HI Team,
We are currently receiving 24-hour scheduled reports for USB activity from Netskope; however, this does not fully meet our organization’s monitoring requirements.
We would like to highlight a specific requirement from our end:
• Whenever USB access is granted to any user, we need the ability to capture and receive activity details immediately (near real-time or on demand).
• The report/log should include:
o User details
o Device information
o Type of activity (Allow/Block/Alert)
o Files accessed or transferred
o Accurate timestamp of the activity
At present, while these activities are visible in the Alerts/Events section, the scheduled 24-hour reports do not provide complete visibility, especially for all actions (Allow/Alert/Block) in a timely manner.
Therefore, we request you to:
1. Validate this requirement from a product capability standpoint.
2. Confirm whether real-time or near real-time reporting/export for USB (Device Control) activity is feasible.
3. Advise on any configuration changes, reporting mechanisms, or alternative approaches (such as custom reports, alerts, or API integration) that can fulfill this requirement.
This is a critical requirement for our internal monitoring and audit purposes, and we would appreciate your guidance on the best possible solution.
Thanks & Regards,
Mohammad Shayan Siddiqui
Indus SOC Team
