Other Forums

Dear Netskope-Team,First of all: I love the new SpeedTest Feature! SpeedTestBut I think something is not working correctly yet, because the download speed is always below 1 Mbit/s.Here my results:POP: DUS1Test ID: ypjx-9133686Latency: 11.20 msJitter: 2.75 msDown Speed: 0.25 mbpsUp Speed: 538.54 mbpsHTTP version: 1.1 Could you please help? Anybody in the community with the same problem? Best regards

Can we use Netskope NPA to enforce all user sessions to authenticate to all private applications using MFA (using our organization’s IdP)? Let’s say some of our internal applications do not support SSO and we wanted to use NPA to force users to authenticate using MFA (just for those apps that do not support SSO) How can we do that? Can we use Netskope SWG/CASB to do the same for external cloud/SaaS/web applications? In other words, enforce MFA (through our IdP) when those applications are not able to directly support our SSO?Any ideas on how to make this happen with Netskope NPA and SWG/CASB? Thanks!

I have a regex URL list that blocks ai mode in Chrome but I cannot get the AI Mode button in the search bar to block or disable.  I reached out to our CSM who said they in turned reached out the the product team.  It sounds like this is in the works already but we want to block before waiting for their update.  Does anyone have any thoughts on how to do this?  I identified where the  element is within Developer Tools but of course changing that from false to true is temporary.  Injection JavaScript is beyond my scope.  Looking for any help anyone might have.  Thank you.

Curious if anyone has successfully triggered compromised credential alerts in recent months.We've noticed that there have been no detections of compromised credentials for several months. We've reached out to support and the L3 team, but no test samples have been provided to demonstrate the functionality in the console.We're wondering if anyone has observed any related events that could confirm this feature is functioning as expected.

Where can I find the NSG-500 package size? I have the size of the appliance, but I need to know the size of the box itself.

I have a law enforcement customer that Plugs in equipment via USB and uses NDIS to emulate internet to those devices. This creates a new network adapter which forces the client to go into a disabled state. How do we get past this? Running the lates golden release - 

Most of our devices are on version 129 but our image has not been updated from version 123 yet.  Recently we’ve had two machines that have not been enabled after imaging until someone else has signed in to that machine.  Both of those people, myself included, are Admins so I’m not sure if it’s that level of permission or just that someone else with an account in Netskope signed in.  I know we can’t auto-update from version 123 to 129 without issues.  My question is - once the computer is imaged, does it still take 15 - 20 minutes before an auto-update would happen and could the version differences cause the issue with 123 enabling without intervention?

The one-time password reset ability is a nice add. Missing features below :  Dialogue box needs a field, like a phone number or URL There should be an admin role for retrieving the one-time password, and that is the only right for the role. This should be an out-of-the-box role, not something a customer has to create custom. Looking at the custom roles, it is difficult to identify if the retrieval ability of the one-time password as a role is even configurable as an option.  

Hi Community,I was wondering if we have an Advance Analytics Report/Dashboard to track the use of source codes. That is track the upload, Download or other activities of programme language codes. I have already tried to check for same in Netskope Library and in the Netskope dashboard gallery. 

Hi Team, I have a few questions with Netskope Plane for customers compliance reasons. 1) on which plane is customer data stored?2) What data is available on the data plane?3) What data is available on the management plane? Is management plane available in India? Thanks in Advance

Hello, we have disabled unenroll from client UI through client config. But in some instance need this operation  [eg: IT accidentally enrolled while troubleshooting under user's windows session]. Wondering if this can be done from CLI or manually deleting user level files. Thanks for your help

I have a question around Azure Groups. Does Netskope Support the ability to Apply inline Security Polices Against “M365 Groups” or is it only Entra “Security Groups”   

We would like to define the UEBA policies for the group of users matching to the File count.Example, if the User group “A” has the threshold of deleting 5 files as a count & User group “B” has the threshold of deleting 10 files as a count.We have identified the Predefined UEBA policy “Bulk Delete”. however, we can’t use it for the different user group with different file count.Could it be possible to add template or the clone the predefined policies for the custom configuration? If we have use the UEBA custom policy, file count is not available which has activity as a condition.

Are there any Best Practice documentation with Witness.AI generatice ai compliance tool integration along side or working in tandum with Netskope? 

I have read the Verizon 2022 DBIR and I could not help but noticing that some of the risks outlined in the document can be mitigated by our platform. More in detail:   At page 8, the report states that "Error continues to be a dominant trend and is responsible for 13% of breaches." This finding is heavily influenced by misconfigured cloud storage. While this is the second year in a row that we have seen a slight leveling out for this pattern, the fallibility of employees should not be discounted.” This is obviously something that we can mitigate with our CSPM. An additional important message is that remote access plays an important role for attackers. More in detail (page 14) "remote access established by the attacker is important and that there are a slew of ways of creating that persistent access. In terms of vectors, these align well with the notion that the main ways in which your business is exposed to the internet are the main ways that your business is exposed to the

The Netskope Threat Labs Report: Europe 2025 is out and available at:https://www.netskope.com/netskope-threat-labs/threat-labs-report-europe-2025The main findings can be summarized in:🌩️ 16% of malware downloads came from GitHub🌩️ Adobe is the most impersonated brand for phishing with 29%🌩️ 57% of DLP violations concern regulated data🌩️ 91% of organizations use GenAI appsThe following infographic summarizes the main findings: 

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

Hey-o Community! Was recently using the Netskope Performance t/s tool for Windows and I noticed that part of the testing that takes place appears to be ping attempts to a POP gateway, however if ICMP is inherently not allowed to POP’s then why is this even part of the testing? Unless someone knows if “No-Pinging” is just something an organization can choose to NOT have while others do? Looking to get clarity to also understand just how useful this tool actually is.  

Table of ContentsIntroduction How a Reverse Proxy Phishing Kit Works Mitigation Strategy 1: Conditional Access on the Target Application Mitigation Strategy 2: Remote Browser Isolation Mitigation Strategy 3: DLP Profile Conclusion IntroductionAn emerging trend in the threat landscape is the growing availability of phishing tools that act as man-in-the-middle proxies (also known as AiTM - Attacker in The Middlle), allowing attackers to intercept login credentials and session cookies, thereby bypassing two-factor authentication (2FA) protections. Originally designed for penetration testing, they have evolved into a popular method for cybercriminals to execute phishing attacks.Common examples of phishing kits include Evilginx2.The challenge with phishing kits acting as man-in-the-middle proxies resides on the fact they they are completely transparent to users and to security tools as well. There is no real difference between the phishing page and the real login page, and additionally ther

HiSome of the China Gov websites have IP restriction that only allow coming China IPs.As we are connected via JP POP,  China website will deny the access.  I believe FProxy can mitigate this issue, can share China FProxy IP to use?Thank

Looking for advice on how to accomplish the following:Identify all SaaS Apps that our users are logging into, and identify the user groups (departments, OUs, etc.) that are logging in for each SaaS App Key information that we are looking for on the App is the following: App Name URL URL Category CCI Available - Is the application in CCI? Here is what I tried that was inefficient, lack of quality data, etc.:I tried querying web_tx for URI containing /Login/ I then queried App Names against CCI via API Lastly, I manually looked up Apps in CCI to try and find users with traffic associated to the app (the issue here is that a browse to the site would show up and not indicative of a user login)Any advice and/or direction would be appreciated. (Was not sure the appropriate category to put this question into - thus chose Additional Discussions)

HalloIn a multi user environment the Netskope Client does a tunnel to Netskope POP for each logged in user or is there a unic tunnel for all users ?Thanks

Hi,We are experiencing an anomalous case on machines where we have installed the NS Client in peruser config mode. We have noticed that when a user with higher client config privileges (disable client, etc.) logs in and subsequently another user connects to the same machine, the second user inherits the client configuration privileges of the user with higher privileges. Only by restarting the service is the client configuration correctly re-established for the user. We noticed this because user 2 now has permissions to disable the client. We have tested it in v123. Estamos experimentando un caso anómalo en máquinas donde tenemos instalado el NS Client con el modo peruser config. Nos hemos dado cuenta que cuando un usuario con mayores privilegios de configuración del cliente (deshabilitar cliente, etc.) inicia sesión y posteriormente otro usuario se conecta a la misma máquina, el segundo usuario hereda los privilegios de configuración del cliente del usuario con mayores privilegios. Sol

For the Netskope Adaptor software, we recently became aware of “Newtonsoft.Json.xml” - does anyone know what the functionality of this is?  Up to now, we have center our attention and double-check our backups for “nsADImporterConfig.json”  

【Background】With the activation of Secure Enrollment, authentication tokens must be renewed each time before their expiration. Engineers need to confirm the pre-expiration notifications for the tokens and carry out the necessary tasks to address any identified issues. 【Request】We request a notification when the Secure Enrollment token is nearing its expiration date.We would also like the ability to configure how many days in advance the notification is sent.