Skip to main content
  • EN

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

703 Topics
S
sean.clowesNew Member
asked in Next Gen SWG
Agent Deployment after macOS 15+

Hey folks, does anyone have any experience so far deploying Netskope Steering Agent to macOS in versions above 15?  Our Jamf policies that have worked for some time have stopped. Specifically the VPN configuration profile fails to deploy with the error:The ‘VPN Service’ payload could not be installed. The VPN service could not be created. This continues to work on anything below 15. Anyone needed to update their Jamf policies in order to get this to work? And by policies I mean the configuration profiles?

10
S
35 minutes ago
K
kdibbleNew Member III
asked in DLP
Not Near Best Practices

We are working towards implementing a rule that looks for plaintext credentials within shared documents. In doing so, we’ve utilized the Passwords (contextual) pre-defined entity. We’ve noticed that this entity is catching teams and zoom meeting passcodes. We do not want to catch these passcodes in the rule and are trying to create a “not near” advanced expression. I’m looking for guidance on how to perform this. For example here is what we have: P1 = Passwords (Contextual)D5 = Custom Dictionary of words like “meeting”, “teams”, “zoom”, etc… Both options we’ve tried: 1.) ( P1 AND ( NOT ( P1 NEAR D5 ) ) )2.) (P1 AND NOT (P1 NEAR D5)) Any help would be appreciated.  

638
ejang
Netskope Employee
1 day ago
NicolaScand
Netskope Partner
NicolaScandNetskope Partner
asked in Private Access for ZTNA
PQDN

Is it possible to allow rdp access to a private app using a PQDN? If so, what steps would have to be implemented to enable this? 

151
N
1 day ago
Natedog0024
Natedog0024New Member
asked in Private Access for ZTNA
revoke NPA session

Hello,is there a way to revoke an existing NPA session? Ex. Employee is terminated remotely but has an active NPA session they authenticated to that doesn’t expire for 6 more hours.thanks,Nate

311
N
2 days ago
1
11qwerty22New Member
asked in Netskope Cloud Exchange (CE)
CE Log Shipper - Netskope client device logs (disable client/re-enable client)

Hello,We are ingesting Netskope logs via CE Log Shipper into Elastic. These are events and alerts. How can we ingest the Netskope client related events for users disabling/re-enabling the client? Advanced Analytics presents this information, so the logs exist. Can they be exported via CE Log Shipper?Thanks.

181
N
2 days ago
EsraDemircioglu
Netskope Partner
EsraDemirciogluNetskope Partner
asked in DLP
I want to hide some parts of datas

Hello Team, I want to set a policy which can hide some parts of datas (for example credit card numbers) during download/upload processes. (For example If I download document, I want card numbers become like 1111 xxxx xxxx xxxx )Is Netskope able to do this?Note: My question is not answered in this link  https://docs.netskope.com/en/dlp-entity/#entity-obfuscation-1  Thank you in advance,

532
N
2 days ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Private Access for ZTNA
Make it Possible to Create Steering Profiles via API Call

Hello,In the context of a ZTNA project, we have the option to publish "all ZTNA applications" or only the applications necessary for the user group/OU in the Steering profile. In a ZTNA approach, it seems interesting to publish only the applications necessary for users who are members of a group.Would it be possible to obtain an API Endpoint to automate the creation and assignment of a steering profile with the necessary applications?

111
N
2 days ago
Jais100rbh
Netskope Partner
Jais100rbhNetskope Partner
asked in Private Access for ZTNA
Publisher password reset

Hey Netskope buddies, I’m reaching out for help because I’ve forgotten the passwords for two of my publishers and I’m currently unable to log in. I attempted to use some Ubuntu commands to reset the password, but it’s asking for the current password, which I don’t have.I would greatly appreciate any assistance you could provide in resetting my passwords.

281
N
2 days ago
J
jschueleNew Member III
asked in Private Access for ZTNA
Sign-in Redirect Breaking NPA Browser Access

I have an internal private app configured in NPA to allow Browser Access for a consultant. Everything works fine until it redirects to Google for the login process and we see a Google error message “Access Blocked: This app’s request is invalid”, “Error 400: redirect_url_mismatch”. Any idea’s how to get around this? Thx

321
N
2 days ago
M
maxkorNew Member III
asked in Private Access for ZTNA
Browser access portal

Hi all,When I try to create more than one application this option is not enabled.The browser access portal does not support more than one application? I need to publish 5-6 different apps/services through the portal. How do I accomplish that? 

181
N
2 days ago
A
adebrattoNew Member
asked in Private Access for ZTNA
Breaking out printer traffic - Is this possible?

We are just kicking the tires on the Netskope Private Access functionality.  We are trying to understand if it would be possible to drop certain traffic out of the Netskope tunnel and onto the local wire.  For example, we do not want to send print jobs from the endpoints to the publishers if we can just break that traffic out of the tunnel and drop it right to the printers in office.Any advice?  We have been tinkering with on-premise / off-premise steering configs but cannot put a finger on how this could/shoudl work.

181
N
2 days ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in CASB
Feeling the weight of managing SaaS and GenAI security? It doesn’t have to be complicated.

Streamline your security operations with a converged SaaS security solution built for today’s challenges.  Join Melody Nouri, Netskope's Product Marketing Manager, and Dev CK, Director of Product Management, as they reveal how Netskope's unified Cloud Access Security Broker (CASB) can help you navigate the ever-expanding SaaS and GenAI landscape with ease, offering the tools needed to streamline your security operations. Key Topics Covered: Identify gaps in current SaaS security tools and understand their limitations. Explore the essential capabilities needed to transform SaaS security with a unified CASB approach. Watch a live demo of key use cases showcasing Netskope’s LLM-powered risk categorization, helping you stay ahead of emerging threats and reduce alert fatigue. Discover how Netskope can enhance your security posture while boosting productivity. To learn more about how to stay ahead of threats without slowing productivity, register for our upcoming webinar below:   Simplify

120
aplaza
Netskope Employee
6 days ago
D
drftordieNew Member
asked in Next Gen SWG
Netskope Blocking Dialpad calls in Chrome only on MAC - Help

Hello all,I have a weird issue that I dont know how to fix. The issue is that when using Dialpad (Cloud Phone System) in the Chrome, Safari or the Brave browser on a MAC device (this does not seem to affect Windows) to make calls and or use Dialpads meeting feature something is being blocked. But the kicker is it is not being blocked when using Firefox on the MAC.What happens for calls is I will initiate the call (I used my personal cell for the test) it will not make the default ringing noise we all know and love but the noise that Dialpad makes when starting the call (its like a ding, ding noise idk). Then my cell sees the incoming call, I answer it but neither side can hear the other talking. The call will stay connected but again no one can hear the other person. Then sometimes when I answer the call on my cell it will seem like it connected the call then just hang up the call automatically.I made sure that the domains in the Desktop Native, Mobile, & Browser Applications secti

250
D
7 days ago
S
Netskope Employee
scarlileNetskope Employee
posted in Next Gen SWG
Checking URL for category and URL List using Rest API

How can we check which category and URL list a specific URL belongs to?Rest API provides a useful method to extract this information. How to use Rest API:-Go to Settings/Tools/Rest API v2  Select API DocumentationEnsure there is a token which has:- /api/v2/nsiq/urllookupSearch or scroll down to /api/v2/nsiq/urllookupClick to try out the API Edit the text to select the URLs  you want to check for category and URL list Click Execute  You will get a response back which will show whether the has succeeded or not, but also some info which might be useful for your API tool of choiceIf you get an error, check your API token, and any brackets, or commas in the requested body above. The response will show the categories (pre-defined & Custom) and URL lists To verify the categories are correct, check the tenant UI If you need to modify the URL lists, check out:-https://community.netskope.com/real-time-protection-key-policies-72/how-to-automate-url-list-updates-via-api-7167 

220
S
Netskope Employee
7 days ago
K
kdibbleNew Member III
asked in CASB
Internal collaborator count on API Data Protection policies

We are creating policies based on thresholds of internal users that are collaborators of a document. In doing that, we’ve ran into the following issues: 1.) We’ve seen in the alerts section that a lot of our alerts associated have a collaborator count that is different from what we see in the incidents section. For example, here you can see 135 collaborators. However if you look at the actual incident, this is only shared with 4 individual users, and a group of 64 users. That doesn’t add up to 135. We are seeing this for lots of alerts/incidents. 2.) In our DLP profiles, we have a a configuration for various exposure definitions. We are wondering if the following is an AND or OR in terms of the internal/external and # of internal users. The reason we ask is that it seemed that we were triggering on internal documents that are shared with less than 100 users. Let us know if there is any further clarification needed here.  

120
K
8 days ago
S
SakeeNew Member III
asked in DLP
AND Operator Value in DLP Rules

I am trying to determine when a DLP Rule needs to leverage the NEAR operator versus the AND operator. In one example incident, a DLP Rule defined as (P1 NEAR P2) appears to have been triggered when the two entities were over 10,000 characters apart.What is the default value of the AND operator, is it truly more than 10,000 characters?

212
S
Netskope Employee
8 days ago
J
jpiresNew Member
asked in Next Gen SWG
Entra Conditional Access Issue

We have recently enabled conditional access in Entra and ran into a problem.  Our setup says that only machines coming from one of our facilities or a Netskope IP range can access Teams, Outlook, etc.The issue we are having occurs when a user is booting up their machine, Netskope does not enable before Teams and Outlook, causing the user to have to close the apps and click Sign In until a Netskope tunnel is enabled.Is there something from the Netskope tenant we need to adjust to prevent users from having to close all of their programs each time they reboot or is this issue on the Microsoft side?  We considered a GPO for preventing Teams and Outlook from booting to allow Netskope to enable as well.Any information anyone could provide would be appreciated.  Thank you!

521
A
Netskope Employee
11 days ago
M
maxNew Member
asked in Next Gen SWG
Connection closed by client nsClientUI_s1

I’m trying to determine what caused the following chain of actions:2024/11/04 16:00:22.638 stAgentSvc p14d8 tcc0 error NSCom2.cpp:1038 NSCOM2 recv failed 100542024/11/04 16:00:22.638 stAgentSvc p14d8 tcc0 error NSCom2.cpp:783 NSCOM2 startServerMessagePump: Connection closed by client nsClientUI_s1 Then further down in the logs I’m seeing: 2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info config.cpp:10145 Config [sessId 1] Marking user config for delete2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info npaTunnelMgr.cpp:933 CNpaTunnelMgr Handle session change for NPA active session 1, log off session 12024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info npaTunnelMgr.cpp:608 CNpaTunnelMgr Set NPA (desired) status from [NPA_TO_STOP] to [NPA_TO_STOP]2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info tunnelMgr.cpp:1695 CTunnelMgr Disconnecting tunnel for sessId 12024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info tunnel.cpp:288 nsTunnel TLS disconnecting nsTunnel, context = NSTUNNEL_DISCO

221
A
Netskope Employee
11 days ago
B
bntrotterNew Member
asked in Security Posture Management
Steer specific sub-domain but Allow Bypass for the remainder

Is it possible to steer specific site sub-domain traffic thru Netskope but have the remainder of the traffic bypass Netskope.I have a specific site sub-domain that my leadership wants to have blocked.  But currently the parent domain is set as a Steering Exception.

281
A
Netskope Employee
11 days ago
A
adebrattoNew Member
asked in Next Gen SWG
Real-Time Protection Policy Review

Our organization must review our policies to determine if the existing policies are still valid and need to be retained.  Problem we are having is that “allow” rules do not appear to log anywhere.  Short of turning all “allow” rules to be “alert” rules, does anyone have a way to validation if a web access rule is actually being used and needed to be retained?

362
A
12 days ago
V
vedNew Member
asked in DLP
OCR DLP Detection

 Hello everyone! I hope you're all doing well. I'm currently exploring how to set up an OCR DLP detection policy on Netskope for our organization's security needs. Could anyone provide guidance or step-by-step instructions on configuring such a policy? Any insights, tips, or best practices would be greatly appreciated. Thanks in advance for your help!

5422
AllenWu
Netskope Partner
12 days ago
shubhamk
Netskope Partner
shubhamkNetskope Partner
asked in Next Gen SWG
Browser extensions

Dear Team, Could we manage browser extensions (including installation and execution) using NGSWG? Best Regards,Shubham

6165
A
13 days ago
M
maxkorNew Member III
asked in Private Access for ZTNA
Devcie classification unmanaged

Hi All, My device classification policy matches when all three criteria are met...There are a lot of users complaining that they can't access ZTNA, so I checked and they're unmanaged...I fixed it by pushing an update to the client and restarting the service/computer. It's probably not possible to do it every few days for users what is can be the root cause of pull users out from device classification policy.   

1259
M
14 days ago
P
pppNew Member
asked in Private Access for ZTNA
Multiple policies to a single App Definition

Hello,Is this allowed to use multiple policies assigned to a single App via tags? Is it possible to predict the behavior in such a scenario?App AServer ABCTag: AApp BServer XYZTag: BApp CServer WWWTag: A, BPolicy AAllow Group AManagedClientTag: APolicy BAllow Group BManagedClientTag: BPolicy A - blockBlock allClientTag: APolicy B - blockBlock allClientTag: BUser A - member of group AUser B - member of group BUser C - member of both group A and B Will users A, B and C be able to reach server WWW?We assume that blocking policies have fewer conditions, so they are processed later.Regards

170
P
14 days ago
F
fbrunnerNew Member III
asked in DLP
Netskope SMTP Proxy - Scanning O365 Email Body contents

I have been digging through documentation but have been unable to find an answer on this specific SMTP Proxy DLP issue.  We currently use Netskope DLP to cover network exfiltration and endpoints (USB, etc), and we’re testing Netskope’s SMTP Proxy DLP.  For some reason, we’re unable to get Netskope to trigger on DLP violations in the message body.  It always catches content in attachments, but if I paste the exact same test content in the message body (SSN, CC, etc) it fails to trigger a violation.  Is this by design, or am I missing something in the config?  Thanks

171
F
15 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings