Netskope Global Technical Success (GTS)
Google Apps Access - Block Personal Instance
Netskope Cloud Version - 124
Objective
Google Apps access via personal email ID should be blocked
Prerequisite
Netskope CASB Inline license is required
Context
The customer's requirement is to block access to all Google Suite apps when a user tries to access them using their personal email ID (for example, *@gmail.com).This document will discuss how to achieve this.
Do You Know?
- Google Suite encompasses a range of applications. The domains responsible for user authentication include accounts.google.com, admin.google.com, gsuite.google.com, and m.google.com.
- Netskope recognizes these domains under a predefined cloud app called Google Accounts.
- As of April 11, 2025 with Netskope’s Google Accounts predefined cloud app connector, customers can exercise control over the following activities:
Configuration
- Step 1 - Instance Tagging
Path: Netskope Tenant UI >>> Policies >>> Profiles - - - App Instance >>> New Custom App Instance >>> New App Instance
Note - Netskope enables administrators to name application instances using Application Events.
- Step 2 - Real-time protection policy
Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy
Verification
- Step 1 - Try to login any Google Suite Application via personal account
Note - User Notification format used above Link
- Step 2 - Check policy hits
Path: Netskope Tenant UI >>> Skope IT >>> Alerts
Terms and Conditions
- All documented information undergoes testing and verification to ensure accuracy.
- In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.
Notes
- This article is authored by Netskope Global Technical Success (GTS).
- For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.
