Skip to main content
  • EN

DLP

Your one stop shop for all things Netskope Data Loss Protection.

  • 99 Topics
  • 175 Replies
99 Topics
C
crimsonNew Member
asked in DLP
Default Global DLP Policies Best Practice?

Hello all,I’m looking for recommendations/examples of global default DLP policies.Currently, my organization has a default block policy at the bottom of the tenant for categories that we’ve deemed to have no business use case (weapons, security risk, etc) or to be risky for usage (cloud storage, social media, etc.).In a similar fashion, I’d like to have DLP rules at the bottom of the tenant to act on web traffic before Netskope allows it through. I’ve done some testing with just outright blocking any activities that could be used to exfil data (upload, post, send, edit, etc.) and very quickly ran into issues, and example being background traffic for the Microsoft Edge browser being classified as upload and resulting in a large number of user notifications. I’m currently working through using app tagging to exclude any standard user applications from this policy.Given that not all websites have support for DLP, I’d ultimately like the behavior to be “If the website supports DLP, check t

3090
C
Leandro Timotio de Lima
Netskope Employee
Leandro Timotio de LimaNetskope Employee
published in DLP
(VIDEO) Block Source Code Upload to Email

Policy:Block Upload DLP Source Code Description:In this example we will prevent sending emails (Gmail) with files that contain "source code" in their content. Video: Leandro Timotio de LimaCustomer Success ManagerLinkedin

2581
A
A
Netskope Partner
AllenWu
asked in DLP
Device Control: Printer Identifier Format

Saw this but it doesn’t have clear info on how we can set identifier for different attributes of printer. https://docs.netskope.com/en/constraint-profile/ Does anyone know how to regulate the printer yet?

1243
A
Netskope Partner
Leandro Timotio de Lima
Netskope Employee
Leandro Timotio de LimaNetskope Employee
posted in DLP
(VIDEO) Prevent Sensitive Data From Being Sent to ChatGPT

Policy:Block Confidential Word ChatGPT Description:Policy to prevent sensitive data from being entered into ChatGPT Video:Leandro Timotio de LimaCustomer Success ManagerLinkedin

2380
Leandro Timotio de Lima
Netskope Employee
aplaza
Netskope Employee
aplazaNetskope Employee
posted in DLP
Demo - Train Your Own Classifier

Chief Evangelist, Bob Gilbert, performs a live demo of Train Your Own Classifier, which is Netskope’s groundbreaking solution that puts the power of AI in the hands of customers. Anyone deployed on the Netskope platform with advanced data protection can now train AI/ML models using their own unique corpus of data.  

3811
A
K
kdibbleNew Member III
asked in DLP
Not Near Best Practices

We are working towards implementing a rule that looks for plaintext credentials within shared documents. In doing so, we’ve utilized the Passwords (contextual) pre-defined entity. We’ve noticed that this entity is catching teams and zoom meeting passcodes. We do not want to catch these passcodes in the rule and are trying to create a “not near” advanced expression. I’m looking for guidance on how to perform this. For example here is what we have: P1 = Passwords (Contextual)D5 = Custom Dictionary of words like “meeting”, “teams”, “zoom”, etc… Both options we’ve tried: 1.) ( P1 AND ( NOT ( P1 NEAR D5 ) ) )2.) (P1 AND NOT (P1 NEAR D5)) Any help would be appreciated.  

2569
A
EsraDemircioglu
Netskope Partner
EsraDemirciogluNetskope Partner
asked in DLP
I want to hide some parts of datas

Hello Team, I want to set a policy which can hide some parts of datas (for example credit card numbers) during download/upload processes. (For example If I download document, I want card numbers become like 1111 xxxx xxxx xxxx )Is Netskope able to do this?Note: My question is not answered in this link  https://docs.netskope.com/en/dlp-entity/#entity-obfuscation-1  Thank you in advance,

962
N
S
SakeeNew Member III
asked in DLP
AND Operator Value in DLP Rules

I am trying to determine when a DLP Rule needs to leverage the NEAR operator versus the AND operator. In one example incident, a DLP Rule defined as (P1 NEAR P2) appears to have been triggered when the two entities were over 10,000 characters apart.What is the default value of the AND operator, is it truly more than 10,000 characters?

1052
S
Netskope Employee
V
vedNew Member
asked in DLP
OCR DLP Detection

 Hello everyone! I hope you're all doing well. I'm currently exploring how to set up an OCR DLP detection policy on Netskope for our organization's security needs. Could anyone provide guidance or step-by-step instructions on configuring such a policy? Any insights, tips, or best practices would be greatly appreciated. Thanks in advance for your help!

13762
A
Netskope Partner
F
fbrunnerNew Member III
asked in DLP
Netskope SMTP Proxy - Scanning O365 Email Body contents

I have been digging through documentation but have been unable to find an answer on this specific SMTP Proxy DLP issue.  We currently use Netskope DLP to cover network exfiltration and endpoints (USB, etc), and we’re testing Netskope’s SMTP Proxy DLP.  For some reason, we’re unable to get Netskope to trigger on DLP violations in the message body.  It always catches content in attachments, but if I paste the exact same test content in the message body (SSN, CC, etc) it fails to trigger a violation.  Is this by design, or am I missing something in the config?  Thanks

751
F
A
ArijNew Member
asked in DLP
DLP - Detect IP addresses in a log file

Hello, I have a file containing records in this format: 2022.03.18 11:46:45 DEBUG web[XXXXXXXX][auth.event] login success [method|BASIC][provider|REALM|ldap][IP|10.10.10.10|10.10.10.10:55637][login|XXXXXX]I used this regular expression to detect private IP addresses: (10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.1[6-9]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.2[0-9]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.3[0-1]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(192\.168\.[0-9]{1,3}\.[0-9]{1,3})Using this regular expression, I can't detect any IP addresses in the file sent through netskope. What can I do and where is the problem?

875
S
Netskope Employee
EsraDemircioglu
Netskope Partner
EsraDemirciogluNetskope Partner
asked in DLP
How do I create a policy for data masking?

Hello Team,I read Netskope has data masking ability but I couldn’t find enough details about it. Is there any detailed document about this feature? And how can I create a policy about data masking? Thank you in advance! 

2332
EsraDemircioglu
Netskope Partner
J
jschueleNew Member III
asked in DLP
sync_item_content not in activity list

I see application events pertaining to Cloud Storage with an Activity of sync_item_content, but I can’t filter on that activity, or see it in the list of all activities. Am I missing something?What I would like to do is use it in a DLP policy to identify files being synced to personal cloud storage instances. Thx  

1080
J
1
11qwerty22New Member
asked in DLP
Detection of DLP post in Windows 11 / Copilot

Has anyone been successful in making the DLP work while using preview Copilot in the Windows 11? I don’t see the traffic alerts/page events in the SkopeIT. My assumption is it is using msedgewebview2.exe websocket which means Netskope is not capable of doing MiM inspection? Thanks.

6746
1
I
ivan.baracNew Member
asked in DLP
How to limit upload for WeChat Windows app

I have request from customer to limit file size for upload in WeChat Windows desktop up. Limit size is 25 MB. I created File profile for File Size and include all Types, but doesn’t work well, I have notification action is blocked, but file is uploaded. If someone have idea how to solve that problem, please help me.

1200
I
C
CarlosNew Member III
asked in DLP
API Data Protection Policy - User Profiles

Seeking some assistance with API Data Protection Policies.Looking to leverage ‘User Profiles' so that API policies will only trigger on a subset of users. From what I can see, user profiles only allows importing the full user identity. Is there a way to set up domain wildcards so that it trigger for all users of a domain e.g. *@domain.com? Note: Currently using Classic API data protection policies for M365.Is this something that will be addressed with the Nextgen API? 

1051
ejang
Netskope Employee
Rajiv Prasad
Netskope Partner
Rajiv PrasadNetskope Partner
posted in DLP
need help to migrate from McAfee to netskope

we are planning to migrate existing proxy solution of an organization from  McAfee to Netskopeif any one have any prerequisite please suggest  

503
E
monika
Netskope Partner
monikaNetskope Partner
asked in DLP
Risk management

Can we set policy like before sending the sensitive data across the other domain get a approval notification to manager , and if manager approves it then user can share the data?? 

350
monika
Netskope Partner
Z
ZulhaideeNew Member III
asked in DLP
Endpoint DLP requirement with SWG

Hello, i was informed that to utilize the Netskope Endpoint DLP protection, it is required to have SWG Professional license as well to use with Endpoint DLP. I’ve been looking for a statement for the requirement but unable to find out. I just would like to understand why it is required such combination? One reason that i can think of (correct me if im wrong) is due to communication to the tenant would require SWG license.

1120
Z
J
jschueleNew Member III
asked in DLP
Identification of Synthetic Test Data

Wondering if anyone has taken advantage of a synthetic data generation tool like K2View or Gretel and integrated with Netskope for use in identifying and whitelisting synthetic data elements versus production data? This comes into play with companies developing code and processing sensitive data types. Thx

431
aramachandran
Netskope Employee
D
deepakkNew Member III
asked in DLP
Multiple action on Different profile in real time policies

We want to trigger different action f for medium and HIgh Severity  for a UK NINO ProfileFor Medium   we want user justification need to be triggered and for high we want to block need to be triggered 

831
aramachandran
Netskope Employee
VaishnavD
Netskope Partner
VaishnavDNetskope Partner
asked in DLP
Netskope SMTP Proxy

Hello Everyone,Hope you are doing well.I have one question regarding license.We are implementing Netskope SMTP Proxy at customer end, and we are integrating Netskope with Microsoft O365 for inspecting outgoing emails.What type of license do we require from O365 end to do configuration (eg - blocking rule) 

900
VaishnavD
Netskope Partner
J
jschueleNew Member III
asked in DLP
Endpoint DLP & System Scanning

Is the option to perform local system scans (Windows, MacOS) on the roadmap? I really need the ability to identify files matching my DLP polices that reside on our users managed computers. Thx

1411
ejang
Netskope Employee
bruna
Netskope Partner
brunaNetskope Partner
asked in DLP
DLP API PROTECTION CHAT

Hi Friends, Is it possible to create a rule for internal users to detect any CPF sent through chat? Best regards

823
P
N
ndudaExplorer
asked in DLP
DLP on File Name

It seems as if creating DLP rules/profiles will not trigger on the name but only content. Does anyone know a way to address this? For example, I would love to have a couple dictionary entities that look for certain word NEAR certain words in a file name.ExampleDictionary 1: cat, dogDictionary 2: mouse, birdD0 NEAR D1 Filename: My cat and turtle.pptx (wont alert)Filename: My dog and bird.pptx (will alert)The content of both files has none of those words. 

1150
N

Badge Winners

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings