Product Forums

Hi Team,We configured DLP for all categories with PCI and PII DLP. However, on netskopesecuritycheck.com, DLP PCI and PII block tests are failed. Has anyone had success with these tests? Can you please share the DLP policy configuration that has passed?  Thanks & Regards,Indu

This content can be found on the Netskope Support portal https://support.netskope.com/s/article/Blocking-Microsoft-Co-Pilot

Hello group, I am new here, I did a search but did not find what I was looking for. Question: Any documentation on how to properly implement in the CASB section for Office 365? We want to eliminate or reduce the number of blocks we are seeing from attempts to update Office. It hits different sites out of the United States. (Policies, Real-time protection, CASB section) Thanks,

Wondering if anyone is aware of an existing dashboard to keep an eye on allowed USB file activity.  We're looking to see a line-up of the top users uploading content (regardless of it triggering a DLP event) to USB devices.  I've tried piecing something together, but the fields don't appear to be available in Advanced Analytics.

Hi, I have two local publishers that I use to maintain remote access to Windows PCs in my office. Unfortunately, the users have been complaining nonstop about slow connection speeds and instability issues. It doesn't seem to be a port issue because the problem still occurs even when all ports are enabled. Can you please help me resolve this? 🤔 🤔

Hello, I've been using NPA successfully but I am noticing quite a lot of tunnel down events from several users, a couple events are caused by the device hybernation which we could somewhat address it by disabling the modern hybernation via GPO but the tunnel down remains and NPA does a very poor job on providing more details on what could be the reason for it. How can I get more details about those events? Also, how can I get these events on a report? it would be very valuable for us to have a widget of sorts with top 10 problems, I need to be the first one ot know if a user tunnel is failing to establish. Thanks.

Hi  I have created a rule to block download and upload executable with ===========Category : 138 categoriesActivities: Upload, DownloadActivity Constraint: Filetype = Binary and Executable=========but can't seem to get it working. Any advise ?

While we have the normal exceptions in place for MS 365 and the likes, we seem to have users including myself that can't get Microsoft Onenote to sync unless we disable the endpoint client. Has anyone seen this or have an idea on how to solve? Thanks! 

I'm unable to get to the KB article at this this link. Do I need a special Support Portal login? My community login isn't working there, and I do not see a way to create a support portal login. I'm trying to solve the same issue that this community member ran into, and getting to the KB article seems to be the key.

Where can I find more information about the CASB API Google Apps/Add-ins page? I am trying to figure how to use this information. Thx

I have a CCI Score based policy, where certain categories are blocked with scores <=59.    Suddenly I have a corporate user being blocked - legitimately, and I think it is due to the score dropping.There used to show a history of scores over time per app, when did that go away?

HiWhere can I configure to check media type header, eg application/winword? Thank

How to uninstall netskope via command line that has a password ?

Has anyone had issues resolving AWS CLI certificate errors when the Netskope Client is enabled? Multiple developers in our org have followed the steps in https://docs.netskope.com/en/netskope-help/traffic-steering/netskope-client/addressing-ssl-error-while-accessing-aws-services-via-the-aws-cli-with-the-netskope-client-enabled/ for AWS CLI V2 and have even tried the older configure_tools.sh file that configures Netskope certs for common tools including AWS CLI. We have not had success in getting this to work. 

Hello,I have a policy setup to block uploads to a specific instance of an application when any DLP profile matches otherwise alert via the traffic direction functionality in the RTP. This has been working fine for a while. Today, I went to add additional instances and when I had the user test, it was still being blocked, completely bypassing that rule and going to my default deny, its not matching DLP because if it was, it would be blocked by the policy I am talking about, its sliding right by my rule... I tried a separate RTP at the top with just the instance configured the same way with no luck. The only way I could get it to work was to remove the DLP profiles.The specific instance I was testing with was a third instance that was sharepoint.Has anyone seen this?Nate 

Hello, I have a problem with the resolution of short names on NPA.Access to my FQDN resources works perfectly. But with the short name, the resolution doesn't work.I have a private app DNS with host "*.mydomain.local" and port 53.Resolution works perfectly on my publishers.My network openings are made on the firewall side.But despite all this, I have the impression that the client is trying to resolve via public DNS rather than my local DNS, even though these are correctly configured in the publisher's revolv.conf (as is the domain name). Do you have a suggestion?Thank you

Does anyone know a way to write a report and see whether a particular IP address in IPSEC tunnel to Netskope (non Netskope client computers).   Failing that, is there a way to dump what IP addresses are in the Network Locations per Network Location? We have nonclient machines converted over to IPSEC content management via Netskope.  We are taking a asset/application group at a time and applying a SSL Decryption policy using Network locations  in order to weed out applications that don't like to be decrypted.   Ideally, I would like to write an Advanced Analytics report that shows whether a set of IP address are are are not part of an SSL Decryption policy and/or Network Location Group.  I would settle for a dump of what IP addresses are in each of my Network locations.  

I am trying to uninstall Netskope using a script via Kandji. I was able to find the script set up to uninstall with jamf. Is there any script that will work with Kandji or how can I modify the jamf script to make it work?

Hi The way we setup the network, we will need eproxy to access Internet.  Surf internet worked well but Outlook email client keeps getting untrusted certificate error.  Is there certificate to be included? Thank

Hi  Can SWG manage web access by "User-Agent" header? Thank

Hi There,  What is the recommended deployment method for Citrix XenApp / vApps where multiple users log onto the same server concurrently. (Multiple users sharing same IP)

Hi, I have the customer's Azure AD configured to allow admin access to the Netskope console via group membership, but all users who login have the tenant admin role by default. I know I can go in and change their individual roles manually but is there a way to create a new enterprise application that assigns the Security Admin role (or any other) by default instead? If so, can you please advise on the required config? Thanks.

Hi Netskope Community, I'm interested in obtaining further details about the processes required to differentiate between managed and unmanaged devices based on Netskope processes. My specific use case is that a device is considered "managed" when the Netskope processes specific to MacOS devices are detected. However, to proceed with the implementation, we must know the following details: 1. List of specific processes to be included. 2. The exact format in which process names for MacOS devices should appear (example: processname.format). 

Hi everybody, I'm interested in obtaining further details about the processes required to differentiate between managed and unmanaged devices based on PEM certificate for iOS Device and pair value-key for Android Device.  My specific use cases involve a device being considered "managed" when the certificate or this key-value pair is found by the netskope client. However, to proceed with the implementation, we must know the following details:Configuring iOS Devices with PEM Certificate - We are trying to configure managed iOS devices with a PEM certificate. I would like to know if I need to generate this certificate ad-hoc or if it is available on our MDM (Workspace ONE) or Netskope tenant. Also, I would like detailed instructions on how to configure iOS devices using Workspace ONE and on the Netskope console bas

Is it possible to use the option "re-authenticate for private apps" from CLI in linux?I know you can use the stAgentCli to check its status with show-pa command but I would like to make a command in my personal computer to auto-login into the vpn