Other Forums

Hi all, i set up the Cloud Exchange in SSO with Azure AD. When a user authenticates to AzureAD via username and password, the SSO login on the cloud exchange works correctly. If the user logs in to AzureAD with windows Hello and with biometric recognition, SSO login on Cloud Exchange does not work. It could be a problem related to the type of token issued by Azure AD and consequently to a parameter that Netskope CE does not recognize. Has anyone had the same problem? Thanks.

  At Netskope, we have developed a deep learning-based Inline Phishing Detection Engine. Similar to generative pre-training of large language models, such as BERT and ChatGPT/GPT-4, we use a large number of web pages to train a HTML encoder and then use it to build the phishing classifier. The Inline Phishing Detection Engine has been generally available to all Intelligent SSE and Netskope Next Gen-SWG customers. In this blog post, we share some of the patient-zero and evasive phishing examples that the engine has detected.   Have you seen any phishing pages detected by the Inline Phishing Detection Engine in your environment? Please let us know if you have any feedback.   

During the internal discussions around Real-time Protection Policies, the question came up about leveraging a the process of exporting "All Policies as JSON" as a potential backup/restore point of the our Real-time Protection Policies. Has anyone had similar conversations, use-cases, needs? Just curious how the JSON export could be used. 

I am running into a repeatable issue with mongodb and rabbitmq not starting upon reboot.   DetailsFresh install of Cloud Exchange 3.2 on Ubuntu 20.04.4 LTS Docker installed from the Ubuntu installation options during OS installation Installed into /home/{user}/netskope/ta_cloud_exchange Upon initial ./start all containers start normally. After server reboot, rabbitmq and mongodb fail to start running docker-compose up will start them successfully, but get a bad gateway when attempting to login to the GUI The custom_plugins directory is set to 755  Is anyone else seeing this issue, or have any recommendations? 

I'm posting this here because I haven't got a response on the ticket I raised earlier today even though I have already escalated it! Is there anyone else having issues with the NS client after upgrading to 105.0.0.1362 on Mac? NS is no longer steering web traffic after upgrading the client. Is this a known issue!? Can someone from the support team respond to my ticket #00279994?

Application Risk Exchange ServiceNow Summary Netskope’s Cloud Confidence Index (CCI) is a database of more than 54,000 cloud apps that Netskope has evaluated based on 48+ objective criteria adapted from Cloud Security Alliance Guidance. These criteria measure apps enterprise-readiness, taking into consideration an apps security, audit-ability, and business continuity.   The Cloud Exchange Application Risk Exchange integration with ServiceNow shares this application CCI score with ServiceNow providing additional information about applications in ServiceNow’s company database.   Requirements Netskope tenant ServiceNow account   Walkthrough Netskope Cloud Exchange Review applications in Cloud Exchange ARE Create business rule   ServiceNow View in ServiceNow Search for shared application CCI    Review applications in Cloud Exchange ARE You can view the entire list of applications being brought into Cloud Exchange from your Netskope tenant including the

  In today’s rapidly digitizing world, the importance of data security has become paramount. With the increasing amount of sensitive information being shared and stored online, securing information from cyber attacks, information breaches, and theft has become a top priority for companies of all sizes. Data loss prevention (DLP) is a critical part of the Netskope Intelligent Security Service Edge (SSE) security platform, providing best-in-class data security to our customers.   Images often contain a wealth of valuable and sensitive data. Financial documents, personal identification, and confidential business communications frequently include images that require the utmost security. At Netskope, we have developed state-of-the-art deep learning-based computer vision classifiers that can analyze images and identify sensitive information in a wide variety of categories such as passports, drivers licenses, credit cards, and screenshots. We have been awarded four U.S. patents for

What are the limitations of CASB in NGSWG (Next-Generation Secure Web Gateway), and what are the limitations of DLP (Data Loss Prevention) in NGSWG? Additionally, what is the difference in functionality when purchasing only advanced DLP with NGSWG, and what are the use cases and benefits if one opts to purchase advanced CASB with NGSWG?Meaning i am the customer who buys NGSWG next year i buy only the advance CASB what are the use cases or what more granular control i get with this also same goes for DLP vice versa.

Happy Monday Netskope Community members!   It's a new week, which means new challenges. How do you make the most of Monday to set yourself up for success?!   Clearly mine is a big cup of coffee... :). (based off the cover photo)    Seriously though, what is one challenge that's at the top of you mind right now? How can the Netskope Community help you with your challenge?    Leave your comments below with something you need help with and let's work together!        

Hello,I setup the deployment with netskope using the url below.https://docs.netskope.com/en/deploy-client-on-macos-using-intune.htmlLooks like everything is on the mac but when I configure the app .pkg (NSClient_102.1.6.1356) and deploy it I got the system preferences window attached and then the netskope error attached. I'm using the "For macOS devices (single-user installations) that are not AD joined" deployment mode.

Hi,   Is there a way Netskope could block CCI being exfiltrated through Microsoft Outlook 'Get Add-in'? When we attach a CCI document from Outlook to the dropbox Outlook extension, there should be some sort of web traffic generated. Any possible way or thoughts we could capture this traffic only to outlook and implement a Netskope block?   Thanks..  

Join us on Linkedin Live on June 22 at 9:30am PDT to discuss how Generative AI SaaS applications, like ChatGPT, have revolutionized corporate workflows, but have also introduced significant data security risks.   Modern cloud-first businesses are grappling with unprecedented challenges as sensitive data becomes increasingly exposed to a new breed of applications. 📈 23% of employees access ChatGPT at least once a day, based on a recent Netskope study through Advanced Analytics, and this number is expected to grow rapidly. Join Netskope executive leaders for a lively discussion on: The sensational Generative AI phenomenon led by ChatGPT What Generative AI Apps can do: Endless possibilities How you can prevent data exposure, breaches and address compliance   Register Now 

Dear Netskope administrators, let me share an idea about using ChatGPT as your assistant. Netskope has many URL categories, and here's a prompt to have ChatGPT respond to what categories are available.   Fill in the "Search criteria" part of the following prompt with the category you want to investigate, and by inputting it into ChatGPT, it will pick up the corresponding category for you.　Prerequisites: GPT4 is available, and the WebPilot plugin is enabled.　*Please note that this is a simple investigation, so if you are actually going to apply it, please carefully review the help page and set it accordingly.   ---ChatGPT Prompt---You are a security engineer. You are trying to restrict access to a website on a category basis. Please follow the Steps to pick the appropriate candidate. #Reference URLhttps://docs.netskope.com/en/category-definitions.html #Search criteriaSites where credit card input is expected, such as financial or e-commerce sites. #StepPick up category candida

I just opened a support ticket for which the resolution was redirection to an article describing how some functionality was currently disabled due to a known issue.I went back to the support home page, and there was no mention of the functionality in any of the list of Active or Recent Incidents.   There was a somewhat similar article listed for other functionality that was listed under Recent Incidents, but its article stated that the fix had not yet been deployed.I'm curious; how are users supposed to know about issues if they aren't listed, or their status isn't accurately reflected, on the support homepage? 

Can someone please tell me where is idea exchange page?https://community.netskope.com/t5/help/faqpage/title/ideas_subscribe page talks about FAQ on Ideas, but no links. Example: Posting an idea is just like posting a message on a board. (understood)To post your idea:Go to the idea exchange where you want to post an idea. - where is this option? I checked board selector, but no option for idea exchange. Thanks.

It looks like Ventura 13.4 is out. It also looks like R104 hotfix was released to address this : https://support.netskope.com/s/article/macOS-Ventura-13-4-Causing-Large-File-Uploads-to-Stall-May-11-2023My question though, is just the 104 line affected or any NS client prior to the 104 hotfix? (eg If we are running on GA 102 and apply Ventura 13.4 is the issue present)

Overview In this post, you'll learn how to integrate Netskope Private Access with Azure Active Directory (Azure AD). When you integrate Netskope Private Access with Azure AD, you can:   Control in Azure AD who has access to Netskope Private Access Enable your users to Authenticate and do periodic re-authentication using their Azure AD accounts to access Netskope Private Access. Manage your accounts in one central location i.e., the Azure portal. Pre-Requisites To get started with Secure Hybrid Access through Azure AD and Netskope, you will need the following. Netskope Private Access Publisher is installed. Integration Steps This integration requires the following steps to be performed in the order specified.   Generate Netskope OAuth Token and Retrieve SCIM Server URL Add Netskope Azure AAD Application (Netskope User Authentication) from Azure AD Gallery Configure Netskope Azure AAD Application (Netskope User Authentication) For User Account Provisioning Assign AAD Users

 Context: What's the user provisioning? User provisioning using IDP such as Azure AD or Okta using SCIM protocol or provisioning users directly from your on-prem Domain Controller using Netskope Adapter (aka AD Importer). User provisioning is a one way push of users and groups to Netskope tenant. IDP or your Domain Controller is always the source of truth for Netskope (except for the users manually added). On Okta and Azure AD Netskope has a gallery app titled "Netskope User Authentication".  When users are manually added you can not add them to a group.   Can I sync all users at once? The answer to the question in the subject is "yes" you can sync all users dynamically (or using dynamic groups) but here are some considerations:   Do you want to control Netskope Client rollout group by group or department by department? If the answer is yes it may be a better idea to assign few groups at a time to the gallery or custom app on your IDP.  This will make your

The rise of generative AI tools such as ChatGPT has captured the attention of many people. In a recent blog post, we discussed the benefits, challenges, and potential risks of AI in the cybersecurity domain. We're curious: do you have any questions or concerns about AI? Feel free to share them with us! 

Hi Community Members, I have recently deployed cloud exchange in my organization, and integrated few plugins, however I need further support on implementing business rule to a monitored email box for the SOC team to pick up. At this stage, I am looking to maintain a simple workflow. Current scenario/implementation:- Deployed Cloud Exchange and integrated with my tenant.- Have the plugins of Notifier & Netskope ITSM configured- Able to receive "ALL" the alerts from Netskope tenant to cloud exchange My further requirement as below:- When a Web-access category is denied for a user, he may proceed with a suitable justification with "Justify Usage" or "Report False positives" description box enabled (by means of Email notification template) - I have configured this. (Completed)- I need only the "Justify Usage" notification alerts to be received by the Cloud Exchange vs Compared to "All" the policy alerts being received by Cloud exchange - How do I tweak it ? I need to minimize the log f

Microsoft rolled out an unannounced change earlier this year to newly created Office 365 tenants, which disables the ability to create Inbound exchange 'On-premises to O365'.  Inbound Connector Restricted Imposed by Exchange Online (office365itpros.com) I have been working with Microsoft to attempt to enable this connector type for a developer M365 tenant, but they are reluctant to do so.  Initially they attempted to have me try the new Partner Org to O365 inbound connector, which raised SMTP 451 errors in Skope IT. Now their reply has been to: "We really need for you to contact Netskope to ask them for the certificate domain, the requirements for creating the inbound connect is in place for a few months now and most likely Netskope have the certificates ready which they can provide if a customer ask them for it” Since this only effects customers that would be using M365 end to end, I am not sure if Netskope has seen or heard of this issue yet. 

I was on my way to airport when a colleague of mine message me asking for help with the traffic routing in Azure as he was having issue and didn’t know where the problem was. It was a minor issue and few messages back and forth during my Uber ride and he was off to the races. The fact that he has a sharp mind makes explaining very easy. However, his query triggered the idea for creation of this post i.e., traffic steering option understanding from Azure to Netskope. The first thing I like you to understand is that we can classify traffic into two groups: Machine Traffic: Think “Infrastructure-as-a-Service (IaaS)” where applications and systems running on Azure Virtual Machines are generating traffic. User Traffic: Think “Desktop-as-a-Service (DaaS)” where users are using Azure Virtual Machines in Azure as their desktop whether it’s an Azure Virtual Desktop or Windows 365 Desktop offering. You can integrate Azure and Netskope in multiple ways for both type of traffic groups. In this p

Hi Guys, I am still very new in the Netskope world and this might seem a very simple question, but I don't know how to do it 🙂 Is it possible to generate a report of all High and Critical level incidents over all Fields (DLP, Comp Credentials, BA, Malware, Malicious Sites) in a single report on a daily basis? The reports section with the building of widgets does not make too much sense to me yet. It would have been nice to filter on the incidents page and then have a button to apply the filter to generate a report based on the filters. Please, if anyone can assist with this, it would be greatly appreciated 🙂 JG

Machine learning-based image classification offers a fast and effective way to detect sensitive information within images, allowing for granular real-time DLP policy controls. Our DLP Classification Service accommodates an extensive range of image classifiers, such as passports, driver's licenses, SSNs, checks, payment cards, screenshots, whiteboards, and more. To improve its accuracy and provide better customer experience, we have retrained the classifiers for Release 103.   Significant changes were made to the image classifiers, including: A newer underlying model architecture with an 80% increase in the number of parameters High-quality labeled training data, including augmented images that are realistic for the image data we see in the cloud, to minimize false positives   According to our lab tests, most of the image classifiers show increased accuracy. If you have any questions or feedback about the image classifiers, please let us know.

Earlier this month, we enabled the inline AI-powered phishing detection engine in Netskope Threat Protection for all customers, significantly enhancing its capability to block phishing content in real time.    Phishing is one of the most common online security threats. At Netskope, we use cutting-edge deep learning techniques to learn the patterns of phishing websites. Similar to generative pre-training of large language models, such as BERT and GPT, we use a large number of web pages to train the HTML encoder and then use it to build the phishing classifier. We have been awarded three U.S. patents for our innovative approach to phishing detection.   We have been gradually rolling out the inline phishing detection engine. The engine has discovered a range of zero-day phishing attacks in customer traffic, including active phishing campaigns targeting Microsoft, Facebook, and so on.   How can you tell if a page was blocked by the inline phishing detection engine? &nbs