Private Access for ZTNA

Hello Team, I have firewall background and I am new to Netskope, I was just referring few documents for NPA traffic flow. Just a query of mine. User (Netskope client) --> Netskope cloud (gateway - stitcher) <---  Publisher --> (Private App) Publisher states that it eliminates inbound traffic and it only makes outbound connection with stitcher. so when user request a private application it will go through Publisher as an inbound towards publisher.May be i am missing few important things, Please correct me also share any document the exact flow to understand in a better way. regards,

Hello, We have Reauth for private apps enabled and looking to have a script launch after the user tunnel has successfully established. Is there a way to do this? REF > Globalprotect Admin  

Hi AllI would like to put forward a suggestion when will NPA support mutplie login / publsiher profiles for mutple domain / sites or numerous customers.We are a support company and support several client sites using NPA and we either have unistall and then reinstall the agent relevant to the site we need to gain access to. Cant we hace profile which we could choose to connect with. I know you not a VPN solution but would be great to be able to choose a profile of sortsThanksJacques

Hello, Reading through  private-access-best-practices article on docs.netskope.com, it mentions not to overlap CIDR ranges for NPA. I wonder how we can satisfy this recommendation for the following, very common scenario. Lets say we got three outlook web servers. all serve on port 443, so private app [Outlook] is created with the individual three IPs with TCP port 443 and assigned to all/general users in the organization. All good here. Now for the Admins of the Org, they would need to RDP to these outlook webservers for support/admin purposes. I would think, we need a second private app with same three IPs with TCP port 3389 and assign to IT Admins. Two separate apps for zero trust model.  So the second private creates a overlap, any pointers on how to configure this scenario adhering to best practices?   

Enabling hybrid work is key to retaining and recruiting talent. Zero Trust Network Access (ZTNA) enables employees using any device to access desired resources to make them productive no matter where they work.   In this webinar, we’ll dive into the Netskope’s ZTNA offering, Netskope Private Access, and review its key capabilities, architecture, sample use cases such as Microsoft Autopilot integration, and new features including API for automation and pre-logon capabilities.   Join Netskope Solution Architect, Sam Shiflett as he compares legacy remote access methods with modern zero trust network access (ZTNA). You won’t want to miss live demos highlighting how to implement the below use cases at your organization. Learn how you can: Enable access for employees and contractors  (without losing control) Remotely onboard new devices including active directory and autopilot integration Secure access to applications deployed in public clouds Rapidly on

The deployment guide you can find following the link below illustrates how to deploy Netskope Private Access Amazon EC2 Auto Scaling.   Netskope Private Access (NPA), a Zero Trust Network Access (ZTNA) solution, seamlessly connects authenticated users anywhere, using any devices to private resources in data centers and public cloud environments. Built on the NewEdge security private cloud, NPA delivers fast and direct application connectivity, ensuring a superior user experience. To learn more about Netskope Private Access please refer to the Netskope Private Access product overview  and Netskope Private Access documentation.   Amazon EC2 Auto Scaling helps you maintain application availability and allows you to automatically add or remove EC2 instances according to conditions you define. You can use the fleet management features of EC2 Auto Scaling to maintain the health and availability of your fleet. You can also use the dynamic and predictive scaling features of EC2

  Hey Community,    it seems that since version 93.0.1 we're not able to complete installations of the netskope client. Here's a snippet of the post install error from the macOS install.log. 2022-05-04 13:28:10-07 NNN-NNNN-NNNNNNN installer[1929]: install:didFailWithError:Error Domain=PKInstallErrorDomain Code=112 "An error occurred while running scripts from the package “NSClient_93.0.1.944.pkg”." UserInfo={NSFilePath=./postinstall, NSURL=file:///Library/Application%20Support/JAMF/Downloads/NSClient_93.0.1.944.pkg#STAgent_unsigned.pkg, PKInstallPackageIdentifier=com.netskope.STAgent.pkg, NSLocalizedDescription=An error occurred while running scripts from the package “NSClient_93.0.1.944.pkg”.}   Is anyone else struggling with this.? Right now all of our new users are unable to use Netskope. We escalated this to Netskope support two and a half weeks ago (4/19) without resolution. Does anyone here have any insight?

Case1 – Set multiple domains laptop as a posture parameter without any SAML authentication & client installation via email invite only·Will NPA solution work properly ??·What is the draw back if we implement NPA without IDPCase2 – Initially multiple domains laptop as a posture parameter, without IDP user used Netskope NPA solution and after some time IDP SAML authentication integrate with Netskope·Then what is the impact on current NPA working user after IDP integration·Both user work parallelly or not??Case3 – If Azure AD used as a SAML authentication configured for IDP & SCIM integration with same Azure AD·Then how to deploy Netskope client to different domain user systems and work·what is the traffic flow from other domain system to CFS environment?

Good afternoon all, I've got a slight issue and I'm wondering if anyone here can help me with this, I'm looking to set up a VPN connection so I can create an online hybrid azure AD join from Microsoft Endpoint. I need direct visibility of our on-prem domain controllers Now I guess the first question is, is this actually possible with the options Netskope has available? I can see the following options available within Endpoint IKEv2, PPTP and L2TP All I'm looking for is a VPN tunnel which will only provide access to domain controllers over the internet during the build process. Can NetSkope facilitate this? Thanks very muchRGE_Master

Best practice when implementing Network Private Access is to have backup connectors for your private applications,  ensuring fan-out for cloud and data center environments.   Publishers work in Active-Active mode. Active-Active mode enables higher throughput. Up to 16 publishers are supported in an Active-Active deployment per app.   A round-robin algorithm is used to spread Netskope Clients across publishers.   Adding additional publishers to the private application allows for this feature.     Note: The publishers should be able to access the applications for which they are to publish.   See the Netskope Private Access User Guide for more details: https://support.netskope.com/hc/en-us/sections/360007379173-Netskope-Private-Access-User-Guide    Credit: The Netskope Private Access Virtual Team.

Facing challenges on the NPA report, not able to see how many active users are connected. Is there any options o create the dashboard for npa traffic 

Has anyone used Private access to tunnel in for services on servers, I know I can install it but if its not logged in as a user is there a way to get it to steer traffic still.  I dont think this is possible without scripting in a login with a service account but figured id ask.  

The first step in adopting a Zero Trust or cloud based Remote Access solution is to ensure you have an Identity & Access Management solution that integrates with your SASE provider to deliver rich contextual access based controls.  Below is an example of how Netskope integrates with Okta to ensure identity and source of truth governance are defined and delivered as part of a Zero Trust adoption strategy.   

Businesses everywhere are facing the challenge of how to keep remote workers collaborative while also protecting their users and data. In this Straight Talk video, Netskope CISO, Lamont Orange discusses the importance of secure collaboration for today’s remote world.