Netskope Global Technical Success (GTS)
Google Apps Access - Block Personal Instance (continuation article - I)
Netskope Cloud Version - 124
Parent Article
Block Google Apps Access - Personal Instance
Note - Request you to read parent article first - Link
Objective
Google Apps access via personal email ID should be blocked
Prerequisite
Netskope CASB Inline license is required
Context
The customer's requirement is to block access to all Google Suite apps when a user tries to access them using their personal email ID (for example, *@gmail.com). The parent article discusses How to block the transactions when an end-user wishes to access Google Apps starting from the initial step, which is logging in. It doesn't delve into existing active sessions. This article serves as a sequel to the previous one, offering guidance on how to prevent access for existing active sessions.
Configuration
- Step 1 - Create a Constraints profile
Path: Netskope Tenant UI >>> Policies >>> Profiles - - - Constraints
- Step 2 - Real-time protection policy
Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy
- Policy Order
Author Notes
- There are alternative methods to address this use case as well.
- However, there are some considerations to bear in mind with the proposed solution.
- Google Suite comprises over 160 apps.
- Does Netskope have a cloud app connector for all the apps included in the Google Suite?
- Implementing activity controls and use of Constraint across all apps may pose challenges.
- The administrator needs to add each Google app separately.
- Another point -
- Constraint option is available for Google Gmail and Google Drive but not for all other Google Apps like Google Chat. The option to apply Constraint is grayed out.
Sample - I
Sample - II
Terms and Conditions
- All documented information undergoes testing and verification to ensure accuracy.
- In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.
Notes
- This article is authored by Netskope Global Technical Success (GTS).
- For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.
