Other Forums

The conversation around AI/ML is everywhere, but it often leads to confusion and misconceptions. In the most recent episode of Netskope’s Security Visionaries podcast, we discussed the importance of AI transparency - a cornerstone for cultivating public trust and enabling individuals to make well-informed decisions about AI risks. We believe it's time for organizations to embrace openness and transparency about their AI models. For example, organizations should be prepared to answer: What's the data used to train a model? Does it include customer data? What inputs does the model rely on? What outputs does the model generate, and how are they used in the product? What are the limitations and accuracy of the model?   Let's work together to demystify the complex landscape of AI, fostering greater understanding and trust in this transformative technology.

What's up guys I'm testing sending syslog to SIEM splunk. I know that splunk has the plugin, but I'm testing it this way.1) Does anyone know if we have any history of problems or incompatibility? I did the configuration:- Plugin, using TCP protocol, port 514.- Business rules using "all"- SIEM Mappings and apparently the log is being sent 2 I installed wireshark and the logs are arriving on the SIEM server. Is there some incompatibility? Any tips?

Is it possible for future upgrade announcements to include dates that each DataPlane is expected to see impact?Currently the ManagementPlanes are called out to specific days, but the DataPlanes are only identified regionally and assigned to multiple days.We create internal Change tickets referencing vendor changes off of most every planned change announcement that comes from Netskope.   Being able to state expected impact on a specific day, would be a huge benefit over three separate changes that might have impact. 

Hi Team, I have encounter a query regarding the netskope posture check as we are trying to showcased the use cased of managed and unmanged device where the user dont have and NGAV on there system it would be unmanaged and unable to access internet. While customer asked if netskope support the update status of there antivirus where the antivirus is installed but the Antivirus is not updated than also the user machine shows unmamaned in that status. Please let me know if this can be enable or ANy additional license required. Also i tried to configure the device classfication for NGAV still the client machine shows the status unmanaged i took the .exe from the task manager in details where exe is running. I will attached the profile snip as well testing policy as well. Please help me to resolve the same. 

Hi all, thanks for reading. I'm using Entity advanced filter options to remove false positives caused by a regex.The problem I'm observing is it seems the case-sensitive option set in the upper part of the config dialog does not apply to the regex defined as filters. ** Please check the attached picture as a dummy example of the issue I'm facing.Attached Example: The entity is set as case-sensitive. The filter is supposed to exclude any string not starting by 3 lower-case letters ([a-z]{3}). The observed behaviour is excluding strings not starting by 3 letters ([a-zA-Z]{3}) though, like it was case-insensitive (ignoring the setting above). Could you please confirm the regex defined as filters are hardcoded as case-insensitive?If so, is it planned to change this behaviour? Thanks in advance,Òscar

Hello folks,We need to set a report for a CISO with general information and trends about threats, policy hits, DLP alerts among other data.Is there any automated way to deliver this with Netskope?

Hi, Is there extra configuration needed/supported for resolving private DNS from within Docker container running on Debian 11 Host with Netskope ON ? On the Debian 11 Host itself, private app resolves OK.However the running Docker Container is unable to resolve private apps DNS. container resolv.conf root@f5eaa8f3589c:~# cat /etc/resolv.confnameserver 127.0.0.11options ndots:0 in Windows 10 host, running Docker Container resolves private app DNS OK.My internal network router is 192.168.1.1 > cat/etc/resolv.conf# DNS requests are forwarded to the host. DHCP DNS options are ignorednameserver 192.168.65.7  Workaround:use "host" networkdocker run --name swiss-army-knife4 --net="host" -itd leodotcloud/swiss-army-knife    

Hello Team, I have a few questions on Netskope Plane. 1) on which plane is customer data stored?2) What data is available on the data plane?3) What data is available on the management plane?

According to Gartner, “ChatGPT and large language models are the early signs of how generative AI (GenAI) will shape many business processes. Security and risk management leaders, specifically CISOs, and their teams need to secure how their organization builds and consumes GenAI, and navigate its impacts on cybersecurity.”   In addition, Gartner says that “The level of hype, scale and speed of ChatGPT adoption has raised end-user awareness of LLMs, leading to uncontrolled uses of LLM applications. It has also opened the floodgates to business experiments and a wave of AI-based startups promising unique value propositions from new LLM and GenAI applications. Many business and IT project teams have already launched GenAI initiatives, or will start soon.”   CISOs and security teams need to prepare for impacts from GenAI in four different areas according to Gartner: “Defend with” GenAI “Attacked by” GenAI Secure enterprise initiatives to “build” GenAI applications Manage and mon

Hello all,I am facing a "strange" issue with my netskope client.At my company, we do use a PAC file.The problem is, I am gettnig the following error message: 2023/09/14 10:51:27.803 stAgentUI p25c8 t2640 info proxy.cpp:72 nsUtil Proxy settings: auto detect 1, PAC http://tstwwstf80l02.testgroup.euroclear.com/wpad.dat, static webproxypie.beprod01.eoc.test:80002023/09/14 10:51:27.807 stAgentUI p25c8 t2640 warn proxy.cpp:155 nsUtil Failed to auto detect proxy or download PAC file, error 121662023/09/14 10:51:27.807 stAgentUI p25c8 t2640 info proxy.cpp:214 nsUtil Using static proxy: webproxypie.beprod01.eoc.test:80002023/09/14 10:51:27.808 stAgentUI p25c8 t2640 info config.cpp:5427 Config System proxy configuration Detected , System proxy Count 1,Pac Server Host N/A The netskope client is not able to download the PAC file. From the browser itself, I can reach: http://tstwwstf80l02.testgroup.euroclear.com/wpad.dat and download it manually.  Any idea?Thanks

Dear Valued customers,    In this post we would like to share about our Global Technical Success team. This team is based in multiple time zones and provides variety of Technical Resources for Netskope Administrators. So that they are successful in faster adoption of their Netskope Cloud Security solution. 2-minute video without Demo 5-minute video with Demo

How does the Netskope capture the data of User like email or used I'd when I install the agent via email invite or the mass script based what's was the intelligence behind it also what protocols used between ns client and Netskope cloud gateway (POP) please let me know this answer 

One of the things I enjoy discussing the most with Netskope administrators and users is integrations.  Netskope’s Cloud Exchange and REST API allow for a wide range of Netskope provided and custom integrations.  These integrations range from threat intelligence and risk sharing to automated ticket creation in your service management platform.  You can also utilize Netskope’s integrations to monitor Netskope events and platform status with your collaboration tools such as Slack and Microsoft Teams.  I provide two examples of this with Microsoft Teams.  The first integration allows you to receive status notifications from the Netskope Trust Portal to Microsoft Teams while the second allows you to generate Teams messages to specified channels when a specific policy triggers and a user enters a justification.   Let’s take a look.    Monitoring the Netskope Trust Portal With Netskope Teams Netskope publishes platform status updates on maintenance, clo

"Netskope NewEdge is the world’s largest, highest-performing security private cloud and powers the inline and API-driven security services of the Netskope Security Cloud. NewEdge provides customers with unparalleled service coverage, performance and resilience. Today NewEdge is powered by data centers in 70 regions with new data centers being added every month.  By taking full control over routing, peering and data center location decisions, NewEdge achieves the lowest possible latency and round trip times for web, cloud & software-as-a-service (SaaS) access." “Will the business-critical enterprise app traffic also be treated as regular internet traffic, leading to traffic delays and poor user experience?” is a concern that most security practitioners have when evaluating SASE. This technical brief will address this concern by analyzing the use of SASE, with the  benefits of underlying internet peering to deliver the prominently used enterprise application in Cloud.  For example, T

I have tried to add the "Time Actively Spent on Sites" widget to my dashboard but for some reason the data wont sync in real time and no matter what user I pick it's the same numbers. How can I get it to sync with the data in real time? 

Hello Team,   Recently we have checking on the Netskope agent installed machines and found agents are running on the version 76 and below 93. We have also enabled the auto-upgrade option. So it looks like some machines are upgrade the client automatically. But some machines are not upgrading to the newer version. We tried enabling and disabling the client both from the end-user side and Netskope console settings but still agent not upgraded. Is there any way to make the client upgrade manually.

Hello Team, We are planning to roll out Netskope clients via the Sapphire tool, however, we are not getting any related/supported documents in docs.netskope.com.  Kindly help us here for the smooth deployment and share the related docs.

I am proud to present to you the culmination of years of innovation and fruitful collaborations across multiple product teams at Netskope - the remarkable SkopeAI!SkopeAI stands as a testament to our commitment to excellence in the realm of AI-powered data security and threat protection solutions. We have harnessed the power of cutting-edge AI/ML technology to deliver industry-leading safeguards against modern-day security challenges.The launch of SkopeAI is not the end but rather a stepping stone in our AI journey. With an unwavering focus on staying at the forefront of AI and machine learning technology, we are determined to explore new frontiers, raise the bar higher, and enhance our security offerings.      

Today, I come to you seeking your valuable insights and suggestions on how we can enhance the security of our organization. Specifically, we aim to prevent users from uploading or sharing any source code through the platform Google Bard.To this end, we kindly request your expertise in brainstorming and proposing potential solutions to achieve our goal.In advance, I appreciate your help.

Although there is no max limit to query imposed having a short query is succinct and efficient.   SkopeIT "AND" parameter is handy when it comes to writing SkopeIT queries.   If your parameter is constant but only the value is different a better operator to use would be "In"   This will shorten your query and search will be more efficient.   Here is an example of using IN operator. If you were to use AND imagine the length of the query if you were to add 100's of values!   Note that parameter values are included in single quote separated by comma. The parameter (here " dlp_incident_id" ) is entered only once.   SkopeIT query: (dlp_incident_id in ['863060765611108610','8203483362870297256'] and status neq 'Resolved - Policy Updated')   Thanks to Paul Knight who suggested the alternative.

Is there a way to download all the dashboard data at once for one specific user rather than all the users in the data? For example, when drilling in the data for specific user to show all the data for that user data rather than downloading it separately?

Hello all, I'm not sure if I can post this issue hear or not. Does anyone have an issue of Netskope Client communication issue with the Console? Most Mac OS machines are failing to report to the console when the machines are online. All our endpoint devices are running on 105 client versions. Till now no resolutions from support. Does anyone have this issue? Till now are uninstalling the ns client and reinstalling it. But I don't think it is not the recommended solution. 

I'm working with one of our admins that has been seeing an concerning behavior for some time now. when editing or reviewing real-time protection policies, data in existing policies will change accompanied by an "auto populating" message Here's his report from today: for example when i look at NPA-PeoplesoftUpdate-PROD-support, the destination is NAC-PeoplesoftHR-PROD-supportbut when i look at the policy itself, it auto changes the dest to the nonprod, and pops up the, "auto-populated" box at the top Has anyone here ecountered anything like this before? It happens regardless of browser for him.   

Hello Team, Hope you're doing fine. Could anyone please help me to get the URL with all the List of the Netskope POP accompanied with region, Public IP addresses, Development Status, ....Thank you in advance. Warmest Regards,Ali 

Netskope Private Access and Cloud Exchange running in AWS Overview Using Netskope’s Private Access (NPA) can help secure workloads in AWS like deploying Netskope’s Cloud Exchange there. In this solutions guide NPA is used to front end a Cloud Exchange server that doesn’t have direct inbound internet access.    Requirements Netskope tenant with a NPA license Amazon Web Services account Setup Steps Netskope  Configure a Netskope Publisher in your Tenant   Amazon Web Services Deploy EC2 Netskope Publisher   Cloud Exchange Setting up Cloud Exchange in AWS Deploy EC2 Ubuntu Server Add Access to Cloud Exchange via NPA Setup Cloud Exchange on Ubuntu Server   Verify Netskope Tenant sees your publisher Check your client for the NPA tunnel Try to access cloud exchange on your private IP Configure a Netskope Publisher in your Tenant Go to your Netskope Tenant > Settings > Security Cloud Platform > Publishers Click New Publisher     &n