Product Forums

Hello,Does anyone have an example in a Dictionary csv file to add to Netskope with keywords that you want to analyze?Thank you so much.

You're a big Sonos fan (like me), and you want to use the Sonos S1 Controller app, or the Sonos S2 app on your Windows or Mac machine with the Netskope Client. Well, you'll find it doesn't work without adding some Netskope Client steering exceptions... When you launch the Sonos app it uses broadcast addresses to seek out Sonos devices on the local network, it can use both 255.255.255.255 (network broadcast address) and also 239.255.255.250 (simple service discovery protocol - SSDP). So these addresses need to be added to a Network Location Profile: Netskope UI -> Policies -> Profiles: Network Location -> New Network Location -> Single Object (see attached screenshot) And you'll need to reference that 'Network Location' as an exception in your steering configuration(s): Netskope UI -> Settings -> Security Cloud Platform -> Traffic Steering: Steering Configuration -> [Your steering configuration] -> Exceptions -> New Exception -> Destination Locations -&g

The requirement is :- User should able to access a corporate instance of Git-hub but not any other instance of git-hub. I have created app instance for a corporate instance of Git-hub and configured the policy to allow all activities.  2nd policy after that is to block all activities for the application Git-hub ( to match all other git-hub instances) with this, I am not getting an expected resultWhen user is accessing corporate instance, Netskope is showing Browsing activity and getting blocked in 2nd policy.I have checked the list of activities for app Git-hub but there is no Browsing activity mentioned Any expert comments and guidance here pls...  

I have a DLP policy looking for specific data objects in Github using a regex, but it is triggering on known test data. Any ideas on how I can configure the DLP policy to ignore my spreadsheet of known test objects? For instance create an incident for ABC123, but ignore ABC111. Thx

Would it possible to have a user click-thru policy in regards to PROPFIND (webdav) event traffic?

We've started noticing an issue with Winzip files downloaded from 3rd party web sites, where extracting the ZIP fails with the attached error message.    "Central and local discovery mismatch for file"  (example in attached screenshot)The zip can be successfully extracted if the Netskope service is disabled on the user's computer. 

We are trying in a couple of channels to get an answer, including our Customer Support Manager and our Technical Account Manager.We are a little stressed over the lack of details in the below announcement.For our purposes, it lists three nights of maintenance, but it was unclear what nights, or all of them we should be worried about NYC and IAD where our IPSec tunnels are connected.Has anyone gone through this before? Have they switched their tunnels in preparation?  We are only concerned with the NYC and IAD pops where our IPSec tunnels are connected, and would like to know if there is more specific detail available regarding those POPs and the times they may be affected, and whether or not an advance failover for us is warranted.Thanks, Service ImpactThe Netskope user interface may be unavailable for brief periods of time during the maintenance window. Customers with IPSEC/GRE tunnels may notice a switch to a secondary/backup tunnel.NOTE: The release notes will be avai

Netskope Private Access now consumes NewEdge Traffic Management 2.0(GSLB) for optimizing the DC selection for Client as well as for Publishers. Customers can take following advantages with this feature,  DC selection is no longer DNS There is no dependency on Google DNS or LDNS for POP selection (the last hop recursive DNS resolver). APIs are hosted within existing allow listed NewEdge IP range, no additional network changes needed.  Improved granularity for geolocation of public IP egresses. DNS-based methods (EDNS/ECS0/Google DNS) can only utilize a /24 of the public IP. The GSLB service can better geolocate as it has the entire IP address /32 instead of a /24 advantage for gateway selection. DC selections according to geographic distance, with in-country preference. For example, if an endpoint in the south of France is very close to Barcelona, the Netskope Client will prefer a DC in France, even if it is physically farther away than the NewEdge Barcelona DC. New

  Netskope has various built-in (aka predefined) DLP identifiers to detect passwords, public keys, private keys and base64 encoded data.   While you can write a regex to detect passwords in your environment, I have highlighted some of the challenges here: Regexes can cause DoS and False positives (at a customer site who has a dedicated team to write regex their complain was email in a string being detected as passwords). There is no single password standard that would work for all the environments. The key sizes are varied length.   Best approach for a credential detection policy Use Exact Match capability to identify username of AD account exfiltration Use Netskope's built-in identifiers rather than writing complex regex. Use Custom Entity validator to validate your test data with a corresponding Netskope predefined identifier. Note: You do not have to create a custom entity. Just for the validation purpose call a predefined identifier under a custom entity.  

Is there a way to setup a report or alert to capture devices that have not reported traffic in x number of days?It turns out that after an audit, we have quite a few agents where Netskope is installed but not steering any data to the our tenant.  We believe that in these cases the agents subsystems are not fully functioning. The users are not allowed to disable the agents. Thank you. 

Hi People, We have created a instance awareness policy to restrict user to block upload on personal google drive instances which is working fine on the browser but can't even hit the policy with google drive desktop application via file explorer's auto-sync. Below is the policy details: Please let me know what else is needed to be added here!!  

how do we segregate sanctioned applications from normal websites?As of now, we need to identify  unsanctioned applications installed on the User machine rather than they are browsing websites?

Team, I have a allowed users list for a SFTP application. Can we manage the SFTP traffic thru Netskope Proxy ? 

Hi Team ,    Can anyone help me the Detailed Architecture for NPA traffic starting from user device till it access the application including the auth type,Identification, Encryption , tunnel that exist all across the traffic flow.

Hello, We are using REST API v2 to get alerts. However, the incident_id value has an error. The last 3 numbers are set to 0. Example,Our incident_id on the netskope dashboard: 5590961107392419317. The incident_id using API v2: 5590961107392419000 How can we avoid this?

Hello, Has anyone had issues using comma separation in the referrer field of an HTTP request header? I attempted to use more than one URL comma separating them in the same field per NetSkope documentation, but it broke the URL that was already there and didn't work for the new one. I tried different variations with no luck. I had to create a new header profile for one url..  Any one else?

Hello all,I wanted to ask if there is any way to configure Netskope to block all DNS revolving of public DNS namens by default?We want to manually specify a list of FQDNs or Domain-Wildcards to be allowed to resolve (ie. *.teams.microsoft.com or dns.msftncsi.com). We saw the option to Blackliste a FQDN or Domain-Wildcard in the DNS profile but there seems no option to block ALL except of ... Best regardsStefan

I can't seem to figure out what happened but Youtube stopped being pulled into our unsanctioned cloud apps on 11/15. I tried watching a video and usually it appears in the alert right away but the only alerts showing up are from 11/15. Nothing changed on our end that we know of.

Hi Team we are try to install the NS client on Macos 12.3 Macbookpro via email. (POC)We install package successfully but we  tenant and G/w is not display in Configuration of NS client.Lookup the gateway and URL resolution is successful. in Nsdebuglog I can see :   

Does anyone currently send CPSM (CIS findings) over to ServiceNow? If so, I would be interested in hearing the experience, any lessons learned, and finally where in ServiceNow the data lands.

Good morningI need to install on my enterprise mobile devices the Netskope client.On these devices the Microsoft Defender client is installed with VPN already active.I noticed from the logs that the netskope client fails to hook the Vpn because it sees the Defender VPN tunnel already activeCan any exceptions be set so that the two tunnels are active?Thanks

Hi People, I have configured and pushed my client in idp mode via jumpcloud idp and mdm solutions in windows, mac and linux OS. The Enrollment dialog box is popping up even after user closes it which is the expected behavior and it's working fine in windows. But for linux and MacOS if the user closes it, it doesn't automatically opens up again breaking the enrollment flow. Is there any way to fix this behavior for linux and MacOS?

Godaddy email synchronize mail - users / groups accounts  Hello good afternoon community, thank you for your collaboration and your time.I have a couple of questions: 1.- I have out there some possible client prospect that has his email accounts in Godaddy, is it feasible to synchronize the Godaddy users/groups directory to have those users/groups in netskope for use in the policies. 2.- For the Godaddy mail as such both example the Web/Cloud access to the webmail, as well as the Godaddy mail configuration in example outlook client desktop. Netskope covers this point, this protection ? what is the scope ? I have not found more information regarding Goddady for any of the 2 points. Please support me with your comments, your collaboration and your advice. Thank you Best regards

I am facing issues while attempting to block WhatsApp. I have created a cloud app policy to block WhatsApp, and it is successfully blocking the WhatsApp web. However, on  WhatsApp application uploading is getting blocked, but I am still able to send text messages.Is there a way to block text messages as well? I haven't found any corresponding events in the Netskope logs for sending messages.

Curious about how to make the leap to Zero Trust Connectivity?    Discover the limitations of traditional VPNs and learn how to migrate from VPN to ZTNA Next from a Netskope customer—Jeff Wehrman (@jwehrman), Sr. Staff Cybersecurity Engineer, at Dexcom in this webinar recap! The recording, slide deck and a summary of the Q&A can be found below:   Watch on-demand   Q: Netskope is not a total replacement for VPN, which means not supporting server to client flow. How can we overcome this? A: You bring up an important point. Most ZTNAs do not support server-initiated but Netskope ZTNA Next supports both client and server-initiated flows. Q: When within your office, is Netskope Private Access (NPA) engaged or does it go offline? A: Short answer is it stays engaged. The Netskope Client, which steers user traffic, is always on whether in office or remote. It can be configured to steer that traffic to the Netskope Cloud or a local ZTNA Broker ad