Inside Netskope

Netskope, a global cybersecurity leader, is redefining cloud, data, and network security to help organizations apply zero trust principles to protect data.

  • 48 Topics
  • 33 Replies

48 Topics

M
Netskope Employee
madhurasridharNetskope Employee
published in Inside Netskope

Inside Netskope: Session 05 Recap - Using Layered Protections for SaaS Applications

In case you missed the latest webinar in our Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on Using Layered Protections for SaaS Applications can be found below. Feel free to comment and continue the discussion!  📽 Watch on-demand 🍿 Q: Do you have any book or links for reading materials needed to perform at my duties professionally?A: In relation to this topic specifically, we have a corresponding Community post for the three products we discussed during the presentation that talk about how we use layered protections for SaaS Applications as well as recommendations.Security posture for Workday application at Netskope Security posture for Github application at Netskope Security posture for Salesforce application at NetskopeDocs.Netskope is also a great place to get additional information and use cases. Q: Can Netskope be applied together with SI

280
M
Netskope Employee
8 days ago
M
Netskope Employee
madhurasridharNetskope Employee
posted in Inside Netskope

Security posture for Github application at Netskope

GitHub is a web-based platform that provides hosting for software development projects utilizing the Git version control system. It serves as a collaborative platform for developers to work together on code, track changes, manage projects, and host their code repositories. GitHub allows developers to create and maintain repositories, which are containers for code and related resources. These repositories can be either public, allowing anyone to view and contribute to the code, or private, restricting access to a selected group of individuals or organizations.   There are some security challenges that we as the Customer Zero team are trying to address for Github. The premise behind the security posture is considering sensitive data movement, malicious repositories, code injection and leakage, ensuring appropriate access controls and permissions. We are currently monitoring and securing access to Github internally with a breadth of products that are developed and maintained by the d

5
T
16 days ago
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope

Salesforce Reverse Proxy Using Okta as the IDP

A Security Practitioner's PerspectiveThis article will walk you through the setting up of Reverse Proxy(RProxy) for Salesforce (SFDC) using Okta as the Identity Provider (IDP). There are RProxy limitations which should be noted as it will greatly affect its use within the organization and subsequent effective use within Real-Time Policies (RTP). For example, RProxy might appear to function correctly but activities with desktop applications might be restricted or bypass RProxy altogether.Since RProxy is meant to provide another real time steering method for machines or devices which do not have the Netskope client enabled, it is imperative to understand its limitations and plan accordingly.Additionally, RProxy should be implemented as the last method of deploying other real time access methods since it sits between the IDP and the application. The exception to this is implementing RProxy as a Service (RPaaS). RPaaS is an application that sits in an SaaS service that also has a built in

560
S
Netskope Employee
17 days ago
M
Netskope Employee
madhurasridharNetskope Employee
posted in Inside Netskope

Register Now! Inside Netskope: Layered Protections for Salesforce and other SaaS Applications

Layered Protections for Salesforce and other SaaS Applications Wednesday, July 109am PDT |  5pm BST |  6pm CESTRegister Now! Join us to hear from our Customer Zero team on how a Netskope Admin can use different Netskope products to create a layered protection plan for critical SaaS applications like Salesforce, Github and Workday. Learn more about:Client Enforcement Realtime Protection policies API protection policies Security Posture Management Endpoint DLP protection User Behavior Analytics 

0
M
Netskope Employee
1 month ago
E
erwingdavidNew Member
asked in Inside Netskope

syslogs on fowarder

can i send syslog to a forwarder who is on premise?

1
Rohit_Bhaskar
Netskope Employee
1 month ago
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope

Making Netskope Cloud Exchange Highly AvailableBlog

The Netskope Cloud ExchangeNetskope offers an interesting solution to solve this use case and that is the Netskope Cloud Exchange (also referred to as Netskope CE). It is a free offering from Netskope with which organizations can share their IoC information between their security tools using the Threat Exchange, use the Log Shipper to import transaction logs from Netskope, use the Ticket Orchestrator to relay alerts to ticketing services and use the Risk Exchange to exchange risk scores between multiple sources. It can be installed and run in a Linux Docker environment by each customer on their own. You can read more about Netskope Cloud Exchange here. As mentioned above, there are four main modules offered with the Netskope Cloud Exchange: the Log Shipper, Ticket Orchestration, Threat Exchange, and Risk Exchange. All the modules are hosted and run in a single docker environment. Make sure you go through the system requirements once before you provision your infrastructure for the Clou

660
ukrishna
Netskope Employee
1 month ago
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope

Access Control based on OS & Browser Versions using HTTP HeadersBlog

Why control access based on versions?In recent times, it’s well known that there are multiple vulnerabilities cropping up every single day for different applications and operating systems. Applications and operating systems creators are trying their best continuously to patch these vulnerabilities with newer and updated versions of their softwares. In an enterprise defensive setup, making sure that all applications and operating systems are up to date has become more important than ever. The two main entities which need to be monitored for updates aggressively should be Browsers and Operating Systems as a lot of internet access for users traverses via Browsers and every user would be on a machine which has to run an Operating System. There are several tools which help an organization to force-update their browsers and operating systems within a specific time & date. The forced-update method is an effective solution but is kind of an aggressive route as it might lead to unintentiona

4983
ukrishna
Netskope Employee
1 month ago
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope

Inside Netskope: Session 04 Recap - Using the Netskope Client to Enforce Browser Updates

In case you missed the fourth webinar of our new Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on Using the Netskope Client to Enforce Browser Updates can be found below. Feel free to comment and continue the discussion!  📽 Watch on-demand 🍿 Q: What about other browsers such as brave or duckduckgo? Do you guys lay down the law and block those for your org?A: There's a sizable list of supported browsers. If you hit your real-time policy and select "criteria" > select browers, you can see all the browsers that are currently supported.  Q: Is this a subscription service?A: If you are a Netskope customer and utilize SWG with real-time policies, there's no additional fees for this.  Q: Can you make it any website, not just specific GitHub or something?A: Yes, we can do this for any website.  Q: Would it be possible to add enterprise browsers like

1260
ukrishna
Netskope Employee
1 month ago
M
Netskope Employee
madhurasridharNetskope Employee
published in Inside Netskope

Best Practices for password protection using Netskope DLPBlog

The Data Loss Prevention product at Netskope offers a wide variety of options to customize and deploy rules that can be used in Realtime, API protection, SMTP proxy and Endpoint policies. The granular level of detailing helps information security engineers to fine tune the rule as much as possible to avoid false positives and false negatives. The same approach applies for password protection too. Passwords act as the first line of defense against unauthorized access. Strong password protection is essential for safeguarding company data, maintaining compliance, and preventing unauthorized access. In the customer zero program at Netskope, our team has been extensively working on training the DLP rules, analyzing the false positive incidents, ensuring that the DLP rules cover different types of passwords (common, contextual, secure and so on) by actively collaborating with the relevant product teams. After some intensive training and testing, here’s the recommended DLP rule for password p

2850
M
Netskope Employee
2 months ago
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope

Register Now! Inside Netskope: Using the Netskope Client to Enforce Browser Updates

Using the Netskope Client to Enforce Browser Updates  Thursday, May 308am PDT |  4pm BST |  5pm CESTRegister now Join us to hear from our Customer Zero team on how a Netskope Admin can use the Netskope Client to “enforce” users to update their browsers to the latest version and help improve the overall security posture of an organization.Learn how to:Understand HTTP Headers Define device and browser posture with HTTP Headers Create HTTP Header Profiles Create Real-time policies to passively remind users based on device posture    

920
ukrishna
Netskope Employee
2 months ago
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope

Inside Netskope: Session 03 Recap - Netskope Client Enforcement for Secure Access to SaaS Applications

In case you missed the third webinar of our new Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on Netskope Client Enforcement for Secure Access to SaaS Applications can be found below. Feel free to comment and continue the discussion!  📽 Watch on-demand 🍿 Q: Is it Multi-Cloud/Multi-Vendor compatible or is integration available?A: We are able to apply a Network ACL within those sign on policies within Okta. If it supports applying an ACL or you can define a custom SAML 2.0 application, yes it is compatible.  Q: How about for Contractors who are not issued a laptop but need to access Okta?A: We do not block the initial access to Okta because there are some use cases where we may have former employees or even new hires that need to access Workday to set up some information. Once those persons are onboarded, we require them to use the Netskope client

1300
S
Netskope Employee
2 months ago
M
Netskope Employee
madhurasridharNetskope Employee
published in Inside Netskope

Using Netskope’s Proactive Digital Experience Management to identify network experience trendsBlog

Netskope’s proactive & advanced Digital Experience Management (DEM) uses several metrics from Netskope client endpoint and Netskope proxy services to holistically compute the user experience score for users, based on the user-device-application combination. The user experience score provides insights for Netskope Cloud Security administrators to proactively identify network latency issues and trends, which can help avoid widespread impact on user productivity if any, well in advance. At Netskope’s Customer Zero team, where Netskope products are implemented to improve the security posture of enterprise data and applications, we actively monitor the user experience scores to identify potential network latency issues if any. This is done by adding the filter of user experience score between 0 & 30. This would provide some insights of users with poor experience scores, their locations, and so on. Using user-device combination in P-DEM, we can get critical insights about the hop by

840
M
Netskope Employee
2 months ago
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope

Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Gen AIBlog

In today’s fast paced life we are being inundated with advances in technology which sometimes outpace our ability to process and keep up with. In this article we are going to:Discover the use of Generative AI within our organization; Influence Real-time Policy creation to promote user adherence and behavior to policies; Guide Generative AI Vendor/Application requirements; Build reports and dashboards that help identify and prioritize security risks; and,. Help us build a better product through self-reporting within the platform.*augmented with the assistance of Generative AIThe use of Generative AI has become extremely pervasive and grown at a rate that has left a lot of us wondering where it came from and how we got along without it in the past. A great example of this are the bullet points listed above.I got to thinking about using Gen AI to augment the bullet points and a title slide for a presentation on uncovering the insights of Gen AI. I realized the irony of the situation. It d

4751
M
3 months ago
R
Netskope Employee
rbutlerNetskope Employee
published in Inside Netskope

Register Now! Inside Netskope: Client Enforcement for Secure Access to SaaS ApplicationsNews

Netskope Client Enforcement for Secure Access to SaaS Applications Wednesday, April 248 am PDT |  4pm BST |  5pm CEST Enforcing the Netskope Client is vital in ensuring users have secure access to the correct SaaS applications to protect corporate resources. REGISTER NOW to hear from our very own Security Engineers. They will be discussing how Netskope integrates with Okta to “enforce” the compliance of having the Netskope client enabled and connected to a tenant for accessing SaaS applications using Identity Providers (IdP).  Learn how to: Define a SAML 2.0 Application in Okta Enable Netskope Client Enforcement Define a Sign-On Policy per SaaS Application Edit Download Templates

600
R
Netskope Employee
3 months ago
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope

Inside Netskope: Session 02 Recap - Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Generative AI

In case you missed the second webinar of our new Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on how to Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Generative AI can be found below. Feel free to comment and continue the discussion! 📽 Watch on-demand 🍿 Q: Are there any templates for allowing access to controlled AI tools like corporate Copilot and Copilot Designer while blocking outside AI tools?A: We recommend taking the client and start to interact with the copilot to see if you're able to pick up some of those activities with the predefined connectors and potentially even developing a custom connector. We are currently working on the consumer version of the Copilot for O365 and then eventually the professional version.   Q: How can AI in Netskope help business to grow?A: We can analyze the traffic we are seeing w

1430
S
Netskope Employee
3 months ago
xavy2310
Netskope Partner
xavy2310Netskope Partner
asked in Inside Netskope

Dropbox

It is necessary to install the Dropbox desktop application, download the executable from the official website, at the time of installation it does not finish the installation.In the Steering Configuration EXCEPTIONS option, the application is bypassed but it still does not allow the installation, how can I remedy it?

2
Rohit_Bhaskar
Netskope Employee
4 months ago
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope

Sanitized HAR File Detection using NetskopeBlog

What are HAR files and why detect them?HAR stands for ‘HTTP Archive’ format and it is a file used to store the interactions between a particular Website and the Browser. These files are used to troubleshoot issues that a particular user might be facing with a website and the issues could be related to performance, page elements, cookies, HTTP headers, page rendering, etc. Large organization’s support and technical teams use the HAR files in order to understand what kind of issues the user should have faced when they inspect the HAR file related to the transaction. HAR files can be used for debugging as they present a clear picture of the transaction between the Browser and the Web server. This also presents a gaping hole as HAR files also record sensitive transactional information like cookies, authentication tokens, etc. It has become crucial to make sure the HAR files are not mishandled. There are sanitization tools available to make sure that all sensitive information for a particul

2570
ukrishna
Netskope Employee
4 months ago
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope

Register Now! Inside Netskope: Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Generative AINews

In today's dynamic cloud environment, gaining actionable security insights is critical. REGISTER NOW!Join this webinar to explore how Netskope uses Advanced Analytics and Generative AI to:Discover the use of Generative AI within our organization Influence Real-time Policy creation to promote user adherence and behavior to policies Guide Generative AI Vendor/Application requirements Build reports and dashboards that help identify and prioritize security risks Help us build a better product through self-reporting within the platform

640
S
Netskope Employee
4 months ago
M
Netskope Employee
madhurasridharNetskope Employee
published in Inside Netskope

Recap: Inside Netskope Session 01 - Coaching Users into Compliance

In case you missed the first webinar of our new Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on how to coach users into compliance can be found below. Feel free to comment and continue the discussion! Watch on-demand Q: What is the Block restriction action for those that have not been able to complete the training in time?A: We take a gradual approach to the notification system, so there are different levels of restriction. Once the completion deadline has passed, users receive a similar message but they do not have the option to provide justification to do the training later. Their only option is to complete the training now or ignore the message which will follow them on all applications other than the required ones (Okta, LearnUpon, and Slack). Q: What has been the user experience/feedback from the users as you've deployed this notification sy

1920
M
Netskope Employee
5 months ago
M
Netskope Employee
madhurasridharNetskope Employee
published in Inside Netskope

Security posture for Workday application at NetskopeBlog

Workday is a cloud-based software platform that provides a suite of enterprise applications for human resources (HR), finance, and planning. It is designed to help organizations manage their workforce, streamline business processes, and gain insights into their operations. Workday is a critical application which hosts sensitive information. Netskope is currently monitoring and securing access to Workday internally with a breadth of products that are developed and maintained by the development and QA teams. These capabilities include areas such as inline protection, API-enabled protection, SaaS security posture management (SSPM), and Cloud Firewall, to name a few. In this guide, we will provide a perspective of how Netskope’s products and capabilities are used internally for securing enterprise data.  Real-time ProtectionWe are restricting access to the Workday app for Netskope employees through client enforcement in IDP, whereby access to Workday would be granted only if users are conn

3990
M
Netskope Employee
5 months ago
aplaza
Netskope Employee
aplazaNetskope Employee
posted in Inside Netskope

Inside Netskope Webinar Series: Coaching Users Into Compliance

Join us on Wednesday, January 31st at 10am CST for the first webinar of our new Inside Netskope series, where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture.   This session will cover how to track users with missing security training and coach them into compliance using Netskope’s Real Time policies, Okta, an LMS with an API, and a SOAR solution.    Learn how to:  Customize various actions applied to your policies Adapt deadline infringement consequences to align with your unique compliance requirements Personalize the categories and applications that users can access without triggering alerts, all in accordance with your environment and specifications   Register now!

0
aplaza
Netskope Employee
6 months ago
S
Netskope Employee
stevanNetskope Employee
posted in Inside Netskope

Netskope Client Enforcement: A Security Practitioner's Perspective

Background Q. How do you enforce Netskope Client adherence without impacting SAML flows after authentication?A. Netskope Client Enforcement. Netskope Client Enforcement is used to “enforce” the compliance of having a Netskope client enabled and connected to a tenant for accessing SaaS applications using Identity Providers (IdP) such as Okta. This includes IdP or Service Provider initiated connections, i.e. logging into Okta to access a SaaS application or logging into the SaaS application directly. Netskope Client Enforcement should be differentiated from other methods of steering real-time traffic to the Netskope tenant for the processing of policies; policies such as Next-Generation Software Web Gateway (NG-SWG), Data Loss Prevention (DLP), Netskope Private Access (NPA), User Enhanced Behavior Analytics (UEBA), Cloud FireWall (CFW), and so on, all of which are designed to protect an organization. Netskope Client Enforcement also enables end users to protect corporate resources th

1
S
8 months ago
P
Netskope Employee
pburtonNetskope Employee
posted in Inside Netskope

Empowering Security Awareness: Leveraging Netskope Advanced Analytics Real-Time Coaching

In today’s rapidly evolving threat landscape, user awareness plays a pivotal role in safeguarding organizations against cyber risks. Employees and end-users are often the first line of defense, making it essential to educate and empower them with the knowledge and skills necessary to identify and mitigate potential security threats.    Netskope understands the significance of user awareness in maintaining a robust cybersecurity posture. By combining cutting edge technologies and user-centric approaches, Netskope equips organizations with the tools to effectively monitor, analyze, and guide user behaviors in real time. This blog will delve into the importance of security user awareness, explore Netskope’s User and Entity Behavior Analytics (UEBA) capabilities, and highlight the value of its real-time coaching feature in promoting secure behaviors and enhancing overall security resilience. By embracing security user awareness and leveraging Netskope’s innovative solutions, orga

0
P
Netskope Employee
8 months ago
ukrishna
Netskope Employee
ukrishnaNetskope Employee
posted in Inside Netskope

Sharing Indicators of Compromise (IoC) with Netskope’s Cloud Threat Exchange (CTE)

  “You can’t defend against threats that you are not aware of”   What is IoC and Why share it? IoC stands for Indicators of Compromise and as the name suggests, it points to technical identifiers or behavioral patterns which help to identify if a particular system or network or artifact has been compromised. Anything which helps to identify a particular malicious activity could be an IoC, ranging from an executable, hash, IP Address, URL, etc. As the quote above implies, organizations cannot safeguard themselves from threats and attacks they are unaware of. Utilizing heuristics can narrow the divide between familiar and unfamiliar threats, but pinpointing specific criteria significantly accelerates the process and demands fewer computational resources. That’s where a robust and strong IoC sharing program comes into lay. Through the efficient and effective exchange of IoCs among security telemetry tools, each tool acquires IoC data from others, contributing to enhanced detecti

0
ukrishna
Netskope Employee
8 months ago
R
Netskope Employee
rbutlerNetskope Employee
posted in Inside Netskope

Remote Browser Isolation on Demand for the SOC

As a company, we have deployed and continue to utilize Remote Browser Isolation to browse unknown or questionable sites based on web categories in a ‘safely allow’ posture instead of an outright block. When one of our analysts requested the purchase of a remote browser service to conduct investigations into sites that didn't fall into the web categories that we already send to RBI, we decided to develop a process to isolate any desired sites using our existing product, incurring no additional cost for the company.   The security team is often asked to investigate suspicious web sites, whether they are phishing, malvertising, or others. Netskope uses our Remote Browser Isolation solution for uncategorized, no content, parked domains, proxies and anonymizers, and known threat websites. For sites outside of those categories that require a safe way to investigate a web site we have created a solution for this.   How to set it up  Step 1 The approach we took was to create a c

3
R
Netskope Employee
10 months ago

Badge winners

Show all badges
Terms & ConditionsCookie settings