query can help. To get started, simply create a widget that lists users triggering DLP alerts.  Once the widget is saved to the dashboard, select “Explore from here.” This will direct us to the “explore” mode of this widget.On the top right corner, click the gear button and select “Merge results.” We will then be able to select a second data collection. Let’s select “Devices.”    Next, let’s pick the data fields we need. Since we’re looking to combine DLP alert data with device info based on users, we select “User,” “Device ID,” and “Hostname” her

There are 4 typical types of widget errors in Advanced Analytics Type 1: Incompatible DataWhen the data type selected is not supported by the visual type, this error shows up. For example, when “# Users” is selected with the “Google Maps” visual, the widget cannot be loaded since this visual does not work without a “location” data field.To fix this, simply add a “location” data field, e.g. “Source Location,” to the widget. Type 2: Incompatible Visual TypeWhen the visual type selected cannot render the data, this error shows up. For example, if we use a pie chart to show a list of users based on their event count, the widget cannot be loaded since this visual can only display a maximum of 50 rows of data.To fix this, simply switch to a different visual type, e.g. table. Type 3: Query ErrorWhen your custom fields are misconfigured, a query error shows up.To fix this, check your custom fields and make sure they are configured correctly with no error message showing up. Type 4: Server/Plat

Hello,I’m having an issue with a Netskope Client on a windows machine and I would like to reinstall the agent but unfortunatelly I don’t remember the password configured for antitampering. As the NsClient is not connecting to the tenant changing the antitampering password is not an option. What else could I do to reinstall the NsClient on the user machine. 

OverviewThe integration of Netskope SD-WAN with Microsoft's SSE solution facilitates inspection of internet bound originating from SD-WAN branches/VNETs destined for internet applications routed through Microsoft's SSE solution.This guide encompasses a step by step guide to connecting Netskope SD WAN appliances to Microsoft's SSE solution, specifically for SaaS/internet applications. Microsoft Entra Internet Access traffic, alongside Microsoft Entra Access, are integral components of Microsoft's SSE solution: Global Secure Access. Microsoft Entra Internet Access ensures secure access to internet and SaaS apps, providing robust protection for users, devices, and data against internet-borne threats. This document focuses on the Internet Access use case. In this guide, you will be creating an Internet Protocol Security (IPSec) tunnel between a Netskope SD WAN Appliance, at your remote network and the nearest Global Secure Access endpoint. All internet-bound traffic is routed through the c

I had a user change her last name which changed her email address. It appears the JAMF “plist” is not updating. I checked Netskope and her updated name and email address is synced with SCIM. I can manually send the Netskope client invite to the user and everything works as expected. When the Netskope client is deployment through JAMF it appears the “plist” has the users previous email address which will not work. It appears everything on the Netskope side is updated and correct. Has everyone experience this issue? Is there a JAMF “plist” reset? Thanks.

We’ve observed that several websites either take a long time to load or fail to load entirely when Netskope is enabled. However, the same sites work smoothly once Netskope is disabled. Since the issue is intermittent and not easily reproducible, identifying the root cause has been challenging.A recent example involved LinkedIn Sales Navigator, where some users reported the site not loading. Upon analyzing HAR logs, we noticed that the licdn.com domain was significantly delayed when Netskope was active.We tested a couple of solutions, both of which proved effective for different user sets: Implemented an SSL Do Not Decrypt (DND) rule for the licdn.com domain Assigned a client configuration policy with MTU set to 1494 for affected users We’ve encountered similar issues with other services such as AWS S3, MoveInSync, and Box Notes (for box we have identified boxcdn  domain that is taking time).How can we systematically troubleshoot and resolve such issues where Netskope inspection inter