Skip to main content
  • EN

DLP

Your one stop shop for all things Netskope Data Loss Protection.

  • 82 Topics
  • 156 Replies
82 Topics
monika
Netskope Partner
monikaNetskope Partner
asked in DLP
Risk management

Can we set policy like before sending the sensitive data across the other domain get a approval notification to manager , and if manager approves it then user can share the data?? 

310
monika
Netskope Partner
Z
ZulhaideeNew Member III
asked in DLP
Endpoint DLP requirement with SWG

Hello, i was informed that to utilize the Netskope Endpoint DLP protection, it is required to have SWG Professional license as well to use with Endpoint DLP. I’ve been looking for a statement for the requirement but unable to find out. I just would like to understand why it is required such combination? One reason that i can think of (correct me if im wrong) is due to communication to the tenant would require SWG license.

960
Z
J
jschueleNew Member III
asked in DLP
Identification of Synthetic Test Data

Wondering if anyone has taken advantage of a synthetic data generation tool like K2View or Gretel and integrated with Netskope for use in identifying and whitelisting synthetic data elements versus production data? This comes into play with companies developing code and processing sensitive data types. Thx

371
aramachandran
Netskope Employee
D
deepakkNew Member III
asked in DLP
Multiple action on Different profile in real time policies

We want to trigger different action f for medium and HIgh Severity  for a UK NINO ProfileFor Medium   we want user justification need to be triggered and for high we want to block need to be triggered 

681
aramachandran
Netskope Employee
VaishnavD
Netskope Partner
VaishnavDNetskope Partner
asked in DLP
Netskope SMTP Proxy

Hello Everyone,Hope you are doing well.I have one question regarding license.We are implementing Netskope SMTP Proxy at customer end, and we are integrating Netskope with Microsoft O365 for inspecting outgoing emails.What type of license do we require from O365 end to do configuration (eg - blocking rule) 

760
VaishnavD
Netskope Partner
J
jschueleNew Member III
asked in DLP
Endpoint DLP & System Scanning

Is the option to perform local system scans (Windows, MacOS) on the roadmap? I really need the ability to identify files matching my DLP polices that reside on our users managed computers. Thx

1141
ejang
Netskope Employee
bruna
Netskope Partner
brunaNetskope Partner
asked in DLP
DLP API PROTECTION CHAT

Hi Friends, Is it possible to create a rule for internal users to detect any CPF sent through chat? Best regards

773
P
N
ndudaExplorer
asked in DLP
DLP on File Name

It seems as if creating DLP rules/profiles will not trigger on the name but only content. Does anyone know a way to address this? For example, I would love to have a couple dictionary entities that look for certain word NEAR certain words in a file name.ExampleDictionary 1: cat, dogDictionary 2: mouse, birdD0 NEAR D1 Filename: My cat and turtle.pptx (wont alert)Filename: My dog and bird.pptx (will alert)The content of both files has none of those words. 

930
N
B
bntrotterNew Member
asked in DLP
Best Practices for using Netskope DLP for Generative AI Posts/Upload Activity

Are there any Best Practices for using Netskope DLP: to gain visibility into Generative AI site Posts  & Upload activity?

2150
B
monika
Netskope Partner
monikaNetskope Partner
asked in DLP
Device classification

When a user tries to download any files from his/her BYOD using organization's email platform, the download should be blocked.?? How can we achieve  this in Netskope please provide me the steps..

1931
ejang
Netskope Employee
A
Anonymous
asked in DLP
Netskope Email DLP with Mimecast

Dear All   I tried to setup Netskope Email DLP with Mimecast, however it seems like the message has not successfully deliver to mimecast MTA. 1. Configured SMTP settings (Domain, Tenant ID, Next Hop FQDN which is mimecast smart host, port)2. Configured exchange flow connector to route message to Netskope smart host3. Configured real time policy with action add X header: block when sensitive data is detect4. Setup content examination definitions and policy from Mimecast when receive X header: block 5. Test sending outbound email with sensitive info on the content. Tested sending another email without any sensitive info. (Both email had failed to deliver to recipient)6. Checked on SKope IT > Alerts > noticed that Email DLP policy has triggered with email consisted of sensitive info.7. Checked on Mimecast message tracking, however did't receive any message (for both sensitive and without sensitive message) Is there any steps that I miss out? Thank

3184
S
Netskope Employee
T
TKO3SonsNew Member III
asked in DLP
DLP documentation out of date for Entities

I need to modify the default DLP profile for profanity as we have a user with a last name that matches the profanity profile. I raised a helpdesk ticket to follow the steps mentioned in https://docs.netskope.com/en/netskope-help/data-security/data-loss-prevention/dlp-entity/ to copy the Entity. However, I noticed that in the later releases of Netskope, the Entity tab was renamed to "Dictionary" and is different from the old Entity. Can anyone guide me on how to copy and modify the default profanity profile?

1021
S
Netskope Employee
J
jschueleNew Member III
posted in DLP
API Data Protection DLP policy & User Whitelist

Currently for API DLP Policies you can only exclude by Domain. What is the reason behind not being able to exclude by User address? I have had many instances whereby a contractor is hired and only has a Gmail account, which I am not willing to exclude by Domain. This is generating massive amounts of false-positives. Thoughts? 

1834
J
S
saharv2022New Member
asked in DLP
Alerts and incidents severity

Is there a away to only allow alerts and incidents to be generated on medium severity and above? We have too many alerts being generated on low severity matches.   

781
ejang
Netskope Employee
O
odhareddyNew Member
asked in DLP
DLP Exclusions for Realtime policies

 How can I create an exclusion for DLP Realtime policies for a single user/group to exclude a specific Domain for a Specific DLP policy?  Use case is, A user 1/Group 1 to exclude from a Single DLP policy (PCI DLP Policy) to an abc[.]com.But, if any other users/Groups try to upload PCI data we need detection. And, when the same user 1/Group 1 tries to upload PHI Data then we need detection on abc[.]com. Thanks in advance.   

3956
ejang
Netskope Employee
U
ullasNew Member
asked in DLP
Integration of Netskope with SentinelOne XDR

Hello Team, Good Day.I'm curious to know the setps or methods for integrating Sentinelone EDR and Netskope DLP solution for the Data analysis part.As a part of my study on Endpoint Security, I feel DLP also play a major role in protection of Data at Endpoints as same as EDR. Seeking guidance here for the integration.Thank you for the help. Regards & Thanks,

7242
Gary-Jenkins
Netskope Employee
S
satya691New Member
posted in DLP
How to block file transfer between coporate laptop and personal

Hello,How to restrict any type of file transfer between corporate Laptop and Personal Laptopfor example, i have corporate laptop installed Netskope and i have personal laptop both are connected in home Wi-Fi , how to restrict any file type transfer between the devices. Kindly suggest a solution on this.

2141
Gary-Jenkins
Netskope Employee
D
deepakkNew Member III
asked in DLP
Exception is not working for DLP SSN rule

We are using Exception through Entities  in our rule but it keeps on detecting ssid and ssan keyword while other keywords not. Why ssid is detecting if it is part of url ? how we can exclude url from detection below is the sample url https://www.sharonheightscc.com/default.aspx?p=DynamicModule&PageId=395579&ssid=318084&vnf=1

1413
A
D
Diya ChalakaranNew Member
asked in DLP
How to use DLP dictionaries as exceptions.

Hello, I’ve created a data dictionary containing false positive terms (D0). The given expressions does not seem to be working - P0 AND (NOT D0)P0 AND (NOT(P0 AND D0)) Predefined Identifiers(P0) - Full Names (International)Dictionary Identifiers(D0) - DLP-Exclude-Full NamesI’d like to detect all the terms which are IN P0 and NOT IN D0.  Could anyone suggest an alternative, please ? Thanks ! 

2501
D
W
wdlabNew Member
posted in DLP
possible to DLP block PII sent via OneDrive or Gdrive app?

Dear community,I am working with SWG and DLP to avoid users uploading sensitive content on corporate Onedrive.All the client has netskope client enabled and everybody run win10.I successfully managed to avoid users to upload on Onedrive via web a sensitive files, due to match with DLP policy, but the same user, while using Onedrive app just receives a warning.Basically, when the user upload the PII file is warned by the netskope client and it is also blocked,  when the same file is copy/pasted in the shared onedrive folder, it is only warned, but the action has success.Is that a limitation or are there some configuration part which I am missing?the client configuration is steering everything and the exception part is by default. Thanks.Walter

1962
Carlos1
Netskope Partner
C
Chris_BowmanNew Member
asked in DLP
Tuning False Positives for Real-Time Protection DLP Policies.

We have been leveraging the inline DLP policies for over a year, and have struggled to “tune” the policies for false positives for PCI, PII, GLBA rules. Curious for feedback from the community no how you tune your rules/classifier etc to weed out false positives.. Our current route/solution we are looking at is excluding “sites” that generate the majority of the false positive hits. Example: Walmart is notorious for flagging carts with Names of brands next to the item number for SSN & US Names..Any and all feedback is welcome - thank you so much in advance!!

990
C
M
munster
asked in DLP
DLP Password Protected User Alert

Hi I saw this KB Alert/block upon detection of password protected files - Netskope Knowledge PortalHow can we set "user alert" action for coaching? thankMunster

1761
ejang
Netskope Employee
Indu
Netskope Partner
InduNetskope Partner
asked in DLP
DLP: PCI & PII tests failed on netskopesecuritycheck.com

Hi Team,We configured DLP for all categories with PCI and PII DLP. However, on netskopesecuritycheck.com, DLP PCI and PII block tests are failed. Has anyone had success with these tests? Can you please share the DLP policy configuration that has passed?  Thanks & Regards,Indu

1573
Indu
Netskope Partner
F
fbrunnerNew Member III
posted in DLP
Dashboard for user USB file transfer activity (EP-DLP)

Wondering if anyone is aware of an existing dashboard to keep an eye on allowed USB file activity.  We're looking to see a line-up of the top users uploading content (regardless of it triggering a DLP event) to USB devices.  I've tried piecing something together, but the fields don't appear to be available in Advanced Analytics.

1001
G
Natedog0024
Natedog0024New Member
posted in DLP
DLP in RTP with Traffic Direction Issue?

Hello,I have a policy setup to block uploads to a specific instance of an application when any DLP profile matches otherwise alert via the traffic direction functionality in the RTP. This has been working fine for a while. Today, I went to add additional instances and when I had the user test, it was still being blocked, completely bypassing that rule and going to my default deny, its not matching DLP because if it was, it would be blocked by the policy I am talking about, its sliding right by my rule... I tried a separate RTP at the top with just the instance configured the same way with no luck. The only way I could get it to work was to remove the DLP profiles.The specific instance I was testing with was a third instance that was sharepoint.Has anyone seen this?Nate 

852
Natedog0024

Badge Winners

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings