Skip to main content
  • EN

Next Gen SWG

This is a discussion board on Netskope’s Next Generation Secure Web Gateway, a cloud-based web security solution that prevents malware, detects advanced threats, filters by category, protects data, and controls app use for any user, location, device. It unifies our industry-leading CASB, SWG, and DLP into common policy controls with custom reporting and rich metadata for ad-hoc queries.

  • 285 Topics
  • 673 Replies
285 Topics
A
Anonymous
posted in Next Gen SWG
Bandwidth utilization goes high over netskope tunnel

DC and DR internet links have been choked as there is a heavy utilization over netskope. we raise a ticket over TAC but no resolution found as per my knowledge user client traffic is acting as DPOP traffic where in we are not able to trace out this abnorml

940
S
Netskope Employee
1 year ago
jforrest
Netskope Employee
jforrestNetskope Employee
posted in Next Gen SWG
Facing User Issues while steering Web Conferencing Apps?

The majority of performance related issues faced while attempting to leverage Netskope for visibility and control on conferencing apps is root caused to improper configuration of the web conferencing app best practices associated with the UDP traffic.   Why: UDP protocol is best suited for real time audio and video traffic If customer has not enabled the necessary UDP ports when on premises, real time traffic will fallback to TCP and steered through Netskope “Using TCP in a near congested network will cause retransmissions, which in turn can create a choppy video or low bandwidth error experience. UDP does not retransmit, and will provide a better video experience.” How: Please ensure you have opened/sent direct the necessary UDP ports for the below apps: If that connection can not be established, Zoom will also try connecting using TCP on port 8801, followed by SSL (port 443). Microsoft Teams: UDP port 3478 to 3481 (see article for details) Google Meet: set up outbound U

5400
jforrest
Netskope Employee
1 year ago
mherbinet
Netskope Employee
mherbinetNetskope Employee
posted in Next Gen SWG
How to Capture HAR on Google Chrome

Summary During certain troubleshooting situations, Netskope Support may request various debugging output from the Google Chrome Developer Tools (DevTools for short). Specifically, HAR (HTTP Archive) is a file format used by several HTTP session tools to export detailed traffic data for analysis. Environment Users experiencing cloud app page loading or performance issues while using a browser. Application access issues Reverse proxy (SAML/Auth).   Cause Netskope Support and Engineering require HAR debug output from the affected client to provide app traffic data for analysis. Resolution If requested by Netskope Support, please provide the HAR debug output with the following instructions (please reference the following link for additional details: (https://toolbox.googleapps.com/apps/har_analyzer/)  Warning Please be cautious that the HAR capture will have sensitive information like Application login Username, Password etc in clear text. 

13050
W
1 year ago
M
mdmeow12123New Member III
posted in Next Gen SWG
Mac OS Sonoma

Sonoma is coming out on the September 26th. Does Netskope have any statement on whether it is supported? If so, which version of NS client?  I have not been able to see anything here or the support portal. Thank you. 

2730
matt-frank
Netskope Partner
1 year ago
farhan
Netskope Partner
farhanNetskope Partner
posted in Next Gen SWG
PAC file in Server

Hi team,There is one use case of server where they required a PAC file to be configured in there servers to connect the netskope dataplane can you let me know any configuration or pre-requisites is required to server connect with Netskope Dataplane Also please let me know the use cases of static server which required internet.

2080
ukrishna
Netskope Employee
1 year ago
Z
zakeriya_shaikhNew Member
posted in Next Gen SWG
What is Web Socket terminology used in Netskope?

What is Web Socket terminology used in Netskope?

2400
Z
1 year ago
Edison_VaLbuena
Netskope Partner
Edison_VaLbuenaNetskope Partner
posted in Next Gen SWG
Netskope’s ability to control specific activities

  Hello community, I would like to know if Netskope can control some of the following activities across social networks or collaboration tools: - Login, logout, block, approve, join, mark, request, unfollow, create and delete… Thank you in advance.

740
A
Netskope Employee
1 year ago
AllenWu
Netskope Partner
AllenWuNetskope Partner
posted in Next Gen SWG
Can enpoint's local admin be restricted from internet access through AAD integration?

Hello,Does anyone know if Netskope can enforce employees to log in AAD account on their managed endpoints to access internet?If employees don't log in their AD account and use local admin to access internet, can Netskope block their access?I haven't found any related discussion or KB on this. Appreciate if someone has already tried or know the configurations.

430
AllenWu
Netskope Partner
1 year ago
S
SirRobertNew Member
posted in Next Gen SWG
Netskope Agent disabled/Fail Close when AD account is locked out

Hello All,   I was wondering if it is normal for Netskope to go into disabled and then into Fail close if the user account in AD gets locked out.  I don't see anything in our agent arguments that would imply it is installed with fail close.  As well, I have the fail close option unchecked on our client configuration.  The only thing I have read is that I have a password set for tamper proofing, which is a prerequisite for fail close.    Has anyone come across this situation before?

3760
AllenWu
Netskope Partner
1 year ago
farhan
Netskope Partner
farhanNetskope Partner
posted in Next Gen SWG
Netskope Policy migration

Hi team,We migrating policies from Zscaler to Netskope NGSWG with file type url filtering  and cloud apps control. As the categorization is totally different can you please help me out with this migration of policy I need to know the category fall in Zscaler which is fall in Netskope or any docs from your end will help thank you.

1060
qyost
1 year ago
C
ChrisParrNew Member III
posted in Next Gen SWG
How is usage vs. licensing calculated?

How is license consumption worked out for the SWG product? We're currently just syncing groups from Azure AD that contain users based on their office location and the total number of members in those groups is just under what we're licensed for, but want to ensure that we aren't missing anyone. If we sync a catch all group from Azure AD that contains about 3 times as many accounts as we have Netskope licenses what happens to our license consumption? Do we consume licenses equal to the total number of AD accounts that are synced, total number of enabled AD accounts, total Netskope clients seen over a time period, max concurrent connected clients, or something else?

11410
Indu
Netskope Partner
1 year ago
J
jjsarpiNew Member
posted in Next Gen SWG
Problem many disconnections NETSKOPE client on CHROMEBOOK/CHROME OS

Good afternoon,Many of our users on Chromebook/Chrome OS (differents constructors and differents "versions" like "Nami", "Zork", "Octopuss", "Hatch"...) experiment frequent disconnections since earlier version (actual latest version for ChromeOS via Playstore is 107.1.0.1529, published on 2023/08/23), tunnel going up/down in logs, this is very embarrasing for our users. Fixes have been deployed until the latest stable version mentioned above, but the disconnections are persistent, and seems more frequent when users are in homeworking. Does anyone encounters the same kind of issue, please ?Thank you if you can help me. I precise Netskope official support have already been contacted and is aware of this problem.Best regards. 

1110
J
1 year ago
S
SivaExplorer III
posted in Next Gen SWG
Unenroll from command-line

Hello, we have disabled unenroll from client UI through client config. But in some instance need this operation  [eg: IT accidentally enrolled while troubleshooting under user's windows session]. Wondering if this can be done from CLI or manually deleting user level files. 

1390
S
1 year ago
M
mdmeow12123New Member III
posted in Next Gen SWG
Unable to Update Clients

The Netskope clients have not been able to update configuration since September 1st for my tenant.  Netskope said its a known issue. Is there a reason why https://trust.netskope.com/ does not reflect this yet? Thank you. 

8950
S
Netskope Employee
1 year ago
S
SivaExplorer III
asked in Next Gen SWG
URL List being processed in case sensitive mode

Hello,  We configured a URL list to allow certain github repositories and noticing netskope is processing the list in case sensitive mode. Is this the default behavior? Can we have it process in case insensitive mode?  eg: github.com/Azure vs github.com/azure

1090
S
1 year ago
R
rbrussell82New Member
posted in Next Gen SWG
safevisit.online Security Risk - What is it?

We started seeing safevisit.online in our reports within the last week or 2 that this site is being blocked as a security risk.  I've looked online but I haven't found any resources explaining what this site is or why its showing up.  If its a tracker, I'm guessing users are visiting a site that has it embedded.  The domain is less than a year old.

1410
S
Netskope Employee
1 year ago
frosa
Netskope Employee
frosaNetskope Employee
posted in Next Gen SWG
Control Youtube traffic based on channels

Hello Netskope community,    Customers adopt different approaches on how they manage access to Youtube, where some have a more relaxed policy and some are more strict. For customers that need more granular controls over the video giant, controlling based on channel is one of the possible solutions.    Netskope's Instance Awareness feature extracts the channel name every time you visit a page or video so if you browse to the Netskope YouTube channel and check SkopeIT you will see something like this:  (notice the instance ID field populated with "netskope" and that will be true to any other channel on YouTube)    In order to setup a Real Time policy to either blocks a channel or simply allow it, depending on your strategy, create a new instance from SkopeIT by expanding one if these Application events and clicking on "Create New Instance" and just giving it a name.    After that, go to Real Time policies and setup a policy using this newly c

7300
frosa
Netskope Employee
1 year ago
W
wilsonExplorer III
posted in Next Gen SWG
Client version in Advanced Analytics?

Just want someone else to confirm my observation:  While what POP a client software is connecting to is available, what version of the client being used is not.   I was trying to replicate the DEM dashboard, right now I have to download devices into a spreadsheet and then chart it.

1080
qyost
1 year ago
W
wilsonExplorer III
posted in Next Gen SWG
Request for Community Support: NPLAN-112: Apply steering configs based on priority in multi user ma

I am writing to ask that the Community contact their Netskope representative and and indicate your interest the Request to Enhancement that has been stalled:  "NPLAN-112: Apply steering configs based on priority in multi user machines. " You might not have noticed this, but if you have multiple users on one machine, Netskope may not be providing them with the correct steering config.  This is most noticeable when you are in the midst of CASB to SWG, but can occur otherwise too.  In a multi-user deployment mode, if the logged in users belongs to different OUs or user groups, the Netskope Client applies the steering configuration corresponding to the user most recently logged. Ensure all the users belong to a single OU or User Group for a multi-user machine.  https://docs.netskope.com/en/steering-configuration.html#UUID-eae29f38-85d9-fd13-74c9-077e1ef74513_section-idm4585568446828833492110209816 Here is a way to interpret this:   When the client has been installed in multi-user (peruserc

950
S
1 year ago
C
ccreedNew Member
posted in Next Gen SWG
Windows Linux Subsystem

Has anyone heard how Netskope plans to deal with Windows Linux Subsystems on the Windows 10 and 11 devices. We have several users where I work that are asking question around this.  

9200
P
1 year ago
Deepak_InfoTru
Netskope Partner
Deepak_InfoTruNetskope Partner
posted in Next Gen SWG
Netskope Client Installation on Windows Server 2016

Hi there, One of my client doesn`t want to go other way of steering traffic from Windows Server 2016 to Netskope Cloud so he wanted to use Netskope Client to steer the traffic from the Windows Server 2016. We tried to install, client stays disabled and when checked logs it says the below.Initially we thought it would UPN and EMAIL ID are not matching, but we created separate the account with the same UPN and EMAIL ID, but client still fails to download config branding file and stays disabled. What you suggest next we should do? 2023/08/09 16:49:23.584 stAgentSvc pcb0 t17b4 error config.cpp:6234 Config Branding file downloaded failed for user: Removed the user ID2023/08/09 16:49:23.584 stAgentSvc pcb0 t17b4 error config.cpp:4571 Config Failed to download branding file using UPN2023/08/09 16:49:13.570 stAgentSvc pcb0 t17b4 error config.cpp:8173 Config failed to download UPN hashing config2023/08/09 16:49:13.570 stAgentSvc pcb0 t17b4 info config.cpp:5960 Config UPN encoded for u

5160
S
Netskope Employee
1 year ago
frosa
Netskope Employee
frosaNetskope Employee
posted in Next Gen SWG
Netskope Controlled Domains for URL Category Testing

Hello NS community!   Currently Netskope URL categorization product has 127 categories. Some categories are meant for legitimate traffic such as Financial News, Business, Educations, and some categories are security risk related such as, Security Risk - Botnets, Security Risk - Phishing/Fraud. There are also categories that may not be allowed for work environment such as Gambling, Tobacco or Adult contents. Each customer can create their own policies to allow or block each URL category. In order to test these policies, customer needs to know the URL samples in each category and then performs the test.   Attached you can see an example of these "hardcoded" categories for all our categories so you can test your policy in real-time. Be cautious as clicking in these URLs will generate logs for the Netskope user accessing them so make sure administrators know these tests are being performed.      Update (8/14/23): Updated attachment with latest "Generative AI" categ

5338
frosa
Netskope Employee
1 year ago
shubhamk
Netskope Partner
shubhamkNetskope Partner
posted in Next Gen SWG
Internet Not working on a particular system (working for rest of the systems)

Dear Team, We noticed that the internet is in working condition for every other user, however, it is showing an error of the internet not working on a that particular system.After analysis, we found the below logs, we need your assistance to understand the cause. fileUtil.cpp:45 nsUtils failed to open file for reading: C:ProgramData etskopestagent/eventcache.json, err:2t40a4 info fileUtil.cpp:82 nsUtils failed to open file for reading: C:UsersAppDataRoamingNetskopeSTAgent/data/authtoken.pem, err: 2t2afc error registry.cpp:158 registry RegOpenKeyEx failed, err: 2 Best Regards.

3880
S
Netskope Employee
1 year ago
S
Netskope Employee
sshiflettNetskope Employee
asked in Next Gen SWG
Netskope Next-Gen Secure Web Gateway Controls for ChatGPT

IntroductionChatGPT and other AI chatbots have been getting a lot of attention lately.  They are extremely helpful in getting information, responding to custom queries, and can even be used to write code along with other common daily tasks.  They represent an exciting new digital frontier but from a security perspective, they also represent yet another place for your corporate data to go.  Netskope’s inline Next-gen Secure Web Gateway capabilities can block posting of sensitive data to collaboration tools such as Slack and Teams out of the box.  It got me to thinking that since ChatGPT is essentially a chat system, why can’t we use a similar capability to block posting sensitive information to ChatGPT?  As one quick tangent, I also want to give OpenAI some credit as they also warn the user that it’s not appropriate to put personal data into their platform:   That being said, this is as after I already posted the data and relies on ChatGPT recognizing the

10230
cchessor
Netskope Employee
1 year ago
A
adamssonNew Member III
asked in Next Gen SWG
Whitelist IPs

We’re having an issue with our web server blocking Netskope IPs. Where can I find a list of IPs that I can whitelist?

14540
A
1 year ago

Badge winners

Show all badges
Terms & ConditionsCookie settings