Product Forums

Hello Team, I want to set a policy which can hide some parts of datas (for example credit card numbers) during download/upload processes. (For example If I download document, I want card numbers become like 1111 xxxx xxxx xxxx )Is Netskope able to do this?Note: My question is not answered in this link  https://docs.netskope.com/en/dlp-entity/#entity-obfuscation-1  Thank you in advance,

Hey Netskope buddies, I’m reaching out for help because I’ve forgotten the passwords for two of my publishers and I’m currently unable to log in. I attempted to use some Ubuntu commands to reset the password, but it’s asking for the current password, which I don’t have.I would greatly appreciate any assistance you could provide in resetting my passwords.

I have an internal private app configured in NPA to allow Browser Access for a consultant. Everything works fine until it redirects to Google for the login process and we see a Google error message “Access Blocked: This app’s request is invalid”, “Error 400: redirect_url_mismatch”. Any idea’s how to get around this? Thx

Streamline your security operations with a converged SaaS security solution built for today’s challenges.  Join Melody Nouri, Netskope's Product Marketing Manager, and Dev CK, Director of Product Management, as they reveal how Netskope's unified Cloud Access Security Broker (CASB) can help you navigate the ever-expanding SaaS and GenAI landscape with ease, offering the tools needed to streamline your security operations. Key Topics Covered: Identify gaps in current SaaS security tools and understand their limitations. Explore the essential capabilities needed to transform SaaS security with a unified CASB approach. Watch a live demo of key use cases showcasing Netskope’s LLM-powered risk categorization, helping you stay ahead of emerging threats and reduce alert fatigue. Discover how Netskope can enhance your security posture while boosting productivity. To learn more about how to stay ahead of threats without slowing productivity, register for our upcoming webinar below:   Simplify

Hello all,I have a weird issue that I dont know how to fix. The issue is that when using Dialpad (Cloud Phone System) in the Chrome, Safari or the Brave browser on a MAC device (this does not seem to affect Windows) to make calls and or use Dialpads meeting feature something is being blocked. But the kicker is it is not being blocked when using Firefox on the MAC.What happens for calls is I will initiate the call (I used my personal cell for the test) it will not make the default ringing noise we all know and love but the noise that Dialpad makes when starting the call (its like a ding, ding noise idk). Then my cell sees the incoming call, I answer it but neither side can hear the other talking. The call will stay connected but again no one can hear the other person. Then sometimes when I answer the call on my cell it will seem like it connected the call then just hang up the call automatically.I made sure that the domains in the Desktop Native, Mobile, & Browser Applications secti

We are creating policies based on thresholds of internal users that are collaborators of a document. In doing that, we’ve ran into the following issues: 1.) We’ve seen in the alerts section that a lot of our alerts associated have a collaborator count that is different from what we see in the incidents section. For example, here you can see 135 collaborators. However if you look at the actual incident, this is only shared with 4 individual users, and a group of 64 users. That doesn’t add up to 135. We are seeing this for lots of alerts/incidents. 2.) In our DLP profiles, we have a a configuration for various exposure definitions. We are wondering if the following is an AND or OR in terms of the internal/external and # of internal users. The reason we ask is that it seemed that we were triggering on internal documents that are shared with less than 100 users. Let us know if there is any further clarification needed here.  

I am trying to determine when a DLP Rule needs to leverage the NEAR operator versus the AND operator. In one example incident, a DLP Rule defined as (P1 NEAR P2) appears to have been triggered when the two entities were over 10,000 characters apart.What is the default value of the AND operator, is it truly more than 10,000 characters?

We have recently enabled conditional access in Entra and ran into a problem.  Our setup says that only machines coming from one of our facilities or a Netskope IP range can access Teams, Outlook, etc.The issue we are having occurs when a user is booting up their machine, Netskope does not enable before Teams and Outlook, causing the user to have to close the apps and click Sign In until a Netskope tunnel is enabled.Is there something from the Netskope tenant we need to adjust to prevent users from having to close all of their programs each time they reboot or is this issue on the Microsoft side?  We considered a GPO for preventing Teams and Outlook from booting to allow Netskope to enable as well.Any information anyone could provide would be appreciated.  Thank you!

I’m trying to determine what caused the following chain of actions:2024/11/04 16:00:22.638 stAgentSvc p14d8 tcc0 error NSCom2.cpp:1038 NSCOM2 recv failed 100542024/11/04 16:00:22.638 stAgentSvc p14d8 tcc0 error NSCom2.cpp:783 NSCOM2 startServerMessagePump: Connection closed by client nsClientUI_s1 Then further down in the logs I’m seeing: 2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info config.cpp:10145 Config [sessId 1] Marking user config for delete2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info npaTunnelMgr.cpp:933 CNpaTunnelMgr Handle session change for NPA active session 1, log off session 12024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info npaTunnelMgr.cpp:608 CNpaTunnelMgr Set NPA (desired) status from [NPA_TO_STOP] to [NPA_TO_STOP]2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info tunnelMgr.cpp:1695 CTunnelMgr Disconnecting tunnel for sessId 12024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info tunnel.cpp:288 nsTunnel TLS disconnecting nsTunnel, context = NSTUNNEL_DISCO

Is it possible to steer specific site sub-domain traffic thru Netskope but have the remainder of the traffic bypass Netskope.I have a specific site sub-domain that my leadership wants to have blocked.  But currently the parent domain is set as a Steering Exception.

 Hello everyone! I hope you're all doing well. I'm currently exploring how to set up an OCR DLP detection policy on Netskope for our organization's security needs. Could anyone provide guidance or step-by-step instructions on configuring such a policy? Any insights, tips, or best practices would be greatly appreciated. Thanks in advance for your help!

Dear Team, Could we manage browser extensions (including installation and execution) using NGSWG? Best Regards,Shubham

Hello,Is this allowed to use multiple policies assigned to a single App via tags? Is it possible to predict the behavior in such a scenario?App AServer ABCTag: AApp BServer XYZTag: BApp CServer WWWTag: A, BPolicy AAllow Group AManagedClientTag: APolicy BAllow Group BManagedClientTag: BPolicy A - blockBlock allClientTag: APolicy B - blockBlock allClientTag: BUser A - member of group AUser B - member of group BUser C - member of both group A and B Will users A, B and C be able to reach server WWW?We assume that blocking policies have fewer conditions, so they are processed later.Regards

I have been digging through documentation but have been unable to find an answer on this specific SMTP Proxy DLP issue.  We currently use Netskope DLP to cover network exfiltration and endpoints (USB, etc), and we’re testing Netskope’s SMTP Proxy DLP.  For some reason, we’re unable to get Netskope to trigger on DLP violations in the message body.  It always catches content in attachments, but if I paste the exact same test content in the message body (SSN, CC, etc) it fails to trigger a violation.  Is this by design, or am I missing something in the config?  Thanks

Dear Everyone, The limit for URL lists per tenant is 300 K.Does anyone get an Error in the tenant UI when creating a URL List in a tenant that exceeds 300 K?If anyone has experience creating a ULR List that exceeds 300 K, it would be helpful for me.I would like to know whether tennant UI could inform it to user or not. URL List LimitsCurrently, the total URL List limit per tenant across all URL lists is 300K. The URL List limit using Regex across all URL lists in that tenant is 1K (this 1K count includes only the regex written not the expanded format).https://docs.netskope.com/en/url-list-best-practices/Thank you and Best Regards,Hiroaki.S

I’m attempting to connect to the Netskope API via a PowerShell script. I’ve created an access token with the appropriate endpoint configured. The script is receiving a 401 response which indicates that I’m not authorized yet. I’m not sure how to present the access token in the header. Is there any documentation or examples on how to authorize to the API endpoint I’m trying to connect to? Here’s a snippet of my PowerShell script:# Variables$netskopeAccessToken = "<insert_access_token_here"$type = "File, Folder"$filter = "(app eq 'OneDrive') and (exposure eq 'External')"$netskopeUri = "https://<domain>.goskope.com/api/v2/ui/casbapi/inventory/resources"# API Header$headers = @{ 'Authorization' = 'api_key' + $netskopeAccessToken 'Accept' = 'application/json'}# API Body$body = @{ type = $type filter = $filter}$response = Invoke-RestMethod -Uri $netskopeUri -Method Get -Body $body -Headers $headers 

How to Troubleshoot on private app access for slow connection or unaccusable applications for users (randomly) ? We don’t have DEM advanced license .What kind of tools or options do I have in order to troubleshoot on a slow connection to private apps? I am familiar with :The NPA Troubleshooter Tool Export logs from the client when slowness for private applications occurs.

See a live demo, discover what sets Netskope apart, and hear success stories of transformation! Join us as we explore the pitfalls of sticking with traditional VPNs and discover a cloud-based remote access solution that meets today’s needs and tomorrow’s challenges. Key Topics Covered: Criteria for selecting a new remote access solution, including application support and unified security policies Advantages of a universal zero trust policy for seamless local and remote access How Netskope’s ZTNA Next solution enables full VPN replacement, even for legacy apps Live demo showcasing what sets Netskope apart Success stories of transformation that illustrate real-world impact To learn more about how Netskope's cloud-based remote access solution can replace outdated VPNs and elevate your security strategy, register for our upcoming webinar below:   Elevate Your Remote Access: Transform Your VPN with SASE and Zero Trust Americas Europe, Middle East, and Africa Asia-Pa

Anyone having issues and crashing on Windows NSClient after that was upgrade the Tenant and the Golden Release to the Lastest?We have a customer the MP is located on DE, the users are claiming a lot about crashes in Windows, to the point where it was necessary to force the equipment to be shut down or reset. We are wondering if the problem started after the Tenant Update was made, they were in the release 119 last week, and now they have migrated to 120.I realized that the agent from NSClients with setup to the Last Golden Release right now is the Lasted Release = 120, very interesting… 

Hello, I have a file containing records in this format: 2022.03.18 11:46:45 DEBUG web[XXXXXXXX][auth.event] login success [method|BASIC][provider|REALM|ldap][IP|10.10.10.10|10.10.10.10:55637][login|XXXXXX]I used this regular expression to detect private IP addresses: (10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.1[6-9]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.2[0-9]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.3[0-1]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(192\.168\.[0-9]{1,3}\.[0-9]{1,3})Using this regular expression, I can't detect any IP addresses in the file sent through netskope. What can I do and where is the problem?

We have Netskope authenticating against EntraID using SCIM.  This works great for all our employees.  What I want to do is add some 3rd party contractors so they can access some internal resources.  They have a UPN of Contractor@acme.com but no email address.  Any suggestions?

Dear Netskope buddies,  Im trying get the list of npa policies from my tenant through API method and, when i launch the command (im using postman, but the result from the API web Netskope its the same) i get the following message: “NPA policy feature npa_api_policy_enabled is not enabled”Do you know why the tenant its getting me this message?The option /api/v2/policy/npa is allowed in REST API v2 sectionI have searching in the tenant something similar to this, but i didnt find any option to configure this feature.If this feature is configurable, please, could you tell me where can i find it to enable? Thanks in advance,  Best regards,    

Hi,I’m trying to use the /adem/ section of the REST API v2. For example - this endpoint:https://www.postman.com/netskope-tech-alliances/netskope-rest-api/request/bg2unes/get-a-list-of-usersBefore I add a specific permission to use this endpoint, I get a "You cannot consume this service" error message. After I add it, I get an "Unauthorized" error message. Both times the error code is 403.Does this endpoint require a support ticket to use?Thanks!

Elevate your network monitoring and user experience with the advanced capabilities of P-DEM Enterprise. Thierry Notermans, Product Management Director for Proactive Digital Experience Management (P-DEM), demonstrates the innovations introduced with P-DEM Enterprise using three key use cases.  Learn how to: Monitor onramp, app performance, and user experience from sites connecting to Netskope via SD-WAN, SASE gateways or private connectivity Monitor any application, from over 80K predefined apps or any custom web-based application, including synthetic application monitoring for how apps are performing Streamline operations and deliver a cohesive, transformative monitoring experience with the integration of Real User Monitoring (RUM) and Synthetic Monitoring Get a consistent 360-degree view of digital experiences across the entire path from users to apps  

Unveiling Netskope Proactive Digital Experience Management (P-DEM) Enterprise, a groundbreaking solution that delivers unmatched end-to-end insights and user experience monitoring within SASE and SD-WAN environments. Discover how P-DEM Enterprise eliminates blind spots, provides complete transparency across your entire network, and empowers you to optimize performance at every stage. Key Takeaways:Discover groundbreaking innovations like site-specific, user-specific, and app-specific monitoring that deliver a comprehensive 360-degree view of your digital experience. Learn how advanced contextual visibility and AI/ML-driven insights accelerate troubleshooting and reduce operational costs. Explore how this solution enhances workforce productivity, reduces operational friction, and delivers significant cost savings through proactive monitoring and remediation.To learn more about how Proactive DEM Enterprise groundbreaking innovations are redefining network monitoring, check out this blog