Product Forums

Hello,So we have installed Netskope client on one of our endpoints and during the enrollment process we got an error “ Configuration failed to load” Can anyone let us know the root cause of the problem and its workaround.Thanks. 

Hi team,Please let us know if the Netskope client is compatible on this citrix version or not.Citrix Virtual Apps and Desktops 7 2203 LTSR CU3 - Virtual delivery Agent.Citrix Workspace Environment Management Agent. 

Dear Team,I am in the process of setting up Cloud Exchange, and the deployment has been successful, including access to the UI. However, I am encountering issues when attempting to add a tenant to the Cloud Exchange. The following errors appear in the logs:[CE_1045, CE_1044, CE_1126]I have reviewed the configuration and validated the tokens, but I am still unable to onboard the tenant.Could you please assist in troubleshooting this issue?Detailed Error: 09/10/2024 10:20:10 PM    CE_1045    error    Error occurred while validating v1 token, Exception occurred while parsing JSON response.Traceback (most recent call last):  File "/usr/local/lib/python3.9/site-packages/requests/models.py", line 971, in json    return complexjson.loads(self.text, **kwargs)  File "/usr/local/lib/python3.9/json/__init__.py", line 346, in loads    return _default_decoder.decode(s)  File "/usr/local/lib/python3.9/json/decoder.py", line 340, in decode    raise JSONDecodeError("Extra data", s, end)json.decoder.JS

Hello,Is there a way to get an email notification for configuration changes to the netskope tenant? ie: any inline policy update or creation etc..  Thanks!

Hello,Netskope added the cert-pinned applications under steering configuration exception by default.Can we get a list of these applications added by NS?

Hi i tried several time India ID prof Adhaar card image and the Adhaar number also is not getting  blocked in upload as well as in text message. i also tried by Regex thand also its not Blocking.Kindly please help on this?

In what scenarios is a steering bypass required and recommendation to avoid the steering bypass.

In a standard scenario for a Dial-up IPSEC/SSL VPN-RA we have:A DHCP IP-Pool is set up on the VPN Gateway to assign IP addresses to clients. The DNS resolver is also configured, usually using the Active Directory (AD) DNS for these assignments. The internal/remote networks that will be advertised in the VPN clients' routing table for split-tunnel access are defined.By default, a Windows interface has NetBIOS over TCP (ports 137/138) enabled.So, when connecting to the VPN, a typical SMB access like \\AD-Domain\C$ (using ports 445 and 139) for file sharing works successfully. In other words, with the old VPN model, resources can be accessed without much firewall configuration or concerns about application ports or DNS resolution.In a ZTNA/NPA environment, I’d like to better understand the precautions I should take in the same scenario. Here, we have a remote machine properly joined to the AD Domain. When it connects to the VPN, it receives its internal-use IP and internal DNS. With this

I see application events pertaining to Cloud Storage with an Activity of sync_item_content, but I can’t filter on that activity, or see it in the list of all activities. Am I missing something?What I would like to do is use it in a DLP policy to identify files being synced to personal cloud storage instances. Thx  

Team,Can anyone help me with Netskope client supported version for MAC Sonoma.Is sonoma version 14.3 is supported version.

hey all,How to create device classification based on Netskope private app registry value? attached screenshot i want to monitor on these value when private app is connected value device will be managed . thanks

Crowdstrike customers, how are you doing the exclusions for MacOS listed here, https://docs.netskope.com/en/netskope-help/netskope-client/netskope-client-interoperability/antivirus-applications/exceptions-for-anti-virus-applications/Specifically, I’d be curious to see what your exclusion patterns are. For paths with spaces (i.e. /Library/Application\ Support/) are you using “/Library/Application\ Support/” or “/Library/Application Support/”. Crowdstrike documentation states we shouldn't need the \ but does that work in practice?

Hi, anyone have experience running both the Netskope Client and Digital Guardian (DG) DLPE Agent at the same time? We are using Netskope for CASB and NPA. The DG Agent will have the WIP feature enabled for web traffic visibility. Thx

I'm doing a deploy of NPA across my environment and hitting a series of snags.  The issue seems to be related to my Mac users having issues with DNS resolution or pages loading failures.  These are largely my SaaS based SSO apps but they can be anything.  We are using Duo Security for MFA but that has been added as an exception.  The problem is intermittent.  Some users experience it all the time, I only experience it periodically though it used to be all the time for me too.  All users are in the same Steering Configuration.   We are all using MacOS Ventura so this may be related to the bug from last year.  

When some users are at the office, every now and then they become unable to access private apps Chrome simply hangs.When that happens, if they disconnect and reconnect from Wi-Fi, the issue is fixed, until it breaks again after a few hours/minutes.This doesn't happen when they are working from home.

Check out the demo to get a sneak peek into the advanced capabilities launched with the Kadiska integration at the core of our Proactive DEM!  Proactive Digital Experience Management (Proactive DEM) Enterprise offers a powerful site-centric view that when combined with user monitoring, helps pinpoint the source of user experience issues—whether at a specific site, connecting to the Netskope NewEdge POP, or the ISP. This ensures full performance visibility, empowering organizations to achieve unparalleled visibility, optimize performance, and elevate user experience across their network infrastructure.  

September 10, 2024Official Launch: Proactive Digital Experience Management (P-DEM) Enterprise Proactive DEM Enterprise delivers granular telemetry and flexible monitoring with true user experience management capabilities at both the user or site level, supporting the business objectives of midmarket to large enterprises. Building upon Netskope’s DEM offerings, the newly added DEM solution uses AI/ML-driven network performance diagnostics to help reduce operational costs by providing faster time-to-resolution when troubleshooting, ensuring organizations maintain optimal performance and user satisfaction. This edition represents the culmination of the Kadiska advanced capabilities integration at the core of our Proactive DEM.  To learn more about how Proactive DEM Enterprise groundbreaking innovations are redefining network monitoring, read our blog, watch this demo, and register for our upcoming webinar below:   Unveiling New Capabilities of Proactive Digital Experience Management Ent

Hi,I have a question (or two) about netskope publisher auto update feature.Does this auto-update feature only work i.e. kicks in when there’s a new version of netskope publisher? assuming I set it to latest update on weekly basisLet’s say I’m on version 117.0 and there’s a new version 118.0. This will get updated to 118 during whatever time I configure the auto update.If there’s no new version of netskope publisher, will it still update the underlying OS/system packages?Thanks 

Hi community, We are exploring the DEM feature ad under DEM>Settings>Monitored Applications. What does this “Monitored Applications” feature do? Is there any extra costing involved after enabling this option? Does this require any different licenses? Where the data can be seen form this “proactively monitored apps”? 

How to block Upload and download whatsapp activity in Virtual desktop machines.We have already attempted to create a policy based on Cloud app, Custom app, and Category, but we are still unable to block upload/download activities on WhatsApp using the PAC file on the WVD machine.Any suggestion much appreciated.

In order to ensure the correct functioning of the Azure Virtual Desktop or Windows 365 machine when deploying the Netskope Agent on it we have to take care of some Steering Exceptions: MANDATORY: Destination Location Steering Exceptions for Azure Virtual Desktop RDGateways IPs (Remote Desktop Gateways service tags related IPs) OPTIONAL: Destination Location Steering Exceptions for Azure Virtual Desktop Monitoring IPs (Azure Monitor service tags related IPs) OPTIONAL: Application/Process (Certificate Pinned Application) Steering Exceptions for Azure Virtual Desktop agents running on the Virtual Desktop Destination Location Steering Exceptions Microsoft provides a Json file with all the Azure destinations at the address: https://www.microsoft.com/en-us/download/details.aspx?id=56519 Unfortunately though this list contains all the destinations used by the Azure infrastructure, divided by “Service Tags” (services). As we definitely don’t want to exclude all the Azure destination fr

We use Jamf to deploy the NS Client to our Mac fleet. After enabling the new secure enrollment features (Settings > Security Cloud Platform > MDM Distribution > Secure Enrollment) and generating the access tokens, it appears we add them to our existing Jamf deployment policy. If I am reading the directions right the tokens must be renewed, and the Jamf policy updated, every 90 days by default. Is that correct? 

How to Troubleshoot on private app access for slow connection or unaccusable applications for users (randomly) ? We don’t have DEM advanced license .What kind of tools or options do I have in order to troubleshoot on a slow connection to private apps? I am familiar with :The NPA Troubleshooter Tool Export logs from the client when slowness for private applications occurs.

We are having an issue where user can`t access a private app via publisher and we have checked all the configuration is correct in Netskope Tenant and the same has been confirmed with Netskope Support engineering as well.However, we can telnet the same application on the same port from publishers itself.Both publishers and private applications are on the same subnet.  When we run a TCPdump on the publishers we can see SYN packet from user`s machine is reaching to the publisher, but publisher is not getting SYN-ACK packet from the private applications. There is no firewall blocking it as publishers and private apps are in the same subnet. Let me know what your thoughts on this. 

We are being asked to create documentation on identifying and addressing scenarios within our environment to recover if there are issues with Netskope.  Then we will walk through a table top recovery exercise. Scenarios we have identified:   Unable to login to console (failure of SSO)   Failure of Netskope Management plane   Failure of Netskope data plane Has anyone done something like this and if so, is there something you can share.