Product Forums

Where can I find more information about the CASB API Google Apps/Add-ins page? I am trying to figure how to use this information. Thx

I have a CCI Score based policy, where certain categories are blocked with scores <=59.    Suddenly I have a corporate user being blocked - legitimately, and I think it is due to the score dropping.There used to show a history of scores over time per app, when did that go away?

HiWhere can I configure to check media type header, eg application/winword? Thank

How to uninstall netskope via command line that has a password ?

Has anyone had issues resolving AWS CLI certificate errors when the Netskope Client is enabled? Multiple developers in our org have followed the steps in https://docs.netskope.com/en/netskope-help/traffic-steering/netskope-client/addressing-ssl-error-while-accessing-aws-services-via-the-aws-cli-with-the-netskope-client-enabled/ for AWS CLI V2 and have even tried the older configure_tools.sh file that configures Netskope certs for common tools including AWS CLI. We have not had success in getting this to work. 

Hello,I have a policy setup to block uploads to a specific instance of an application when any DLP profile matches otherwise alert via the traffic direction functionality in the RTP. This has been working fine for a while. Today, I went to add additional instances and when I had the user test, it was still being blocked, completely bypassing that rule and going to my default deny, its not matching DLP because if it was, it would be blocked by the policy I am talking about, its sliding right by my rule... I tried a separate RTP at the top with just the instance configured the same way with no luck. The only way I could get it to work was to remove the DLP profiles.The specific instance I was testing with was a third instance that was sharepoint.Has anyone seen this?Nate 

Hello, I have a problem with the resolution of short names on NPA.Access to my FQDN resources works perfectly. But with the short name, the resolution doesn't work.I have a private app DNS with host "*.mydomain.local" and port 53.Resolution works perfectly on my publishers.My network openings are made on the firewall side.But despite all this, I have the impression that the client is trying to resolve via public DNS rather than my local DNS, even though these are correctly configured in the publisher's revolv.conf (as is the domain name). Do you have a suggestion?Thank you

Does anyone know a way to write a report and see whether a particular IP address in IPSEC tunnel to Netskope (non Netskope client computers).   Failing that, is there a way to dump what IP addresses are in the Network Locations per Network Location? We have nonclient machines converted over to IPSEC content management via Netskope.  We are taking a asset/application group at a time and applying a SSL Decryption policy using Network locations  in order to weed out applications that don't like to be decrypted.   Ideally, I would like to write an Advanced Analytics report that shows whether a set of IP address are are are not part of an SSL Decryption policy and/or Network Location Group.  I would settle for a dump of what IP addresses are in each of my Network locations.  

I am trying to uninstall Netskope using a script via Kandji. I was able to find the script set up to uninstall with jamf. Is there any script that will work with Kandji or how can I modify the jamf script to make it work?

Hi The way we setup the network, we will need eproxy to access Internet.  Surf internet worked well but Outlook email client keeps getting untrusted certificate error.  Is there certificate to be included? Thank

Hi  Can SWG manage web access by "User-Agent" header? Thank

Hi There,  What is the recommended deployment method for Citrix XenApp / vApps where multiple users log onto the same server concurrently. (Multiple users sharing same IP)

Hi, I have the customer's Azure AD configured to allow admin access to the Netskope console via group membership, but all users who login have the tenant admin role by default. I know I can go in and change their individual roles manually but is there a way to create a new enterprise application that assigns the Security Admin role (or any other) by default instead? If so, can you please advise on the required config? Thanks.

Hi Netskope Community, I'm interested in obtaining further details about the processes required to differentiate between managed and unmanaged devices based on Netskope processes. My specific use case is that a device is considered "managed" when the Netskope processes specific to MacOS devices are detected. However, to proceed with the implementation, we must know the following details: 1. List of specific processes to be included. 2. The exact format in which process names for MacOS devices should appear (example: processname.format). 

Hi everybody, I'm interested in obtaining further details about the processes required to differentiate between managed and unmanaged devices based on PEM certificate for iOS Device and pair value-key for Android Device.  My specific use cases involve a device being considered "managed" when the certificate or this key-value pair is found by the netskope client. However, to proceed with the implementation, we must know the following details:Configuring iOS Devices with PEM Certificate - We are trying to configure managed iOS devices with a PEM certificate. I would like to know if I need to generate this certificate ad-hoc or if it is available on our MDM (Workspace ONE) or Netskope tenant. Also, I would like detailed instructions on how to configure iOS devices using Workspace ONE and on the Netskope console based on this scenario. Configuring Android Devices with Value and Key - We have entered the value-key into the MDM of Workspace ONE for Android devices. We would like to

Is it possible to use the option "re-authenticate for private apps" from CLI in linux?I know you can use the stAgentCli to check its status with show-pa command but I would like to make a command in my personal computer to auto-login into the vpn

Hi all, please to meet you! I'm configuring my Google Workspace to distribute the NS app to Android clients with a Managed Configuration to avoid that the users have to make manual configs.It works fine when, in the field "User Email Address" I insert a specific email but, if I leave blank or not configured the field, the app does'nt complete the config. Given that I need to distribute the same config to many devices, I would use a variable in this field, but I can't find the correct one. Is there anyone who has been in my situation and has resolved? Thank you

HiI have installed win10 agent in office thru our legacy proxy.    I can see that the network was steered to nsk when in office, however NPA was having error I have reinstalled, enable traffic bypass  in legacy proxy and firewall but the error persisted.  If I installed via public wifi, NPA was successful.What is the log I should start tracing this error?Thank

Is there a way to allow employees to access a blocked website if they enter a password ??For context:I have staff who work with vendors and when they go to specific websites they get blocked based on our policy.  Is there a way to allow blocked websites to be accessed provided employee enters a bypass password ? Is there a way to change that password daily.

Hello,Does anyone have an example in a Dictionary csv file to add to Netskope with keywords that you want to analyze?Thank you so much.

You're a big Sonos fan (like me), and you want to use the Sonos S1 Controller app, or the Sonos S2 app on your Windows or Mac machine with the Netskope Client. Well, you'll find it doesn't work without adding some Netskope Client steering exceptions... When you launch the Sonos app it uses broadcast addresses to seek out Sonos devices on the local network, it can use both 255.255.255.255 (network broadcast address) and also 239.255.255.250 (simple service discovery protocol - SSDP). So these addresses need to be added to a Network Location Profile: Netskope UI -> Policies -> Profiles: Network Location -> New Network Location -> Single Object (see attached screenshot) And you'll need to reference that 'Network Location' as an exception in your steering configuration(s): Netskope UI -> Settings -> Security Cloud Platform -> Traffic Steering: Steering Configuration -> [Your steering configuration] -> Exceptions -> New Exception -> Destination Locations -&g

The requirement is :- User should able to access a corporate instance of Git-hub but not any other instance of git-hub. I have created app instance for a corporate instance of Git-hub and configured the policy to allow all activities.  2nd policy after that is to block all activities for the application Git-hub ( to match all other git-hub instances) with this, I am not getting an expected resultWhen user is accessing corporate instance, Netskope is showing Browsing activity and getting blocked in 2nd policy.I have checked the list of activities for app Git-hub but there is no Browsing activity mentioned Any expert comments and guidance here pls...  

I have a DLP policy looking for specific data objects in Github using a regex, but it is triggering on known test data. Any ideas on how I can configure the DLP policy to ignore my spreadsheet of known test objects? For instance create an incident for ABC123, but ignore ABC111. Thx

Would it possible to have a user click-thru policy in regards to PROPFIND (webdav) event traffic?

We've started noticing an issue with Winzip files downloaded from 3rd party web sites, where extracting the ZIP fails with the attached error message.    "Central and local discovery mismatch for file"  (example in attached screenshot)The zip can be successfully extracted if the Netskope service is disabled on the user's computer.