Discussions

Hello,I’m having an issue with a Netskope Client on a windows machine and I would like to reinstall the agent but unfortunatelly I don’t remember the password configured for antitampering. As the NsClient is not connecting to the tenant changing the antitampering password is not an option. What else could I do to reinstall the NsClient on the user machine. 

OverviewThe integration of Netskope SD-WAN with Microsoft's SSE solution facilitates inspection of internet bound originating from SD-WAN branches/VNETs destined for internet applications routed through Microsoft's SSE solution.This guide encompasses a step by step guide to connecting Netskope SD WAN appliances to Microsoft's SSE solution, specifically for SaaS/internet applications. Microsoft Entra Internet Access traffic, alongside Microsoft Entra Access, are integral components of Microsoft's SSE solution: Global Secure Access. Microsoft Entra Internet Access ensures secure access to internet and SaaS apps, providing robust protection for users, devices, and data against internet-borne threats. This document focuses on the Internet Access use case. In this guide, you will be creating an Internet Protocol Security (IPSec) tunnel between a Netskope SD WAN Appliance, at your remote network and the nearest Global Secure Access endpoint. All internet-bound traffic is routed through the c

I had a user change her last name which changed her email address. It appears the JAMF “plist” is not updating. I checked Netskope and her updated name and email address is synced with SCIM. I can manually send the Netskope client invite to the user and everything works as expected. When the Netskope client is deployment through JAMF it appears the “plist” has the users previous email address which will not work. It appears everything on the Netskope side is updated and correct. Has everyone experience this issue? Is there a JAMF “plist” reset? Thanks.

We’ve observed that several websites either take a long time to load or fail to load entirely when Netskope is enabled. However, the same sites work smoothly once Netskope is disabled. Since the issue is intermittent and not easily reproducible, identifying the root cause has been challenging.A recent example involved LinkedIn Sales Navigator, where some users reported the site not loading. Upon analyzing HAR logs, we noticed that the licdn.com domain was significantly delayed when Netskope was active.We tested a couple of solutions, both of which proved effective for different user sets: Implemented an SSL Do Not Decrypt (DND) rule for the licdn.com domain Assigned a client configuration policy with MTU set to 1494 for affected users We’ve encountered similar issues with other services such as AWS S3, MoveInSync, and Box Notes (for box we have identified boxcdn  domain that is taking time).How can we systematically troubleshoot and resolve such issues where Netskope inspection inter

Cloud security is a shared responsibility, and for organizations leveraging both Netskope and Amazon Web Services (AWS), the synergy between these platforms creates a robust defense. A significant advancement in this partnership lies in plans for Netskope to ingest OCSF-formatted, cloud security findings directly from AWS Security Hub. This integration is pivotal, as it allows Netskope to correlate its determination of user risk and access and the workloads they use to then unleash its inline protection capabilities when called for. By understanding the security posture of AWS environments through Security Hub's comprehensive insights, Netskope can dynamically adjust its enforcement, preventing access to compromised resources and ensuring that only secure interactions occur within the cloud. Netskope's Zero Trust Network Access (ZTNA) solution plays a critical role in this dynamic security model, providing a secure and adaptive way to connect users to workloads and services hosted in A

I have just started a new company.We have brand new Cisco Cat 9500 and 9300 MGig switches. With Netskope installed on our computer have run a speed test and getting 100Mbps connected to the Internet with Netskope enabled.  With Netskope disabled we are getting speeds of up to 700Mbps connected to the internet. Is there a reason why this is so slow, has it got to do with deep packet inspection? Can anything be done to speed this up? I am new to Netskope and our security team are in charge of this. 

 Sending Alerts and Events to Microsoft Sentinel using the Codeless Connector Framework ⚠️ Important: The maximum throughput is 14.4 million events per day per endpoint. This limit is determined by two factors: Microsoft processes one API request per minute per endpoint, and Netskope returns a maximum of 10,000 records per API request (1 request/min × 10,000 records × 1,440 minutes/day = 14.4M). Netskope is actively working with Microsoft to increase this throughput capacity. Seamless Log Shipping: Unlocking Netskope’s Native Integration with Microsoft SentinelIn today’s security landscape, visibility and real-time insights into your organization’s data are critical for effective threat hunting and incident management. To meet these needs, Netskope has developed a native integration with Microsoft Sentinel using the Codeless Connector Framework—allowing organizations to easily stream all CASB alerts, DLP incidents, and threat logs into Microsoft’s cloud-native SIEM. This blog explores

 Basically I want to write a report for the # of users of AI applications, including public Chat GPT  vs the Corporate ChatGPT (which is only available via authentication but on the Internet) I have added it as an app in the Steering Configurations and it shows up separately as an App in SKOPEIT, but I can’t add it to the catalog category.  Is the answer to add a custom web Category and generating enough traffic for page events?

Hi all,While attempting to install the Netskope agent using the provided BAT file, I encountered the following error:"Failed to save enrollment tokens"In addition, when retrying the process, I also receive the following error in the enrollment window:"Configuration download failed. Please authenticate again."Steps I have already taken: Ran the BAT file as Administrator Verified proper network connectivity Attempted the installation on a different machine  note:install mode IDP thanks

Hello,As part of an initiative to raise awareness of the digital impact within our organisation, we would like to set up a Netskope dashboard to identify web uses with a high carbon impact.Objective:To produce consumption indicators relating to user access to sites considered to have a high environmental footprint, including:Video streaming platforms, Social networks, Sites with high bandwidth or high data consumption rates.Do you already have dashboards on this topic?How can we do this? Identify the categories of applications/sites available in Netskope that correspond to these uses; Create or adapt a dashboard enabling us to: Monitor consumption (time, data volume, frequency of access, etc.) by site category; Isolate uses with a presumed high environmental impact; 

HiAnyone has issue with Device “Last Event” status not up-to-date despite it was ONLINE 24x7?The only time the status get updated when windows reboot.  Then the status again never get updated.All the windows systems have this issue.  Thank  

Hello  I’m trying to workout the impact of enabling RBI for the following categories uncategorised, New registered Domain, no content but need to workout how many alerts these categories have triggered to assess the risk on enabling RBI. Anyone have a AA Dashboard on users alerts/ domainsThank you 

Netskope has officially published the Web Transaction connector on Azure Sentinel Content hub. You can avoid the template deployment steps. ⚠️ Important: You can't restrict network access to your Azure Blob Storage account as per the official guidance from MicrosoftThis document outlines the seamless integration of Netskope Web Transaction Logs with Microsoft Sentinel using the Codeless Connector Framework (CCF). This native integration provides near real-time visibility for effective threat hunting and incident management. To configure Netskope Log Streaming to send logs to your Blob storage please go through the article: https://docs.netskope.com/en/stream-logs-to-azure-blob🏗️Integration Architecture OverviewThe integration leverages several Azure services to ensure reliable and scalable log delivery: Netskope to Azure Storage Blob: Netskope pushes Web Transaction Logs (and Alerts/Events) into a customer-owned Azure Storage Blob Container. Event Grid Notification: Every time a new

How to Download all Marketplace Apps grouped for Teams

Hi there, is there a report to list Device Classification and Client configuration values for all NSClient devices? 

Good day,Anyone know of a dashboard or advanced analytics report that can look for Netskope clients that have not checked in after X period of time? For compliance reasons, we want to make sure we are tracking down inactive devices and clients.Thanks in advance!

Hello all,Before we will deploy secure enrollment feature I have a question regarding secure enrollment.Is there a re-installation script available? Would you recommend running it on all devices? What would be the potential impact of doing so?Additionally, I’d like to clarify the following scenario:If a different user logs in to my computer for the first time after we enable secure enrollment, will they encounter any errors?   

We are attempting to get more of our team involved in managing certain aspects of Netskope.  As such, they would like to have access to Advanced Analytics in order to create and maintain dashboards and generate reports.  They would only need Read access to the main management console of Netskope.  I am trying to determine if any of the existing roles would work for this purpose, and which one would give them what they need with the minimum privs required for the task.  I am thinking one of these three may work;Restricted Admin: Has read-only access to all functions. Cloud Intelligence Analyst: Has access only to reporting and analytics. Application Risk Analyst: Can run reports and analytics and read the CCI.I wasn’t able to find an article that broke down the roles into great detail, but please let me know if I missed that.  If App Risk Analyst will let them at least view policies or SkopeIt, that may be enough.  But if it literally only lets them run reports in AA, then I may need on

Is there a list of recommend behavior analytics polices that Netskope recommend turning on instead of turning every policy?

Hello, is there a way in advanced analytics to find unique values of a field with count. Similar to stats in splunk? 

I am working on something that I my brain should be so simple but i am just missing something. We have blocked DeepSeek from our environment. What I have been asked to deliver is a 90-trending report showing Access Allowed, Access Blocked over a 90-day period in a trend line. I am using the #Blocked Events but calculating the Allowed is getting it to show the trend line is where I am having issues.  Thanks for help!