Product Forums

Hi Team,I’ve observed an issue where Outlook on the browser does not receive new emails when the Netskope client is enabled. However, at the same time, the Outlook desktop application continues to receive emails without any problem.This leads me to believe that the Netskope client might be interfering with mail synchronization on the browser. Could you please help investigate and provide a solution for this?

How can i access private applications using enterprise browser? I tried creating a realtime policy with “access method” as one of the criteria but couldn’t find enterprise browser in the option. additionally i tried to create an enterprise browser protection policy for private apps but the option is grayed out.

I think that it would be helpful to have a button (or something) to do a SSH to the publisher directly from the tenant.

Good evening, everyone, I will be using the steering “Specific Private Apps” in my dynamic steering configuration. I usually steer all private apps, but I have a use-case for one application for my on-premises users. Do I need to add the private app to a real-time policy for this to work? It looks like I only need to add the specific private app to the steering configuration. See attached screenshots. Thanks. 

Netskope Global Technical Success (GTS)Netskope DLP – Step-by-Step Beginner’s GuideNetskope Cloud Version - 127IntroductionThis article provides a high-level overview of how Data Loss Prevention (DLP) is configured and enforced in the Netskope platform. It is designed for administrators and security professionals who are implementing Netskope DLP for the first time or need a structured refresher.Netskope’s DLP framework is modular — built from several dependent components that must be configured in the correct sequence. This guide outlines those components, their roles, and the logical flow of implementation. Key Components of Netskope DLPThe DLP framework in Netskope consists of the following core building blocks: Component Description Entities Define the actual content to detect (e.g., credit card numbers, project names, customer data) DLP Rules Contain detection logic using Entities and scanning behavior DLP Profiles Group one o

Netskope Global Technical Success (GTS)Netskope DLP – Enforcing Netskope DLP Policies                                                                                    Netskope Cloud Version - 127IntroductionThis article explains how to create and apply DLP Policies in Netskope.DLP Policies represent the final enforcement layer — they determine where DLP scanning occurs, who is impacted, and what action is taken when sensitive data is detected.Policies are where DLP Profiles meet real-world enforcement across cloud apps, web traffic, private applications, and endpoint activity. What is a DLP Policy?A DLP Policy defines:Which DLP Profile is applied Which users, groups, or locations are affected Which traffic channels or applications are inspected What action is taken on policy violations (e.g., Alert, Block, Bypass, Coach)  It is the final step in operationalizing your DLP setup. Key Policy Configuration Options   Section What is it? Why does it matter? Exampl

Netskope Global Technical Success (GTS)Netskope DLP – Designing DLP Profiles and File Filters in NetskopeNetskope Cloud Version - 127 IntroductionThis article explains how to create and use DLP Profiles in Netskope.A DLP Profile is a container that brings together one or more DLP Rules and applies additional filters and classifications, including file types and size-based criteria.This step is essential for organizing DLP logic and optimizing what kinds of files and content are inspected in various use cases. What is a DLP Profile?A DLP Profile combines:One or more DLP Rules (the detection logic) A File Profile (filters files by type, size, and extension)Profiles allow you to group rules by business purpose or regulatory need, then apply them selectively using DLP Policies.  Core Components of a DLP Profile1. File Profile (Filtering by File Types and Sizes)   What is it? Why it matters Example Use Case Defines filters to include or exclude files based on MIME t

Netskope Global Technical Success (GTS)Netskope DLP – Building Effective DLP Rules in NetskopeNetskope Cloud Version - 127IntroductionThis article explains how to create and configure DLP Rules in Netskope.providesDLP Rules define how sensitive data is detected based on previously created Entities, and control the conditions, logic, and severity under which detections are triggered.Rules form the heart of Netskope DLP — without them, Entities alone cannot inspect or enforce anything.This document breaks down each part of a DLP Rule, with configuration guidance, use cases, and practical examples. What is a DLP Rule?A DLP Rule connects one or more Entities to a specific set of detection behaviors. It defines how data is matched, where it is inspected (content vs metadata), how many matches are required to trigger detection, and what severity should be assigned.Rules are then added into DLP Profiles, which are later applied to traffic via DLP Policies.  Core Components of a DLP Rule1. Ent

Netskope Global Technical Success (GTS)Netskope DLP – Creating and Using DLP Entities in NetskopeNetskope Cloud Version - 127IntroductionThis article explains how to create and use DLP Entities in Netskope.Entities are the foundation of the DLP engine — they define what kind of data is considered sensitive and must be detected and protected.Entities can be predefined or custom-built, depending on the sensitivity and uniqueness of your data.This guide will cover:The types of DLP Entities When and why to use them Practical examples and configuration steps What is a DLP Entity?A DLP Entity in Netskope is a reusable object that describes specific data patterns or terms that the system should detect during policy enforcement.Entities are used within DLP Rules to specify the nature of the sensitive data — such as PII, PCI, financial data, or confidential terms.  Types of Entities in Netskope   Entity Type Description When to Use Examples Best Practices

Hi , Has anyone followed this article and successfully got the Google Drive app working through CPA?https://support.google.com/a/answer/7644837?hl=en&src=supportwidget0&authuser=0 Best Regards,

I would like to assign multiple roles to Netskope Restricted Admins, each role has different permissions dependent on the (group) scope. Please instruct if this possible. I only see the ability to assign a single role from the drop-down list of roles.

Hello, At the moment we don’t have any parameter available to deploy the URL list(s)(/api/v2/policy/urllist/deploy)I assume it’s the same limitation than through the WebUI: when we “apply changes” in the URL list menu, we apply all pending changes, even the ones from other admins It would be great to add the {id} of the URLs list to be deployed to avoid the automation tools to apply changes on other URL lists Thank you :)

We are using REST API v2 to sync our Entra ID users and groups. We switched over from SCIM a while ago. I noticed that a group in Entra ID that has nested groups inside are not shown in Netskope, only the individual users. Is this a known issue? Is there a way to have Netskope see nested groups? Thx

Hi Folks,Our development team is currently facing an issue with Ngrok connectivity. I’ve attached a reference screenshot for your review.Could someone please guide us on how to allow this traffic?Appreciate your support.  

ObjectiveHighlight the outcome that Netskope does not re-examine files with the same MD5 hash permanently. PrerequisiteThis issue generally applies to all Netskope Standard and Professional DLP modules, including, but not limited to, NGSWG DLP, Email DLP, Endpoint DLP, and more. ContextCustomers can initially upload a file that contains no detectable data identifiers. Later, they may modify only the file name to include sensitive keywords. As a result, they can bypass Netskope’s DLP detection mechanism, potentially leaking sensitive information through the file name alone. Do You Know?If the administrator has not changed the DLP policies that should have been triggered, such data leakage will not generate any forensic records or DLP violation alerts. This means the administrator will be unable to track or investigate the data leakage incident. NotesWe’ve discovered that others have already raised similar concerns. I encourage you to vote for this feature as well, as this design issue d

Hello everyone,Here's my problem: we have a bastion server on AWS (Active Directory authentication) that is restricted in terms of authorized IPs (at the AWS instance level), and we need mobile service providers (smartphone access points, for example, so no fixed IPs, and we can't open the entire internet without our authentication portal being blown up in 2 seconds) to be able to connect to it.The IP ranges of our Netskope server are authorized, so my question is: Would it be possible to create a specific Netskope client that service providers could activate when they need to connect to our bastion server and then deactivate it after ? Has anyone had a similar need? I asked the AI, and they told me it's possible. Theoretically, I should create a "mobility providers" user group where we could place the email addresses of our mobility providers for enrollment, but I don't have this menu, even though I'm a "tenant admin." Our Netskope account supports SWG and NPA.Thanks in advance if you

 1. Private Appsの登録上限数について弊社の契約において、登録可能なPrivate Appsの最大数は20個で正しいでしょうか。2. Publisherの冗長化と優先順位についてイントラネット上のアプリケーションへのアクセスに高可用性を持たせるため、1つのPrivate Appに対して複数のPublisherを設置することを検討しています。この構成において、Publisherの優先順位付けや、特定のPublisherへアクセスを誘導するような設定は可能でしょうか。もし優先順位の設定ができない場合、どのPublisherがどのような基準で自動選択されるのでしょうか。（例：ユーザーから最もレイテンシが低いPublisherなど）

At least two years ago, users were already raising similar concerns to the ones we are now requesting.However, in the App Catalog (CCI), Google Docs still only shows “discovery only” support. Google Slides and Google Sheets are not even listed in the catalog at this moment.  I sincerely believe that Google Workspace is one of the most popular enterprise ready SaaS suites.I’m genuinely curious about your thoughts on this and how your companies currently monitors or regulates user activity within Google Workspace.If you agree, let’s vote together for this feature request. 

Do help in setting up reverse proxy for AWS using Azure ENTRA ID.If you have any document or Links available publicly do share. while i have stuck in executing.

Hi everyone, I'm looking to consult with others who may have experience integrating CDR (Content Disarm and Reconstruction) solutions with Netskope, specifically for securing web file downloads. The goal is: When a user attempts to download a file from the internet through Netskope, The file is either blocked or redirected, Then automatically sent to a CDR engine (e.g., OPSWAT MetaDefender) for sanitization, And only afterward made available to the user in a safe version.  Has anyone implemented this kind of workflow?Any insights, architecture suggestions, or practical challenges would be greatly appreciated. Thanks in advance!

We would like to control the Private application (Client based access) with Time bound & Geolocation for the users.The Client based Private application defined policy doesn’t have the source IP as match criteria for identifying the users Geolocation. The Private Application policy doesn’t have the policy schedule option like the Cloud app or the web access policies.We are expecting whether this can be achieved with the Netskope or addressed by Netskope in the future releases.Thank you.

Hello Community!We're thrilled to announce the completion of our comprehensive 5-part series designed to guide you through the intricate world of Zero Trust and maximizing your Netskope Security Service Edge (SSE) investment. This series has been crafted to provide you with actionable insights, strategic context, and a clear understanding of how Netskope empowers your security journey.In a landscape where "never trust, always verify" is paramount, understanding your traffic, applications, users, and data is critical. This series breaks down complex concepts into digestible, interlinked posts, offering value for new adopters and seasoned professionals alike. Why Read the Full Series? By exploring all five posts, you'll gain a holistic perspective on: Foundational Concepts: How Netskope steers traffic and the core role of its client. Deep Visibility: Unlocking granular context for informed security decisions. Strategic Adoption: A phased approach to implementing Zero Trust, consideri

Executive Summary: Trust Zones – Your Key to Zero Trust, Visibility, and GRC In today's dynamic threat landscape, securing your enterprise goes beyond simple "allow" or "block" decisions for applications. It demands nuanced, risk-adaptive controls. Trust Zones provide a structured framework to categorize applications based on their inherent risk, management oversight, and data criticality. This approach is fundamental to a mature Zero Trust strategy and critical for robust Governance, Risk, and Compliance (GRC).Netskope dramatically simplifies and empowers this process: Centralized Risk Intelligence: Our App Catalog (over 84,000 cloud apps!) provides deep risk insights and enables custom tagging, allowing you to align apps with your organizational Trust Zones. Dynamic Policy Enforcement: These App Tags feed directly into real-time policies, enabling dynamic, granular controls that adapt without constant policy change control. Unified Risk Orchestration: Risk Exchange integrates App

Want to migrate from onprem proxy to NS proxy for SOCKS proxy use case. Can someone help with the key consideration before migration plan?