Product Forums

We are trying in a couple of channels to get an answer, including our Customer Support Manager and our Technical Account Manager.We are a little stressed over the lack of details in the below announcement.For our purposes, it lists three nights of maintenance, but it was unclear what nights, or all of them we should be worried about NYC and IAD where our IPSec tunnels are connected.Has anyone gone through this before? Have they switched their tunnels in preparation?  We are only concerned with the NYC and IAD pops where our IPSec tunnels are connected, and would like to know if there is more specific detail available regarding those POPs and the times they may be affected, and whether or not an advance failover for us is warranted.Thanks, Service ImpactThe Netskope user interface may be unavailable for brief periods of time during the maintenance window. Customers with IPSEC/GRE tunnels may notice a switch to a secondary/backup tunnel.NOTE: The release notes will be avai

Netskope Private Access now consumes NewEdge Traffic Management 2.0(GSLB) for optimizing the DC selection for Client as well as for Publishers. Customers can take following advantages with this feature,  DC selection is no longer DNS There is no dependency on Google DNS or LDNS for POP selection (the last hop recursive DNS resolver). APIs are hosted within existing allow listed NewEdge IP range, no additional network changes needed.  Improved granularity for geolocation of public IP egresses. DNS-based methods (EDNS/ECS0/Google DNS) can only utilize a /24 of the public IP. The GSLB service can better geolocate as it has the entire IP address /32 instead of a /24 advantage for gateway selection. DC selections according to geographic distance, with in-country preference. For example, if an endpoint in the south of France is very close to Barcelona, the Netskope Client will prefer a DC in France, even if it is physically farther away than the NewEdge Barcelona DC. New

  Netskope has various built-in (aka predefined) DLP identifiers to detect passwords, public keys, private keys and base64 encoded data.   While you can write a regex to detect passwords in your environment, I have highlighted some of the challenges here: Regexes can cause DoS and False positives (at a customer site who has a dedicated team to write regex their complain was email in a string being detected as passwords). There is no single password standard that would work for all the environments. The key sizes are varied length.   Best approach for a credential detection policy Use Exact Match capability to identify username of AD account exfiltration Use Netskope's built-in identifiers rather than writing complex regex. Use Custom Entity validator to validate your test data with a corresponding Netskope predefined identifier. Note: You do not have to create a custom entity. Just for the validation purpose call a predefined identifier under a custom entity.  

Is there a way to setup a report or alert to capture devices that have not reported traffic in x number of days?It turns out that after an audit, we have quite a few agents where Netskope is installed but not steering any data to the our tenant.  We believe that in these cases the agents subsystems are not fully functioning. The users are not allowed to disable the agents. Thank you. 

Hi People, We have created a instance awareness policy to restrict user to block upload on personal google drive instances which is working fine on the browser but can't even hit the policy with google drive desktop application via file explorer's auto-sync. Below is the policy details: Please let me know what else is needed to be added here!!  

how do we segregate sanctioned applications from normal websites?As of now, we need to identify  unsanctioned applications installed on the User machine rather than they are browsing websites?

Team, I have a allowed users list for a SFTP application. Can we manage the SFTP traffic thru Netskope Proxy ? 

Hi Team ,    Can anyone help me the Detailed Architecture for NPA traffic starting from user device till it access the application including the auth type,Identification, Encryption , tunnel that exist all across the traffic flow.

Hello, We are using REST API v2 to get alerts. However, the incident_id value has an error. The last 3 numbers are set to 0. Example,Our incident_id on the netskope dashboard: 5590961107392419317. The incident_id using API v2: 5590961107392419000 How can we avoid this?

Hello, Has anyone had issues using comma separation in the referrer field of an HTTP request header? I attempted to use more than one URL comma separating them in the same field per NetSkope documentation, but it broke the URL that was already there and didn't work for the new one. I tried different variations with no luck. I had to create a new header profile for one url..  Any one else?

Hello all,I wanted to ask if there is any way to configure Netskope to block all DNS revolving of public DNS namens by default?We want to manually specify a list of FQDNs or Domain-Wildcards to be allowed to resolve (ie. *.teams.microsoft.com or dns.msftncsi.com). We saw the option to Blackliste a FQDN or Domain-Wildcard in the DNS profile but there seems no option to block ALL except of ... Best regardsStefan

I can't seem to figure out what happened but Youtube stopped being pulled into our unsanctioned cloud apps on 11/15. I tried watching a video and usually it appears in the alert right away but the only alerts showing up are from 11/15. Nothing changed on our end that we know of.

Hi Team we are try to install the NS client on Macos 12.3 Macbookpro via email. (POC)We install package successfully but we  tenant and G/w is not display in Configuration of NS client.Lookup the gateway and URL resolution is successful. in Nsdebuglog I can see :   

Does anyone currently send CPSM (CIS findings) over to ServiceNow? If so, I would be interested in hearing the experience, any lessons learned, and finally where in ServiceNow the data lands.

Good morningI need to install on my enterprise mobile devices the Netskope client.On these devices the Microsoft Defender client is installed with VPN already active.I noticed from the logs that the netskope client fails to hook the Vpn because it sees the Defender VPN tunnel already activeCan any exceptions be set so that the two tunnels are active?Thanks

Hi People, I have configured and pushed my client in idp mode via jumpcloud idp and mdm solutions in windows, mac and linux OS. The Enrollment dialog box is popping up even after user closes it which is the expected behavior and it's working fine in windows. But for linux and MacOS if the user closes it, it doesn't automatically opens up again breaking the enrollment flow. Is there any way to fix this behavior for linux and MacOS?

Godaddy email synchronize mail - users / groups accounts  Hello good afternoon community, thank you for your collaboration and your time.I have a couple of questions: 1.- I have out there some possible client prospect that has his email accounts in Godaddy, is it feasible to synchronize the Godaddy users/groups directory to have those users/groups in netskope for use in the policies. 2.- For the Godaddy mail as such both example the Web/Cloud access to the webmail, as well as the Godaddy mail configuration in example outlook client desktop. Netskope covers this point, this protection ? what is the scope ? I have not found more information regarding Goddady for any of the 2 points. Please support me with your comments, your collaboration and your advice. Thank you Best regards

I am facing issues while attempting to block WhatsApp. I have created a cloud app policy to block WhatsApp, and it is successfully blocking the WhatsApp web. However, on  WhatsApp application uploading is getting blocked, but I am still able to send text messages.Is there a way to block text messages as well? I haven't found any corresponding events in the Netskope logs for sending messages.

Curious about how to make the leap to Zero Trust Connectivity?    Discover the limitations of traditional VPNs and learn how to migrate from VPN to ZTNA Next from a Netskope customer—Jeff Wehrman (@jwehrman), Sr. Staff Cybersecurity Engineer, at Dexcom in this webinar recap! The recording, slide deck and a summary of the Q&A can be found below:   Watch on-demand   Q: Netskope is not a total replacement for VPN, which means not supporting server to client flow. How can we overcome this? A: You bring up an important point. Most ZTNAs do not support server-initiated but Netskope ZTNA Next supports both client and server-initiated flows. Q: When within your office, is Netskope Private Access (NPA) engaged or does it go offline? A: Short answer is it stays engaged. The Netskope Client, which steers user traffic, is always on whether in office or remote. It can be configured to steer that traffic to the Netskope Cloud or a local ZTNA Broker ad

However, if the Netskope client is active, and the user is on the company's network (without being on the vpn) the site is accessible.It also becomes accessible by disabling the Netskope client, and leaving and rejoining the VPN after disabling. We have already forced traffic through NPA Does anyone have any idea what might be going on?Encountered a file package download error nsUtil Failed to auto detect proxy or download PAC file, error 12180

Github retroactive scan only supports last 10 days of commits in the default branch. What is the reasoning behind this limitation? Are there intentions to expand this capability? Thx

Recently, Okta acknowledged a breach where attackers were able to gain access to customer session tokens, and other sensitive data through HAR captures in their customer support system.  Attackers were then able to use the unexpired session token to access the Administrative API in the customer’s Okta tenant. The Administrative API was accessed via the browser which only requires a session token or cookie unlike the typical approach using a bearer token.  In this case, the attackers were able to gain the initial access to the customer support system via an employee syncing a service account password to their personal Google password manager.    Netskope customers can address and help prevent such exploits through a multi-phased approach. Let’s take a look at the first phase.   Phase 1:  Controlling Personal Google Account Logins Netskope was initially built as a Cloud Access Security Broker (CASB) with an inline proxy capability.   This background pro

Has anyone used the edm automation script that was talked about in conjunction with DLP 2.0? I've seen it referenced but i can't seem to find how to execute it. I have a daily edm file that gets uploaded and i'm looking for the best method to automate the request-ppd upload process.

Hi Friends- can we utilize endpoint dlp in netskope to inspect/allow WIFI printers .

He is what I understand: During the summer, Netskope implemented a change to address a problem when companies merge.   Apparently if two companies merged but two computers had the same hostname (?) they would have duplicate client ids.   I typically run a report of a month's worth of devices when we upgrade versions.  I run it daily to watch the increase, watch to see version change over time, and to find orphan machines that refused to upgrade their version. After the change, I immediately noticed about 2X the number of computers I have.  It turns out that in addition to changing the ID, they also changed the download options, where before it had dialog option to choose whether you wanted everyone that has logged into a machine or just the last person, now there is no option.  So now when downloading the list of machines, one to use Excel to deduplicate hostnames.  But it still isn't a good solution, as you don't necessarily get the right last reported date. So far Netskope's response