Skip to main content
  • EN

Discussions

Get answers to your questions about app usage, data movement, and user behaviors. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.

  • 90 Topics
  • 97 Replies
90 Topics
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
April 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: What is the Ideas Page in Netskope Community for?A: The Ideas Page in Netskope Community allows you to share your innovative ideas about our products. Submitting your ideas is not just about asking for new features - it is about collaborating with Netskope to enhance our products in ways that benefit the entire community. If you are looking to have new data or features in Advanced Analytics, feel free to submit your own ideas or “upvote” any existing ideas in the Idea Page.   Q: We saw new versions of health check dashboards released in the community. What are the major updates?A: The “Client Supported Status” field has been deployed to Advanced Analytics, which te

280
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
Advanced Analytics Training Resources

 Please follow the 3 steps below to quickly get started with Advanced Analytics: Step 1: Reference Netskope Advanced Analytics - Getting Started to get started using Advanced Analytics in 5 minutes. Step 2: Watch “Getting Started” Webinar to understand what Advanced Analytics is all about.  Step 3: Visit our Video Library for more features and advanced use cases with Advanced Analytics.Don’t forget Netskope Community is always your friend. Here you can post your questions and get answers in Discussions, view the latest dashboards in Dashboard Gallery, and register for our monthly Advanced Analytics Office Hours. --------------------------------- If you need technical support, please visit our Support Portal. You can request your end-user account on the support portal by sending email to support@netskope.com. A demo of Netskope Support Portal can be found here.  

14770
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
Copy widgets from existing dashboards to your own dashboards

When using Advanced Analytics, you don’t have to create everything from scratch. Our existing dashboards are always great starting points for your use cases. You can easily save widgets from existing dashboards to your own dashboards by following these steps:Step 1: Find the widget you need from the existing dashboard Step 2: "Explore" the widget Step 3: Save the visual to an existing dashboard Or save it as a new dashboard 

10
Aaron_Zhang
Netskope Employee
M
Netskope Employee
mgulledgeNetskope Employee
posted in Discussions
Integration Web Transactions from Netskope Log Streaming to Microsoft Sentinel

Seamless Log Shipping: Unlocking Netskope’s Native Integration with Microsoft SentinelIn today’s security landscape, visibility and real-time insights into your organization’s data are critical for effective threat hunting and incident management. To meet these needs, Netskope has developed a native integration with Microsoft Sentinel using the Codeless Connector Platform—allowing organizations to easily stream all Netskope Web Transaction Logs into Microsoft’s cloud-native SIEM. This blog explores how this new integration seamlessly pulls in near real time all of your organizations Web Transactions to a single Log Analytics table.  Architecture In this architecture data is pushed from Netskope to the customer Storage Blob Container. Every time a file is written either containing Web Transactions or Netskope Alerts and Events a blob notification is sent to Event Grid. Once the notification is seen by Event Grid, the blob URI is then sent to a storage Queue so the Scuba workers (Microso

260
M
Netskope Employee
R
rohit_chandnaNew Member III
asked in Discussions
How to Download all Marketplace Apps grouped for Teams

How to Download all Marketplace Apps grouped for Teams

100
R
S
SivaExplorer III
asked in Discussions
Report on Device Classification and Client configuration

Hi there, is there a report to list Device Classification and Client configuration values for all NSClient devices? 

322
S
A
adebrattoNew Member
asked in Discussions
Client Check In - Dashboard or Advanced Analytics

Good day,Anyone know of a dashboard or advanced analytics report that can look for Netskope clients that have not checked in after X period of time? For compliance reasons, we want to make sure we are tracking down inactive devices and clients.Thanks in advance!

666
Aaron_Zhang
Netskope Employee
M
maxkorNew Member III
asked in Discussions
Enabling Secure Enrollment

Hello all,Before we will deploy secure enrollment feature I have a question regarding secure enrollment.Is there a re-installation script available? Would you recommend running it on all devices? What would be the potential impact of doing so?Additionally, I’d like to clarify the following scenario:If a different user logs in to my computer for the first time after we enable secure enrollment, will they encounter any errors?   

791
S
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
March 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: We are looking to reflect on our security posture in the entire 2024. Can Advanced Analytics help with this?A: Yes. The 2024 Netskope Recap Dashboard is a great starting point. The dashboard helps you reflect on your 2024 security landscape from 3 dimensions: threat protection, application risk management, and security policy effectiveness. Q: We are looking for a report to show the trend of uploads to AI apps.A: The AI Usage Dashboard in Netskope Library is a great starting point. By editing the “AI Usage Trend” widget, you can easily add “Activity” as a filter and set it to “is equal to Upload.” This will then return a line chart that reflects the trend of upload

400
Aaron_Zhang
Netskope Employee
M
MSpaldingNew Member III
asked in Discussions
Roles for Advance Analytics usage

We are attempting to get more of our team involved in managing certain aspects of Netskope.  As such, they would like to have access to Advanced Analytics in order to create and maintain dashboards and generate reports.  They would only need Read access to the main management console of Netskope.  I am trying to determine if any of the existing roles would work for this purpose, and which one would give them what they need with the minimum privs required for the task.  I am thinking one of these three may work;Restricted Admin: Has read-only access to all functions. Cloud Intelligence Analyst: Has access only to reporting and analytics. Application Risk Analyst: Can run reports and analytics and read the CCI.I wasn’t able to find an article that broke down the roles into great detail, but please let me know if I missed that.  If App Risk Analyst will let them at least view policies or SkopeIt, that may be enough.  But if it literally only lets them run reports in AA, then I may need on

235
M
R
rrobertsNew Member
asked in Discussions
Behavior Analytics - Polices

Is there a list of recommend behavior analytics polices that Netskope recommend turning on instead of turning every policy?

221
Aaron_Zhang
Netskope Employee
S
SivaExplorer III
asked in Discussions
stats or groupby

Hello, is there a way in advanced analytics to find unique values of a field with count. Similar to stats in splunk? 

172
S
M
MichaelKoherNew Member III
asked in Discussions
Trending Data

I am working on something that I my brain should be so simple but i am just missing something. We have blocked DeepSeek from our environment. What I have been asked to deliver is a 90-trending report showing Access Allowed, Access Blocked over a 90-day period in a trend line. I am using the #Blocked Events but calculating the Allowed is getting it to show the trend line is where I am having issues.  Thanks for help! 

281
Aaron_Zhang
Netskope Employee
P
pppExplorer
asked in Discussions
Delay in Advanced Analytics

Hello Community,is it normal that the data in AA is delayed? Sometimes the latest event is from an hour ago, sometimes two?Best regards

351
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
January 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: How to know more about the security posture of our organization using Advanced Analytics?A: There are 3 different “health check” dashboards in our community. All of them are great starting points for you to explore your environment and enhance your security posture. CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. With a focus on CASB, the dashboard covers multiple topics such as NewEdge Network, Traffic Steering, SSL Inspection, Application Risk Management, Malware Protection, and DLP, which answers the question “how Netskope i

740
Aaron_Zhang
Netskope Employee
elawaetz
elawaetzExplorer III
asked in Discussions
Cloud Exchange Logshipper Syslog integration with Darktrace?

Has anyone had any luck with Syslog integration from Cloud Exchange into Darktrace?Darktrace describes the expected format like this:Darktrace expects the Netskope Web Gateway data to include the string "darktrace_netskope" followed by a JSON formatted representation of the Netskope logging. The order of fields within the JSON is not important. For example: darktrace_netskope {"src_time": "Fri Jan 1 00:10:00 2021","userkey": "user.name@company.com","dst_region": "Region","category": "Business","src_longitude": 52.2,"transaction_id": 0,"ur_normalized": "user.name@company.com","src_latitude": 0.12,"dst_longitude": 52.2,"domain": "www.example.org","dst_zipcode": "555555","access_method": "Client","src_timezone": "Global/UTC","ccl": "unknown","bypass_reason": "SSL policy matched","user_generated": "yes","dst_country": "ZZ","srcip": "198.51.100.1","site": "example","traffic_type": "Web","src_region": "Region","user": "user.name@example.org","appcategory": "Business","page_id": 0,"insertion_

62815
S
T
tpimpaoNew Member III
asked in Discussions
How to Retain "Total Bytes" Visibility with DND Policy for Network Locations?

Hi everyone,I'm reaching out to see if anyone has encountered a similar situation or has suggestions for our use case.We’re using Network Locations in Netskope to control the traffic of specific servers to the internet. These Network Locations are allowed to access only a limited set of URLs, and we apply a DND (Do Not Decrypt) policy to this traffic because we don’t want to decrypt it.The challenge we’re facing is that when the DND policy is applied, we lose visibility of the "Total Bytes" metric for all connections originating from this Network Location.Has anyone dealt with this issue before? Is there a way to retain the Total Bytes visibility while keeping the DND policy in place?Thanks in advance for your insights and help!

180
T
C
cjcarewNew Member
asked in Discussions
V2 API Pagination

Hi Folks,Apologies if this is a simpleton question, however it’s doing my head in. I have the api working and am able to use the dataexport endpoint to extract malware alerts. My issue is that I only receive one record in the response and I know there is 115 in the time period of the search. The record I receive is the very first in the results. I can confirm that by checking in the console.My (hopefully simple) question is what is the format of the api query to iterate through the results so that the full list can be retrieved? I’ve tried ?operation=next&index=(the index name supplied in the first query). However that returns an empty response.I’d appreciate any guidance.Regards,Campbell

1703
R
J
jschueleNew Member III
asked in Discussions
Netskope Client for iPad

I saw the article on support for the Netskope Client on iPad. When I use the email invite though there is link for the iOS Client, only the iOS Profile. I see a note about this issue, but don’t understand what it wants me to do. How do I enable the default email template? I’m sure I changed it years ago, but can’t remember where.. Can someone clarify how I get it visible in the email invite?– If you are unable to see the link to download Netskope Client for iOS in the email invite, use the default email template that includes the link to download Netskope Client for iOS. 

1222
R
T
TwoodsNew Member III
asked in Discussions
Policy Schedule alerting or Reporting

We have Policy schedules set on several policies to force re-evaluation of access periodically.  Do others use these?   Has anyone created an Advanced Analytics report or alert that can be set to proactively notify you when these time windows are coming due?

110
T
Michael Horne OCD
Netskope Partner
Michael Horne OCDNetskope Partner
asked in Discussions
Creating reports / widgets that filter based on Tunnels

Hello all,I am looking at creating reports to help identify bandwidth utilisation for customer sites.  We want to identify what applications and sites are generating the most traffic.  If the previous product it was simple to filter based on a location (which is a way to reference the IPsec tunnels used to connect a site to the cloud).  Netskope seems to be less location focused.  Ideally I would like to filter a widget or Dashboard using a filter that is a list of the IPsec Tunnels.  Is there a simple way to do this?I can filter based on countries, but the customer has multiple sites in some countries. The source locations reference towns or cities that do not match up with the customer site. In France the even have multiple sites in the same city. Filtering by IP CIDR allows only filtering by a single CIDR network. It is not possible to filter based on a defined network location. The only solution I have at the moment is the source egress public IP address.  This works as it clearly

220
Michael Horne OCD
Netskope Partner
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
November 2024 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! “Getting started” questionsHow to best use Advanced Analytics?  How to draw actionable insights from Advanced Analytics?  How can we leverage Advanced Analytics to drive valuable, data-driven decisions? How to use Advanced Analytics to monitor and enhance our security posture? A: There are 3 different “health check” dashboards in our community. All of them are great starting points for you to explore Advanced Analytics, draw actionable insights, and enhance your security posture.  CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. Wi

460
Aaron_Zhang
Netskope Employee
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
October 2024 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: We saw CASB, NG-SWG, and Self-Service health check dashboards in Netskope community. What’s the difference and how to best use each of them?A: There are 3 different “health check” dashboards with different purposes & use cases in our community:CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. With a focus on CASB, the dashboard covers multiple topics such as NewEdge Network, Traffic Steering, SSL Inspection, Application Risk Management, Malware Protection, and DLP, which answers the question “how Netskope is protecting your e

530
Aaron_Zhang
Netskope Employee
S
secproceoNew Member
asked in Discussions
Netskope Client for iOS

Can the Netskope client be installed for iOS (iPad) without using Intune? I need to install it for one device. If so, are there instructions? Thanks. 

1243
S
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
September 2024 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Secure Client Enrollment (Rogue Device) DashboardBy providing visibility into users with multiple devices & device classifications, this dashboard helps you identify “rogue devices” in your environment. For more details about how to best use the dashboard, please view this video.The dashboard can be found here. Admin Disabled User DashboardBased on the Device Data, this dashboard allows you to identify “admin disabled” users who have not yet been re-enabled. Detailed instructions about how to best use the dashboard are provided.The dashboard can be found here. POP Usage DashboardBased on Application Events, this dashboard provides visibility into Netskope Host POP

630
Aaron_Zhang
Netskope Employee

Badge winners

Show all badges
Terms & ConditionsCookie settings