Discussions

I am facing issues while provisioning user groups to netskope console from OneLogin

Hi Everyone,While provisioning users from OneLogin to netskope console, I am facing issues when I try to fetch groups. I have successfully provisioned users by following the given document: https://docs.netskope.com/en/netskope-help/integrations-439794/provisioning-and-authentication/user-and-user-group-provisioning-with-onelogin But when it comes to provision groups I am unable to find a way to achieve the same.If there are any ways or documentation kindly let me know.

1661

Aaron_ZhangNetskope Employee

January 2024 Office Hours Recap

Hello Folks,    Below you can find a recap of questions asked at the January office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’d like to know which recommended training we should take in a structured manner to get started with Advanced Analytics. A: We highly recommend starting with the NAA Training Resources post in our community. The post points you to a list of resources which can help you quickly get started with Advanced Analytics. If you are looking for some recommended dashboards to start with, the NAA Top Dashboards post will be a good choice.   Q: I want to make sure we are using Netskope products effectively. Can I leverage Advanced Analytics on this? A: Yes. The CASB & NG-SWG Operationalization Dashboard are two good starting points. With focus on CASB & NG-SWG, these

1410

kvarshneyExplorer III

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

1120

kvarshneyExplorer III

1180

kvarshneyExplorer III

1100

kvarshneyExplorer III

1000

kvarshneyExplorer III

850

kvarshneyExplorer III

830

kvarshneyExplorer III

760

kvarshneyExplorer III

860

kvarshneyExplorer III

760

Aaron_ZhangNetskope Employee

December Office Hours Recap

Hello Folks,    Below you can find a recap of questions asked at the December office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Happy New Year!   Q: I’m confused about custom dimensions in Advanced Analytics. Are there any resources I can review to better understand this feature? A: Yes. You can find a tutorial on custom fields (including custom dimensions) in this training video. This article from Netskope Knowledge Portal can also help.   Q: I’m looking for a tutorial on Netskope Data Loss Prevention (DLP). A: This article provides a list of resources on Netskope DLP, which can be a great starting point. If you are interested in best practices and a deep dive into this topic, please watch this webinar.   Q: Can I view Chrome versions detected in my organization and how many peopl

1810

MichaelKoherNew Member III

API OneDrive Reports

I am attempting to build an AA report from my OneDrive API connector, but I am finding it is working off alerts vs the API data. What I am trying to build is a report showing employees have used their OneDrive to share with external users the name of the file/folder, type, and size. I can get that data if it falls in the 90-day data window we have with AA, but I can't pull from the raw API over the life of the file/folder. I would just use the API Export, but it leaves off the shared with many times, so I was hoping AA would solve that.  Is that because AA is limited to only alerts within the subscription of data like 30/90 days?  Thank you  

870

Aaron_ZhangNetskope Employee

November Office Hours Recap

  Hello Folks,   Below you can find a recap of questions asked at the Nov office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: Where can I get some resources to quickly get started with Advanced Analytics? A: We highly recommend starting with the NAA Training Resources post in our community. The post points you to a list of resources which can help you quickly get started with Advanced Analytics. If you are looking for some recommended dashboards to start with, the NAA Top Dashboards post will be a good choice.   Q: We are looking for insights for Board & Executives reporting, including AI. Can I leverage Advanced Analytics on this? A: Sure. For AI-related topics, we recommend starting with the AI Usage Dashboard in Netskope Library, which helps you understand how AI apps & sites are

1170

qyostExplorer III

Couple custom field creation questions

I have two values I would like to display in a table widget, but I can't seem to find the right way to craft the custom field.  For both, I'm trying to extract a single value across mutliple individual alerts.1) I can easily get the number of users matching the criteria for the record, but I would prefer to display a list of the users. How can this be done without presenting a row for each user? I would much prefer to have them summarized into a single cell.2) The second summary field I would like to create is the "most recent" time across the individual records.Table I'm working withAny recommendations would be appreciated.

1010

Aaron_ZhangNetskope Employee

October Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started and “Getting Started” Webinar will help you get started quickly. More details can be found from our YouTube Channel. We highly recommend starting with existing dashboards, either in Netskope Library or Community. Tags can help you find dashboards you are interested in. You can explore any dashboards based on your needs, and customize them in your environment. You can also find tons of resources (e.g., hot topic discussion, dashboard intro, and upcoming AA events, etc.) here on the Netskope Community.   Q: Regarding API protection, I’m lookin

1190

Aaron_ZhangNetskope Employee

September Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: When I create a dashboard in Advanced Analytics, is it visible to everyone by default or just me? A: If you created the dashboard in your personal folder, it is visible to you only. If the dashboard is in the group folder, it will be visible to everyone in your environment.   Q: I want to understand if my organization is using Netskope’s CASB product to its full potential. Can Advanced Analytics help me with this? A: Yes. The CASB Operationalization Dashboard can help! It helps you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to its full potential. The specific focus of this dashboard is operationalizati

1030

Aaron_ZhangNetskope Employee

Change Time Format to 00:00:00

  Are you bored of reporting time with "hours," "minutes," and "seconds" in Advanced Analytics? Are you looking for a cool and efficient way to report time like an F1 driver? This post can help!   Let's start with an example. Netskope wants to report the connection duration of each application. A traditional way is to use the "Connection Duration" field, which will return connection duration in seconds. For instance, if a session is connected at 9:00 AM and disconnected at 10:30 AM, the result would be "5,400 seconds."    Now, Netskope wants to report the connection duration in a different format "00:00:00." To make this happen, all we need to do is just applying the custom field below: This field will convert the original result "5,400 seconds" to "1:30:00 (1 hour, 30 minutes, 0 seconds)," which provides a more visualized way to report time. The dashboard has been attached below. Feel free to download and import it into your own environment for more details. &nbs

2700

Aaron_ZhangNetskope Employee

August Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m looking for visibility into YouTube usage in my organization. Can Advanced Analytics help me with this? A: Sure! Please check the YouTube Activity Dashboard from our community. This dashboard will give you an overview and approximation of the time users spend on YouTube.    Q: My organization is interested in learning when users are downloading from corporate applications to personal machines without the client installed. Is this possible? How to make sure it’s NOT from a managed device (possibly looking at non-corporate IP ranges)? A: In general, Netskope recommends that conditional access be used within the application management controls to lock

2060

Aaron_ZhangNetskope Employee

July Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: How do I leverage Advanced Analytics for threat hunting activities?  A: Check out some blogs recently posted by Netskope’s internal security team including:  The Threat Hunting Process Threat Hunting: Suspected Shell Traffic in Advanced Analytics Investigating .zip and .mov top-level domains   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started will help you get started in about 5 minutes. For a more indepth getting started guide, check out our recent webinar Getting Started with Advanced Analytics.   Q: How can I leverage Advanced Analytics to properly measure policy e

1440

AFunkhouserNetskope Employee

Threat Hunting: Suspected Shell Traffic in Advanced Analytics

Web shells are commonly used by threat actors as part of the command and control phase of a cyberattack. These shells can be custom code and used by common C2 frameworks such as Cobalt Strike or be generated as a default payload in exploitation frameworks such as Metasploit. With this comes a challenge to security professionals on how to detect, mitigate, and hunt these shells that may be generated by an adversary during an attack. Netskope’s Advanced Analytics can be used in combination with Netskopes Cloud Firewall to create a dashboard that provides insight into where potential shell traffic is occurring within an organization's environment.    Uploaded with this community post is a Netskope Advance Analytics Dashboard that provides broad insight into where these potential shells may be occurring within an organization's environment.    The first Widget in the dashboard is the Ping dashboard. This shows ping traffic within the organization's environment. Dependin

740

Aaron_ZhangNetskope Employee

Resolved: Why is my link not working?

  As an essential feature of Advanced Analytics, adding "links" to a dashboard helps users precisely locate particular content. Simply by clicking the keyword with a URL attached, users will be directed to the webpage linked.   A link can be added in several ways. The easiest way is typing the syntax "[Keyword](URL)." By doing so, the webpage will be opened in the current window when users clicking the keyword.    However, this method does not work properly sometimes, and may give you the error message shown below.   To avoid the error, the best way is having the URL linked and opened to a new tab, not in the current window. The syntax template in this case is "<a href="URL" target="_blank">Keyword</a>."    By doing so, the webpage linked will then be opened in a new tab when users clicking the keyword.   A sample dashboard is also attached below. Feel free to let us know if you have any questions on this topic. Happy to help

730

Aaron_ZhangNetskope Employee

June Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started will help you get started quickly. More details can be found from our YouTube Channel. We highly recommend starting with existing dashboards, either in the library or community. Tags can help you find dashboards you are interested in. You can explore any dashboards based on your needs, and customize them in your environment. You can also find tons of resources (e.g., hot topic discussion, dashboard intro, and upcoming AA events, etc.) here on the Netskope Community. On July 13th, 2023, we will be hosting a “Getting started with Advanced Analytics”

1670

jforrestNetskope Employee

Avoiding common issues to populate the Generative AI Dashboard

SynopsisThe article provides a checklist of common dependencies and issues to avoid while populating the Generative AI dashboard.   Checklist to avoid common issues while populating the Generative AI dashboard Do the systems have an active access method? Client Tunnel Etc. Are users actively steering the traffic? SWG Steering It is important to ensure that the “Generative AI” Category is not in the steering exceptions CASB Steering If you are in; "Traffic Steering: Cloud Apps Only" we will need to explicitly steer the default steerable applications Select the steering configuration at https://<tenant_name>.goskope.com/ns#/settings?view=steering_config Select "Add Steered Item" Select "Generative AI" in the category selection drop down and then select all of the Generative AI applications you desire to gain visibility and control on.    Please note: Bing.AI is part of "Microsoft Bing" and will need to also be added to steering

21170

qyostExplorer III

Map - Connected Points - Formatting

I've put together a quick map visualization, but I am not able to manipulate it in the manner I'd like to. The editing options have a lot of control over how the points at the end of the line display, but I'm not really interested in the ends.   Instead, I'd like to change how the lines are displayed.  Am I overlooking something, or should I open an Enhancement Request to expose formatting controls for the lines themselves?Specifically, I would like to color the line one end based on a string value associated with one of the points.

2130