Skip to main content

- - Articles Overview
Learn
Product Release Notes
Groups
Events
Support

EN

Netskope Homemade: Season 2

10 days ago

Home
Product Forums

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

718 Topics

dwillisNetskope Employee

published in Netskope Cloud Exchange (CE)

Netskope Risk Exchange Ecosystem - Making User Based ChangesKnowledgebase, Cloud Exchange

Netskope wishes to make it easier for our customers and partners to identify and respond to high risk users, instances, apps, and workloads using automated enrichment and correlation actions. This will enable our customers to leverage multi-vendor sourced or single vendor correlated findings to continuously tune Netskope’s adaptive trust policy enforcement framework. This blog series will explore a number of different workflows that those comfortable using basic scripting, or enablement tools like Postman, can employ to programmatically update and inform your inline policy actions. These are just some of the functions that the newest version of Cloud Exchange, version 5.1, supports now and in the future. Look for it to hit the shelves at the end of October. One of the key value propositions of Netskope is its ability to correlate multiple user personas (Korg-lord-of-thunder, davidw@dwillis.com, and fluffythevampireslayer) to a single, unique identity - dwillis@company.com - managed by

kkhorramnejadNetskope Employee

published in Cloud Firewall

Navigating the Cloud: Evolution and Security of Hybrid Applications with Cloud FirewallArticle

What is Cloud Firewall? The evolution of Cloud Firewall (CFW) or Firewall as a Service (FWaaS) is a direct outcome of the widespread adoption of cloud technologies and the migration or development of applications in the cloud. Traditionally, on-premise firewall appliances were designed to secure outbound traffic at Layers 3 and 4 (L3/L4) of OSI model, safeguarding corporate assets from potential security threats. However, the landscape of work and security underwent significant changes, particularly with the rise of remote work, a trend that saw rapid acceleration due to the COVID-19 pandemic. This shift necessitated a reevaluation of security strategies by teams to address both existing and emerging threats.Initially, the strategy involved backhauling the traffic from the remote workforce back to the corporate office's security infrastructure. This approach, however, quickly proved to be inadequate in meeting the security and performance needs of a growing remote workforce. In respons

published in Security Posture Management

SSPM (SaaS Security Posture Management) template based rulesNews

In the 114 release, we are excited to introduce a new type of content for Netskope SSPM: template-based rules. These rule templates are designed to assist deploying environment-specific detections for known threats, noteworthy anomalies and address misconfigurations. Using templates makes it easier to establish a more expedient and proactive defense strategy for your SaaS ecosystem.Each template is composed with the same Netskope Governance Language (NGL) rule logic which is also used in the hundreds of built-in detections bundled within Netskope SSPM. Kindly refer below steps Template based rules are predefined detection rules, which contain placeholders intended to be filled by the user. By simply populating the placeholders within the rule, users can effortlessly generate rules tailored to their specific business requirements and constraints. For example, you might want to ensure every user account in a SaaS application is registered with a company provided email-address? Or creat

adebrattoNew Member

asked in Next Gen SWG

Real-Time Protection Policy Review

Our organization must review our policies to determine if the existing policies are still valid and need to be retained. Problem we are having is that “allow” rules do not appear to log anywhere. Short of turning all “allow” rules to be “alert” rules, does anyone have a way to validation if a web access rule is actually being used and needed to be retained?

Michael Horne OCDNetskope Partner

asked in Private Access for ZTNA

NPA access without a client from branch sites

Hello,I want to clarify if the Netskope client is required for NPA access for users who are at the office.We have deployed NPA so that we can force an external public Application traffic through a publisher to get a fixed public IP address due to public IP address whitelisting requirements. As we have IPSec tunnels connecting the site to Netskope cloud, do we still need to have the client installed on the users device? Do we need to have browser based access configured for this to work?For Zscaler this is not a requirement. We use Zscaler ZPA for another customer to route Guest Wifi clients to the self-registration portal. The Guest traffic goes over IPsec tunnels to the Zsclaer cloud and Zsclaer send to to a ZPA connecter. This allows the routing of Guest traffic without having to send it over the customers internal network.This set up does not seem to work in Netskope. If application trafic is sent over the IPsec traffic Netskope, it is not sent to the Publisher. It works when the

john.gaoNew Member

asked in Cloud Firewall

Inquiry Regarding Server-Side Events and Traffic Inspection

Hello,We have quite a few joint customers who utilize your security solution. Recently, we’ve observed that some of these customers are encountering challenges with server-sent events (SSE) that we employ in our production environment for near real-time communication.Could you kindly clarify if Netskope buffers SSE streams for traffic inspection? If so, is there a recommended configuration or approach to ensure uninterrupted SSE functionality? Thank you for your assistance. Best regards,John

sean.clowesNew Member

asked in Next Gen SWG

Agent Deployment after macOS 15+

Hey folks, does anyone have any experience so far deploying Netskope Steering Agent to macOS in versions above 15? Our Jamf policies that have worked for some time have stopped. Specifically the VPN configuration profile fails to deploy with the error:The ‘VPN Service’ payload could not be installed. The VPN service could not be created. This continues to work on anything below 15. Anyone needed to update their Jamf policies in order to get this to work? And by policies I mean the configuration profiles?

KrugerNew Member III

asked in Next Gen SWG

instagram messaging

Have been looking to see if there is a way to block instagram messaging posting.. but allow users to view the messaging window. It looks like all the available activities have not targeted the messaging feature.Has anyone ever had success in allowing viewing of the messaging page but not allow users to post messages?Thanks

Leandro Timotio de LimaNetskope Employee

posted in Next Gen SWG

(VIDEO) Block Upload - File Converter Cloud App

Policy:Block Upload File Converter Description:In this example we will block the upload action for cloud applications from the "File Converter" category. Video:

Leandro Timotio de LimaNetskope Employee

(VIDEO) Prevent Sensitive Data From Being Sent to ChatGPT

Policy:Block Confidential Word ChatGPT Description:Policy to prevent sensitive data from being entered into ChatGPT Video:

Leandro Timotio de LimaNetskope Employee

posted in Next Gen SWG

(VIDEO) Block Download File Type

Policy:Block Download File Type Description:Policy to prevent downloading of files that may put the organization at risk, for example binary files Video:

Leandro Timotio de LimaNetskope Employee

posted in Next Gen SWG

(VIDEO) Block Risk Country

Policy:Block Risk Country Description:Policy for blocking access to websites in risk countries Video:

Leandro Timotio de LimaNetskope Employee

(VIDEO) Block Cloud Applications Using Custom TAG

Policy:Block Tag Deny Description:Policy to block cloud applications using custom TAG Video:

Leandro Timotio de LimaNetskope Employee

(VIDEO) Block Source Code Upload to Email

Policy:Block Upload DLP Source Code Description:In this example we will prevent sending emails (Gmail) with files that contain "source code" in their content. Video:

aplazaNetskope Employee

Demo - Train Your Own Classifier

Chief Evangelist, Bob Gilbert, performs a live demo of Train Your Own Classifier, which is Netskope’s groundbreaking solution that puts the power of AI in the hands of customers. Anyone deployed on the Netskope platform with advanced data protection can now train AI/ML models using their own unique corpus of data.

jschueleNew Member III

CASB API for Slack exclude specific private channels

Hi, I have CASB API DLP policies configure for Slack and want to know how to exclude (whitelist) specific private channels from inspection? We are in the process of renaming our private channels with a keyword to let us know it approved to hold certain type of data. Right now its all or nothing..

Leandro Timotio de LimaNetskope Employee

posted in Next Gen SWG

(VIDEO) Access control to personal accounts in Gmail

Policy:Gmail Account ControlDescription:Example of how to prevent users from accessing Gmail with a personal accountVideo:

Leandro Timotio de LimaNetskope Employee

posted in Next Gen SWG

(VIDEO) How to control channels on YouTube

Policy:Allow Netskope Channel Youtube Description:Example of how to create channel control on YouTubeVideo:

Leandro Timotio de LimaNetskope Employee

(VIDEO) How to alert the end user accessing a cloud application with a poor reputation.

Policy:User Alert Poor ReputationDescription:Example of how to create a rule to alert the end user about the use of a cloud application with poor reputationVideo:

nraghuv1New Member III

asked in Next Gen SWG

Google Suite Applications Review

Hello Community, I am writing to formally request a comprehensive list of all applications incorporated within the Google Suite. As we are currently assessing our permissions policy, it is imperative to identify which applications should be authorized for business use and which should be subject to restrictions. Our existing Google Suite policy grants access to all global users; however, we aim to implement restrictions on specific applications, including YouTube, for designated user groups. Having a detailed enumeration of these applications will greatly assist us in making well-informed decisions regarding access permissions. Thank you in advance for your assistance with this matter.

kdibbleNew Member III

Not Near Best Practices

We are working towards implementing a rule that looks for plaintext credentials within shared documents. In doing so, we’ve utilized the Passwords (contextual) pre-defined entity. We’ve noticed that this entity is catching teams and zoom meeting passcodes. We do not want to catch these passcodes in the rule and are trying to create a “not near” advanced expression. I’m looking for guidance on how to perform this. For example here is what we have: P1 = Passwords (Contextual)D5 = Custom Dictionary of words like “meeting”, “teams”, “zoom”, etc… Both options we’ve tried: 1.) ( P1 AND ( NOT ( P1 NEAR D5 ) ) )2.) (P1 AND NOT (P1 NEAR D5)) Any help would be appreciated.

clnicholsonNew Member

posted in Private Access for ZTNA

Communicating to Localhost

Has anyone else had problems with communication failing when running services on localhost or loopback addresses?  I have several developer teams who receive errors when running local web services for testing.  I've added an exception to the Steering Configuration with a Destination Location but that doesn't seem to solve the issue.    

maxNew Member

asked in Security Posture Management

Feature Request: Separate mechanism/process to permit REST API calls being made to the Netskope tenant

Administrative access to the Netskope tenant is restricted by the Allowlist, meaning administrators can only access the tenant if they are connecting from an IP address listed in the Allowlist. The Allowlist not only controls administrative access, but we have also noted that when attempts are being made to establish REST API connections or calls to the tenant these calls will fail if the IP address it is originating from is not on the Allowlist.There are instances where we want API calls from IP address ranges but at the same time we do not want administrative access to the tenant being granted to these IP addresses.Case in point. We are working with a Netskope SME to implement the Netskope Codeless Connector which sits in Microsoft Sentinel. The connector ingests Netskope logs directly into Sentinel via REST API calls. Sentinel does not have its own IP address range so it uses the Azure Public IP Addresses to make those API calls. These calls will fail because the IP address which t

mkoyfmanNetskope Employee

published in Next Gen SWG

Configuring CLI-based Tools and Development Frameworks to work with Netskope SSL Interception

If Netskope is deployed inline (for CASB or Web), some CLI tools will not work because they use certificate bundles distributed with those tools (i.e. Python distribution, for example), and they do not access system certificate store where Netskope client installs Netskope root CA. The guidance below will allow you to enable those tools to seamlessly work with Netskope SSL interception.In order for these tools to trust Netskope-signed certificates, they need to be configured to trust Netskope Certificate Authority (CA). This is typically accomplished by setting certain environment variables to point to Netskope CA to allow for smooth SSL operation.The variables need to be set to point to the following files that contain Netskope CA:On a Mac: /Library/Application Support/Netskope/STAgent/data/nscacert.pemOn Windows: %ProgramData%\Netskope\STAgent\data\nscacert.pemFor example to set REQUESTS_CA_BUNDLE variable on a Mac to point to the Netskope root CA, you can run this command:export REQ

Melinda_LeeNew Member III

Netskope Client change tenant

Hello, I have 2 tenants, 1 for QA and 1 for production. Has anyone figured out a way to switch clients from one tenant to another without having to uninstall and reinstall? especially on a MAC system?

1
2
3
4
...
29

Page 1 / 29

Badge winners

Rohit_Bhaskarhas earned the badge Simplified Social Champion
Rohit_Bhaskarhas earned the badge Simplified Engagement Enthusiast
Rohit_Bhaskarhas earned the badge Simplified Collaborator
mkoyfmanhas earned the badge Retired Alumni
Saif-Chaudhryhas earned the badge Retired Alumni

Show all badges

Powered by Gainsight

Terms & Conditions Cookie settings

Sign up

Already have an account? Login

Login with SSO

Employee Partner

or

Username *

E-mail address *

I am a... *

First Name *

Last Name *

Company Name *

Job Title *

Country Name *

State/Province *

Topics of Interest… *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

If you haven't already registered, now is a good time to do so. After you register, you can post to the community, receive email notifications, and lots more. It's quick and it's free! Create an account

Login with SSO

Employee Partner

or

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK

Explore

Why Netskope
Products
Solutions
What is SASE?
What is SSE?
What is Zero Trust?
What is a Next Gen SWG?
What is a CASB?

Resources

Blog
Netskope Community
Resource Library
Security Defined
Technical Support
Threat Labs
Trust Portal
URL Lookup

Company

About Netskope
Careers
Events
Executive Briefing Program
Newsroom
Our Customers
Partners
Partner portal

Contact

Contact Us
1-800-979-6988
2445 Augustine Dr. 3rd floor, Santa Clara, CA 95054

Privacy Policy
Vulnerability Disclosure Policy
Terms of Use
CCPA Compliance Statement

© 2024, All rights reserved.