Other Forums

If you're currently using Cisco Umbrella in your organization, you might have experienced some issues when running Netskope and Cisco Umbrella together.  This guide will show you how to implement the steps to ensure smooth interoperability between the two solutions.   THIS DOCUMENTED WAS CREATED USING THE FOLLOWING COMPONENTS: Netskope Client v.85.2.0.629 Umbrella Roaming Client v.2.2.580.0 Cisco AnyConnect (v.4.10.01075) w/Latest Umbrella Roaming Module as of 6/1/2021 #1 - Umbrella IP Bypass List Regardless of the Netskope steering method (CASB or NG-SWG) or OS (Windows or Mac), create a Network Location and add the below ranges to it. This will prevent Netskope from intercepting the block page responses and the Intelligent Proxy redirect responses (if enabled in Umbrella), regardless of type (malware, malsite, content, etc) so those pages/redirects can be properly rendered. <UI: Policies → Profiles → Network Location> 67.215.64.0/19 146.112.0.0/16 155.19

I would like to know is there any use cases for Netskope integration with Workspace one UEM? And allow to leverage on existing Netskope DLP and Web Filtering settings?

I have an inherited deployment and potentially need to either update the password for the service account that the Netskope Adapters use, or change the account they use to a new one. Has anyone done this before, and if so, where might I do that?   Our server is running the AD Importer and Directory Importer. Would the credentials used for LDAP queries be the same as the user/service account that the AD Importer and Directory Importer Windows services run as?   I'm guessing that was the account that the Adapters Configuration Utility was originally installed under, but I'm not sure if that's the same credentials used for the LDAP queries itself, and I can't find anywhere in the Utility to tell me otherwise.    For reference, Directory Importer is set to "Active Directory". I did find a place for some credentials if I switch it to "Other Directory Services", but if I choose that and then "Set Attributes", everything is blank, which makes me think it's not being used.

If you haven't been attending the Unpacking series of webinars, I have some good news for you.  You can catch up on any you may have missed, and you can see a list of all the webinars we've produced so far.  The Unpacking series digs a little deeper into each of the different products that Netskope offers, so you can learn about products you might not be familiar with. See the complete list of Unpacking webinars we've produced so far at: https://www.netskope.com/company/events/unpacking

Interested in identifying to which datacenter you are sending traffic?  Make sure you are steering traffic through Netskope's Cloud Platform and open a browser to http://notskope.com.     

Netskope is looking for customers (preferably CASB API customers) who are interested in participating in our SSPM beta.   If you're interested please message me here, or alternatively contact your SE or TSM and ask them for more information on how you can join the beta program. Thanks! Tim 

This 2 minute video walks through a Crowdstrike ZTA Integration. The scripts identified in the video can be downloaded from the attached "zta crowdstrike sensor reading.docx". Credits: Thanks to Dave Toth for the creation of this video Thanks to Ramien Ebadypour for his script ("zta crowdstrike sensor reading.docx" attached).

Hi Everyone, I have a requirement of deploying NS clients on mac machines using the Jump Cloud tool. Can anyone help me with the scripts or steps to do so? 

Hello, I'm looking to add groups with Azure Active Directory Free. The users are well synchronized but not the groups. Is it mandatory to upgrade to Azure Active Directory P1 for this feature? Thank you Regards,

Hello Community!I would like to apply a custom DLP rule to my existing ones. I have created a regex which is working fine in other sites (such as regex101) but I am struggling to apply it in Netskope. Can anyone please help me to translate it to Netskope's "grammar"?Here is the regex:  ^.(?=.*[!£@#$%^&+=])(?=.{11,}$).*$(any characters, at least 1 special character, more than 10 chars)Any help would be highly appreciated.

I am facing an issue while integrating Netskope application with an Identity Provider.   As I understand correctly, Netskope looks for “admin-role” as a return attribute which must have a role value which is already defined in Netskope Tenant UI.   Scenario 1: There are 2 groups at IDP end : Basic Test : Present in IDP but role with the same name is not defined in Netskope Tenant Admin : Present in IDP and role with same name is defined in Netskope User is part of both of these groups. Now when user will access the application, he/she will get an error stating :Error Code: Authorization ErrorError: Invalid role 'Basic Test'This is because Netskope is checking whatever the first role that is being passed by IDP. It checked that Basic Test is the first role and immediately rejected it without looking further in the roles. But Tenant Admin was being passed Scenario 2: There are 2 groups at IDP end : Yahoo : Present in IDP but role with the same name is not defined

Hello all! I'm seeing an oddity on some of the clients in our environment and wanted to : see if anyone has experienced this before get a suggested remediation  Some of our endpoints will receive the client installation but don't show up in the Netskope console. If we look at configuration, it pulls updates and shows enabled. But the host name never shows up in Security Cloud Platform > Netskope Client > Devices. A stop/start of the service as well as a manual uninstallation/reinstall go through without issue (even prompting for and authenticating the current password) but still nothing in the Console.  Is there by chance a command we can run to force the device to report back to the Netskope console? 

Looking to find best practice configurations when Netskope is integrating with 3rd party vpn vendors such as Palo Alto, F5 or Cisco Anyconnect?    Check out the following link - https://support.netskope.com/hc/en-us/articles/360023155053      

Cisco Meraki is a lower cost cloud managed alternative to the traditional Cisco Network equipment. The solution is quite popular because of its ease of deployment and management and is marketed as a solution which offers SD-WAN capabilities to small and medium markets through the Meraki Auto-VPN capabilities.   The aim of the attached document is to test Netskope's integration with the Cisco Meraki SD-WAN solution in order to validate interoperability and identify any limitations.   credit: thanks to Paul Beyleveld, Netskope SE for the write up.

Do you need to configure your Versa SDWAN endpoints to connect to Netskope via IPSec tunnels, to complete your SASE solution? Then the attached guide is for you.   The guide contains step-by-step instructions for configuring Versa Director and the Netskope cloud.

Do you need to configure your Silver Peak SDWAN endpoints to connect to Netskope via IPSec tunnels, to complete your SASE solution? Then the attached guide is for you.   The guide contains step-by-step instructions for configuring Silver Peak EdgeConnect and the Netskope cloud.

Do you need to configure your VMWare Velocloud SDWAN endpoints to connect to Netskope via IPSec tunnels, to complete your SASE solution? Then the attached guide is for you.   The guide contains step-by-step instructions for configuring Velocloud Orchestrator and the Netskope cloud.

If you need to connect to Netskope from your Cisco router using GRE, the attached guide is for you.

Hi community members!   We are curious to hear where everyone is in their ZTNA journey, please fill out this quick survey or post your journey in the comments below. We look forward to hearing from you!  

So we have the agent deployed out to our widows and Macs in our environment. We have followed the Best practice guides for bypassing the VPN traffic with Netskope but we are still having issues connecting to the VPN on the Mac's. Anyone else run into this issue? 

Has anyone experienced any issue while trying to configure the QRadar Rest API plugin to communicate to a Netskope tenant though a Proxy that requires authentication? Important Notes: - The Rest API plugin configuration is set as follows: Use Proxy = Yes          - As the the proxy requires authentication, the Proxy Username and Proxy Password fields are configured. - The Rest API was successfully tested from the QRadar console command line using curl.  It really looks like an issue with the Rest API plugin. Your comments and experience on this topic much appreciated. Thank you in advance.

Hello, We are trying to work on how we have exeptions set up in our tenant. Does anyone know if you are able to download all of the items you have added to the exclusion list in Traffic Steering?

For our Macintosh computers, running Big Sur 11.4 - we have now spent hours trying to figure out peruserconfig mode, juggling WS1 configurarions, system extension files, client side modifications, and generally attempting every possible way to get this Netskope Client software to work under VMWare's Airwatch / Workspace One MDM (and even done manually using macOS Terminal). Nothing works reliably to completion.  We have engaged Netskope 3rd party support, to no avail. Netskope have online instructions, but these do not seem to be sufficient to cover a fully working setup. Indeed, if you compare them to their own JAMF instructions, you see almost a 2 to 1 difference in the length of the instructions. Note: our org knows it can use the email invite method, we have that working to be fair. But it's far from Mgmt.'s first choice, so we are very much hoping for a viable peruserconfig mode methodology.  Referring to the online instructions at: https://

Netskope Use Case Video Requests

We currently have a need to allow access to a subset of micsosoft ips which are currently housed in brazil. We have a country block and a country allow group but do not want to provide full access to all sites in that country. What is the best way to allow the traffic in Netskope based on the ips that microsoft has provided for Brazil which seem to be in the 52.109.88.0/24 range?