Google Apps Access - Block Personal Instance (continuation article - II)

Netskope Global Technical Success (GTS)

Google Apps Access - Block Personal Instance (continuation article - II)

Netskope Cloud Version - 124

Parent Article

Block Google Apps Access - Personal Instance

Note - Request you to read parent article first

Objective

Google Apps access via personal email ID should be blocked

Prerequisite

Netskope CASB Inline license is required

Context

The customer's requirement is to block access to all Google Suite apps when a user tries to access them using their personal email ID (for example, *@gmail.com). The parent article discusses How to block the transactions when an end-user wishes to access Google Apps starting from the initial step, which is logging in. It doesn't delve into existing active sessions. This article serves as a sequel to the previous one, offering guidance on how to prevent access for existing active sessions.

Configuration

Step 1: Instance Tagging

Path: Netskope Tenant UI >>> Policies >>> Profiles - - - App Instance >>> New Custom App Instance >>> New App Instance

Note - Netskope enables administrators to name application instances using Application Events.

Step 2: Real-time protection policy

Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy

• Policy Order

Author Notes

• There are alternative methods to address this use case as well. 
• However, there are some considerations to bear in mind with the proposed solution.

1. Google Suite comprises over 160 apps
2. Does Netskope have a cloud app connector for all the apps included in the Google Suite? App instance detection is only available for applications with a pre-defined cloud app connector.

• The administrator needs to do instance tagging for Google apps manually.
• The administrator needs to add each Google app separately.

Terms and Conditions

• All documented information undergoes testing and verification to ensure accuracy.
• In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

Notes

• This article is authored by Netskope Global Technical Success (GTS).
• For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.