Skip to main content

Learn

Education, Training, Certification, and Thought Leadership

224 Topics
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
Inside Netskope 05: Using Layered Protections for SaaS ApplicationsInside Netskope

Hear from our security engineers on how they use different Netskope products to holistically secure SaaS apps to improve the security coverage and posture of an organization. Layered Protection for SaaS apps [Salesforce, Github, Workday] at Netskope:Client Enforcement - Access to Salesforce allowed only when connecting with a Netskope client that is registered with the production Netskope tenant Realtime and API protection policies for confidential data [PII, PCI, passwords, API security keys] Security Posture Management - Compliance standards and rules are checked against the configurations of Salesforce, so that any vulnerabilities and threats are remediated by Salesforce admins Endpoint DLP Protection - File origin policy to block movement of data downloaded from Salesforce to unsanctioned external storage devices User Behavior Analytics - Bulk downloads, failed logins, access from risky countries, suspicious download, and delete are some of the alerts we monitor and investigate Che

1990
aplaza
Netskope Employee
M
Netskope Employee
madhurasridharNetskope Employee
posted in Inside Netskope
Security posture for Github application at Netskope

GitHub is a web-based platform that provides hosting for software development projects utilizing the Git version control system. It serves as a collaborative platform for developers to work together on code, track changes, manage projects, and host their code repositories. GitHub allows developers to create and maintain repositories, which are containers for code and related resources. These repositories can be either public, allowing anyone to view and contribute to the code, or private, restricting access to a selected group of individuals or organizations.   There are some security challenges that we as the Customer Zero team are trying to address for Github. The premise behind the security posture is considering sensitive data movement, malicious repositories, code injection and leakage, ensuring appropriate access controls and permissions. We are currently monitoring and securing access to Github internally with a breadth of products that are developed and maintained by the d

7325
T
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope
Salesforce Reverse Proxy Using Okta as the IDP
Salesforce Reverse Proxy Using Okta as the IDP

A Security Practitioner's PerspectiveThis article will walk you through the setting up of Reverse Proxy(RProxy) for Salesforce (SFDC) using Okta as the Identity Provider (IDP). There are RProxy limitations which should be noted as it will greatly affect its use within the organization and subsequent effective use within Real-Time Policies (RTP). For example, RProxy might appear to function correctly but activities with desktop applications might be restricted or bypass RProxy altogether.Since RProxy is meant to provide another real time steering method for machines or devices which do not have the Netskope client enabled, it is imperative to understand its limitations and plan accordingly.Additionally, RProxy should be implemented as the last method of deploying other real time access methods since it sits between the IDP and the application. The exception to this is implementing RProxy as a Service (RPaaS). RPaaS is an application that sits in an SaaS service that also has a built in

6640
S
Netskope Employee
R
Netskope Employee
ruthreshmNetskope Employee
posted in Blogs
Borderless WAN Hub Deployment & Configuration

Borderless WAN Hub Deployment & Configuration [Note] : The below setup is suitable with Meraki/Juniper Infrastructure BWAN Orchestrator tenant creation requires request to be opened with respective account representative (this document contains reference images from the test tenant portal)  Step1: BWAN Hub Deployment [with Model: NSG-1500] This device needs two ports configured on a Network - GE1 and GE2  GE1 port will be uplink to Meraki/Direct ISP and Wired connectivity Public IP: The public IP of the WAN interface must be explicitly configured in the Hub. This is the IP to which the Client will initiate the tunnel.  GE2 port will be Wireless connectivity GE1 - Port Configuration 1. Login to BWAN Orchestrator Portal  Login to BWAN Orchestrator Portal GE2 port will be Wireless connectivity GE1 - Port Configuration GE1 - Port Configuration : Activation Steps1. Login to BWAN Orchestrator Portal  2. Go to Dashboard > Manage and click (+)plus: sign to create Gateways 3. Select the

18340
R
Netskope Employee
E
erwingdavidNew Member
asked in Inside Netskope
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope
Making Netskope Cloud Exchange Highly Available
Making Netskope Cloud Exchange Highly AvailableBlog

The Netskope Cloud ExchangeNetskope offers an interesting solution to solve this use case and that is the Netskope Cloud Exchange (also referred to as Netskope CE). It is a free offering from Netskope with which organizations can share their IoC information between their security tools using the Threat Exchange, use the Log Shipper to import transaction logs from Netskope, use the Ticket Orchestrator to relay alerts to ticketing services and use the Risk Exchange to exchange risk scores between multiple sources. It can be installed and run in a Linux Docker environment by each customer on their own. You can read more about Netskope Cloud Exchange here. As mentioned above, there are four main modules offered with the Netskope Cloud Exchange: the Log Shipper, Ticket Orchestration, Threat Exchange, and Risk Exchange. All the modules are hosted and run in a single docker environment. Make sure you go through the system requirements once before you provision your infrastructure for the Clou

4430
ukrishna
Netskope Employee
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope
Access Control based on OS & Browser Versions using HTTP Headers
Access Control based on OS & Browser Versions using HTTP HeadersBlog

Why control access based on versions?In recent times, it’s well known that there are multiple vulnerabilities cropping up every single day for different applications and operating systems. Applications and operating systems creators are trying their best continuously to patch these vulnerabilities with newer and updated versions of their softwares. In an enterprise defensive setup, making sure that all applications and operating systems are up to date has become more important than ever. The two main entities which need to be monitored for updates aggressively should be Browsers and Operating Systems as a lot of internet access for users traverses via Browsers and every user would be on a machine which has to run an Operating System. There are several tools which help an organization to force-update their browsers and operating systems within a specific time & date. The forced-update method is an effective solution but is kind of an aggressive route as it might lead to unintentiona

14943
ukrishna
Netskope Employee
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope
Inside Netskope: Session 04 Recap - Using the Netskope Client to Enforce Browser Updates
Inside Netskope: Session 04 Recap - Using the Netskope Client to Enforce Browser Updates

In case you missed the fourth webinar of our new Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on Using the Netskope Client to Enforce Browser Updates can be found below. Feel free to comment and continue the discussion!  📽 Watch on-demand 🍿 Q: What about other browsers such as brave or duckduckgo? Do you guys lay down the law and block those for your org?A: There's a sizable list of supported browsers. If you hit your real-time policy and select "criteria" > select browers, you can see all the browsers that are currently supported.  Q: Is this a subscription service?A: If you are a Netskope customer and utilize SWG with real-time policies, there's no additional fees for this.  Q: Can you make it any website, not just specific GitHub or something?A: Yes, we can do this for any website.  Q: Would it be possible to add enterprise browsers like

2800
ukrishna
Netskope Employee
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
W
walterpiersonNew Member
posted in Netskope Academy / Training Discussions
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
posted in Netskope Academy / Training Discussions
D
dana89New Member
asked in Netskope Academy / Training Discussions
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope
Inside Netskope: Session 03 Recap - Netskope Client Enforcement for Secure Access to SaaS Applications
Inside Netskope: Session 03 Recap - Netskope Client Enforcement for Secure Access to SaaS Applications

In case you missed the third webinar of our new Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on Netskope Client Enforcement for Secure Access to SaaS Applications can be found below. Feel free to comment and continue the discussion!  📽 Watch on-demand 🍿 Q: Is it Multi-Cloud/Multi-Vendor compatible or is integration available?A: We are able to apply a Network ACL within those sign on policies within Okta. If it supports applying an ACL or you can define a custom SAML 2.0 application, yes it is compatible.  Q: How about for Contractors who are not issued a laptop but need to access Okta?A: We do not block the initial access to Okta because there are some use cases where we may have former employees or even new hires that need to access Workday to set up some information. Once those persons are onboarded, we require them to use the Netskope client

2440
S
Netskope Employee
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
Kmaheshwari
Netskope Employee
KmaheshwariNetskope Employee
posted in Blogs
Netskope App for ServiceNow: Direct Integration with NextGen SWG

OverviewThe Netskope App for ServiceNow provides an end-to-end configuration management integration with capabilities to create ServiceNow Security Incident Response (SIR) data based on Netskope alerts. Administrators can also manage Netskope applications based on ServiceNow Configuration Item (CI) data. URL category and hash list can also be updated back to the configured tenant. Below is a general overview of how an administrator can configure a given set of Netskope NextGen SWG policies and how to best utilize the data shared for URLs from within ServiceNow. In case you missed it, check out our previous article, Netskope App for ServiceNow, which provides a non-technical overview of the latest Netskope App for ServiceNow. RequirementsNetskope Tenant  ServiceNow Instance with Admin access Setup StepsFor the basic setup please refer to the  https://docs.netskope.com/en/netskope-help/integrations-439794/solution-guides/servic[…]-integration-solution-guide/servicenow-with-netskope-secop

2140
Kmaheshwari
Netskope Employee
Kmaheshwari
Netskope Employee
KmaheshwariNetskope Employee
posted in Blogs
New Netskope App for ServiceNow Security Incident Response

Enterprise security teams today face immense pressure from everyday incident response scenarios to the increased volume of alerts generated by disparate legacy security tools that limit both IT and security teams. What’s more, Security Operations (SecOps) and Incident Response (IR) teams lack the ability to do more than Block or Allow with their legacy secure web gateways. This friction limits how effective security teams can respond to a user request. That’s why together with ServiceNow, the new Netskope app for ServiceNow Security Incident Response (SIR) can provide greater incident management automation, reduce alert fatigue and overall operational costs to joint Netskope + ServiceNow customers.  The new Netskope App for ServiceNow SIR is now exclusively available at the ServiceNow Store.  The new Netskope App for ServiceNow modernizes threat and data protection workflows for SecOps and IR teams by offering more productive security outcomes for administrators, such as real-time user

2720
Kmaheshwari
Netskope Employee
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
Quarterly Product Release Webinar - April 2024

Hear from our Product Management and Product Adoption leads as they cover the latest platform updates from February–April, including Release 112, 113, and 114.  Key product updates:Learn about SSL Decryption based on access method & OS, case-insensitive matching for custom URL List in NG-SWG policies Enhancements to Dedicated Egress IP support: Ensure only those transactions that match DEIP conditions will egress out of dedicated IPs using “Condition-based Dedicated Egress IP” feature Netskope Client enhancements: Ability to “schedule” auto-upgrades  Implement ‘Network File Share Control’ and ‘Printer Content Control’ for Windows platform via Endpoint DLP User Watchlists for Advanced UEBA: Learn how admins can add users to a watchlist to monitor for behavior anomalies  Apply DLP and Threat Protection policies to Atlassian Confluence via the Next-Gen API Data Protection platform Updates on “Enhanced SaaS Security Posture Management Dashboard” with deep visibility into SaaS ad 3rd-pa

4350
aplaza
Netskope Employee
M
Netskope Employee
madhurasridharNetskope Employee
published in Inside Netskope
Using Netskope’s Proactive Digital Experience Management to identify network experience trends
Using Netskope’s Proactive Digital Experience Management to identify network experience trendsBlog

Netskope’s proactive & advanced Digital Experience Management (DEM) uses several metrics from Netskope client endpoint and Netskope proxy services to holistically compute the user experience score for users, based on the user-device-application combination. The user experience score provides insights for Netskope Cloud Security administrators to proactively identify network latency issues and trends, which can help avoid widespread impact on user productivity if any, well in advance. At Netskope’s Customer Zero team, where Netskope products are implemented to improve the security posture of enterprise data and applications, we actively monitor the user experience scores to identify potential network latency issues if any. This is done by adding the filter of user experience score between 0 & 30. This would provide some insights of users with poor experience scores, their locations, and so on. Using user-device combination in P-DEM, we can get critical insights about the hop by

2450
M
Netskope Employee
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope
Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Gen AI
Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Gen AIBlog

In today’s fast paced life we are being inundated with advances in technology which sometimes outpace our ability to process and keep up with. In this article we are going to:Discover the use of Generative AI within our organization; Influence Real-time Policy creation to promote user adherence and behavior to policies; Guide Generative AI Vendor/Application requirements; Build reports and dashboards that help identify and prioritize security risks; and,. Help us build a better product through self-reporting within the platform.*augmented with the assistance of Generative AIThe use of Generative AI has become extremely pervasive and grown at a rate that has left a lot of us wondering where it came from and how we got along without it in the past. A great example of this are the bullet points listed above.I got to thinking about using Gen AI to augment the bullet points and a title slide for a presentation on uncovering the insights of Gen AI. I realized the irony of the situation. It d

8401
M
S
Netskope Employee
stevanNetskope Employee
published in Inside Netskope
Inside Netskope: Session 02 Recap - Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Generative AI
Inside Netskope: Session 02 Recap - Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Generative AI

In case you missed the second webinar of our new Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on how to Uncover Insights and Mitigate Risk with Netskope Advanced Analytics & Generative AI can be found below. Feel free to comment and continue the discussion! 📽 Watch on-demand 🍿 Q: Are there any templates for allowing access to controlled AI tools like corporate Copilot and Copilot Designer while blocking outside AI tools?A: We recommend taking the client and start to interact with the copilot to see if you're able to pick up some of those activities with the predefined connectors and potentially even developing a custom connector. We are currently working on the consumer version of the Copilot for O365 and then eventually the professional version.   Q: How can AI in Netskope help business to grow?A: We can analyze the traffic we are seeing w

2700
S
Netskope Employee
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
xavy2310
Netskope Partner
xavy2310Netskope Partner
asked in Inside Netskope
Ramkumar
Netskope Partner
RamkumarNetskope Partner
asked in Netskope Academy / Training Discussions
ukrishna
Netskope Employee
ukrishnaNetskope Employee
published in Inside Netskope
Sanitized HAR File Detection using Netskope
Sanitized HAR File Detection using NetskopeBlog

What are HAR files and why detect them?HAR stands for ‘HTTP Archive’ format and it is a file used to store the interactions between a particular Website and the Browser. These files are used to troubleshoot issues that a particular user might be facing with a website and the issues could be related to performance, page elements, cookies, HTTP headers, page rendering, etc. Large organization’s support and technical teams use the HAR files in order to understand what kind of issues the user should have faced when they inspect the HAR file related to the transaction. HAR files can be used for debugging as they present a clear picture of the transaction between the Browser and the Web server. This also presents a gaping hole as HAR files also record sensitive transactional information like cookies, authentication tokens, etc. It has become crucial to make sure the HAR files are not mishandled. There are sanitization tools available to make sure that all sensitive information for a particul

5050
ukrishna
Netskope Employee
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
The Future of Zero Trust and SASE is Now!

Today’s network and security architectures involve too many siloed solutions weighed down with cost, complexity, and lagging network performance. Organizations are looking to adopt a Secure Access Service Edge (SASE) architecture as part of a security and network transformation initiative, but not all SASE platforms are created equal. A misstep when choosing a SASE platform can leave cost, complexity and performance challenges unsolved. Hear from SASE visionary and Netskope CEO, Sanjay Beri, during this exclusive on-demand event.  You’ll learn:How customers have found added savings of more than 50% by eliminating ineffective legacy tools How to build a successful Zero Trust strategy with SASE at its very foundation and hear insights from the voice of the customer How Netskope can protect, accelerate and help your business achieve a simplified, security and network transformation Visit our event page for additional languages.

1860
aplaza
Netskope Employee

Badge Winners

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settingsAccessibility statement