Skip to main content
  • EN

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

832 Topics
J
jschueleNew Member III
asked in CASB
Github API Data Protection Whitelist

I have a DLP policy looking for specific data objects in Github using a regex, but it is triggering on known test data. Any ideas on how I can configure the DLP policy to ignore my spreadsheet of known test objects? For instance create an incident for ABC123, but ignore ABC111. Thx

1384
S
Netskope Employee
B
bntrotterNew Member
posted in Next Gen SWG
PROPFIND (webdav) event traffic

Would it possible to have a user click-thru policy in regards to PROPFIND (webdav) event traffic?

290
B
W
wdeguaraNew Member III
posted in CASB
Winzip files from external party not able to be extracted

We've started noticing an issue with Winzip files downloaded from 3rd party web sites, where extracting the ZIP fails with the attached error message.    "Central and local discovery mismatch for file"  (example in attached screenshot)The zip can be successfully extracted if the Netskope service is disabled on the user's computer. 

2631
S
Netskope Employee
W
wilsonExplorer III
posted in Next Gen SWG
Netskope Upgrade - Release 111 release effect on IPSEC Tunnels.

We are trying in a couple of channels to get an answer, including our Customer Support Manager and our Technical Account Manager.We are a little stressed over the lack of details in the below announcement.For our purposes, it lists three nights of maintenance, but it was unclear what nights, or all of them we should be worried about NYC and IAD where our IPSec tunnels are connected.Has anyone gone through this before? Have they switched their tunnels in preparation?  We are only concerned with the NYC and IAD pops where our IPSec tunnels are connected, and would like to know if there is more specific detail available regarding those POPs and the times they may be affected, and whether or not an advance failover for us is warranted.Thanks, Service ImpactThe Netskope user interface may be unavailable for brief periods of time during the maintenance window. Customers with IPSEC/GRE tunnels may notice a switch to a secondary/backup tunnel.NOTE: The release notes will be avai

1051
S
Netskope Employee
G
Netskope Employee
GauthamNetskope Employee
posted in Private Access for ZTNA
NewEdge Traffic Management Gateway Selection

Netskope Private Access now consumes NewEdge Traffic Management 2.0(GSLB) for optimizing the DC selection for Client as well as for Publishers. Customers can take following advantages with this feature,  DC selection is no longer DNS There is no dependency on Google DNS or LDNS for POP selection (the last hop recursive DNS resolver). APIs are hosted within existing allow listed NewEdge IP range, no additional network changes needed.  Improved granularity for geolocation of public IP egresses. DNS-based methods (EDNS/ECS0/Google DNS) can only utilize a /24 of the public IP. The GSLB service can better geolocate as it has the entire IP address /32 instead of a /24 advantage for gateway selection. DC selections according to geographic distance, with in-country preference. For example, if an endpoint in the south of France is very close to Barcelona, the Netskope Client will prefer a DC in France, even if it is physically farther away than the NewEdge Barcelona DC. New

12070
G
Netskope Employee
M
Netskope Employee
MM_NSNetskope Employee
posted in DLP
Credential detection and Netskope Predefined Identifiers.

  Netskope has various built-in (aka predefined) DLP identifiers to detect passwords, public keys, private keys and base64 encoded data.   While you can write a regex to detect passwords in your environment, I have highlighted some of the challenges here: Regexes can cause DoS and False positives (at a customer site who has a dedicated team to write regex their complain was email in a string being detected as passwords). There is no single password standard that would work for all the environments. The key sizes are varied length.   Best approach for a credential detection policy Use Exact Match capability to identify username of AD account exfiltration Use Netskope's built-in identifiers rather than writing complex regex. Use Custom Entity validator to validate your test data with a corresponding Netskope predefined identifier. Note: You do not have to create a custom entity. Just for the validation purpose call a predefined identifier under a custom entity.  

8374
E
M
mdmeow12123New Member III
asked in Next Gen SWG
Offline Agent Reporting

Is there a way to setup a report or alert to capture devices that have not reported traffic in x number of days?It turns out that after an audit, we have quite a few agents where Netskope is installed but not steering any data to the our tenant.  We believe that in these cases the agents subsystems are not fully functioning. The users are not allowed to disable the agents. Thank you. 

1414
M
P
Netskope Partner
Paradox07Netskope Partner
posted in CASB
Issue with google drive application

Hi People, We have created a instance awareness policy to restrict user to block upload on personal google drive instances which is working fine on the browser but can't even hit the policy with google drive desktop application via file explorer's auto-sync. Below is the policy details: Please let me know what else is needed to be added here!!  

6564
S
Netskope Employee
D
deepakkNew Member III
posted in CASB
Unsanctioned Application

how do we segregate sanctioned applications from normal websites?As of now, we need to identify  unsanctioned applications installed on the User machine rather than they are browsing websites?

1171
kvarshney
M
mehmetbaskanNew Member III
posted in Security Posture Management
Can we manage SFTP traffic thru Netskope

Team, I have a allowed users list for a SFTP application. Can we manage the SFTP traffic thru Netskope Proxy ? 

5503
kvarshney
A
Anonymous
posted in Private Access for ZTNA
NPA Detailed Architecture

Hi Team ,    Can anyone help me the Detailed Architecture for NPA traffic starting from user device till it access the application including the auth type,Identification, Encryption , tunnel that exist all across the traffic flow.

9251
kvarshney
J
JosepNew Member
posted in Next Gen SWG
incident_id value in api_v2

Hello, We are using REST API v2 to get alerts. However, the incident_id value has an error. The last 3 numbers are set to 0. Example,Our incident_id on the netskope dashboard: 5590961107392419317. The incident_id using API v2: 5590961107392419000 How can we avoid this?

741
pvilarino
Netskope Employee
Natedog0024
Natedog0024New Member
asked in CASB
HTTP Header Profiles and comma separation

Hello, Has anyone had issues using comma separation in the referrer field of an HTTP request header? I attempted to use more than one URL comma separating them in the same field per NetSkope documentation, but it broke the URL that was already there and didn't work for the new one. I tried different variations with no luck. I had to create a new header profile for one url..  Any one else?

3009
M
S
steff94New Member III
asked in Next Gen SWG
DNS Policy - Only whitelisted FQDNs or Domain-Wildcards

Hello all,I wanted to ask if there is any way to configure Netskope to block all DNS revolving of public DNS namens by default?We want to manually specify a list of FQDNs or Domain-Wildcards to be allowed to resolve (ie. *.teams.microsoft.com or dns.msftncsi.com). We saw the option to Blackliste a FQDN or Domain-Wildcard in the DNS profile but there seems no option to block ALL except of ... Best regardsStefan

2981
S
Netskope Employee
J
jbookhammerNew Member
posted in CASB
Netskope stopped pulling YouTube views

I can't seem to figure out what happened but Youtube stopped being pulled into our unsanctioned cloud apps on 11/15. I tried watching a video and usually it appears in the alert right away but the only alerts showing up are from 11/15. Nothing changed on our end that we know of.

3251
rthomson
Netskope Employee
farhan
Netskope Partner
farhanNetskope Partner
asked in Next Gen SWG
Netskope Client in Disable state MAC Installation via Email invite.

Hi Team we are try to install the NS client on Macos 12.3 Macbookpro via email. (POC)We install package successfully but we  tenant and G/w is not display in Configuration of NS client.Lookup the gateway and URL resolution is successful. in Nsdebuglog I can see :   

7303
A
W
wilsonExplorer III
posted in CASB
ServiceNow, Cloud Exchange

Does anyone currently send CPSM (CIS findings) over to ServiceNow? If so, I would be interested in hearing the experience, any lessons learned, and finally where in ServiceNow the data lands.

581
C
G
GiacomoNew Member
posted in DLP
netskope mobile with microsoft defender

Good morningI need to install on my enterprise mobile devices the Netskope client.On these devices the Microsoft Defender client is installed with VPN already active.I noticed from the logs that the netskope client fails to hook the Vpn because it sees the Defender VPN tunnel already activeCan any exceptions be set so that the two tunnels are active?Thanks

1320
G
P
Netskope Partner
Paradox07Netskope Partner
posted in CASB
Client enrollment pop-up not working in linux and mac

Hi People, I have configured and pushed my client in idp mode via jumpcloud idp and mdm solutions in windows, mac and linux OS. The Enrollment dialog box is popping up even after user closes it which is the expected behavior and it's working fine in windows. But for linux and MacOS if the user closes it, it doesn't automatically opens up again breaking the enrollment flow. Is there any way to fix this behavior for linux and MacOS?

4040
P
Netskope Partner
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
posted in Next Gen SWG
Godaddy email synchronize mail - users / groups accounts

Godaddy email synchronize mail - users / groups accounts  Hello good afternoon community, thank you for your collaboration and your time.I have a couple of questions: 1.- I have out there some possible client prospect that has his email accounts in Godaddy, is it feasible to synchronize the Godaddy users/groups directory to have those users/groups in netskope for use in the policies. 2.- For the Godaddy mail as such both example the Web/Cloud access to the webmail, as well as the Godaddy mail configuration in example outlook client desktop. Netskope covers this point, this protection ? what is the scope ? I have not found more information regarding Goddady for any of the 2 points. Please support me with your comments, your collaboration and your advice. Thank you Best regards

301
MetgatzNK
Netskope Partner
akashsaxena
Netskope Partner
akashsaxenaNetskope Partner
posted in CASB
Getting issue while blocking WHatsApp

I am facing issues while attempting to block WhatsApp. I have created a cloud app policy to block WhatsApp, and it is successfully blocking the WhatsApp web. However, on  WhatsApp application uploading is getting blocked, but I am still able to send text messages.Is there a way to block text messages as well? I haven't found any corresponding events in the Netskope logs for sending messages.

4962
akashsaxena
Netskope Partner
aplaza
Netskope Employee
aplazaNetskope Employee
posted in Private Access for ZTNA
Recap: Time to Give Your VPN a Reboot

Curious about how to make the leap to Zero Trust Connectivity?    Discover the limitations of traditional VPNs and learn how to migrate from VPN to ZTNA Next from a Netskope customer—Jeff Wehrman (@jwehrman), Sr. Staff Cybersecurity Engineer, at Dexcom in this webinar recap! The recording, slide deck and a summary of the Q&A can be found below:   Watch on-demand   Q: Netskope is not a total replacement for VPN, which means not supporting server to client flow. How can we overcome this? A: You bring up an important point. Most ZTNAs do not support server-initiated but Netskope ZTNA Next supports both client and server-initiated flows. Q: When within your office, is Netskope Private Access (NPA) engaged or does it go offline? A: Short answer is it stays engaged. The Netskope Client, which steers user traffic, is always on whether in office or remote. It can be configured to steer that traffic to the Netskope Cloud or a local ZTNA Broker ad

2780
aplaza
Netskope Employee
bruna
Netskope Partner
brunaNetskope Partner
posted in CASB
Remote work - Problems when VPN and Client Netskope are active

However, if the Netskope client is active, and the user is on the company's network (without being on the vpn) the site is accessible.It also becomes accessible by disabling the Netskope client, and leaving and rejoining the VPN after disabling. We have already forced traffic through NPA Does anyone have any idea what might be going on?Encountered a file package download error nsUtil Failed to auto detect proxy or download PAC file, error 12180

5441
A
J
jschueleNew Member III
asked in CASB
Github Retroactive Scan Limitations

Github retroactive scan only supports last 10 days of commits in the default branch. What is the reasoning behind this limitation? Are there intentions to expand this capability? Thx

421
S
Netskope Employee
S
Netskope Employee
sshiflettNetskope Employee
posted in Next Gen SWG
A Multi-phased Approach to Securing Okta Using Netskope

Recently, Okta acknowledged a breach where attackers were able to gain access to customer session tokens, and other sensitive data through HAR captures in their customer support system.  Attackers were then able to use the unexpired session token to access the Administrative API in the customer’s Okta tenant. The Administrative API was accessed via the browser which only requires a session token or cookie unlike the typical approach using a bearer token.  In this case, the attackers were able to gain the initial access to the customer support system via an employee syncing a service account password to their personal Google password manager.    Netskope customers can address and help prevent such exploits through a multi-phased approach. Let’s take a look at the first phase.   Phase 1:  Controlling Personal Google Account Logins Netskope was initially built as a Cloud Access Security Broker (CASB) with an inline proxy capability.   This background pro

3330
S
Netskope Employee

Badge Winners

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings