Skip to main content
  • EN

DLP

Your one stop shop for all things Netskope Data Loss Protection.

  • 63 Topics
  • 105 Replies
63 Topics
K
kipbarnhillNew Member
posted in DLP
MIP Labeling Challenges

Hello everyone, My organization currently uses MIP to manually apply labels to Office files. We are looking to start using Netskope API Data Protection to automatically apply labels to files in SharePoint that contain sensitive data but I have a couple challenges I am not sure how to handle.  1. Microsoft Information Protection by default will not override any manual labels applied or override any label with a higher priority. We would like to keep this capability when using Netskope to apply labels but I cannot find any way to accomplish this.  2. We would like to build automated workflows to notify users when a file they own has had it's label upgraded because it contains sensitive data. This works great the first time the label is applied but a DLP alert will occur every single time the file is edited even if the file already has the upgraded label. I think a potential solution to challenge 1 would be to look for the manual label attribute in the files

0
K
1 year ago
M
Netskope Employee
MM_NSNetskope Employee
posted in DLP
Github Binary Files Commit Alert

Context: You have some users uploading sensitive data to Github. These smart users are avoiding detection by using non-text formats e.g. XLSX or docx. How to get alerted for binary commits on Github? Solution: Netskope next-gen Github API can detect and alert when a binary file is committed to Github. Create a very simple DLP rule that detects keywords for "Binary files". Call that into a profile and a Github ongoing policy. That's all that is needed. Here are the required screenshots showing how to create a DLP rule using custom entity with case insensitive keyword.  

0
M
Netskope Employee
1 year ago
aramachandran
Netskope Employee
aramachandranNetskope Employee
posted in DLP
Netskope Data Protection for Google Bard

As the AI wars heat up, Google is stepping up its game against OpenAI with the release of Bard. Google originally (early 2023) made it difficult for the average user to play around with Bard by introducing an invitation based system resulting in waitlists, again this was earlier this year when ChatGPT rocketed into the mainstream consciousness, but as it stands today, most, if not all Google account holders can access, play around, I mean, leverage Google Bard.   What are the risks involved for enterprises ? The reality is that it's not any different than the risk of using an unsanctioned app. I mean data exfiltration capabilities, privacy issues et al, makes Google Bard a veritable minefield for every security organization.   Google explicitly advertises Bard as way to make life simpler for software devs. This is the biggest risk I see for most enterprises when it comes to Bard and other similar platforms. The risk of devs copy/pasting sensitive code for debugging, and/or un

1
S
1 year ago
bruna
Netskope Partner
brunaNetskope Partner
posted in DLP
Creat policy binario .exe

Is it possible to create a policy to block whatsapp .exe download?I created but I didn't succeed in the test.

5
jforrest
Netskope Employee
1 year ago
A
Netskope Partner
AMARNetskope Partner
posted in DLP
Netskope integration with Unmanaged devices

Hello All, Looking for some help !! If we need to manage the traffic of unmanaged Devices like personal laptop , Tablets and mobile the usual proposed methodology is Reverse Proxy integration to map the control, But i wanted to check on the below mentioned point. If we have user authentication mapped with the Netskope proxy and user when logging in via personal devices and getting authenticated via Netskope Proxy in this case do we require the reverse proxy integration? Thanks in advance for your help !! Thanks & Regards Amar  

1
pvilarino
Netskope Employee
1 year ago
corantoba
Netskope Partner
corantobaNetskope Partner
posted in DLP
IRM integration to restrict attaching sensitive documents via Whatsapp

Is there the possibility of integrating IRM with Netskope and being able to restrict what types of documents can be sent through WhatsApp according to their label? I saw in the official documentation that Netskope supports the following cloud apps with MIP:Box, OneDrive, SharePoint, Google Drive. Thanks in advance for your help in this matter.

2
corantoba
Netskope Partner
1 year ago
M
Netskope Employee
MM_NSNetskope Employee
posted in DLP
DLP for All Web Traffic?

As a security architect or as a Netskope admin it is sometimes tempting to configure controls that are too broad. Especially when a tool's UI makes it easy for you to do so.:) Think of the implications of broader controls from an operations point of view. Think of some of the side effects: false positives, missed true positives, barge of DLP incidents in your queue to name few. A seasoned DLP admin would share stories of painstaking tasks of managing those incidents, storing chain of custodies using Legal Hold and Forensic folders, determining the right storage of choice and then the cost associated with it just storing files and meta data that may or may not make sense without a good DLP program in place. Here are some questions you might want to ask your DLP / Compliance team / or the sponsor of DLP program to get a discussion started on this topic:  It allows me to apply DLP to  "All Web Categories", should I go ahead and create such a broad DLP policy though? Answers to the questio

3
M
Netskope Employee
1 year ago
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
posted in DLP
Single Sing ON - SSO - UI with SAML Azure-AD

Single Sing On - SSO Tenant UI with SAML Azure-AD Hello community Netskope, good afternoon. As always thanks for the support and collaboration. I have the following problem, I am configuring SSO for Netskope Tenant UI, to use Azure-AD credentials from Office 365. Guided by this Doc/Links:https://docs.netskope.com/en/netskope-sso-with-azure-ad.htmlConfigure an Enterprise Application in Microsoft Azure Active Directory using SAMLConfigure SSO Settings in the Netskope UIAdd Azure Active Directory Users to the Defined Application and Assign RolesDefine Custom Roles for Azure Active Directory Enterprise ApplicationNow I configure everything, everything seems to be OK, but I get the following error when trying to login to the Tenant: - "We seem to have hit a problem.Error Code: General ErrorError: Failed to get SAML IdP Certificate!"- - Is this something related to the Partner Tenant we have ? any particular step ? If I go to the Seetings- Administration -

1
M
Netskope Employee
1 year ago
C
ccreedNew Member
posted in DLP
E911

anyone else having issues or have a solution for E911 and compliance with the below requirements. https://www.fcc.gov/911-dispatchable-location  

1
aramachandran
Netskope Employee
1 year ago
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
posted in DLP
Total integrations with Office 365 / Azure AD / Sharepoint / Outlook / OneDrive

Total integrations with Office 365 / Azure AD / Sharepoint / Outlook / OneDriveHi good afternoon, first of all thanks for the time and for the collaboration. I am interested in knowing which one(s) are All possible integrations with Office 365 environments, example: -Provisioning Users/Groups ? -Security Outgoing/Incoming Mail ? From Outlook web and from the desktop APP andand Mobile/Smartphone clients ? -Filtering for Onedrive desktop Apps and web access ? -Filtering for Sharepoint ( Desktop Apps and web access ? ) What are the minimum requirements to achieve this? At the level of licenses of office 365 ? Azure AD ? At the level of services ? prerequisites ? requirements etc ? Scope, Limitations, to what extent you can filter, advantages and disadvantages ? Thanks in advance for your time, support and collaboration. I remain attentive Best regards

0
MetgatzNK
Netskope Partner
1 year ago
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
posted in DLP
Netskope Cloud Log Shipper Syslog Integration

Overview Cloud Exchange CLS’s Syslog forwarding gives you the ability to send Netskope Event, Alert, and WebTx messages to any Syslog server. Using the Microsoft Incoming Webhook application from the Admin center Cloud Exchange will send messages to a configured Teams channel to notify you when an Alert was seen from Netskope.  Requirements CloudExchange 3.3.3 or newer Basic Cloud Exchange setup (Netskope tenant API v1 and v2 setup) Netskope plug - Netskope CLS Any Syslog server Syslog Server For testing and writing this document, I am running a Ubuntu 20 LTS Compute Engine on GCP  with Docker and Graylog running in a container. Leave a comment if you would like me to write up that setup.  Verify url/ip and port of your Syslog server In Graylog you can see the input port by going to System > Inputs Netskope Cloud Exchange setup steps Cloud Exchange Plugins On your Netskope Cloud Exchange go to Settings > Plugins You will need two plugins configured for this solu

0
Gary-Jenkins
Netskope Employee
1 year ago
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
posted in DLP
Cloud Exchange Cloud Log Shipper Syslog Integration

Overview Cloud Exchange CLS’s Syslog forwarding gives you the ability to send Netskope Event, Alert, and WebTx messages to any Syslog server. Using the Microsoft Incoming Webhook application from the Admin center Cloud Exchange will send messages to a configured Teams channel to notify you when an Alert was seen from Netskope.  Requirements CloudExchange 4.2 or newer Basic Cloud Exchange setup (Netskope tenant API v1 and v2 setup) Netskope plug - Netskope CLS Any Syslog server Syslog Server For testing and writing this document, I am running a Ubuntu 20 LTS Compute Engine on GCP  with Docker and Graylog running in a container. Leave a comment if you would like me to write up that setup.  Verify url/ip and port of your Syslog server In Graylog you can see the input port by going to System > Inputs     Netskope Cloud Exchange setup steps Cloud Exchange Plugins On your Netskope Cloud Exchange go to Settings > Plugins You will need two plugins configured f

0
Gary-Jenkins
Netskope Employee
1 year ago
P
PatrikAdarmaNew Member III
posted in DLP
File Profile in DLP

Created a File Profile with a File Name (exclude.xlsx) and applied into a DLP Profile (tried with Match and Does not Match). When I running tests, none of them are working (not checking the exclude.xlsx file with the matching profile // not excluding the exclude.xlsx file).Can you please advise?Thanks

1
aramachandran
Netskope Employee
1 year ago

Badge winners

Show all badges
Terms & ConditionsCookie settings