Skip to main content
  • EN

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

672 Topics
amerdzan
Netskope Employee
amerdzanNetskope Employee
posted in Private Access for ZTNA
Customer Webinar - How to Enable Your Remote Workforce

Enabling hybrid work is key to retaining and recruiting talent. Zero Trust Network Access (ZTNA) enables employees using any device to access desired resources to make them productive no matter where they work.   In this webinar, we’ll dive into the Netskope’s ZTNA offering, Netskope Private Access, and review its key capabilities, architecture, sample use cases such as Microsoft Autopilot integration, and new features including API for automation and pre-logon capabilities.   Join Netskope Solution Architect, Sam Shiflett as he compares legacy remote access methods with modern zero trust network access (ZTNA). You won’t want to miss live demos highlighting how to implement the below use cases at your organization. Learn how you can: Enable access for employees and contractors  (without losing control) Remotely onboard new devices including active directory and autopilot integration Secure access to applications deployed in public clouds Rapidly on

2
amerdzan
Netskope Employee
2 years ago
ppasseri
Netskope Employee
ppasseriNetskope Employee
posted in Next Gen SWG
Dropbox: Flexible Cloud Storage Increasingly Exploited by Attackers

Dropbox is flexible cloud storage service increasingly exploited by attackers for opportunistic and targeted campaigns. In my latest Cloud Threats Memo, i described two recent campaigns, providing some strategies to mitigate the risk of legit cloud storage services exploited for malicious purposes.   https://www.netskope.com/blog/cloud-threats-memo-dropbox-flexible-cloud-storage-increasingly-exploited-by-attackers

0
ppasseri
Netskope Employee
2 years ago
J
jamesbanNew Member III
posted in Next Gen SWG
Netscope Chrome Extension

What are the use cases of Netscope chrome extension? Is this designed just to address Chromebook support? Does this extension only steer browser-based traffic or other app-based web traffic as well running on any client machine? Can I push the extension through MDM or UEM?

2
J
Netskope Employee
2 years ago
J
jamesbanNew Member III
posted in Next Gen SWG
Outlook through forward proxy

Hi Team, I am seeing intermittent outlook disconnect through forward proxy. Has anyone seen this issue? What is the best practice for outlook-O365 traffic through Netskope forward proxy with SSL inspection?

2
J
Netskope Employee
2 years ago
R
rpatelNew Member
posted in CASB
Slow internet access- Performance problem...

Hello , Is any one seeing performance degradation in their  internet access when  netskope  is enabled ? ( netskope client version 90.x) I have opened case now as so many users reported to gather today, vs few early this week. RP

7
S
2 years ago
Natedog0024
Natedog0024New Member
posted in CASB
NetSkope Steering Configuration

Hello, Wondering if anyone has run into this before. I am testing a per user install and i am finding that the steering configuration is sticking between users. So if one user has steeringconfig1 and they logout and the next user has steeringconfig2, the user changes on the client, the client configuration changes, but the steering configuration does not. Has anyone else seen this prior? Nate

6
zthompson
2 years ago
oscar
Netskope Partner
oscarNetskope Partner
asked in Next Gen SWG
[SOLUTION] How to detect MIP labels with real-time SMTP outbound app policies

Hello everyone, thanks for reading this. I'm trying to detect MIP labels with real-time SMTP outbound app policies, but I cannot make it work. I found this video (Microsoft and Netskope Email MIP) where it shows a bit how MIP label ID has been set as a regex and scan type is Metadata&Content.Unfortunatelly it does not show the rest of DLP Rule configuration. I tried the same config as the video, also tried the same but adding "^.+" and ".+$" before and after the regex respectively as well.I also tried putting the whole "MSIP_Label_{LABEL-ID}_Name" string, which can be seen opening the MIP labeled MS Office document and going to "File > Information > Properties > Advanced Properties > Custom Tab".I set scan type as Metadata&Content, set the threshold to 1 and set apply action to severity low.None of this worked for me. I hope someone has faced this situation and found a solution.Thanks in advance,Òscar

5
oscar
Netskope Partner
2 years ago
M
Netskope Partner
MuditNetskope Partner
posted in Next Gen SWG
Netskope SSO with Onelogin

Configuration Document for Netskope Tenant SSO with One Login

0
M
Netskope Partner
2 years ago
J
jamesbanNew Member III
posted in Next Gen SWG
Forward proxy authentication with SSL bypass

I am trying to understand how the forward proxy handles user authentication/identification when SSL is set to bypass when there is no agent running on the endpoint. 

2
zthompson
2 years ago
Y
yduchovnyNew Member
posted in Private Access for ZTNA
Deploying Netskope Private Access Publisher with Amazon EC2 Auto Scaling

The deployment guide you can find following the link below illustrates how to deploy Netskope Private Access Amazon EC2 Auto Scaling.   Netskope Private Access (NPA), a Zero Trust Network Access (ZTNA) solution, seamlessly connects authenticated users anywhere, using any devices to private resources in data centers and public cloud environments. Built on the NewEdge security private cloud, NPA delivers fast and direct application connectivity, ensuring a superior user experience. To learn more about Netskope Private Access please refer to the Netskope Private Access product overview  and Netskope Private Access documentation.   Amazon EC2 Auto Scaling helps you maintain application availability and allows you to automatically add or remove EC2 instances according to conditions you define. You can use the fleet management features of EC2 Auto Scaling to maintain the health and availability of your fleet. You can also use the dynamic and predictive scaling features of EC2

0
Y
2 years ago
B
Netskope Partner
bradkingNetskope Partner
posted in Next Gen SWG
URL List for Testing

Does Netskope have a list of web site URLs that have been defined for testing policies?

2
F
Netskope Employee
2 years ago
tchiu
tchiuNew Member
posted in CASB
New Apps Supported by CASB API

In case you didn't see the blog article published on May 10, here's some information on the new applications Netskope has added support for in our CASB API product. We started rolling out support for these new applications at the end of April: Workday Yammer Citrix ShareFile Okta With the addition of these four new applications, Netskope now supports a total of 23 applications in our CASB API product. If you're not familiar with, or not using our CASB API product (and only using CASB Inline as part of NG-SWG and/or Cloud Inline), there are significant additional benefits that an API based product delivers, both standalone and in conjunction with an inline solution. If you have only an inline deployment for CASB, or you’re just starting to look at CASB solutions, you may be wondering why you’d want or need a CASB API deployment. With API, CASB takes advantage of existing APIs in SaaS and IaaS applications to provide full granular context on data exposure and controls. Becaus

0
tchiu
2 years ago
A
Netskope Employee
andreabergamiNetskope Employee
posted in CASB
Change CASBI sku

Hi Team, i have a question: during installation at the customer, it’s possible to convert the casbi license for dropbox to gmail license and maintain the same number of user?   Thanks a lot, A.

1
tchiu
2 years ago
M
mdantonaExplorer
asked in Private Access for ZTNA
Netskope Client Post install failures on macOS 12.3.1

  Hey Community,    it seems that since version 93.0.1 we're not able to complete installations of the netskope client. Here's a snippet of the post install error from the macOS install.log. 2022-05-04 13:28:10-07 NNN-NNNN-NNNNNNN installer[1929]: install:didFailWithError:Error Domain=PKInstallErrorDomain Code=112 "An error occurred while running scripts from the package “NSClient_93.0.1.944.pkg”." UserInfo={NSFilePath=./postinstall, NSURL=file:///Library/Application%20Support/JAMF/Downloads/NSClient_93.0.1.944.pkg#STAgent_unsigned.pkg, PKInstallPackageIdentifier=com.netskope.STAgent.pkg, NSLocalizedDescription=An error occurred while running scripts from the package “NSClient_93.0.1.944.pkg”.}   Is anyone else struggling with this.? Right now all of our new users are unable to use Netskope. We escalated this to Netskope support two and a half weeks ago (4/19) without resolution. Does anyone here have any insight?

9
M
2 years ago
D
DbrattrbiNew Member
posted in Next Gen SWG
Block page for SSL Decrypt Bypass traffic

I am interested to know how other customers are able to present a block page when a user is browsing from a network segment that has an SSL Decrypt Bypass policy applied.  Currently, users are shown a generic "this site can't be reached" message versus our branded block page.  Netskope Support stated the branded block page (custom User Notification) cannot be displayed since Netskope is not intercepting the traffic due to the SSL Decrypt bypass policy.  Is anybody else experiencing the same issue?

2
JulieB
2 years ago
N
nkingNew Member III
posted in Security Posture Management
CSPM Auto remediation for GCP

In this article we’ll demonstrate how you can implement automatic remediation for security posture violation findings discovered by Netskope Cloud Security Posture Management (CSPM).   Netskope CSPM continuously assesses public cloud deployments to mitigate risk, detect threats, scan and protect sensitive data and monitor for regulatory compliance. Netskope simplifies the discovery of security misconfigurations across your clouds. Netskope Auto-Remediation framework for GCP enables you to automatically mitigate the risk associated with these misconfigurations in your GCP cloud environment.   Netskope CSPM security assessment results for such security benchmark standards as NIST, CIS, PCI DSS, as well as for your custom rules are available via the View Security Assessment Violations Netskope API.   Netskope auto-Remediation solution for GCP deploys the set of GCP Cloud functions that query the above Netskope API on the scheduled intervals and mitigates supported violation

0
N
2 years ago
edwin_alvarez
Netskope Partner
edwin_alvarezNetskope Partner
asked in Next Gen SWG
APP Google Gmail activity delete

when configuring a CASB  real time policy for the Google Gmail app, is it possible to configure email deletion activity? or how to achieve this

2
bob
Netskope Employee
2 years ago
R
RobbGNew Member III
posted in CASB
Netskope Client 93 - Mac - JAMF Policy install - Trigger Configuration Update Post Install

Using JAMF to deploy Netskope Client v93.0.1.944 to target Macs (10.14.6 through 12.3.1).   Installation is successful, but on Big Sur and higher, it can take up to 10 minutes for the client to automatically enable and download its configuration updates. If the Update link is clicked, the client downloads updates and enables itself.   If I run "/Library/Application Support/Netskope/STAgent/nsdiag -u" from Terminal, the client downloads updates and enables itself.   However, if I run that as a Execute Command or as an After script in the policy (or separately), I get the following message: "Failed to download configuration updates."   Any suggestions would be appreciated... thanks!

3
R
2 years ago
H
hyunboNew Member
asked in Next Gen SWG
Traffic Steer on Galaxy S8

Hello folks, I'm having difficulties to use traffic steering on my Galaxy S8. Hopefully, I want to know what caused this and if it is what it is, way to configure my Galaxy S8/Android device to use VPN like iOS would be nice.   I've sent invitation to my email account on Security Cloud Platform -> Netskope Client -> Users. Then clicking Android Client link on the mail led me to Google Play Store link. Then Google Play Store Netskope Cloud Directory page appears and I tab install button. Then open. Then Netskope Client says "Client is waiting for configuration". Then nothing. No further progress. In Settings, Organization, Gateway, Gateway IP Address, Steering Configuration, Device Classification are blank.   My other Galaxy Note 10 appears to working fine.   both devices gets link like https://play.google.com/store/apps/details?id=com.netskope.netskopeclient&referrer=utm_source%3Daddon-viccns.goskope.com%26utm_medium%3D7345%26utm_term%3dsfsdfsdE6zBjE5gj2Ib6%26u

7
H
2 years ago
P
paulsmithauNew Member
posted in Security Posture Management
Netskope for protecting users on public WifI

Is it fair to say that Netskope can be used to protect user activity when connected to public wifi?

3
mherbinet
Netskope Employee
2 years ago
S
scolemanNew Member III
posted in Next Gen SWG
Allow access to a site that is in multiple categories and one of them is blocked.

In this example, we want to block Streaming and Downloadable Video, and need to: Remove that category from the default steering exceptions to ensure it is steered to the Netskope cloud. Identify which URLs you want to block and which you want to bypass. For mediacompanyabc.com most if not all the actual streaming content is hosted on mediacompanyabc.com/videos, so for our example we are going to create a custom category with an exclusion to accommodate our use case. using mediacompanyabc.com/videos as the exclusion to a custom News and Media category. Create a custom URL list and call it “Streaming and Downloadable Video UL” (UL is for URL List) and add mediacompanyabc.com/videos to it. Create a custom category and call it “News and Media CC” (the CC is for Custom Category) and include the News and Media category and exclude the Streaming and Downloadable Video UL. Create your policies with an allow for News and Media preceding a block for Streaming and Downloadable

1
J
2 years ago
jforrest
Netskope Employee
jforrestNetskope Employee
posted in Next Gen SWG
[Getting Started] Best Practice Policies - Inline

The intention of this document is to level set on the base set of policies, policy grouping, and policy evaluation behavior that is generally applicable to all inline(CASB/NS-SWG) customers.   We are also working on runbooks to accompany each of the policy groups highlighted in the presentation, which will be posted in the near future.   Webinar Recording Link

7
jforrest
Netskope Employee
2 years ago
N
nish0101New Member
posted in Security Posture Management
Netskope and Nomad software cache 1E- Vendor

Does the Netskope Agent update work with Nomad software cache 1E- Vendor?

2
myee
Netskope Employee
2 years ago
A
Anonymous
asked in Next Gen SWG
Allow automatically VPN Popup via Intune

Hello Community, I have deploy the MacOS agent via Intune, but at the client configuration, the user need to accept to add a Proxy configuration. (like file attached.) I know it's possible to bypass that for Jamf by following this configuration : https://docs.netskope.com/en/deploy-netskope-client-with-jamf.html Anyone of you is in the same situation ? do you have resolve it ?  Thanks for your feedbacks.

4
M
Netskope Employee
2 years ago
S
subhamg1New Member
posted in Private Access for ZTNA
Can we use multiple domain system with a single tenant

Case1 – Set multiple domains laptop as a posture parameter without any SAML authentication & client installation via email invite only·Will NPA solution work properly ??·What is the draw back if we implement NPA without IDPCase2 – Initially multiple domains laptop as a posture parameter, without IDP user used Netskope NPA solution and after some time IDP SAML authentication integrate with Netskope·Then what is the impact on current NPA working user after IDP integration·Both user work parallelly or not??Case3 – If Azure AD used as a SAML authentication configured for IDP & SCIM integration with same Azure AD·Then how to deploy Netskope client to different domain user systems and work·what is the traffic flow from other domain system to CFS environment?

1
M
Netskope Employee
2 years ago

Badge winners

Show all badges
Terms & ConditionsCookie settings