Product Forums

This blog series continues to explore a number of different workflows that those comfortable using basic scripting, or enablement tools like Postman, can employ to programmatically update and inform your inline policy actions. These are just some of the functions that the newest version of Cloud Exchange (CE), version 5.1, supports now and in the future. Look for it to hit the shelves at the end of this month (Oct. 2024). In case you missed it, we previously covered the general premise of our enhanced and net-new  integrations that map back to the Netskope risk exchange ecosystem, here. We also expanded on Making User-based Changes, be sure to check that out too. Combating Shadow ITNetskope has a unique ability to look deep into the packet (after we decrypt it) and see what is going on in between the user and the SaaS application they are using. In general it gives us the ability to put policy controls around which activities will be allowed with any given application. You can restrict

After enabling Browser Access for an app behind NPA, I would like to enforce session limits.

Hello,has anyone had any experience configuring MECM to work with NetSkopes ZTNA next solution? Right now, we have 99% of our apps being steered through NPA, however, for MECM we would like to use the BWAN because NPA does not create a virtual interface and we’d prefer to use boundary groups in MECM with the a true interface IP rather than the IP of the publishers.  we have all of our hubs created, and I can see bidirectional traffic via TCPDUMP both on the local BWAN client and at the BWAN Hub to/from MECM from the client, but nothing ever comes down. Our desktop engineering team has created the boundary groups and all is good on that end. It just seems to sit on waiting for the client to download the content.  the only thing I can think of is maybe it’s because all our DC traffic is via NPA? 

I have specific NPA policies created that are configured for Client access. However, I would like to also add the Criteria = Source Country option to restrict to clients in the US only, which is possible in my Cloud App policies. This option is currently grayed out and wondering why and will it be available in the future? I can see in the event logs that the POP Name is being registered, so it knows that much at least.. Thx

After enabling Browser Access for an app behind NPA, is there a way to enforce session limits? Thx

Hello Team,I read Netskope has data masking ability but I couldn’t find enough details about it. Is there any detailed document about this feature? And how can I create a policy about data masking? Thank you in advance! 

We've been using netskope for a while here at the company and we have difficulty with the issue of the employee registering with the client. After reading the installation documentation on Linux, I was able to create a script for direct installation with the user's registration and it was a success. I researched a lot looking for a script to do the same in windows and I didn't find anything.Has anyone in the community been through this situation and managed to solve it? Remembering that we don't use AD.Thanks so much for everyone's help.

About Netskope SSPM:Netskope SSPM  provides a unified pane of view to the security posture of all supported SaaS applications in your organization. Customers can use SSPM to identify & remediate security posture issues, Detect configuration drifts, Have visibility to & risk scoring of 3rd Party Apps About Netskope Advanced Analytics:Advanced Analytics allows customers to gain valuable insights which are visualized impactfully to the audience. Use it to get visibility into your environment and understand how Netskope is protecting you.Identify risk around shadow IT, data movement, insider threat, etc. Quickly drill into data, aggregate and answer questions Identify gaps in protection coverage and areas where tuning is needed Demonstrate value by highlighting how Netskope has protected the environment or visualize risk to influence stakeholders Key Benefits Monitor Security Posture: With Advanced Analytics reports for SSPM you can regularly monitor the security posture of your or

Try to deploy netskope on a server to block internet access  with an exception of  windows updates. I’ve been directed to the Cloud Explicit Proxy documentation but it seems like an overkill to what im trying to achieve.Anyone implemented this ?​​​​​​

Hello,Assuming a private apps is defined with a single hostname (with the exception of CIDR or wildcard domain) and reachability status is normal, what is the default traffic behaviour if the publishers associated with the app are suddenly unable to each the app? Is the traffic dropped?Is reachability only relevant in scenarios where a single hostname in an app is defined? The private app FAQ document states the following. When an app is specifies with multiple ports or a port range, the Publisher will use only the first port from the list or range to check availability. For example, port range 70-90 will return unreachable, even if you are listening on port 80, because the only port that will be checked is 70 (this is a known limitation). If an app definition specifies multiple ports and/or port ranges, it will check whether any of them is reachable. For example, if you specify 22, 70-90, if it’s able to reach port 22, it will mark the app as reachable. Can anyone clarify these state

Hi community,I'm wondering where I can create new users group to use when I create new client configuration. Thanks,

Netskope - Azure AD - IDP Integration - Enroll & Reauth Private APPsHello community, hope all is well.I have a doubt with a certain point:In an environment was configured IDP mode against Azure-AD in an environment where users have office 365.1.- The agent installation is done in IDP mode and the IDP mode operates correctly, it enrolls the user, to the user based agent.Now the situation is as follows as it is very but very common and typical in office365/Azure-AD environments users already have their office 365 account logged in, either in your outlook client, in teams, onedrive on the web itself, then what happens when the installation process was performed in IDP mode and the enrollment occurs, this process was practically automatic since the user was already logged in to office 365/azure-ad as discussed above.I understand this is an issue of Office 365/Azure-AD and not of Netskope itself, now what was done to request the credentials, was to unblock the user from all access where

HiI have RTP shortened url category with coaching.When user access the shortened url, a coaching page is shown and user required to click ACCEPT to proceed to actual webpage.By clicking ACCEPT, how can I corelated the actual url with shortened url?You can use https://tinyurl.com/4trp238r for testingThank

HiWe are unable to access website, checked alerts and found connection was dropped as no publisher is active.

Question: how can I allow or block Anydesk using Netskope Cloud Firewall? Create Anydesk Cloud Firewall Application (using the reference from Anydesk) Set up policy for block Try connecting with Anydesk - note this will timeout as there is a block Check Alerts for the block------------------------------------------------------------------------------------------------------Let’s change from block to allow Setup policy for AllowTry connecting with Anydesk Check Network Events for the allowIt’s simple to set up the policy for allowing or blocking the use of Anydesk.

Hello,So we have installed Netskope client on one of our endpoints and during the enrollment process we got an error “ Configuration failed to load” Can anyone let us know the root cause of the problem and its workaround.Thanks. 

Hi team,Please let us know if the Netskope client is compatible on this citrix version or not.Citrix Virtual Apps and Desktops 7 2203 LTSR CU3 - Virtual delivery Agent.Citrix Workspace Environment Management Agent. 

Dear Team,I am in the process of setting up Cloud Exchange, and the deployment has been successful, including access to the UI. However, I am encountering issues when attempting to add a tenant to the Cloud Exchange. The following errors appear in the logs:[CE_1045, CE_1044, CE_1126]I have reviewed the configuration and validated the tokens, but I am still unable to onboard the tenant.Could you please assist in troubleshooting this issue?Detailed Error: 09/10/2024 10:20:10 PM    CE_1045    error    Error occurred while validating v1 token, Exception occurred while parsing JSON response.Traceback (most recent call last):  File "/usr/local/lib/python3.9/site-packages/requests/models.py", line 971, in json    return complexjson.loads(self.text, **kwargs)  File "/usr/local/lib/python3.9/json/__init__.py", line 346, in loads    return _default_decoder.decode(s)  File "/usr/local/lib/python3.9/json/decoder.py", line 340, in decode    raise JSONDecodeError("Extra data", s, end)json.decoder.JS

Hello,Is there a way to get an email notification for configuration changes to the netskope tenant? ie: any inline policy update or creation etc..  Thanks!

Hello,Netskope added the cert-pinned applications under steering configuration exception by default.Can we get a list of these applications added by NS?

Hi i tried several time India ID prof Adhaar card image and the Adhaar number also is not getting  blocked in upload as well as in text message. i also tried by Regex thand also its not Blocking.Kindly please help on this?

In what scenarios is a steering bypass required and recommendation to avoid the steering bypass.

In a standard scenario for a Dial-up IPSEC/SSL VPN-RA we have:A DHCP IP-Pool is set up on the VPN Gateway to assign IP addresses to clients. The DNS resolver is also configured, usually using the Active Directory (AD) DNS for these assignments. The internal/remote networks that will be advertised in the VPN clients' routing table for split-tunnel access are defined.By default, a Windows interface has NetBIOS over TCP (ports 137/138) enabled.So, when connecting to the VPN, a typical SMB access like \\AD-Domain\C$ (using ports 445 and 139) for file sharing works successfully. In other words, with the old VPN model, resources can be accessed without much firewall configuration or concerns about application ports or DNS resolution.In a ZTNA/NPA environment, I’d like to better understand the precautions I should take in the same scenario. Here, we have a remote machine properly joined to the AD Domain. When it connects to the VPN, it receives its internal-use IP and internal DNS. With this

I see application events pertaining to Cloud Storage with an Activity of sync_item_content, but I can’t filter on that activity, or see it in the list of all activities. Am I missing something?What I would like to do is use it in a DLP policy to identify files being synced to personal cloud storage instances. Thx  

Team,Can anyone help me with Netskope client supported version for MAC Sonoma.Is sonoma version 14.3 is supported version.