Product Forums

Dear,Today I have two policies for using WhatsApp web, one for all employees to access and send written messages, but downloading and sending files is blocked.Second policy that is full.Today I release it via online account.What I need today is that only those who have a corporate cell phone can access this, using a corporate cell phone, from what I was able to search for by cell phone number, it is not possible to make this limitation, but I don't know if I can do it through the mac address of the cell phone from the device and so I no longer use the network account.Could you please help me

Hello, I am noticing that when we have users in office connected to our Wi-Fi on site, Netskope is saying they are remote. Netskope Configuration shows "Private Access: Connected". My current user that is experiencing this is showing an on-prem IP address though. Has anyone experienced this?

is there a way to create an alert to detect the movement of files that have a mismatched file extension?i know Netskope will do its inspect of the file but i would like an alert on this as an indicator of risky behavior.

How would you write the rule expression for this:(P0) - Passwords (Contextual)(C0) - Custom Passwords(C1) - Custom Word 1(C2) - Custom Word 2I want to look for P0 or C0 as long as either is NOT NEAR C1 or C2. The UI doesn't let me build the write logic. Ideally, I think I would want this (which isn't allowed in the UI): ( P0 OR C0 ) NOT NEAR (C1 OR C2)

We recently retired our VPN infrastructure and are using NPA for all private apps. I have attached a PDF that shows the configuration changes required on Mac systems for NPA to function properly. This covers disabling Secure DNS, Privacy & Security settings, disabling IPv6, disabling the QUIC protocol in Chrome, public DNS servers. Enjoy 😉

What is Web Socket terminology used in Netskope?

Hello team,We need to develop a custom template for a customer in order to monitor some specific settings in their configuration.Does Netskope allow the inclusion of custom SaaS Security Posture profiles?

Hello,We’re looking for some information regarding PII regulation profiles equivalent to GDPR but customized for the LATAM requirements or regulations.Do we have predefined profiles for this region?

  Hello community, I would like to know if Netskope can control some of the following activities across social networks or collaboration tools: - Login, logout, block, approve, join, mark, request, unfollow, create and delete… Thank you in advance.

Hi team, I have a query regarding the NPA the customer wants to segerate the group of user traffic should be steer in NPA. Like they only want the specific group of users. use NPA services I checked the same in steering configuration option i didnt get it please let us know if we can acheive this use cases kindly find the below questions from client end. Also please let me know what limitations we get in Azure AD license. Like what netskope suggest to purchase the license so we can configure SAML SSO. 1.In AD, do we need create a separate security group for SWG,CASB and add few user in the group and test for couple weeks.2.In AD ,do we need a separate security group for NPA and add few users in the group who will access  

Hi, I noticed this morning that the NS Client Latest Golden Release version has been updated to v108.0.0, which is the same as the Latest Release. Was this intentional? Was a lesser version skipped (v107, v106, etc)? Also, the Support page is still shown v105 and v108 is not available for download.. Thx.. https://support.netskope.com/s/article/Download-Netskope-Client-and-Scripts

During the development of Netskope Next Generation SaaS Security Posture Management (SSPM )  capabilities, one key decision was made to replicate the data models and resource relationships of the monitored systems as closely as possible with our graph-based engine. This choice has yielded a significant advantage, allowing us to swiftly adapt to changes and new features within the target systems represented in our model whenever the need arises.   An illustrative case is the management of Salesforce Delegated Group policies through SSPM. Delegated administration is a feature that permits Salesforce administrators to grant specific users (and user groups in the future) in designated roles the authority to manage users even profiles on their behalf. The Salesforce Spring ‘23 update introduced the ability to access Delegated Group Information via their API. This update allowed Netskope SSPM to add support for these resources, as managing delegated group policies pr

Apologies if this has already been requested, but are there any plans to support the system default browser for SAML re-authing for private app access? Right now, whether authenticating via SAML for enrollment or after the time period configured for private app access, we are redirected to our idp via an embedded browser. This defeats the purpose of SSO since it doesn't use the system native browser. If users are already auth'd to the IDP in their system default browser (such as chrome) then launching it in chrome wouldn't require any additional auth, SSO would just kick in. 

Hello,Does anyone know if Netskope can enforce employees to log in AAD account on their managed endpoints to access internet?If employees don't log in their AD account and use local admin to access internet, can Netskope block their access?I haven't found any related discussion or KB on this. Appreciate if someone has already tried or know the configurations.

Hello All,   I was wondering if it is normal for Netskope to go into disabled and then into Fail close if the user account in AD gets locked out.  I don't see anything in our agent arguments that would imply it is installed with fail close.  As well, I have the fail close option unchecked on our client configuration.  The only thing I have read is that I have a password set for tamper proofing, which is a prerequisite for fail close.    Has anyone come across this situation before?

Hi team,We migrating policies from Zscaler to Netskope NGSWG with file type url filtering  and cloud apps control. As the categorization is totally different can you please help me out with this migration of policy I need to know the category fall in Zscaler which is fall in Netskope or any docs from your end will help thank you.

How is license consumption worked out for the SWG product? We're currently just syncing groups from Azure AD that contain users based on their office location and the total number of members in those groups is just under what we're licensed for, but want to ensure that we aren't missing anyone. If we sync a catch all group from Azure AD that contains about 3 times as many accounts as we have Netskope licenses what happens to our license consumption? Do we consume licenses equal to the total number of AD accounts that are synced, total number of enabled AD accounts, total Netskope clients seen over a time period, max concurrent connected clients, or something else?

Good afternoon,Many of our users on Chromebook/Chrome OS (differents constructors and differents "versions" like "Nami", "Zork", "Octopuss", "Hatch"...) experiment frequent disconnections since earlier version (actual latest version for ChromeOS via Playstore is 107.1.0.1529, published on 2023/08/23), tunnel going up/down in logs, this is very embarrasing for our users. Fixes have been deployed until the latest stable version mentioned above, but the disconnections are persistent, and seems more frequent when users are in homeworking. Does anyone encounters the same kind of issue, please ?Thank you if you can help me. I precise Netskope official support have already been contacted and is aware of this problem.Best regards. 

Hi team, I looking for a configuration where the user try to access the prvt apps whenever they tried the user get auth prompt for the Pvt apps only please let me know if it's possible to do so as I'm currently doing one POC so i get this requirement from customer end. Also please let us know the configuration to access network drive with the help of NPA.The user access the folders like go to THISPC on upper side bar write //x.x.x.10 IP e.g and access the network share folder I want this to acheive by Netskope I do follow the steps of SMB configuration but required a details regarding this please help me out with this configuration.

We recently attempted to set our NPA policies to our "Domain Users" (in our case "corp.alfacompanies.com/Users/Domain Users") group rather than leaving the "source/user=" field empty so it applies to All Users.  After the policies had time to simmer, we began noticing problems withfile shares (likely a DNS or Domain Controller conflict)lost access to the file sharesWindows Security prompts asking for credentialsgpupdate /forcefailed almost immediately due to failure to connectForticlient EMS status failed over to "not reachable"After changing our NPA policies related to domain controllers and DNS back to user=all users (aka empty) and allowing time for the settings to propagate , access returned to normal. That begged the question, why would setting the policy to "Domain Users" create such an adverse issue. In your experiences, if all domain users need access, do you typically leave the "source/user=" field empty?

Hello, we have disabled unenroll from client UI through client config. But in some instance need this operation  [eg: IT accidentally enrolled while troubleshooting under user's windows session]. Wondering if this can be done from CLI or manually deleting user level files. 

The Netskope clients have not been able to update configuration since September 1st for my tenant.  Netskope said its a known issue. Is there a reason why https://trust.netskope.com/ does not reflect this yet? Thank you. 

Hello and good morning 🙂 I would like to know how can I get the bandwidth consumption logs of a publisher because in the DEM (Digital Experience Management) in the NPA section it only shows the network sessions but not the throughput.

it is possible to enable the TCPDUMP command in the publisher? I have tried to run it, but it shows me this message You don't have permission to capture on that device(socket: Operation not permitted)

I have a few questions related to Netksope MIP integration. I looked around but did not get any concrete answers. Does Netskope require the customer to provision an Azure subscription or similar services when applying MIP labels to OneDrive files?  From what i understand , we only need the M365 licence ? Is the timestamp of a OneDrive file altered when Netskope applies a label? - This is important for our org to ensure that we dont modify the file timestamp. Is Netskope's file labeling service charged separately, or is it included with the standard Office 365 protection license? - I'm guessing there is no extra charge. Are there any restrictions on the number of files that can be labeled within a specific period by Netskope? - This is something our security team is asking and would love to know if there are any known limitations