Skip to main content

Netskope Cloud Exchange (CE)

The Netskope Cloud Exchange (CE) is a powerful security technologies integration platform enabling global organizations to unify siloed security investments by delivering four major integration use cases .

  • 13 Topics
  • 15 Replies
13 Topics
D
Netskope Employee
dwillisNetskope Employee
published in Netskope Cloud Exchange (CE)
Netskope Risk Exchange Ecosystem - Making User Based ChangesKnowledgebase, Cloud Exchange

Netskope wishes to make it easier for our customers and partners to identify and respond to high risk users, instances, apps, and workloads using automated enrichment and correlation actions. This will enable our customers to leverage multi-vendor sourced or single vendor correlated findings to continuously tune Netskope’s adaptive trust policy enforcement framework. This blog series will explore a number of different workflows that those comfortable using basic scripting, or enablement tools like Postman, can employ to programmatically update and inform your inline policy actions. These are just some of the functions that the newest version of Cloud Exchange, version 5.1, supports now and in the future. Look for it to hit the shelves at the end of October. One of the key value propositions of Netskope is its ability to correlate multiple user personas (Korg-lord-of-thunder, davidw@dwillis.com , and fluffythevampireslayer) to a single, unique identity - dwillis@company.com - managed by

690
D
Netskope Employee
E
erabslNew Member
posted in Netskope Cloud Exchange (CE)
Creating a Comprehensive Tabular View of Alert and Event Properties

Hi All, While my team integrated Netskope with our SIEM, they struggled with understanding the properties and their usage. I’ve found out that Netskope Creating a tabular format view of all Alert and Event properties has been a game-changer for me and the community, especially for SIEM admins and IR analysts who are constantly looking at logs. By organizing the properties in a clear and structured manner, I can quickly identify key information, track changes, and make informed decisions. This approach not only improves efficiency but also ensures that important details are not overlooked. The impact of such a table is profound. It allows me to have a comprehensive overview of alerts and events, making it easier to spot patterns and correlations that might otherwise go unnoticed. This can lead to quicker response times and more effective problem-solving. Additionally, having all properties laid out in a tabular format aids in better communication among team members, as everyone has acce

160
E
C
cswordNew Member III
asked in Netskope Cloud Exchange (CE)
Web Scraper Plugin for Threat Exchange not recognizing CIDR blocks to push to URL list

Can CIDR blocks be scraped and pushed to a Netskope URL list using the web scraper plugin for threat exchange? I have one setup to pull from the Proofpoint Emerging Threats IP block list (https://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt) but it seems to only push individual IPv4 addresses and ignores anything with a CIDR.

100
C
1
11qwerty22New Member
asked in Netskope Cloud Exchange (CE)
CE Log Shipper - Netskope client device logs (disable client/re-enable client)

Hello, We are ingesting Netskope logs via CE Log Shipper into Elastic. These are events and alerts. How can we ingest the Netskope client related events for users disabling/re-enabling the client? Advanced Analytics presents this information, so the logs exist. Can they be exported via CE Log Shipper? Thanks.

511
N
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
published in Netskope Cloud Exchange (CE)
Netskope Risk Exchange Ecosystem: Combating Shadow ITCloud Exchange (CE)

This blog series continues to explore a number of different workflows that those comfortable using basic scripting, or enablement tools like Postman, can employ to programmatically update and inform your inline policy actions. These are just some of the functions that the newest version of Cloud Exchange (CE), version 5.1, supports now and in the future. Look for it to hit the shelves at the end of this month (Oct. 2024). In case you missed it, we previously covered the general premise of our enhanced and net-new integrations that map back to the Netskope risk exchange ecosystem, here . We also expanded on Making User-based Changes , be sure to check that out too. Combating Shadow IT Netskope has a unique ability to look deep into the packet (after we decrypt it) and see what is going on in between the user and the SaaS application they are using. In general it gives us the ability to put policy controls around which activities will be allowed with any given application. You can restri

920
Gary-Jenkins
Netskope Employee
shubhamk
Netskope Partner
shubhamkNetskope Partner
asked in Netskope Cloud Exchange (CE)
Adding Netskope tenant on Cloud Exchange

Dear Team, I am in the process of setting up Cloud Exchange, and the deployment has been successful, including access to the UI. However, I am encountering issues when attempting to add a tenant to the Cloud Exchange. The following errors appear in the logs: [CE_1045, CE_1044, CE_1126] I have reviewed the configuration and validated the tokens, but I am still unable to onboard the tenant. Could you please assist in troubleshooting this issue? Detailed Error: 09/10/2024 10:20:10 PM CE_1045 error Error occurred while validating v1 token, Exception occurred while parsing JSON response. Traceback (most recent call last): File "/usr/local/lib/python3.9/site-packages/requests/models.py", line 971, in json return complexjson.loads(self.text, **kwargs) File "/usr/local/lib/python3.9/json/__init__.py", line 346, in loads return _default_decoder.decode(s) File "/usr/local/lib/python3.9/json/decoder.py", line 340, in decode raise JSONDecodeError("Extra data", s, end)json.decoder.JSONDecodeError:

792
ejang
Netskope Employee
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
posted in Netskope Cloud Exchange (CE)
Cloud Exchange CTO - Queues

When working with queues, you can send data in the message body. A lot of questions come up while working with the map fields in CTO queues. In the below example, I am using the Notifier plugin but this same workflow is valid with all of the CTO plugins like ServiceNow, TEAMS, SLACK and others. I am not going to review how to setup the Notifier plugin but this link goes over it - https://docs.netskope.com/en/notifier-plugin-for-ticket-orchestrator/ Be sure to setup the Business Rules also. Once you have the Notifier plugin up and running go to Alerts to review what information is coming in. We will use the key value pair to add information to the message we will send. Let’s grab Activity, Category, Policy, Request ID, Severity, and Site. In the Que you are going to use you can add something like this to the message. A Netskope Alert has been created with the following information:<br><br> Activity: $activity<br> Category: $category<br> Policy: $policy<br> Request ID: $request_id<br> Se

300
Gary-Jenkins
Netskope Employee
M
Netskope Employee
mitchellNetskope Employee
posted in Netskope Cloud Exchange (CE)
Cloud Exchange - Beta NAC Plugin

I am very excited to introduce a community-based beta plugin for Cloud Exchange. This Network Access Control (NAC) plugin is designed to enhance Cloud Exchange by integrating Netskope telemetry with enterprise networks. It effectively enforces security measures and bridges the gap between customer network locations utilizing NAC solutions and the Netskope SSE Platform. Purpose and Context: The NAC plugin enables sharing Netscope telemetry with enterprise networks, allowing appropriate enforcement actions based on detected threats or compromises. It allows to send information about managed users whether they are on the on-premise network (SDWAN or Client-Tunnel) or remote. Functionality: The plugin leverages the SSE solution to detect high threats or indicators of compromise and shares this information with the enterprise network. It facilitates actions such as VLAN changes, quarantine roles, or group tag assignments based on detected incidents. User and Device Management: The plugin ta

4470
M
Netskope Employee
M
Netskope Employee
mitchellNetskope Employee
posted in Netskope Cloud Exchange (CE)
Cloud Exchange: Beta NAC Plugin

I am very excited to introduce a community-based beta plugin for Cloud Exchange. This Network Access Control (NAC) plugin is designed to enhance Cloud Exchange by integrating Netskope telemetry with enterprise networks. It effectively enforces security measures and bridges the gap between customer network locations utilizing NAC solutions and the Netskope SSE Platform. Purpose and Context: The NAC plugin enables sharing Netscope telemetry with enterprise networks, allowing appropriate enforcement actions based on detected threats or compromises. It allows to send information about managed users whether they are on the on-premise network (SDWAN or Client-Tunnel) or remote. Functionality: The plugin leverages the SSE solution to detect high threats or indicators of compromise and shares this information with the enterprise network. It facilitates actions such as VLAN changes, quarantine roles, or group tag assignments based on detected incidents. User and Device Management: The plugin ta

530
M
Netskope Employee
prajakta.yadav
Netskope Partner
prajakta.yadavNetskope Partner
asked in Netskope Cloud Exchange (CE)
CrowdStrike integration with Netskope

In Netskope we can integrate CrowdStrike in two ways: one way is Integration using Cloud exchange. and another way is integrating CS under Settings> Threat Protection> CS (EDR). So, what is difference between these two ways and which one is more effective?

1557
N
O
osintphNew Member
asked in Netskope Cloud Exchange (CE)
Netskope to Syslog vs Storage Bucket

First of all, sorry if that sounds like a stupid question, but i did try to find a straight forward way online, and, all points to certain configurations via Cloud Exchange Plugins. Here is my szenario, it actually is fairly simple. I need to integrate a customers Netskope Environment (and no, I have no other details at this point as this is still exploratory) to a SIEM, the SIEM is not one of the big names. In most other cases, we have done Integrations either via an API that is available, via Storage Buckets, or, usually the most straight forward, via simple Syslog. Given this, aside from this link: - are there other ways for Syslog integration? I found this one somewhere but i do not think this is still or ever was applicable? 2.1.1 Log in to the Netskope Admin Console:• Open your web browser and navigate to the Netskope Admin Console.• Enter your credentials to log in.2.1.2 Navigate to Settings:• Once logged in, go to the Settings menu, usually found on the left sidebar.2.1.3 Acces

480
O
M
munster
asked in Netskope Cloud Exchange (CE)
CE Admin Privilege

Hi I have deployed CE 5.0.1. When ssh to CE, I can’t seem to “sudo su root”. Likewise, can’t sudo reboot or shutdown. Anyway to perform reboot or shutdown beside asking esxi team to do it? thank

1265
ejang
Netskope Employee
A
Netskope Employee
asankaranNetskope Employee
published in Netskope Cloud Exchange (CE)
Integrating Security in a Distributed World: Netskope Cloud Exchange (CE) Solution for EnterprisesCloud Exchange

In the ever-evolving landscape of distributed computing, isolated security tool silos are no longer adequate. The combination of increasingly sophisticated cyberattacks and the shift of assets to a hybrid multi-cloud environment constitutes a significant challenge. Security and Risk Management (SRM) leaders seek to maximize the value of their current investments through the integration of security tools into a cohesive, scalable cybersecurity ecosystem. These leaders aim to enhance operational efficiency, alleviate the workload on their teams, and improve responsiveness to both security threats and business needs and opportunities. Netskope Cloud Exchange (CE) enables a collaborative ecosystem of tools and controls to secure a modern, distributed enterprise. It builds on a strategy of integrating composable, distributed security tools to achieve more effective collaboration between tools. Outcomes include enhanced capabilities like: Granular visibility into security events alerts and t

6090
A
Netskope Employee

Most helpful members this week

Badge winners

Show all badges

Popular tags

Terms & ConditionsCookie settings

Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings