Product Forums

Hello,I was asked if Netskope could provide a user alert when visiting a site, for example, chatgpt that they acknowledge the risk and then either click proceed or stop. We do not have the SWG and I think it might be needed to accomplish this? If we dont have SWG is there a way to get this accomplished? 

Hi All, I am new to Netskope.  We are running Netskope as a VPN solution. Can you run another VPN solution on top of this without affecting Netskope.Like Cisco Anyconnect.

Hello everyone, is it possible to control that a user closes the process or service associated with the Netskope client?As far as I know, I can control a user to disable the client but this leaves the user the ability to kill the client process and thus navigate outside Netskope.

We are expanding our NPA footprint soon. Several of the users that are about to gain NPA access use the Ivanti Management Console (remote management console) on a daily basis. Attempting to log into the console results in the following error:  Console Initialization Error:  Unable to connect to the database.A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 0 - No such host is known.).We have Private apps created for this host and IP already.  Has anyone else configured this successfully for NPA access? 

Hello, Would like to check the dedicated egress ip address is tied to the ZTNA solution. meaning if you want to use the ZTNA feature on Netskope, then dedicated egress ip address is required for the feature?

Hello Everyone,Hope you are doing well.I have one question regarding license.We are implementing Netskope SMTP Proxy at customer end, and we are integrating Netskope with Microsoft O365 for inspecting outgoing emails.What type of license do we require from O365 end to do configuration (eg - blocking rule) 

Hello,I would like to use multiple tags for private apps.What would be the syntax here?tags { tag_name = "TEST, TEST1, TEST3" } ?I would be grateful for your help.Marco

Hi, i am having an issue on mac devices. When i am away from my device for a period of time (normally an hour) i will have to re authenticate via OKTA to outlook and teams, i have worked out this is because my netskope client is somehow dropping connection and as a result im coming from my home IP address which isnt allowed on the Microsoft end. Has anyone else noticed this behaviour, i have seen a battery setting on the Mac that i think will fix it but i just wondered if this was common.

Windows onlyWe noticed that starting last week we’ve been getting reports of a lot of windows agents where NPA is disabled and the Agent Config doesn’t update. A reboot solves this. We’ve never had a single issue with Windows endpoints in years, now this. We’ve opened a ticket but curious if anyone else is seeing this.2024/03/04 10:37:09.253 stAgentUI pbb4 tbc0 error osUtils.cpp:358 nsUtil Failed to initialize COM library. Error code = 0x80010106One observation we have is that when this started (last week) there was a push from our IT team to get Windows updates applied. 

Is the option to perform local system scans (Windows, MacOS) on the roadmap? I really need the ability to identify files matching my DLP polices that reside on our users managed computers. Thx

HiIs there a difference between wireshark vs netskope packet capture when collecting trace?thank

Hi Friends, Is it possible to create a rule for internal users to detect any CPF sent through chat? Best regards

For Private Access environments in which users also have mobile (iOS & Android) access to certain Private Apps, what’s the best way to avoid flooding users with daily Periodic Reauthentication on their computers as well as their phones? Maybe a better question would be “what is the expected user experience in terms of Periodic Reauthentication” for users leveraging Private Access on both their work computers and their phones?should users be prompted to reauth on both devices?  is it just whichever device prompts first?  is the expected behavior different for iOS & Andriod? Also, if the reauth period lapses or the prompt is missed or accidentally closed on the phone and private access disables, what is the best way to instruct end-users on restoring Private Access on their phones ? On computers, reauthentication is easily done via the client menu, but I’ve been unable to find any such option on the Netskope client/app on iOS   @sshiflett 

Some of you may know that Netskope has a SCIM API which can be integrated with IDP's such as Okta, Azure AD, etc., to provision User's and Group's into a Netskope tenant.  This is a critical part of deploying Netskope since the User provisioning is a pre-requisite to deploying the Netskope client.   There are certain times that you may not want to integrate with the IDP or maybe you are transitioning from an on-prem Identity Store to a cloud based one and aren't quite ready, but you still want to test Netskope functionality.   The SCIM API can also be used to manually create users and groups and add the users into groups so that they can both be leveraged in Netskope real-time protection policies.  The guide provides a walk through on how to accomplish this task.   If you have some ideas on how to improve the guide or on any additions, please reach out to me to discuss.

I created an API Data Protection DLP policy to look for a certain file type and it is limited to a certain Team. If I create a Retroactive scan using this policy will it only scan that Team, or the entire instance?

We are reevaluating the NPA Periodic Re-authentication. Previous user experiences were lacking. However, now that we have had support enable the “reauth at log-in/reboot”, things have improved dramatically. The primary downside that is keeping us from expanding this for testing is the pop-behind nature of the reauth prompt. Many users think they “are not being prompted” when in fact they are. Is there anything that can be done to force the prompt to either remain at the forefront until addressed or give the prompt a taskbar presence like applications/browsers/alerts do. Users that lock their device at the end of the day (in their given workspace) rather than logging out/shutting down, have no idea the reauth is open behind the of their apps/browsers at the start of the day due to the pop-behind nature of this prompt. If there is no current solution, is this on the roadmap to fix? If so, when?@sshiflett @rsurya 

I am unable to access the application without a client. I have Integrated Okta for reverse proxy. Whenever I try to access the application, I am getting an error: 500 : Netskope was unable to process authentication request for tenant:<18507>. couldn't create AUTH URL: runtime error: invalid memory address or nil pointer dereference. 

It seems as if creating DLP rules/profiles will not trigger on the name but only content. Does anyone know a way to address this? For example, I would love to have a couple dictionary entities that look for certain word NEAR certain words in a file name.ExampleDictionary 1: cat, dogDictionary 2: mouse, birdD0 NEAR D1 Filename: My cat and turtle.pptx (wont alert)Filename: My dog and bird.pptx (will alert)The content of both files has none of those words. 

HiI have deployed CE 5.0.1.  When ssh to CE, I can’t seem to “sudo su root”.  Likewise, can’t sudo reboot or shutdown.Anyway to perform reboot or shutdown beside asking esxi team to do it?thank

Hi I have questions about Captive  usageNotification - Can it be customized with our own words?   Timeout 10min -  If failed to pass captive after 10min, the traffic is blocked.   How can I re-enable again captive login?  Do I close and open the browser to have the captive login?  Do I have to reboot?  etc….  Thank

Despite the shift to Zero Trust, VPNs are still essential… but at the same time work from home resulted in a permanent jump in VPN user experience issues: help desk tickets increased 4.9x since 2019. To learn more about the “why”, we’re taking a deep dive into the impact of VPNs to bring these insights to our community members.We’re running a global survey to quantify VPN usage, cost, and user impact, where participants will receive complete results within two weeks:No personal information is required to participate It takes less than three minutes to complete the surveyA global peer benchmarkParticipating will let you understand where your company stands vs. your peers re.:VPN use, performance and cost analysis Top apps consuming VPN bandwidth VoIP and remote assistance VPN dependencies VPN’s direct & indirect impact on the help desk Take the Survey  and help us illuminate this subject together. Thanks for your help! If you have any questions, please let me know.Scott

When using Netskope on a Macintosh, an error occurs saving reports with the “Classic UI” that does not occur when using the most recent UI (Screenshot attached).  Disabling Netskope gets rid of the problem. There is anecdotal reports of someone having this same problem on a Windows/Edge combination. I haven’t gathered enough data to create a Case with Netksope, so I wanted to see if anyone else has seen this phenomena. A Google search reveals two mentions of this error, but both talk about browser security.  Both talk about Cross Site Forgery tokens. Sometimes When Updating Records Browser Shows: Security Warning: Your submission token does not match session token - Support and Troubleshooting (servicenow.com) "Your submission token does not match your session... - ServiceNow Community  

Are there any Best Practices for using Netskope DLP: to gain visibility into Generative AI site Posts  & Upload activity?

My organization has two main regions (USA and India).  I currently have ADDS/DNS servers in both regions.  I have two private apps configured for ADDS.  One of them is directing traffic to the India ADDS servers using the local NPAs, the other is doing the same for USA.I have a prelogin user that has access to both private apps.I also have a DNS private app defined (*._http.domain.local, *._kkdcp.domain.local, etc) but it only uses the USA publishers.With this configuration, our USA users are working fine with very little lag on computer startup and login.  Our India users, however, are experiencing very long startup and login times.My question is, what is the proper way of configuring AD and DNS access for clients when the organization is multi-regional and you want the client to always access the closest ADDS/DNS servers?Some solutions I am considering are:Divide each region’s users into separate groups and give them only access to their local ADDS server.  This however does not solv

When a user tries to download any files from his/her BYOD using organization's email platform, the download should be blocked.?? How can we achieve  this in Netskope please provide me the steps..