Learn

Author:  Stevan Pierce & Madhura SridharDate: March 16, 2026Modern security teams are drowning in “partial truths.”Your email gateway flags suspicious links. Your EDR finds a questionable process. Your SASE platform sees risky SaaS behavior. Your IAM solution logs a strange login pattern. Each tool is doing its job yet each is also speaking its own language, in its own console, with its own definition of “risk.”The result is a familiar and frustrating reality:Analysts jump between dashboards Teams argue over whose alert is “right” Critical context is trapped in silos And incident response lags behind the adversaryAt Netskope, we faced this exact problem in our own environment. As “Customer Zero,” our security team not only secures Netskope but also pushes our own platform to its limits, trying to solve the same challenges our customers wrestle with every day. This is where Netskope Cloud Exchange (CE) comes in.Cloud Exchange is how we connect the Netskope One platform with the tool

 Proactively identify and address vulnerabilities in private AI deployments. Automate adversarial simulations to find and fix vulnerabilities, to ensure your AI is resilient and production-ready before it reaches your users. Learn more about Netskope One AI Red Teaming.

Hear from our internal IT and security team as we share how we deployed Netskope Enterprise Browser within our managed endpoints here at Netskope. We will cover: Overview of high impact use cases  Deployment to Windows Endpoints: Leveraging Intune with the focus on Auto Enrollment deployment internally Deployment to MacOS Endpoints: Leveraging Kandji with the focus on Auto Enrollment deployment internally Troubleshooting deployment issues and remediation examples Alternative Deployment Method: Manual user invite—Non managed device user install and enrollment  For more information, check out our resources below: Deploying to Mac Fleet | Deploying to Windows Fleet | Enterprise Browser Usage Dashboard | Enterprise Browser Risk Dashboard | How to Import a Dashboard into Advanced Analytics  View past events in this series! Check out some customer questions below, or feel free to comment and continue the discussion!  Q: Do users need admin permission to install?A: Users do not need l

Looking for nice well presentation for netskope with video shots

Hear from our Product Management and Product Adoption leads as they cover the latest platform updates from Release 130, 131, and 132. Key product updates: DNS as a Service (DNSaaS) provides a high-performance cloud-hosted recursive DNS resolver, DNS security, and DNS content filtering for business and security risk categories DLP for FTP prevents data exfiltration over non-web FTP file transfers DLP on Demand enables new data protection integrations for Netskope technology alliance partners and on-premises support for customers NextGen Data Protection for Microsoft Co-pilot can now support policy creation, DLP, threat protection using ongoing scan, alerts, and more NG SWG allows seven new granular subcategories for Generative AI, available within URL categorization, enabling their use in Real-Time Policies    Explore past webinars in this series!

 Goal: Create a guide on how to pass Tenant Admin role from Okta to Netskope.Example: When logging in to Netskope Admin Console through Okta, different roles should be passed as per the requirement of the flow.Information coming from Partner: Administrator should be able to configure different roles for different members as per the requirement definition.Limitations: For a single Okta application, only 1 SSO can be configured in Netskope. To achieve this either we need to have multiple groups or single application with defined role.Key Concepts:Netskope Tenant - Admin should have local tenant admin account access to the Netskope tenant so that he can create custom roles / see the predefined roles during first time configuration. Workflow:This can be solved using 2 methods. Method 1 - Using Group AttributesIn this method you can create multiple groups. Just remember that the group name should be the same as the Predefined role / Custom role configured in the Netskope Tenant. Steps:1 - S

The Netskope Model Context Protocol (MCP) server was initially introduced as a self-hosted prototype, marking a significant first step in integrating Netskope’s rich security context directly into Large Language Model (LLM) workflows. This initial version demonstrated the power of the concept, enabling pioneering users to run a Docker image and establish a vital link between their LLM agents and the Netskope platform.Today, we are announcing the Netskope MCP Server Hosted Version in Technology Preview, building upon the capabilities of the initial prototype while dramatically simplifying deployment and adoption.📈 Enhanced Accessibility: Zero Infrastructure, Immediate ValueWe have moved from a "bring your own infrastructure" model to a fully managed service, eliminating the overhead of self-management. The benefits are clear:No Containers Required: We have eliminated the need for local Docker execution or complex infrastructure setup. Instant Connection: Access is provided via a direct

Hear from our internal security team as they share how we use Enterprise Browser to provide the granular visibility and control needed to secure all web activity at Netskope.  We will cover: Preventing Data Loss (DLP): How to enforce real-time policies to stop data exfiltration by controlling copy/paste, screen captures, file downloads, and printing, all within the Enterprise Browser. Securing Unmanaged Devices: Strategies for safely enabling BYOD and third-party contractor access to corporate apps without requiring an installed agent or VDI.   Advanced Threat Protection: Blocking phishing, malware, and malicious websites at the browser level before they can impact the endpoint or network as well as control 3rd party browser extensions. Enforcing Zero Trust Access: Integrating with your identity provider to apply adaptive access controls and ensure only authorized users access specific applications. For more information, check out our blog post.  View past events in this series! 

why does netskope selects the pop's in another country when GSLB is enabled

Hear from our internal security team as they demonstrate how we use the Netskope One platform to gain visibility into AI usage and enforce data protection policies that prevent risky behavior.Learn how you can:Discover which Generative AI applications are being used across your enterprise Protect sensitive data from being uploaded to both sanctioned and unsanctioned AI tools Coach employees on safe AI usage with real-time, targeted user notificationsFor more information, check out our blog post.  View past events in this series!  Check out some customer questions below, or feel free to comment and continue the discussion!  Q: Is it possible to allow read access to Gen AI sites, but block write actions, like put and post?A: It is possible to allow for read-only access to applications/sites that are in the Gen AI category, provided we are able to see the activity using a connector or activities of browse are seen. Q: Can Netskope come up with public email domain (Gmail, Yahoo, etc.) inst

We know that managing legacy systems like MPLS and outdated VPNs can be a challenge.As we continue to build the future of SASE, we're dedicated to delivering a truly unified, single-vendor platform that makes your network more secure and agile. That's why we acquired our own SD-WAN solution in 2022, to simplify the journey for customers like you.Join Netskope CEO Sanjay Beri and CPO Parag Thakore and discover a practical way to evolve your network with SASE. You’ll learn how to simplify that process, reduce costs, and still deliver a high-performance, secure experience for your users.We'll dive into the practical steps of your SASE journey, including:Migrating from legacy networks to a unified SASE platform Simplifying branch infrastructure and securing IoT devices Delivering consistent zero-trust access everywhere 

Hear from our internal security team as they discuss how to leverage User and Entity Behavior Analytics (UEBA) to gain full visibility of the risks that end-users face or perform and ways to take action based on User Confidence Index (UCI) scores. Key Topics:What is User and Entity Behavior Analytics (UEBA) How does Netskope use and implement this within our SOC (Security Operation Center) Detection/Ticket Creation from UCI (User Confidence Index) Enabling user risk scores from our other applications feeding into a user's UCI  Policies within Netskope to coach users, or taking action for specific users’ depending on their UCI  View past events in this series!

In today's dynamic digital landscape, organizations are increasingly leveraging a diverse array of Software-as-a-Service (SaaS) applications. While publicly available SaaS apps offer immense benefits, many organizations also rely on custom-built or specialized in-house applications. This presents a unique challenge: how to effectively monitor the security posture of these custom SaaS apps alongside your standard, out-of-the-box solutions? Netskope Security Posture Management (SSPM) has the answer! We're thrilled to announce our new Bring Your Own App (BYOA) feature, designed to extend SSPM's comprehensive monitoring capabilities to your custom SaaS applications. What is Bring Your Own App (BYOA)?BYOA allows you to seamlessly integrate any custom SaaS app, whether it's publicly available or developed internally, into Netskope SSPM. This means you can now define configuration attributes to be monitored, create custom rules, and enjoy continuous monitoring and reporting for all your uniqu

Hear from our Product Management and Product Adoption leads as they cover the latest platform updates from Release 127, 128, and 129.  Key product updates: Copilot for CCI (SkopeAI) gets smarter with new enhancements for expanded insights across multiple applications directly from Cloud Apps pages Netskope One DSPM data visibility and risk assessment for OneDrive, SharePoint, Google Drive, Box, and Oracle Cloud Infrastructure NextGen API Protection Jira Support for ongoing and retroactive DLP and threat scans for Jira NextGen API Protection SharePoint enhancement to detect files in SharePoint that are exposed to Copilot, helping to prevent sensitive data overexposure Enterprise Browser now supports screenshot, screen sharing, and watermarking Browser Protection Policies Cloud TAP now supports AWS IAM Roles Anywhere to securely store tapped data into S3 buckets Netskope Client Secure Enrollment capabilities Netskope Client Debug Mode makes log collection frictionless for e

Certificates have become the backbone of communicating securely over the internet. When the Netskope Client intercepts the traffic to perform DLP & TSS, certain applications might have adverse effects because of how the application certificates are handled. Hear from our internal security team as they cover: The basics about application certificates and their working How the Netskope Client handles application certificates How to configure the Netskope Client to work with certificate pinned applications How to resolve certain certificate issues by bypassing them For more information, check out our blog post.  View past events in this series!

Hear from our internal security team as they explain how Netskope DLP can be applied for sentiment analysis of user queries in Generative AI web applications.  Learn how to:  Compile positive and negative words into CSV files, creating dictionaries and DLP rules for these words in the Netskope tenant console  Create Realtime policies to perform sentiment analysis on Gen AI categories Identify the intent and thought of users when using Gen AI with policies that check for the overall sentiment of users, whether it is positive or negative Extend this application of DLP profiles to other use cases like detecting social media trolling or abusive messages For more information, check out our blog post.  View past events in this series!