Skip to main content
  • EN

Other Forums

Dive into the Netskope Forums Community for comprehensive discussions on cloud security, network protection, and innovative cybersecurity solutions. Connect with experts and peers to share knowledge, experiences, and best practices in safeguarding digital assets and ensuring secure cloud adoption.

212 Topics
ppasseri
Netskope Employee
ppasseriNetskope Employee
published in Netskope Threat Protection
Welcome to the Netskope Threat Protection Forum!

This section of the forum is dedicated to the Netskope Threat Protection technology. In this section you will find configuration guides, reports, research documents, and in general a space where you can submit questions and be informed about the multiple features of our threat protection capabilities, including Behavior Analytics (UEBA) and Remote Browser Isolation (RBI).Everything You Always Wanted to Know About Threat Protection* But Were Afraid to Ask!Useful resources: Netskope Threat Labs Homepage Cloud and Threat Reports (published on a quarterly basis and focused on a specific topic) Threat Labs Reports (published on a monthly basis and focused on a specific topic, or a specific geographical region) Upcoming Events Recent Blog Posts (contains the links to the Netskope Threat Labs statistics published on a monthly basis)

510
ppasseri
Netskope Employee
8 months ago
M
mattwalkerNew Member
asked in Additional Discussions
IDP Install for non-domain joined sytems

Hi All!  Hoping someone can help pin down an issue we're running into with deployment of the Netskope Client via IdP. FWIW - We're using Okta as our IdP.  IdP Install reference: https://docs.netskope.com/en/netskope-help/netskope-client/netskope-client-deployment-options/deploy-netskope-client-via-idp/We have the Okta account set up in Settings>Security Cloud Platform>Forward Proxy SAML. We also have the .msi file on the computer. We run the following install script:  msiexec /I NSClient.msi tenant=**MASKED** domain=goskope.com installmode=IDP mode=peruserconfig autoupdate=on /qn After running the script, the Netskope client installs, and the user is prompted to enter in their Okta credentials. The user completes Okta authentication (we can see the successful log within Okta) but then the Netskope enrollment window flashes to a "Hmmm... can't reach this page" error.   Has anyone here run into a similar issue or know how

3733
rodolfobsantos
Netskope Partner
17 hours ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

382
D
Netskope Employee
8 days ago
yihualiao
Netskope Employee
yihualiaoNetskope Employee
posted in Artificial Intelligence and Machine Learning
New AI/ML Patents on IoT Device Intelligence and Policy Engines

Netskope has been granted three new U.S. patents for its innovative approaches to IoT security and AI/ML based policy engines. Middle-ware artificial intelligence (AI) engine (US 12,166,776, Dec. 2024) Systems and methods for computing device association (US 12,137,389, Nov. 2024) Machine learning based policy engine preference for data access (US 12,126,655, Oct. 2024)These patents enhance Netskope's comprehensive intellectual property portfolio and solidify its competitive position in the industry. 

60
yihualiao
Netskope Employee
10 days ago
Leandro Timotio de Lima
Netskope Employee
Leandro Timotio de LimaNetskope Employee
posted in Netskope Threat Protection
(VIDEO) Enable - Test Netskope IPS

Policy:Enable - Test Netskope IPS Description:In this video we show how to activate Netskope IPS and perform the detection test with an EICAR test file Video: 

370
Leandro Timotio de Lima
Netskope Employee
11 days ago
dburgess23
Netskope Partner
dburgess23Netskope Partner
asked in Additional Discussions
Admin having issues

Anyone have this issue? 

80
dburgess23
Netskope Partner
11 days ago
D
dkolb-netskope
asked in Additional Discussions
Netskope CA certificates

Does Netskope notify us when their signing CA certificates are changed/updated? Recently we have had an issue where we needed to manually upload the certs for a tool and I was curious if Netskope notifies all of their customers when this certificate is renewed or being changed.Let me know if anyone has experienced the signing CA’s changing/updating and if Netskope notifies anyone.Thanks in advance!

260
D
18 days ago
T
Netskope Partner
TED_tsukaharaNetskope Partner
posted in Additional Discussions
Request：A notification when the Secure Enrollment token is nearing its expiration date.

【Background】With the activation of Secure Enrollment, authentication tokens must be renewed each time before their expiration. Engineers need to confirm the pre-expiration notifications for the tokens and carry out the necessary tasks to address any identified issues. 【Request】We request a notification when the Secure Enrollment token is nearing its expiration date.We would also like the ability to configure how many days in advance the notification is sent.  

491
S
Netskope Employee
1 month ago
D
dkolb-netskope
asked in Additional Discussions
Secure Enrollment Authentication Token Question

Hello,I was wondering if the Secure Enrollment Authentication Token gave a warning before expiring?I could not find any documentation that said there would be any banners or notifications when the token is about to expire so I wanted to know if there is some sort of warning for it.Thanks in advance!

631
S
Netskope Employee
1 month ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Device Classification: Verification of Certification Chain, Expiration, CRL

Hello,In the context of implementing a Device Classification profile, we can verify the presence of a certificate. Currently, the presence of a certificate is sufficient to meet the criteria.Is it possible to extend this verification by checking the certification chain, expiration date, etc.

251
Rohit_Bhaskar
Netskope Employee
1 month ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
On-Premise Detection

Hello,In the context of On-Premise detection, it is currently possible to use a DNS/http request. To validate detection, it is necessary to depend on the tested resources.The slightest network disturbance can lead to poor detection of the user's location Is it possible to use the Public IP to identify the user's locality? This IP is visible to the agent.

321
Rohit_Bhaskar
Netskope Employee
1 month ago
A
AlfaBaneExplorer III
posted in Additional Discussions
Single mode -vs- Multi-user mode installation

Hello all,    I wanted to see if anyone had any use-case, pros/cons, intent, etc information in terms of client installations. Beyond "Optional parameter. Use this parameter when installing in a multi-user system", I've been unable to find any additional information or context.    For reference, when we deploy the client or provision devices, the Netskope client MSI is installed with a mode=peruserconfig parameter. While our devices can be used by any user in our environment with appropriate access, there are next to no devices that are intended to be regularly used by multiple users.    I just wanted to reach out and see what your experiences have been. 

15395
monika
Netskope Partner
1 month ago
Kmaheshwari
Netskope Employee
KmaheshwariNetskope Employee
published in Additional Discussions
Netskope Sentinel One Device ClassificationNetskope, Sentinel One, Device Classification

Integrating SentinelOne and Netskope to leverage threat detection and enforce device classification provides a robust endpoint-to-cloud security approach.This integration facilitates effective device classification and management, enabling consistent security policies across both cloud and endpoint environments. Requirements:SentinelOne Admin Access Netskope Tenant Implementation:SentinelOne ConfigurationConfigure the script on SentinelOne Tenant > Remote Ops > Create New Click on Upload New Script and provide the script details Upload the script Script content:This script will create an empty file with a specific file name in a specific directory that Netskope's client will look at and It will be created when there is high risk as determined by SentinelOne - and when the Netskope client sees this, it will be able to match on the device and respond appropriately. # Define the directory and file path$targetDirectory = "C:\ProgramData\Sentinel\Addons\SentinelRSO"$filePath = Join-Pa

640
Kmaheshwari
Netskope Employee
1 month ago
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
posted in Additional Discussions
Cribl Netskope Events and Alerts Integration

Cribl Netskope Events and Alerts Integration Netskope’s Events and Alerts can be pulled into Cribl via the Netskope REST v2 APIs. You can use Cribl Stream to filter and redirect to the destination of your liking. Note: Netskope Steaming Events (WebTx) aren’t supported currently. RequirementsNetskope tenant with API v2 enabled Cribl Stream accountSetup StepsNetskope Generate API token CriblCreate Data Source VerifySave and Run NetskopeGenerate API tokenIn your Netskope tenant go to Settings > Tools > REST API v2 > New Token  Add permission scopes to the token. You will need to add all scopes that you want to pull. In my example, I am going to grab all Events and Alerts. Give your token a name, and expiration period. Use the following scopes Events/api/v2/events/dataexport/events/application/api/v2/events/dataexport/events/audit/api/v2/events/dataexport/events/incident/api/v2/events/dataexport/events/infrastructure/api/v2/events/dataexport/events/network/api/v2/events/dataexport

16094
Gary-Jenkins
Netskope Employee
1 month ago
S
smzothoNew Member III
posted in Additional Discussions
Netskope randomly disabling

Hi Team I'm really happy to be part of this wonderfully community, my name is Simphiwe.We have many of our users whose Neskope gets disabled randomly and when this happens they lose access to a number of important applications within the organization. The only way to temporarily fix this is to restart the Netskope service or to completely restart the computer. However this is a short-time fix. I just want to know what are the main causes of Netskope getting disabled and how to fix this ? Thank you  

28755
M
1 month ago
yihualiao
Netskope Employee
yihualiaoNetskope Employee
posted in Artificial Intelligence and Machine Learning
New Blog Post: Proactive App Connector Monitoring with Machine Learning

App connectors are a critical component of the Netskope secure access service edge (SASE) platform, offering visibility into user activities based on their interactions with cloud applications. These connectors monitor various types of user actions, such as uploads, downloads, and sharing events in apps like Google Drive and Box, by analyzing network traffic patterns. With this visibility, security administrators can then configure and enforce real-time policies to prevent malware, data theft and exfiltration.we’ve developed a patent-pending app activity monitoring system that leverages advanced machine learning algorithms to automatically identify significant anomalies in app event counts. Please read our latest blogpost for details: https://www.netskope.com/blog/proactive-app-connector-monitoring-with-machine-learning 

300
yihualiao
Netskope Employee
1 month ago
W
wdeguaraNew Member III
asked in Additional Discussions
Netskope and Docker

Just wondering whether any community members who are Docker users have been able to get Netskope working with it ?

35563
J
1 month ago
Kmaheshwari
Netskope Employee
KmaheshwariNetskope Employee
published in Additional Discussions
Netskope CloudExchange CREv2 CrowdStrike CNAPP Workload QuarantineKnowledge Base Article,

The integration between Netskope CE CREV2 and CrowdStrike CNAPP (Cloud-Native Application Protection Platform) combines Netskope's ZTNA with CrowdStrike’s cloud workload protection capabilities to provide a seamless solution for securing cloud environments, particularly by enabling workload quarantine. Using this integration we can quarantine all the risky workloads via the Netskope CREv2The workload quarantine feature ensures that in the event of a security incident or detection of a compromised workload by CrowdStrike CNAPP, the affected instance or service is quickly isolated from Netskope Tenant for the users, limiting the spread of threats across the cloud environment. This capability helps in rapid incident containment and response. RequirementsCloud Exchange-5.1.0 Netskope Risk Exchange Plugin CrowdStrike Cloud Protection Plugin CrowdStrike CNAPP  Netskope Tenant ImplementationConfigure the Netskope Risk Exchange Plugin Configure the Entity Sources for the Netskope Risk Exchan

330
Kmaheshwari
Netskope Employee
2 months ago
Kmaheshwari
Netskope Employee
KmaheshwariNetskope Employee
published in Additional Discussions
Automating VPN Failover with AWS Lambda for Netskope PoP ConnectionsKnowledgebase, FAQ

This article outlines a solution for automating VPN failover using an AWS Lambda function, triggered by an Amazon CloudWatch event rule. The function monitors IPsec tunnel status changes for VPN connections to the Netskope Point of Presence (PoP). The automation ensures seamless failover to alternative PoPs in case of VPN failure, enhancing network resilience.  Overview The solution deploys an AWS Lambda function that automatically responds to changes in VPN tunnel status for connections to the Netskope PoP. Triggered by an Amazon CloudWatch event rule, the function checks if both VPN tunnels to the Netskope PoP are down. If they are, the function scans all AWS Transit Gateway (TGW) route tables and replaces routes pointing to the downed VPN connections with static routes to a designated failover PoP.This solution can be deployed in any AWS region and integrates with the AWS Global Network, utilizing Transit Gateway Network Manager to monitor and manage VPN connections. Key Features: P

300
Kmaheshwari
Netskope Employee
2 months ago
J
juanmNew Member III
asked in Additional Discussions
SCIM-Based User Provisioning with GSuite

Hi all! It is supposed that Netskope can import the OUs and User Groups from GSuite user platform directly using SCIM but, I couldn't find the way to do it. In addition, all the documentation I find is related to SCIM integration with Azure AD and Okta. I've been looking for a way into GSuite Admin Console and there is nothing similar. Anyone here has had the same issue? Thanks!

3005
maheshchavan
Netskope Partner
2 months ago
KyleCabral
Netskope Partner
KyleCabralNetskope Partner
asked in Additional Discussions
Policy Email Notification Schedule

Currently there is no ability to schedule a policy email notification for a specific time.   The time the report is sent is fixed on the back end.  Would be nice to have the ability to change to a specific time.  

233
Rohit_Bhaskar
Netskope Employee
2 months ago
prajakta.yadav
Netskope Partner
prajakta.yadavNetskope Partner
asked in Additional Discussions
Netskope Reverse Proxy

Hello, What are the applications that can be covered in reverse proxy on Netskope? What are the limitations of reverse proxy?

441
V
Netskope Employee
2 months ago
AllenWu
Netskope Partner
AllenWuNetskope Partner
asked in Additional Discussions
Data Retention of Audit Log

Hi there, Does anyone know for how long Netskope will keep admin’s audit log on the console?Failed to find more info from kb and not sure if purchasement of extended data retention or AA will cover this and extend the data retention period of audit log to at least 1 year.https://docs.netskope.com/en/audit-log-1/ Thanks

491
S
Netskope Employee
2 months ago
yihualiao
Netskope Employee
yihualiaoNetskope Employee
posted in Artificial Intelligence and Machine Learning
Netskope's New Patents on URL Categorization and DLP File Classification

Netskope has been granted two new U.S. patents for its pioneering work in URL categorization and sensitive file classification, recognizing the company's innovative approaches to these critical areas. Specifically, the patents acknowledge Netskope's expertise in the following technologies:Machine learning-based URL categorization system with selection between more and less specific category labels (Patent number: 12,081,550) Training and configuration of DL stack to detect attempted exfiltration of sensitive screenshot-borne data (Patent number: 12,067,493) These patents enhance Netskope's comprehensive intellectual property portfolio and solidify its competitive position in the industry. 

240
yihualiao
Netskope Employee
2 months ago
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
asked in Additional Discussions
Hub - Spoke gateway - Dynamic Public IP - Spokes-branchs

Hub - Spoke gateway - Dynamic Public IP ( Spokes-branchs )  Hello community, good afternoon.  I have a question regarding the sdwan borderless wan part of Netskope. Understanding a Hub-Spoke architecture Where I have one or a few SDWAN Gateway in Hub mode and other Spoke branches with their corresponding gateways. My doubt is the following. If I have Spoke/BranchOffice sites, where eventually there is a need for some other connection from the other branches to some particular resource of that branch, I would understand that it is not necessary that my Gateway - Spoke sdwan does not have static public IP, but dynamic either by 4G/5G or some high quality ADSL connection and / or public IP links Dynamics, for the Gateways / Spoke would not be critical to have static public IP where if in the case of the Hub if you have preferably static Public IP and / or port forwarding to the IP of the gateway-sdwan. Hub, but if it could allow and set up the tunnels and according to the policies would a

371
MetgatzNK
Netskope Partner
2 months ago

Badge winners

Show all badges
Terms & ConditionsCookie settings