Next Gen SWG

I'm unable to get to the KB article at this this link. Do I need a special Support Portal login? My community login isn't working there, and I do not see a way to create a support portal login. I'm trying to solve the same issue that this community member ran into, and getting to the KB article seems to be the key.

HiWhere can I configure to check media type header, eg application/winword? Thank

How to uninstall netskope via command line that has a password ?

Has anyone had issues resolving AWS CLI certificate errors when the Netskope Client is enabled? Multiple developers in our org have followed the steps in https://docs.netskope.com/en/netskope-help/traffic-steering/netskope-client/addressing-ssl-error-while-accessing-aws-services-via-the-aws-cli-with-the-netskope-client-enabled/ for AWS CLI V2 and have even tried the older configure_tools.sh file that configures Netskope certs for common tools including AWS CLI. We have not had success in getting this to work. 

Does anyone know a way to write a report and see whether a particular IP address in IPSEC tunnel to Netskope (non Netskope client computers).   Failing that, is there a way to dump what IP addresses are in the Network Locations per Network Location? We have nonclient machines converted over to IPSEC content management via Netskope.  We are taking a asset/application group at a time and applying a SSL Decryption policy using Network locations  in order to weed out applications that don't like to be decrypted.   Ideally, I would like to write an Advanced Analytics report that shows whether a set of IP address are are are not part of an SSL Decryption policy and/or Network Location Group.  I would settle for a dump of what IP addresses are in each of my Network locations.  

I am trying to uninstall Netskope using a script via Kandji. I was able to find the script set up to uninstall with jamf. Is there any script that will work with Kandji or how can I modify the jamf script to make it work?

Hi  Can SWG manage web access by "User-Agent" header? Thank

Hi There,  What is the recommended deployment method for Citrix XenApp / vApps where multiple users log onto the same server concurrently. (Multiple users sharing same IP)

Hi all, please to meet you! I'm configuring my Google Workspace to distribute the NS app to Android clients with a Managed Configuration to avoid that the users have to make manual configs.It works fine when, in the field "User Email Address" I insert a specific email but, if I leave blank or not configured the field, the app does'nt complete the config. Given that I need to distribute the same config to many devices, I would use a variable in this field, but I can't find the correct one. Is there anyone who has been in my situation and has resolved? Thank you

You're a big Sonos fan (like me), and you want to use the Sonos S1 Controller app, or the Sonos S2 app on your Windows or Mac machine with the Netskope Client. Well, you'll find it doesn't work without adding some Netskope Client steering exceptions... When you launch the Sonos app it uses broadcast addresses to seek out Sonos devices on the local network, it can use both 255.255.255.255 (network broadcast address) and also 239.255.255.250 (simple service discovery protocol - SSDP). So these addresses need to be added to a Network Location Profile: Netskope UI -> Policies -> Profiles: Network Location -> New Network Location -> Single Object (see attached screenshot) And you'll need to reference that 'Network Location' as an exception in your steering configuration(s): Netskope UI -> Settings -> Security Cloud Platform -> Traffic Steering: Steering Configuration -> [Your steering configuration] -> Exceptions -> New Exception -> Destination Locations -&g

Would it possible to have a user click-thru policy in regards to PROPFIND (webdav) event traffic?

We are trying in a couple of channels to get an answer, including our Customer Support Manager and our Technical Account Manager.We are a little stressed over the lack of details in the below announcement.For our purposes, it lists three nights of maintenance, but it was unclear what nights, or all of them we should be worried about NYC and IAD where our IPSec tunnels are connected.Has anyone gone through this before? Have they switched their tunnels in preparation?  We are only concerned with the NYC and IAD pops where our IPSec tunnels are connected, and would like to know if there is more specific detail available regarding those POPs and the times they may be affected, and whether or not an advance failover for us is warranted.Thanks, Service ImpactThe Netskope user interface may be unavailable for brief periods of time during the maintenance window. Customers with IPSEC/GRE tunnels may notice a switch to a secondary/backup tunnel.NOTE: The release notes will be avai

Is there a way to setup a report or alert to capture devices that have not reported traffic in x number of days?It turns out that after an audit, we have quite a few agents where Netskope is installed but not steering any data to the our tenant.  We believe that in these cases the agents subsystems are not fully functioning. The users are not allowed to disable the agents. Thank you. 

Hello, We are using REST API v2 to get alerts. However, the incident_id value has an error. The last 3 numbers are set to 0. Example,Our incident_id on the netskope dashboard: 5590961107392419317. The incident_id using API v2: 5590961107392419000 How can we avoid this?

Hello all,I wanted to ask if there is any way to configure Netskope to block all DNS revolving of public DNS namens by default?We want to manually specify a list of FQDNs or Domain-Wildcards to be allowed to resolve (ie. *.teams.microsoft.com or dns.msftncsi.com). We saw the option to Blackliste a FQDN or Domain-Wildcard in the DNS profile but there seems no option to block ALL except of ... Best regardsStefan

Hi Team we are try to install the NS client on Macos 12.3 Macbookpro via email. (POC)We install package successfully but we  tenant and G/w is not display in Configuration of NS client.Lookup the gateway and URL resolution is successful. in Nsdebuglog I can see :   

Godaddy email synchronize mail - users / groups accounts  Hello good afternoon community, thank you for your collaboration and your time.I have a couple of questions: 1.- I have out there some possible client prospect that has his email accounts in Godaddy, is it feasible to synchronize the Godaddy users/groups directory to have those users/groups in netskope for use in the policies. 2.- For the Godaddy mail as such both example the Web/Cloud access to the webmail, as well as the Godaddy mail configuration in example outlook client desktop. Netskope covers this point, this protection ? what is the scope ? I have not found more information regarding Goddady for any of the 2 points. Please support me with your comments, your collaboration and your advice. Thank you Best regards

Recently, Okta acknowledged a breach where attackers were able to gain access to customer session tokens, and other sensitive data through HAR captures in their customer support system.  Attackers were then able to use the unexpired session token to access the Administrative API in the customer’s Okta tenant. The Administrative API was accessed via the browser which only requires a session token or cookie unlike the typical approach using a bearer token.  In this case, the attackers were able to gain the initial access to the customer support system via an employee syncing a service account password to their personal Google password manager.    Netskope customers can address and help prevent such exploits through a multi-phased approach. Let’s take a look at the first phase.   Phase 1:  Controlling Personal Google Account Logins Netskope was initially built as a Cloud Access Security Broker (CASB) with an inline proxy capability.   This background pro

He is what I understand: During the summer, Netskope implemented a change to address a problem when companies merge.   Apparently if two companies merged but two computers had the same hostname (?) they would have duplicate client ids.   I typically run a report of a month's worth of devices when we upgrade versions.  I run it daily to watch the increase, watch to see version change over time, and to find orphan machines that refused to upgrade their version. After the change, I immediately noticed about 2X the number of computers I have.  It turns out that in addition to changing the ID, they also changed the download options, where before it had dialog option to choose whether you wanted everyone that has logged into a machine or just the last person, now there is no option.  So now when downloading the list of machines, one to use Excel to deduplicate hostnames.  But it still isn't a good solution, as you don't necessarily get the right last reported date. So far Netskope's response

Summary With release R99 Netskope introduced a new feature “Periodic Validation on Device Classification” which is very important to enforce Zero Trust principles. Before that release, Device Classification of the client was only accomplished, when client service was started. With the new feature a validation interval can be configured for more frequent device posture checks. Requirements: NS Client version R99 or later is required. Please contact your Customer Success Manager, Netskope Support or your Account Team to get this feature enabled.  Today this feature is disabled by default!   Tenant Configuration Device Classification Profile The “Device Classification Profile” is a policy about a single or multiple checks, whether a device is compliant or not. This part of the configuration has not changed and will not be covered in detail in this post. Here is the link to public documentation. For testing on Windows a simple profile can be created to check if “notepad.exe” is

Suppose we have two gateways i.e SWG and NPA gateways and both the tunnels are established between respective gateways and the client. How does Netskope client understand where the traffic should be routed?  

Recently observed that Android Studio Issues on MAC devices even after exempted Android Studio from Netskope Proxy. Users using Android Studio are not able to connect to devices on wifi in the application. Is there is any issues with Android Studio with Netskope for MAC devices. 

Hi, I am facing some issues  with Git-hub download activity controlChecking here if anyone have an experience who can put some light and help to find solution Our requirement for Git-hub realtime protection is :-User allow to view any files (any file type)User allow to click on “Raw” and view the details of that fileWhen user click on ‘Download”, this activity should get blocked. Issue :-When user click on ‘Raw”, it is showing activity Download in the Netskope logs and getting blocked. I have checked the logs for both the activities ( when click on Raw Data or  Click on Download ) showing as Download. Any way we can only block the actual download action ( not when users are clicking on Raw data). Thank you in advance.Regards,Kunal Gandhi

How can I deploy clients on Mac devices using Sure MDM? I looked for documentation but didn’t find any.

 If you are deploying Netskope SMTP Proxy few notes of interest. (Various screenshots of interest attached). 1. If your upstream has SPF check ensure to add following record to your DNS server  so that the SPF check does not fail _spf.goskope.com 2. To allow Netskope IP's refer to the following list 2.a If you are using Proofpoint as the upstream MTA there is a tweak to allow these IP's.Proofpoint does not accept CIDR ranges. Also adding in CIDR notation e.g. /24 did not help in my case.Use the following format (first 3 octets only) (screenshot attached) 163.116.1288.36.116 NOTE: for complete list of IP's subscribe to this article. There is a table for SMTP Proxy "Netskope Email DLP (SMTP) List for AllowlistingThe following list of IP ranges represents where SMTP traffic may egress from Netskope's NewEdge Security Cloud, and should be used for permitting traffic with upstream email providers. Netskope's recommendation is that customers' add all IP ranges when configuring allowlisting w