Other Forums

Machine learning-based image classification offers a fast and effective way to detect sensitive information within images, allowing for granular real-time DLP policy controls. Our DLP Classification Service accommodates an extensive range of image classifiers, such as passports, driver's licenses, SSNs, checks, payment cards, screenshots, whiteboards, and more. To improve its accuracy and provide better customer experience, we have retrained the classifiers for Release 103.   Significant changes were made to the image classifiers, including: A newer underlying model architecture with an 80% increase in the number of parameters High-quality labeled training data, including augmented images that are realistic for the image data we see in the cloud, to minimize false positives   Acc

Earlier this month, we enabled the inline AI-powered phishing detection engine in Netskope Threat Protection for all customers, significantly enhancing its capability to block phishing content in real time.    Phishing is one of the most common online security threats. At Netskope, we use cutting-edge deep learning techniques to learn the patterns of phishing websites. Similar to generative pre-training of large language models, such as BERT and GPT, we use a large number of web pages to train the HTML encoder and then use it to build the phishing classifier. We have been awarded three U.S. patents for our innovative approach to phishing detection.   We have been gradually rolling out the inline phishing detection engine. The engine has discovered a range of

Hi community members!Is there a High Availability system for the Cloud Exchange module? Active/Active or Active/Standby? Is it on the roadmap?Thanks.

SSL certs for Cloud Exchange using Let’s Encrypt Requirements CloudExchange and underling Ubuntu server running Domain url already setup Setup steps Domain and DNS setup Install Certbot Run Certbot to generate certificates Install certificates for Cloud Exchange to use Domain and DNS setup I get that this part might not be needed so if you already know how to setup DNS, skip down to the Certbot section. Buying the domain is super easy and you just select “get a new domain” in Google D

We've opened a support ticket as we believe we've found a bug where devices are not honoring the fail close option in the Client Configuration. We have fail closed unchecked, yet we notice almost all our systems in the UI (as well as logs) having fail closed enabled. That led us down the path of wanting to do the install of NS Client with fail closed disabled -- the tool tip says this can be done during install however we can't find on the KB or help section what those install switches are to do this.There is also no bulk way we can see to change all devices to fail close disabled (API or UI). 

Hi, I have a tenant with more than 10000 users (integration Azure via scim)I need to get the scim_user_id of all of them, to add some to some groups manually (postman)I'm doing the query with postman using "SCIM - List all Users", which is basically doing get {{scimurl}}/Users The answer is ok, but incomplete.  I see "totalResults": 16717, but it only returns 1000."itemsPerPage": 1000,"startIndex": 1 Is it possible to get a complete list with all 16000 users?Is there a way to paginate it? I thought it would be a postman limitation, but doing the query with a curl (linux command) the result is the same.Any ideas?  Thanks in advance!Best regards 

Publisher doubts about the robustness and HA of the platform Good evening, thanks for the collaboration. Thinking in a critical and highly productive and highly demanded environment, what would be the correct specifications to install a publisher? Thinking in an example of 30 applications, 10 of them web, standard and alternative ports, and other applications like Jira, SAP, SMB, private applications, etc. And that will be constantly demanded approx a load of 100 to 300 concurrent connections. Thinking about a scenario and having HA Publisher, what should be the capacities ? how many Publisher should be deployed ? Is it possible to deploy a VM in Vmware environments, with OVA/OVF ? is it possible to install on a base O.S. like Centos/Debian/Ubuntu, other Linux and/or UNIX, that is to say a VM with one of these O.S. and install a Publisher on them ? is this compatible and/or possible ?

So, we have an issue in our environment that we've been troubleshooting for several months now. When an Azure managed user locks their PC, the Netskope client drops the filtered subnet assigned to the PC, which then triggers Duo MFA. Unfortunately, this behavior doesn't occur when using the MS Authenticator, but we are fully integrated with Duo and cannot move to MS MFA...We contacted Netskope support, and they collected logs and proceeded to tell us that the NIC was disabling and that was the issue... along with possibly DNS or our AnyConnect VPN... I can't believe the engineer was so clueless to suggest the NIC was disabling, when we maintain a connection to Azure and show the IP address change in the Sign-In logs, which I provided. Not to mention, DNS has nothing to do with the subnet changing on a device when it goes to sleep. As for the VPN, the behavior is the same regardless of having the VPN running, which was also provided to sup

First, Let me start by saying that I tried raising this via my support and account teams and was wildly unsuccessful.About 2 weeks ago, the template message that is sent when a user creates a new ticket via the portal was updated.  However, the message that is now being sent does not make sense for the context of tickets created via the portal. Hi {support contact},We greatly appreciate your choice in Netskope, the leader in cloud security. For logging new support cases or tracking progress for previously logged tickets, we highly encourage you to leverage our support portal at https://support.netskope.com/. Support Portal allows us to more quickly associate your issue with the correct customer account and start problem solving.Please note that if you emailed from a non corporate email domain account such as Gmail, Yahoo, Hotmail, etc., we are unable to map your request with the correct customer account,

Hello community,We are looking for a way how to subscribe to official Netskope vulnerabilities that have been identified by Netskope and will notify partners / subscribers afterwards. The goal is that you can subscribe to an official Netskope vulnerability notification service based on products and features via e-mail and then receive a mail when vulnerabilities / CVEs have bee detected on Netskope products.Thanks for answering...MBL

Hi Team,The installation of the netskope CRE 1.0.0 plugin fails.  Both the SCIM URL and SKIM Key should be fine, but I get the following error on clicking "save" "Error: Error in credentials(Forbidden user)"   Version information is below.Core Version:3.4.0 UI Version:3.4.0 Database Version:3.4.0I am not sure what the cause is and would appreciate it if someone could provide me with some information.  

Provisioning Users and Groups from Office 365 to Netskope/Policies based on Groups/Users Office 365Hello,good afternoon, first of all, thank you all very much for your time and for your collaborationI have a question regarding the level of licensing required to support provisioning "All Users and User Groups from Office 365" ( To be able to both provision users and groups, to Netskope Tenant and to be able to apply policies/rules based on Users and Groups ), with a standard plan/subscription: Exactly "Microsoft 365 Business Standard". This subscription/plan level named above ( Microsoft 365 Business Standard ) is compatible and supported for Netskope, for the above mentioned, i.e. Full Users/Groups for group/user based policies and provisioning users ? )Thank you very much for your time and your collaboration.I will remain attentive to your commentsBest regards

Overview Cloud Exchange CTO’s integration with MS Teams gives you the ability to send Netskope Alert messages to MS Teams. Using the Microsoft Incoming Webhook application from the Admin center Cloud Exchange will send messages to a configured Teams channel to notify you when an Alert was seen from Netskope. Requirements CloudExchange 4.2 or newer Basic Cloud Exchange setup (Netskope tenant API v1 and v2 setup) Netskope plug - Netskope CTO Microsoft Teams account Setup Steps Microsoft Teams Enable Incoming Webhook

Overview Cloud Exchange CRE’s integration with CrowdStrike gives you the ability to change a device’s status from Managed to Unmanaged (or vice versa) based off of the CrowdStrike Zero Trust Assessment (ZTA) score. This is helpful to give devices real time policy changes to protect your network when a device is seen as risky from the CrowdStrike sensor running on the device.   Requirements CloudExchange 4.2 or newer Basic Cloud Exchange setup (Netskope tenant API v1 and v2 setup) Netskope plug - Netskope CRE CrowdStrike CRE plugin version 1.1.0 or greater CrowdStrike agent

First of all, thank you very much for your time and collaboration. I have the following doubts:I understand that for the matter of detecting whether or not the client is on-premise, there is such a configuration for the client to detect it: -Whether it is resolving an internal DNS domain, for example, and with that it concludes, if there is a correct resolution, it determines that it is on-premise, in corporate offices and seek, let's say, skip the use of Netskope, so that the filtering does it the firewall and/or Proxies or devices within the corporate network. But here the doubt, what happens in cases where I have a VPN client, typical and traditional VPN client (whatever the vendor is, for example Forticlient, Global protect, anyconnect? Example I connect with my VPN client, from one of the known vendors, and if I manage, being outside the dependencies, to have connectivity to the DNS and resolve s

Hi Team, I am new to netskope, not sure where to post for help.  Trying to create account for opening a case in https://support.netskope.com/s/login but can't.  Is there any other way, where I can log it. Can someone please help me in this query. S@m

Hi, I am getting internal server error while hitting below POST query through swagger/ postman https://alliances.goskope.com/api/v2/policy/urllist/deployI have provided all the required permission while creating token to make the request, not sure why I am getting this error.https://alliances.goskope.com/apidocs/?include_beta_routes=0#/policy/post_api_v2_policy_urllist_deploy Am I missing anything ? Please help me out with this issue. Thanks,Sakshi

Which versions of the Netskope client officially supports MacOS Ventura?

Would the community managers consider allowing participants to post inline images (maybe after a community member has some level of trust/rank and/or moderation and approval)?   Having images as attachments that need to be downloaded separately greatly limits their usefulness in conveying information quickly.  We can see that the platform supports the functionality from the "You do not have permission to upload images"  banner that pops up when we do try to paste one inline.  

Hi Team, Users who haven't logged in to the community site are unable to see my below article becau

We have been having difficulties with Cloud Exchange not staying running consistently too.  What we discovered is that Docker Web Exchange is not compatible with Red Hat Linux.Netskope advised going to Podman, and for a while it was up but failed to restart if the server restarted.Now it is down, and restarting Podman doesn't help it anymore. Is there anyone else consistently having trouble with Web Exchange?Even better, is there anyone that is having absolutely no problems? Our goal is to send Netskope data to our XDR and Cloud Posture management data to ServiceNow. 

Is anyone else having issue with the new support portal? As a Partner I used to be able to view cases that I was CC on and see all my clients cases.I can't see anything anymore and I get email stating that you have been mentioned in a comment.When logging into the portal i get an access denied page. This has been a step back in usability for me. 

Is there an updated announcement about timeframe for the support site to be opened for customers to access again?   The last update I saw was on Friday evening stating that we would receive an email about completing registration once the new support site was live.    While I can see that the login page has been updated, I'm unable to access any resources (public nor beyond the login, includes the Announcement page) nor update tickets.   

Hi Team,I am looking for SOPs related to Cybersecurity Threat Intelligence gathering processes - covering each of the specific areas like OSINT (Open Source), TECHINT, SOCMINT (Social Media), HUMINT (Human) and deep web and dark web intelligence. We are mandated to build a team that can manage a CTI program covering these areas. Can anyone kindly provide some good references pls...

SASE Weekご参加のコミュニティメンバーの皆様、お時間どうもありがとうございました。 本日の、新製品とNPAのセッション資料、こちらにアップロードいたします。 引き続き明日のセッションもよろしくお願いいたします 🙂