Other Forums

The is first Netskope Threat Labs report of 2024 dedicated to a specific geographical region. A public version of the same report is available here.The Netskope Threat Labs Report highlights a different segment every month. This report series aims to provide strategic, actionable intelligence on active threats against users in each segment. The segment highlighted in this report is users working in Canada. In This Report Cloud App Adoption: Microsoft OneDrive, the most popular app worldwide, is even more popular in Canada than in other parts of the world, with the rest of the Microsoft 365 ecosystem following a similar trend.Cloud App Abuse: More than half of all malware downloads in Canada come from cloud apps, with a significant percentage coming from Microsoft OneDrive and GitHub.Malware & Ransomware: Among the most prevalent malware families targeting victims in Canada are the remote access Trojan NjRat, the Trojan Formbook, and the infostealer AgentTesla. Cloud App Adoption Th

Microsoft has enhanced Security Copilot by preinstalling a set of plugins for their security services and frequently used websites. Additionally, you have the option to incorporate Netskope custom plugins, expanding Gen AI capabilities on your Netskope platform.RequirementsEnsure you have an active Microsoft Security CoPilot account and are able to login to: https://securitycopilot.microsoft.com/ For more information on Security CoPilot please visit: Get started with Microsoft Security Copilot Early Access ProgramCreate a local yaml file called NetskopeCoPilotSkill.yaml (filename can be anything). And paste the below in your yaml file: Descriptor: Name: Netskope Reporting for Threat and Data Protection DisplayName: Netskope Reporting API endpoints Description: The API plugin offers 6 skills that range from displaying Netskope Alerts and Events for Threat Hunting and Data Protection. SupportedAuthTypes: - ApiKey Authorization: Type: APIKey Key: Netskope-api-token Loca

Registration links to join Netskope Cloud Exchange 5.0 webcast that will air in different global time zones Feb 27-29.Join next week’s webcast on Netskope Cloud Exchange for your Zero Trust JourneyLeverage Your IT Security Stack with Netskope Cloud Exchange 5.0Come learn how the Netskope Technical Alliance team has improved our technology partner integration platform, Cloud Exchange. The new capabilities further extend the value of the security ecosystem at stopping threats together.Great work by David Willis, Gary Jenkins, Agasthiamani Sankaran NAM - February 27th - 10am EST | Noon CST | 1pm ESTEMEA  - February 28th - 10 am GMT | 11 am CETAPAC - February 29th - 10:30 am IST| 1:00 pm SGT | 4:00 pm AEDT

Will Netskope block some of the virtual assistants like Otter.AI. I am trying to stop anyone from joining a MS Teams meeting and launching something like Otter.AI, regardless of if they are on a corporate device or a personal device.  

With dynamic steering and on-premise detection enabled, I want the ability to see who is reporting as “remote” vs “on-premises” from the tenant/console. This would be good data for tracking, incident response, troubleshooting, etc.  I’ve been unable to find a data point in the tenant in relation to this. Does anyone know if it is available (short of having end-users manually confirm via Configuration)?

Hello!  I wanted to know if there is an easy way to get a copy of all the technical support docs from Netskope. Including API docs (which are currently only available at the Netskope admin console level). My goal is to create a vector database and ultimately teach an AI Agent Netskope. For practical purposes I'd like to see the extent by which I can extend and embed a model with data and how that would stack up to some of our in house support. Apart from the public facing knowledge base I'm looking for more documents on troubleshooting client side issues. Maybe even some documentation on how to spot errors in Netskope Debug Logs, etc...  Thanks for any and all support!-Hax

In an era of escalating cyber threats and increasingly sophisticated attacks, organizations are facing an ever-growing challenge to safeguard their digital assets and sensitive information.Watch this demo with Netskope Chief Evangelist, Bob Gilbert, to hear how you can harness the power of AI/ML to strengthen your cybersecurity and defend against bad actors attempting to infiltrate your infrastructure.Demo Highlights:Learn how AI/ML is revolutionizing threat detection and data protection Discover cutting-edge AI/ML techniques for anomaly detection and behavior analysis See how artificial intelligence and machine learning are powering the future of data classification  

HiIn the Steering Configuration and Client Configuration, I can only select OU or AD User Group.Using OU or AD User Group are inflexibleExample for testing purpose, unable to select AD users from different AD user group for testing since there was no AD user group for these selective users. can’t just test for 1 user.  WIll have to create AD user group for for 1 user Select by device.  I may have multiple devices login using the same account.  I will want the test steering and client configuration for test devices.  My corp device will not take effect.Is it possible to select by individual AD user or by device?  thank

PLS ASSIGN ASE TO APAC TSE FOR SAME TIMEZONE======================================================= HiWe encountered lot of device having upgrade and rollback error.  How do I remediate the issue back to usable state?thankMunster

Hi All. We are trying to setup SCIM  with netskope and facing below error:-If we unbind the idp group from Netskope SSO app, the user is removed from Netskope but the idp group remains in Netskope and is orphaned with no association.Binding the idp group to SSO app again,this association doesn't work but user is synced over to Netskope with no group assignments.If we remove all the members from a group provisioned by idp in Netskope(via GUI) .Again provisioning that group gives a error saying (group already exists ) .(groupid being returned is different)Do we have any limitation from Netkope such as idp provisioned groups should not be managed through Netskope GUI?Could anyone help me this. 

Hello, I am looking for the hardware requirements for the Netskope client. For PCs, and mobile devices. how much memory?how much drive space? CPU? etc. Can anyone assist ?

When I go to the Community Events page, anyone else getting a calendar that just hangs trying to list events? Stay current on Netskope's events lineup. 

Hello, I have a rather annoying problem with my Netskope Windows and MAC OS clients: the configuration update is done randomly. On the clients, the config update sometimes happens, only to fail.Looking in the DEBUG log, and running nsdiag -u in the STAgent, I get these errors: 2024/01/23 09:52:52.456 nsdiag p5684 t58fc info ConfigSync.cpp:32 CConfigSync check for configuration update started 2024/01/23 09:52:52.472 stAgentSvc p1c08 t23e8 error config.cpp:8081 Config failed to download config version 2024/01/23 09:52:52.472 stAgentSvc p1c08 t23e8 error config.cpp:9509 Config [sessId 1] failed to download config version. 2024/01/23 09:52:52.472 nsdiag p5684 t58fc error nsdiag.cpp:1707 CNSDiag Failed to check for configuration updates. I have no output firewall filtering, and I have no proxy or PAC proxy in my environment.Do you have any suggestions for me? Thanks!

Hi Team, Can we configure the NS agent with PAC where PAC file automatically updated in to the user machine or is there any manual work we need to do. Please let me know the architecture for both On-premise and roaming user We need NS with PAC or anything NS with E proxy or workaround. i know explicit proxy over client./Netskope Client Split proxy with EPOC. Please let me know how i can and what are there pre-requisites.

Does anyone know if after install, the client can be changed to not update from the Portal?During install the switch autoupdate=on was used and now we would like to revert to "off". Is there a way to do it other than reinstall the agent? I know how to limit from the Portal itself but for my needs I want to know if there is a way to revert the autoupdate=on feature after installed.

Netskope API integration with Aruba EdgeConnect SD-WAN Overview This integration enables you to automatically configure tunnels from Aruba EdgeConnect SD-WAN routers to Netskope’s security service edge (SSE). Aruba’s SD-WAN will build tunnels to the closest primary and secondary Netskope POP with the ease that you would expect from Aruba SD-WAN Orchestration.  SSE defines the set of security services that help deliver on the security vision of SASE. These security services include firewall-as-a-service (FWaaS), secure web gateway (SWG), cloud access security broker (CASB), zero trust network access (ZTNA) and related security functions such as remote browser isolation (RBI), data loss prevention (DLP) and cloud & SaaS security posture management (CSPM/SSPM). Requirements Netskope tenant with API tunnels enabled Aruba SDWAN Orchestrator running >9.3 Setup steps Netskope Pre-requirements Generate API token   Aruba Tunnel Setup Traffic Steering / Business Intent Ove

Hi team,I need to understand that how the Netskope traffic steer there traffic without any proxy setting on the machine or the any additional certificate please let me know its create an SSL tunnel through Data plane for HTTP/HTTPS traffic Also please let me know how  Netskope validate the user is correct. For example if admin send an email invite to user name james and james take the john laptop (organization managed laptop) login webmail to his laptop and install the agent how NS will verify that its an john laptop not james. (AD is integrated). 

Hello everyone, looking to deploy NS client using the Endpoint mgmt tool Automox using what they call a Worklet. Worklets allow Admins to create, automate custom tasks on endpoints, it's based on Powershell and Bash scripting.

Good morning, We have a URL that, due to its function, should not leave any record of being navigated by users.All users have the Netskope client installed and we have performed bypass steering so that the traffic is not inspected.Is there any way to exempt URL from going through the Netskope client and therefore not leave any record in the Netskope console?Thank you very much

Dear Team, For the Mac user's Netskope client installation, we are getting the wrong gateway on the user's client configuration as the "gateway-bom1.goskope.com". The traffic is not tunneling through the Netskope tenant but the client configuration is showing as an enable. We also have not received the logs in Skope-IT alerts for all Mac users. In nsdebuglog.log, found the error as "failed to open file for reading: /Library/Application Support/Netskope/STAgent/l4config.json, err:2" Kindly help us on this issues. 

I wanted to check the route where the webinars in Spanish are located within the Netskope portal.

Self Remediation for Cert Errors / Communication Breaks when steering within Netskope

We are scanning an Oracle database from our Purview account, and during the scan, approximately 60% of the identified assets are being classified as "Classified Assets."   However, when we navigate to Data Estate Insights, each of these assets is displaying "No Match Found" under the Classification section.  This seems contradictory and is causing concerns about the accuracy of our data classification. We have thoroughly reviewed and verified our classification rules within Purview, ensuring they are aligned with the data patterns in our Oracle database. The rules have been executed successfully, We have data reader rules on the Oracle database and tables so, we can view the tables too and the schemas generated from the scanned assets are also 100% correct. Please helppppppp. @anyone with Azure Purview Knowledge@jaroslawmazurek 

Netskope and IDC are teaming up to capture the state of IT, NetOps and SecOps facing WFH, SaaS, cloud, SD-WAN and SSE/SASE. The hypothesis: infra and user experience are more dynamic, less predictable and harder to manage. We are collecting anonymous data from thousands of enterprises to get a clear picture.   Exchange your experience, help your peers: With a 5 minute, confidential survey you’ll get our benchmark report Compare your reality to industry norms Ask an expert analyst   Share your view Be one of the first 25 experts to answer and get a $50 Amazon gift card.The Goal We will quantify: What impacts user experience the most? How long does it take to troubleshoot and resolve issues? How much is automated? How much does it really help?   By sharing your expert insight, you’ll be the first to get the full results.   If you have any questions, please let me know,   Thanks,   Scott     

Has anyone come across the need to specify source ports for firewall rules in Netskope Cloud Firewall?Just wondering as MS Teams has a bunch of source ports required for real-time media traffic i.e. 50000-50059 (destinations being dynamic in-nature as well as destination ports being in the dynamic range too) Doesn't seem like you can specify source ports in Netskope Cloud firewall (as yet)? I wonder if there's an enhancement request for this