Skip to main content
  • EN

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

664 Topics
thiagofc
Netskope Partner
thiagofcNetskope Partner
asked in Next Gen SWG
Crashes after Netskope Upgrade - Release 120

Anyone having issues and crashing on Windows NSClient after that was upgrade the Tenant and the Golden Release to the Lastest?We have a customer the MP is located on DE, the users are claiming a lot about crashes in Windows, to the point where it was necessary to force the equipment to be shut down or reset. We are wondering if the problem started after the Tenant Update was made, they were in the release 119 last week, and now they have migrated to 120.I realized that the agent from NSClients with setup to the Last Golden Release right now is the Lasted Release = 120, very interesting… 

0
thiagofc
Netskope Partner
3 hours ago
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
asked in Next Gen SWG
Netskope - Azure AD - IDP Integration - Enroll & Reauth

Netskope - Azure AD - IDP Integration - Enroll & Reauth Private APPsHello community, hope all is well.I have a doubt with a certain point:In an environment was configured IDP mode against Azure-AD in an environment where users have office 365.1.- The agent installation is done in IDP mode and the IDP mode operates correctly, it enrolls the user, to the user based agent.Now the situation is as follows as it is very but very common and typical in office365/Azure-AD environments users already have their office 365 account logged in, either in your outlook client, in teams, onedrive on the web itself, then what happens when the installation process was performed in IDP mode and the enrollment occurs, this process was practically automatic since the user was already logged in to office 365/azure-ad as discussed above.I understand this is an issue of Office 365/Azure-AD and not of Netskope itself, now what was done to request the credentials, was to unblock the user from all access where

3
MetgatzNK
Netskope Partner
1 day ago
M
matheuspinheiroNew Member
posted in Private Access for ZTNA
WSL dont work with Netskope

We work in our environment with Kubernets Cluster administration in Clouds such as AWS and OCI and for administration we use WSL on our Windows stations (10 and 11) but we have faced connection problems, already validating that connection via Telnet at the Windows layer works, however Not within the WSL, could you help me with this issue?

2
D
1 day ago
E
eldadNew Member III
asked in Next Gen SWG
How to create users group

Hi community,I'm wondering where I can create new users group to use when I create new client configuration. Thanks,

7
N
2 days ago
M
munster
asked in Next Gen SWG
URL Shortened Coaching

HiI have RTP shortened url category with coaching.When user access the shortened url, a coaching page is shown and user required to click ACCEPT to proceed to actual webpage.By clicking ACCEPT, how can I corelated the actual url with shortened url?You can use https://tinyurl.com/4trp238r for testingThank

2
N
2 days ago
S
sam47New Member
asked in Private Access for ZTNA
Dropped connection as no Publisher is active

HiWe are unable to access website, checked alerts and found connection was dropped as no publisher is active.

0
S
3 days ago
S
Netskope Employee
scarlileNetskope Employee
posted in Cloud Firewall
Allow or block Anydesk using Cloud Firewall

Question: how can I allow or block Anydesk using Netskope Cloud Firewall? Create Anydesk Cloud Firewall Application (using the reference from Anydesk) Set up policy for block Try connecting with Anydesk - note this will timeout as there is a block Check Alerts for the block------------------------------------------------------------------------------------------------------Let’s change from block to allow Setup policy for AllowTry connecting with Anydesk Check Network Events for the allowIt’s simple to set up the policy for allowing or blocking the use of Anydesk.

0
S
Netskope Employee
4 days ago
J
jschueleNew Member III
asked in Private Access for ZTNA
NPA Browser Access Session Limits

After enabling Browser Access for an app behind NPA, is there a way to enforce session limits? Thx

0
J
5 days ago
M
maxkorNew Member III
asked in Private Access for ZTNA
Devcie classification unmanaged

Hi All, My device classification policy matches when all three criteria are met...There are a lot of users complaining that they can't access ZTNA, so I checked and they're unmanaged...I fixed it by pushing an update to the client and restarting the service/computer. It's probably not possible to do it every few days for users what is can be the root cause of pull users out from device classification policy.   

2
M
5 days ago
J
JasNew Member
asked in Private Access for ZTNA
Configuration Failed to load

Hello,So we have installed Netskope client on one of our endpoints and during the enrollment process we got an error “ Configuration failed to load” Can anyone let us know the root cause of the problem and its workaround.Thanks. 

2
J
6 days ago
farhan
Netskope Partner
farhanNetskope Partner
asked in Next Gen SWG
Netskope client Citrix supported version

Hi team,Please let us know if the Netskope client is compatible on this citrix version or not.Citrix Virtual Apps and Desktops 7 2203 LTSR CU3 - Virtual delivery Agent.Citrix Workspace Environment Management Agent. 

1
ejang
Netskope Employee
7 days ago
shubhamk
Netskope Partner
shubhamkNetskope Partner
asked in Netskope Cloud Exchange (CE)
Adding Netskope tenant on Cloud Exchange

Dear Team,I am in the process of setting up Cloud Exchange, and the deployment has been successful, including access to the UI. However, I am encountering issues when attempting to add a tenant to the Cloud Exchange. The following errors appear in the logs:[CE_1045, CE_1044, CE_1126]I have reviewed the configuration and validated the tokens, but I am still unable to onboard the tenant.Could you please assist in troubleshooting this issue?Detailed Error: 09/10/2024 10:20:10 PM    CE_1045    error    Error occurred while validating v1 token, Exception occurred while parsing JSON response.Traceback (most recent call last):  File "/usr/local/lib/python3.9/site-packages/requests/models.py", line 971, in json    return complexjson.loads(self.text, **kwargs)  File "/usr/local/lib/python3.9/json/__init__.py", line 346, in loads    return _default_decoder.decode(s)  File "/usr/local/lib/python3.9/json/decoder.py", line 340, in decode    raise JSONDecodeError("Extra data", s, end)json.decoder.JS

2
ejang
Netskope Employee
7 days ago
K
KrugerNew Member
asked in Next Gen SWG
email Notifications on changes

Hello,Is there a way to get an email notification for configuration changes to the netskope tenant? ie: any inline policy update or creation etc..  Thanks!

1
N
9 days ago
prajakta.yadav
Netskope Partner
prajakta.yadavNetskope Partner
asked in Next Gen SWG
Cert-pinned application

Hello,Netskope added the cert-pinned applications under steering configuration exception by default.Can we get a list of these applications added by NS?

4
Rohit_Bhaskar
Netskope Employee
9 days ago
Swapnil Sonkar
Netskope Partner
Swapnil SonkarNetskope Partner
asked in Next Gen SWG
india ID Adhaar Block Failed By DLP

Hi i tried several time India ID prof Adhaar card image and the Adhaar number also is not getting  blocked in upload as well as in text message. i also tried by Regex thand also its not Blocking.Kindly please help on this?

1
ejang
Netskope Employee
9 days ago
N
nikunj.godawatNew Member
asked in Next Gen SWG
In what scenarios is a SWG steering bypass required?

In what scenarios is a steering bypass required and recommendation to avoid the steering bypass.

1
J
10 days ago
thiagofc
Netskope Partner
thiagofcNetskope Partner
asked in Private Access for ZTNA
Question about a standard scenario for a Dial-up IPSEC/SSL VPN-RA

In a standard scenario for a Dial-up IPSEC/SSL VPN-RA we have:A DHCP IP-Pool is set up on the VPN Gateway to assign IP addresses to clients. The DNS resolver is also configured, usually using the Active Directory (AD) DNS for these assignments. The internal/remote networks that will be advertised in the VPN clients' routing table for split-tunnel access are defined.By default, a Windows interface has NetBIOS over TCP (ports 137/138) enabled.So, when connecting to the VPN, a typical SMB access like \\AD-Domain\C$ (using ports 445 and 139) for file sharing works successfully. In other words, with the old VPN model, resources can be accessed without much firewall configuration or concerns about application ports or DNS resolution.In a ZTNA/NPA environment, I’d like to better understand the precautions I should take in the same scenario. Here, we have a remote machine properly joined to the AD Domain. When it connects to the VPN, it receives its internal-use IP and internal DNS. With this

2
thiagofc
Netskope Partner
12 days ago
J
jschueleNew Member III
asked in DLP
sync_item_content not in activity list

I see application events pertaining to Cloud Storage with an Activity of sync_item_content, but I can’t filter on that activity, or see it in the list of all activities. Am I missing something?What I would like to do is use it in a DLP policy to identify files being synced to personal cloud storage instances. Thx  

0
J
13 days ago
A
Anonymous
posted in Next Gen SWG
Netskope client supported versions of mac sonoma

Team,Can anyone help me with Netskope client supported version for MAC Sonoma.Is sonoma version 14.3 is supported version.

2
deonnamireya
13 days ago
dinbarzily
Netskope Partner
dinbarzilyNetskope Partner
asked in Private Access for ZTNA
How to create device classification based on Netskope private app registry value

hey all,How to create device classification based on Netskope private app registry value? attached screenshot i want to monitor on these value when private app is connected value device will be managed . thanks

0
dinbarzily
Netskope Partner
18 days ago
M
Netskope Employee
mkoyfmanNetskope Employee
published in Next Gen SWG
Configuring CLI-based Tools and Development Frameworks to work with Netskope SSL Interception

If Netskope is deployed inline (for CASB or Web), some CLI tools will not work because they use certificate bundles distributed with those tools (i.e. Python distribution, for example), and they do not access system certificate store where Netskope client installs Netskope root CA. The guidance below will allow you to enable those tools to seamlessly work with Netskope SSL interception.In order for these tools to trust Netskope-signed certificates, they need to be configured to trust Netskope Certificate Authority (CA). This is typically accomplished by setting certain environment variables to point to Netskope CA to allow for smooth SSL operation.The variables need to be set to point to the following files that contain Netskope CA:On a Mac: /Library/Application Support/Netskope/STAgent/data/nscacert.pemOn Windows: %ProgramData%\Netskope\STAgent\data\nscacert.pemFor example to set REQUESTS_CA_BUNDLE variable on a Mac to point to the Netskope root CA, you can run this command:export REQ

7570
M
Netskope Employee
20 days ago
N
ndudaExplorer
asked in Next Gen SWG
Crowdstrike MacOS exclusions

Crowdstrike customers, how are you doing the exclusions for MacOS listed here, https://docs.netskope.com/en/netskope-help/netskope-client/netskope-client-interoperability/antivirus-applications/exceptions-for-anti-virus-applications/Specifically, I’d be curious to see what your exclusion patterns are. For paths with spaces (i.e. /Library/Application\ Support/) are you using “/Library/Application\ Support/” or “/Library/Application Support/”. Crowdstrike documentation states we shouldn't need the \ but does that work in practice?

3
T
23 days ago
J
jschueleNew Member III
asked in CASB
Netskope Client and Digital Guardian Agent Compatibility

Hi, anyone have experience running both the Netskope Client and Digital Guardian (DG) DLPE Agent at the same time? We are using Netskope for CASB and NPA. The DG Agent will have the WIP feature enabled for web traffic visibility. Thx

0
J
23 days ago
C
clnicholsonNew Member
asked in Private Access for ZTNA
NPA Internet Access Issues

I'm doing a deploy of NPA across my environment and hitting a series of snags.  The issue seems to be related to my Mac users having issues with DNS resolution or pages loading failures.  These are largely my SaaS based SSO apps but they can be anything.  We are using Duo Security for MFA but that has been added as an exception.  The problem is intermittent.  Some users experience it all the time, I only experience it periodically though it used to be all the time for me too.  All users are in the same Steering Configuration.   We are all using MacOS Ventura so this may be related to the bug from last year.  

5
S
25 days ago
N
nesi10062New Member
asked in Private Access for ZTNA
Intermittent failure to access private apps from the Office

When some users are at the office, every now and then they become unable to access private apps Chrome simply hangs.When that happens, if they disconnect and reconnect from Wi-Fi, the issue is fixed, until it breaks again after a few hours/minutes.This doesn't happen when they are working from home.

3
S
25 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings