Skip to main content
  • EN

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

703 Topics
H
Netskope Partner
hshimizuNetskope Partner
asked in Next Gen SWG
Do I get a warning if I exceed the number of registered URLs in my Netskope tenant?

Dear Everyone, The limit for URL lists per tenant is 300 K.Does anyone get an Error in the tenant UI when creating a URL List in a tenant that exceeds 300 K?If anyone has experience creating a ULR List that exceeds 300 K, it would be helpful for me.I would like to know whether tennant UI could inform it to user or not. URL List LimitsCurrently, the total URL List limit per tenant across all URL lists is 300K. The URL List limit using Regex across all URL lists in that tenant is 1K (this 1K count includes only the regex written not the expanded format).https://docs.netskope.com/en/url-list-best-practices/Thank you and Best Regards,Hiroaki.S

382
N
19 days ago
N
ngriffinNew Member
asked in CASB
Netskope API Programming with PowerShell - Getting 401 Unauthorized Error Code

I’m attempting to connect to the Netskope API via a PowerShell script. I’ve created an access token with the appropriate endpoint configured. The script is receiving a 401 response which indicates that I’m not authorized yet. I’m not sure how to present the access token in the header. Is there any documentation or examples on how to authorize to the API endpoint I’m trying to connect to? Here’s a snippet of my PowerShell script:# Variables$netskopeAccessToken = "<insert_access_token_here"$type = "File, Folder"$filter = "(app eq 'OneDrive') and (exposure eq 'External')"$netskopeUri = "https://<domain>.goskope.com/api/v2/ui/casbapi/inventory/resources"# API Header$headers = @{ 'Authorization' = 'api_key' + $netskopeAccessToken 'Accept' = 'application/json'}# API Body$body = @{ type = $type filter = $filter}$response = Invoke-RestMethod -Uri $netskopeUri -Method Get -Body $body -Headers $headers 

361
N
20 days ago
P
pppNew Member
asked in Private Access for ZTNA
Problem with auto update

Hello Community,some of our clients stuck on version 114 or 117 - most updated without a problem. Has anyone encountered something similar and maybe solve it? Best regards

360
P
20 days ago
dinbarzily
Netskope Partner
dinbarzilyNetskope Partner
asked in Private Access for ZTNA
slow connection - private app

How to Troubleshoot on private app access for slow connection or unaccusable applications for users (randomly) ? We don’t have DEM advanced license .What kind of tools or options do I have in order to troubleshoot on a slow connection to private apps? I am familiar with :The NPA Troubleshooter Tool Export logs from the client when slowness for private applications occurs.

791
N
26 days ago
A
AlfaBaneExplorer III
posted in Private Access for ZTNA
Avaya Softphone over NPA

We're gradually expanding our NPA footprint in our company. Recently the first user needing the use of Avaya One-X Agent was looped in and the log-in fails. We've had the app configured for some time now but no testers until now. I have some internal discussions going with the involved teams but wanted to reach out here to see if anyone has any useful tips/experience implementing NPA access to a softphone solution. Of course, Avaya related products would be ideal, but any information would be welcomed. 

2152
aludovico
Netskope Partner
26 days ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in Private Access for ZTNA
Uncover why traditional VPNs fall short in meeting the demands of modern remote access

See a live demo, discover what sets Netskope apart, and hear success stories of transformation! Join us as we explore the pitfalls of sticking with traditional VPNs and discover a cloud-based remote access solution that meets today’s needs and tomorrow’s challenges. Key Topics Covered: Criteria for selecting a new remote access solution, including application support and unified security policies Advantages of a universal zero trust policy for seamless local and remote access How Netskope’s ZTNA Next solution enables full VPN replacement, even for legacy apps Live demo showcasing what sets Netskope apart Success stories of transformation that illustrate real-world impact To learn more about how Netskope's cloud-based remote access solution can replace outdated VPNs and elevate your security strategy, register for our upcoming webinar below:   Elevate Your Remote Access: Transform Your VPN with SASE and Zero Trust Americas Europe, Middle East, and Africa Asia-Pa

140
aplaza
Netskope Employee
27 days ago
thiagofc
Netskope Partner
thiagofcNetskope Partner
asked in Next Gen SWG
Crashes after Netskope Upgrade - Release 120

Anyone having issues and crashing on Windows NSClient after that was upgrade the Tenant and the Golden Release to the Lastest?We have a customer the MP is located on DE, the users are claiming a lot about crashes in Windows, to the point where it was necessary to force the equipment to be shut down or reset. We are wondering if the problem started after the Tenant Update was made, they were in the release 119 last week, and now they have migrated to 120.I realized that the agent from NSClients with setup to the Last Golden Release right now is the Lasted Release = 120, very interesting… 

1644
thiagofc
Netskope Partner
28 days ago
E
eranNew Member III
asked in Next Gen SWG
REST API V2 - /adem/

Hi,I’m trying to use /api/v2/adem/deviceoslist on the REST API v2.Before adding the specific permission for the endpoint - I’m getting "You cannot consume this service".After adding it, I’m getting "Unauthorized".Both times the error code is 403.How can I use this Endpoint?Thanks

310
E
29 days ago
A
ArijNew Member
asked in DLP
DLP - Detect IP addresses in a log file

Hello, I have a file containing records in this format: 2022.03.18 11:46:45 DEBUG web[XXXXXXXX][auth.event] login success [method|BASIC][provider|REALM|ldap][IP|10.10.10.10|10.10.10.10:55637][login|XXXXXX]I used this regular expression to detect private IP addresses: (10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.1[6-9]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.2[0-9]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.3[0-1]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(192\.168\.[0-9]{1,3}\.[0-9]{1,3})Using this regular expression, I can't detect any IP addresses in the file sent through netskope. What can I do and where is the problem?

485
S
Netskope Employee
29 days ago
B
barrycuda72New Member
asked in Next Gen SWG
3rd Party access

We have Netskope authenticating against EntraID using SCIM.  This works great for all our employees.  What I want to do is add some 3rd party contractors so they can access some internal resources.  They have a UPN of Contractor@acme.com but no email address.  Any suggestions?

180
B
29 days ago
M
Netskope Employee
mkoyfmanNetskope Employee
published in Next Gen SWG
Configuring CLI-based Tools and Development Frameworks to work with Netskope SSL Interception

If Netskope is deployed inline (for CASB or Web), some CLI tools will not work because they use certificate bundles distributed with those tools (i.e. Python distribution, for example), and they do not access system certificate store where Netskope client installs Netskope root CA. The guidance below will allow you to enable those tools to seamlessly work with Netskope SSL interception.In order for these tools to trust Netskope-signed certificates, they need to be configured to trust Netskope Certificate Authority (CA). This is typically accomplished by setting certain environment variables to point to Netskope CA to allow for smooth SSL operation.The variables need to be set to point to the following files that contain Netskope CA:On a Mac: /Library/Application Support/Netskope/STAgent/data/nscacert.pemOn Windows: %ProgramData%\Netskope\STAgent\data\nscacert.pemFor example to set REQUESTS_CA_BUNDLE variable on a Mac to point to the Netskope root CA, you can run this command:export REQ

28423
J
29 days ago
danisilfi
Netskope Partner
danisilfiNetskope Partner
asked in Private Access for ZTNA
npa_api_policy_enabled is not enabled

Dear Netskope buddies,  Im trying get the list of npa policies from my tenant through API method and, when i launch the command (im using postman, but the result from the API web Netskope its the same) i get the following message: “NPA policy feature npa_api_policy_enabled is not enabled”Do you know why the tenant its getting me this message?The option /api/v2/policy/npa is allowed in REST API v2 sectionI have searching in the tenant something similar to this, but i didnt find any option to configure this feature.If this feature is configurable, please, could you tell me where can i find it to enable? Thanks in advance,  Best regards,    

393
ejang
Netskope Employee
1 month ago
E
eranNew Member III
asked in Next Gen SWG
REST API V2 /adem/

Hi,I’m trying to use the /adem/ section of the REST API v2. For example - this endpoint:https://www.postman.com/netskope-tech-alliances/netskope-rest-api/request/bg2unes/get-a-list-of-usersBefore I add a specific permission to use this endpoint, I get a "You cannot consume this service" error message. After I add it, I get an "Unauthorized" error message. Both times the error code is 403.Does this endpoint require a support ticket to use?Thanks!

60
E
1 month ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in DEM: Digital Experience Management forum
DEMO: Three key use cases for Proactive Digital Experience Management (P-DEM) Enterprise

Elevate your network monitoring and user experience with the advanced capabilities of P-DEM Enterprise. Thierry Notermans, Product Management Director for Proactive Digital Experience Management (P-DEM), demonstrates the innovations introduced with P-DEM Enterprise using three key use cases.  Learn how to: Monitor onramp, app performance, and user experience from sites connecting to Netskope via SD-WAN, SASE gateways or private connectivity Monitor any application, from over 80K predefined apps or any custom web-based application, including synthetic application monitoring for how apps are performing Streamline operations and deliver a cohesive, transformative monitoring experience with the integration of Real User Monitoring (RUM) and Synthetic Monitoring Get a consistent 360-degree view of digital experiences across the entire path from users to apps  

770
aplaza
Netskope Employee
1 month ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in DEM: Digital Experience Management forum
Unveiling New Capabilities of Proactive Digital Experience Management Enterprise

Unveiling Netskope Proactive Digital Experience Management (P-DEM) Enterprise, a groundbreaking solution that delivers unmatched end-to-end insights and user experience monitoring within SASE and SD-WAN environments. Discover how P-DEM Enterprise eliminates blind spots, provides complete transparency across your entire network, and empowers you to optimize performance at every stage. Key Takeaways:Discover groundbreaking innovations like site-specific, user-specific, and app-specific monitoring that deliver a comprehensive 360-degree view of your digital experience. Learn how advanced contextual visibility and AI/ML-driven insights accelerate troubleshooting and reduce operational costs. Explore how this solution enhances workforce productivity, reduces operational friction, and delivers significant cost savings through proactive monitoring and remediation.To learn more about how Proactive DEM Enterprise groundbreaking innovations are redefining network monitoring, check out this blog

520
aplaza
Netskope Employee
1 month ago
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
published in Netskope Cloud Exchange (CE)
Netskope Risk Exchange Ecosystem: Combating Shadow ITCloud Exchange (CE)

This blog series continues to explore a number of different workflows that those comfortable using basic scripting, or enablement tools like Postman, can employ to programmatically update and inform your inline policy actions. These are just some of the functions that the newest version of Cloud Exchange (CE), version 5.1, supports now and in the future. Look for it to hit the shelves at the end of this month (Oct. 2024). In case you missed it, we previously covered the general premise of our enhanced and net-new  integrations that map back to the Netskope risk exchange ecosystem, here. We also expanded on Making User-based Changes, be sure to check that out too. Combating Shadow ITNetskope has a unique ability to look deep into the packet (after we decrypt it) and see what is going on in between the user and the SaaS application they are using. In general it gives us the ability to put policy controls around which activities will be allowed with any given application. You can restrict

290
Gary-Jenkins
Netskope Employee
1 month ago
J
jschueleNew Member III
asked in Private Access for ZTNA
NPA Browser Access Session Limits

After enabling Browser Access for an app behind NPA, I would like to enforce session limits.

251
Rohit_Bhaskar
Netskope Employee
1 month ago
Natedog0024
Natedog0024New Member
asked in Private Access for ZTNA
ZTNA NEXT solution with MECM/SCCM

Hello,has anyone had any experience configuring MECM to work with NetSkopes ZTNA next solution? Right now, we have 99% of our apps being steered through NPA, however, for MECM we would like to use the BWAN because NPA does not create a virtual interface and we’d prefer to use boundary groups in MECM with the a true interface IP rather than the IP of the publishers.  we have all of our hubs created, and I can see bidirectional traffic via TCPDUMP both on the local BWAN client and at the BWAN Hub to/from MECM from the client, but nothing ever comes down. Our desktop engineering team has created the boundary groups and all is good on that end. It just seems to sit on waiting for the client to download the content.  the only thing I can think of is maybe it’s because all our DC traffic is via NPA? 

480
Natedog0024
1 month ago
J
jschueleNew Member III
asked in Private Access for ZTNA
NPA Policy restrict access source country

I have specific NPA policies created that are configured for Client access. However, I would like to also add the Criteria = Source Country option to restrict to clients in the US only, which is possible in my Cloud App policies. This option is currently grayed out and wondering why and will it be available in the future? I can see in the event logs that the POP Name is being registered, so it knows that much at least.. Thx

882
S
Netskope Employee
1 month ago
J
jschueleNew Member III
asked in Private Access for ZTNA
NPA Browser Access Session Limits

After enabling Browser Access for an app behind NPA, is there a way to enforce session limits? Thx

332
J
1 month ago
EsraDemircioglu
Netskope Partner
EsraDemirciogluNetskope Partner
asked in DLP
How do I create a policy for data masking?

Hello Team,I read Netskope has data masking ability but I couldn’t find enough details about it. Is there any detailed document about this feature? And how can I create a policy about data masking? Thank you in advance! 

482
EsraDemircioglu
Netskope Partner
1 month ago
D
Netskope Employee
dwillisNetskope Employee
published in Netskope Cloud Exchange (CE)
Netskope Risk Exchange Ecosystem - Making User Based ChangesKnowledgebase, Cloud Exchange

Netskope wishes to make it easier for our customers and partners to identify and respond to high risk users, instances, apps, and workloads using automated enrichment and correlation actions. This will enable our customers to leverage multi-vendor sourced or single vendor correlated findings to continuously tune Netskope’s adaptive trust policy enforcement framework. This blog series will explore a number of different workflows that those comfortable using basic scripting, or enablement tools like Postman, can employ to programmatically update and inform your inline policy actions. These are just some of the functions that the newest version of Cloud Exchange, version 5.1, supports now and in the future. Look for it to hit the shelves at the end of October. One of the key value propositions of Netskope is its ability to correlate multiple user personas (Korg-lord-of-thunder, davidw@dwillis.com, and fluffythevampireslayer) to a single, unique identity - dwillis@company.com - managed by

300
D
Netskope Employee
1 month ago
R
rmessinaNew Member III
posted in CASB
netskope installation for windows with scripted registration

We've been using netskope for a while here at the company and we have difficulty with the issue of the employee registering with the client. After reading the installation documentation on Linux, I was able to create a script for direct installation with the user's registration and it was a success. I researched a lot looking for a script to do the same in windows and I didn't find anything.Has anyone in the community been through this situation and managed to solve it? Remembering that we don't use AD.Thanks so much for everyone's help.

27714
G
1 month ago
M
Netskope Employee
MridhulaNetskope Employee
published in Security Posture Management
Advanced Analytics Reports for SSPMAdvanced Analytics SSPM

About Netskope SSPM:Netskope SSPM  provides a unified pane of view to the security posture of all supported SaaS applications in your organization. Customers can use SSPM to identify & remediate security posture issues, Detect configuration drifts, Have visibility to & risk scoring of 3rd Party Apps About Netskope Advanced Analytics:Advanced Analytics allows customers to gain valuable insights which are visualized impactfully to the audience. Use it to get visibility into your environment and understand how Netskope is protecting you.Identify risk around shadow IT, data movement, insider threat, etc. Quickly drill into data, aggregate and answer questions Identify gaps in protection coverage and areas where tuning is needed Demonstrate value by highlighting how Netskope has protected the environment or visualize risk to influence stakeholders Key Benefits Monitor Security Posture: With Advanced Analytics reports for SSPM you can regularly monitor the security posture of your or

260
M
Netskope Employee
1 month ago
2
2022RossNew Member
asked in Cloud Firewall
Block internet access on servers

Try to deploy netskope on a server to block internet access  with an exception of  windows updates. I’ve been directed to the Cloud Explicit Proxy documentation but it seems like an overkill to what im trying to achieve.Anyone implemented this ?​​​​​​

651
N
1 month ago

Badge winners

Show all badges
Terms & ConditionsCookie settings