Product Forums

Hi team,We migrating policies from Zscaler to Netskope NGSWG with file type url filtering  and cloud apps control. As the categorization is totally different can you please help me out with this migration of policy I need to know the category fall in Zscaler which is fall in Netskope or any docs from your end will help thank you.

How is license consumption worked out for the SWG product? We're currently just syncing groups from Azure AD that contain users based on their office location and the total number of members in those groups is just under what we're licensed for, but want to ensure that we aren't missing anyone. If we sync a catch all group from Azure AD that contains about 3 times as many accounts as we have Netskope licenses what happens to our license consumption? Do we consume licenses equal to the total number of AD accounts that are synced, total number of enabled AD accounts, total Netskope clients seen over a time period, max concurrent connected clients, or something else?

Good afternoon,Many of our users on Chromebook/Chrome OS (differents constructors and differents "versions" like "Nami", "Zork", "Octopuss", "Hatch"...) experiment frequent disconnections since earlier version (actual latest version for ChromeOS via Playstore is 107.1.0.1529, published on 2023/08/23), tunnel going up/down in logs, this is very embarrasing for our users. Fixes have been deployed until the latest stable version mentioned above, but the disconnections are persistent, and seems more frequent when users are in homeworking. Does anyone encounters the same kind of issue, please ?Thank you if you can help me. I precise Netskope official support have already been contacted and is aware of this problem.Best regards. 

Hi team, I looking for a configuration where the user try to access the prvt apps whenever they tried the user get auth prompt for the Pvt apps only please let me know if it's possible to do so as I'm currently doing one POC so i get this requirement from customer end. Also please let us know the configuration to access network drive with the help of NPA.The user access the folders like go to THISPC on upper side bar write //x.x.x.10 IP e.g and access the network share folder I want this to acheive by Netskope I do follow the steps of SMB configuration but required a details regarding this please help me out with this configuration.

We recently attempted to set our NPA policies to our "Domain Users" (in our case "corp.alfacompanies.com/Users/Domain Users") group rather than leaving the "source/user=" field empty so it applies to All Users.  After the policies had time to simmer, we began noticing problems withfile shares (likely a DNS or Domain Controller conflict)lost access to the file sharesWindows Security prompts asking for credentialsgpupdate /forcefailed almost immediately due to failure to connectForticlient EMS status failed over to "not reachable"After changing our NPA policies related to domain controllers and DNS back to user=all users (aka empty) and allowing time for the settings to propagate , access returned to normal. That begged the question, why would setting the policy to "Domain Users" create such an adverse issue. In your experiences, if all domain users need access, do you typically leave the "source/user=" field empty?

Hello, we have disabled unenroll from client UI through client config. But in some instance need this operation  [eg: IT accidentally enrolled while troubleshooting under user's windows session]. Wondering if this can be done from CLI or manually deleting user level files. 

The Netskope clients have not been able to update configuration since September 1st for my tenant.  Netskope said its a known issue. Is there a reason why https://trust.netskope.com/ does not reflect this yet? Thank you. 

Hello and good morning 🙂 I would like to know how can I get the bandwidth consumption logs of a publisher because in the DEM (Digital Experience Management) in the NPA section it only shows the network sessions but not the throughput.

it is possible to enable the TCPDUMP command in the publisher? I have tried to run it, but it shows me this message You don't have permission to capture on that device(socket: Operation not permitted)

I have a few questions related to Netksope MIP integration. I looked around but did not get any concrete answers. Does Netskope require the customer to provision an Azure subscription or similar services when applying MIP labels to OneDrive files?  From what i understand , we only need the M365 licence ? Is the timestamp of a OneDrive file altered when Netskope applies a label? - This is important for our org to ensure that we dont modify the file timestamp. Is Netskope's file labeling service charged separately, or is it included with the standard Office 365 protection license? - I'm guessing there is no extra charge. Are there any restrictions on the number of files that can be labeled within a specific period by Netskope? - This is something our security team is asking and would love to know if there are any known limitations 

Hello, I need to enable the traffic of print queues from a pc client (with netskope client installed) to network printers in the headquarter(already installed with local IP on pc client), can you help me to create a NPA policy?What are the steps to follow?Is there a guide/best practies somewhere?  Thank you very much

Hello,  We configured a URL list to allow certain github repositories and noticing netskope is processing the list in case sensitive mode. Is this the default behavior? Can we have it process in case insensitive mode?  eg: github.com/Azure vs github.com/azure

Has anyone else heard of Microsoft changing their licensing model for Graph API integration. It's come to our understanding that the licensing model would now require E5 or equivelent add on to do the Netskope Teams integration for DLP. Does anyone else use the Netskope/MS Teams CASB Integration?

We started seeing safevisit.online in our reports within the last week or 2 that this site is being blocked as a security risk.  I've looked online but I haven't found any resources explaining what this site is or why its showing up.  If its a tracker, I'm guessing users are visiting a site that has it embedded.  The domain is less than a year old.

We have been unable to deploy Endpoint DLP. Having the same issues with different versions and the newest 1408. A good number of Managed devices on reboot disable the usb devices like mouse, keyboard, and printers. Has anyone been able to successfully deploy Endpoint DLP protection?I currently don't have any device control policies but do have quite a few Content Control policies.Any help would be appreciated.

A customer has several publishers deployed in the AWS cloud, he wants to see the resource consumption generated by the publishers but does not want to see them through the DEM>NPA on the tenant but wants to see them through the command line.How can I see this diagnostic?

Hello Netskope community,    Customers adopt different approaches on how they manage access to Youtube, where some have a more relaxed policy and some are more strict. For customers that need more granular controls over the video giant, controlling based on channel is one of the possible solutions.    Netskope's Instance Awareness feature extracts the channel name every time you visit a page or video so if you browse to the Netskope YouTube channel and check SkopeIT you will see something like this:  (notice the instance ID field populated with "netskope" and that will be true to any other channel on YouTube)    In order to setup a Real Time policy to either blocks a channel or simply allow it, depending on your strategy, create a new instance from SkopeIT by expanding one if these Application events and clicking on "Create New Instance" and just giving it a name.    After that, go to Real Time policies and setup a policy using this newly c

Just want someone else to confirm my observation:  While what POP a client software is connecting to is available, what version of the client being used is not.   I was trying to replicate the DEM dashboard, right now I have to download devices into a spreadsheet and then chart it.

I am looking for a way to look up a way to get a policy hit count, specifically for NPA policies but I can easily identify the NPA policies based on the name.  I would like to know of a way to get a count of every time a policy was hit.  Right now I have to go into Network Events in SkopeIt, export a list of all data for the last 90 days, and then do some Excel Kung-Fu and do a count-if for each policy name.  Maybe something in Advanced Analytics??

I am writing to ask that the Community contact their Netskope representative and and indicate your interest the Request to Enhancement that has been stalled:  "NPLAN-112: Apply steering configs based on priority in multi user machines. " You might not have noticed this, but if you have multiple users on one machine, Netskope may not be providing them with the correct steering config.  This is most noticeable when you are in the midst of CASB to SWG, but can occur otherwise too.  In a multi-user deployment mode, if the logged in users belongs to different OUs or user groups, the Netskope Client applies the steering configuration corresponding to the user most recently logged. Ensure all the users belong to a single OU or User Group for a multi-user machine.  https://docs.netskope.com/en/steering-configuration.html#UUID-eae29f38-85d9-fd13-74c9-077e1ef74513_section-idm4585568446828833492110209816 Here is a way to interpret this:   When the client has been installed in multi-user (peruserc

Similar to our earlier showcasing of Microsoft365, AzureAD and Salesforce, we have decided to dive deep into the Google ecosystem for enterprise SaaS. We have recently added Google Workspace components to our SSPM (SaaS Security Posture Management) solution.    Following suit with our other app-suites, customers that are on our SSPM platform will have access to filter and view their Google Workspace assets from the Inventory view, as well as out-of-the-box predefined rules, control mapping into a variety of compliance standards and domain categories, and the ability to execute custom queries and rules for continuous monitoring using Netskope Governance Language (NGL). Using the Google Workspace Admin-SDK as a source of truth, we pull all available information related to the following components:: - Domains - Roles and Privileges - RoleAssignments  - Third-party application tokens - Users ... with more on the way.   How do you find these attributes and components? We

I have few alerts triggered for the policy that I have created for DLP related policy when user post on ChatGPT.However, I am unable to know the exact reason why the alert was flagged. Also, I cannot view the content/part of the content of the post that was considered as a DLP violation. How and where can I view these details? Regards,Thomas

Has anyone ever needed to change the users' email domain on netskope?I have a client that needs to change the email domain, when it changes, the NPA stops working. The proxy service is still OK, but the NPA does not go up the tunnel. It only works again when he uninstalls and installs the client again.

Netskope's real-time protection provides a plethora of access-controls to enforce data security. Starting from R96, Netskope has standardized the function of "Alert and Continue policy evaluation" on all tenants. This feature would allow Netskope Cloud to continue evaluating Real-time policies for additional DLP violations, instead of terminating and exiting policy evaluation after a match.   This function would help influence the sequential processing of real-time protection policies based on specific configuration and thereby evaluating & matching against multiple DLP profiles and rules.Refer to the PDF document to know more about the policy flows and behavior.   https://docs.netskope.com/en/netskope-help/netskope-release-notes/netskope-cloud-release-notes/netskope-release-notes-hotfix-version-96-1-0/new-features-and-enhancements-in-hotfix-release-96-1-0/#UUID-76b0e39c-45b3-eb8c-0049-b6222ae411e5_section-idm4583494220057633155495922816 Document Authors - @vramnarayan &a

I have an instance where I have a block in place for an application but I do not want to receive alerts for it. Is there a way to keep the block but disable the alert?