Product Forums

Has anyone heard how Netskope plans to deal with Windows Linux Subsystems on the Windows 10 and 11 devices. We have several users where I work that are asking question around this.  

Hi Team I want to ask some Netskope question I just checked one configuration of Netskope SMTP proxy where we can see there are two connector connector 1 office 365 to partner and the second connector from your organization to O365. So why we required your organization in second connector. Also from MS team when they are tried to select Your organization they get and error of licensing but same licensing part is working for another please let us know.

Hi there, One of my client doesn`t want to go other way of steering traffic from Windows Server 2016 to Netskope Cloud so he wanted to use Netskope Client to steer the traffic from the Windows Server 2016. We tried to install, client stays disabled and when checked logs it says the below.Initially we thought it would UPN and EMAIL ID are not matching, but we created separate the account with the same UPN and EMAIL ID, but client still fails to download config branding file and stays disabled. What you suggest next we should do? 2023/08/09 16:49:23.584 stAgentSvc pcb0 t17b4 error config.cpp:6234 Config Branding file downloaded failed for user: Removed the user ID2023/08/09 16:49:23.584 stAgentSvc pcb0 t17b4 error config.cpp:4571 Config Failed to download branding file using UPN2023/08/09 16:49:13.570 stAgentSvc pcb0 t17b4 error config.cpp:8173 Config failed to download UPN hashing config2023/08/09 16:49:13.570 stAgentSvc pcb0 t17b4 info config.cpp:5960 Config UPN encoded for u

Hi Community, I'm trying to understand how to allow certain users on a policy that has an Unsanctioned App. Basically, I don't want the whole organization to have access to it but only authorized users. Therefore, is there a way to allow this? I've tried to but I automatically get blocked even if there's a policy for the allowed users placed above the "Block Users to ___". Any suggestions would be great.

I have a private app configured to allow port 22 and users are able to use SSH and SCP successfully. Users are observing an intermittent issue when trying to SSH/SCP into the app and getting this error: kex_exchange_identification: Connection closed by remote host Connection closed by 191.1.1.3 port 22 This error prevents user from starting a new SSH/SCP session, but all existing SSH/SCP sessions are fine when this error occurs. Usually if user retry's ssh after a while, the error goes away.  Is there any kind of SSH connection limiting in the NS Client or Publisher?

Hello NS community!   Currently Netskope URL categorization product has 127 categories. Some categories are meant for legitimate traffic such as Financial News, Business, Educations, and some categories are security risk related such as, Security Risk - Botnets, Security Risk - Phishing/Fraud. There are also categories that may not be allowed for work environment such as Gambling, Tobacco or Adult contents. Each customer can create their own policies to allow or block each URL category. In order to test these policies, customer needs to know the URL samples in each category and then performs the test.   Attached you can see an example of these "hardcoded" categories for all our categories so you can test your policy in real-time. Be cautious as clicking in these URLs will generate logs for the Netskope user accessing them so make sure administrators know these tests are being performed.      Update (8/14/23): Updated attachment with latest "Generative AI" categ

Dear Team, We noticed that the internet is in working condition for every other user, however, it is showing an error of the internet not working on a that particular system.After analysis, we found the below logs, we need your assistance to understand the cause. fileUtil.cpp:45 nsUtils failed to open file for reading: C:ProgramData etskopestagent/eventcache.json, err:2t40a4 info fileUtil.cpp:82 nsUtils failed to open file for reading: C:UsersAppDataRoamingNetskopeSTAgent/data/authtoken.pem, err: 2t2afc error registry.cpp:158 registry RegOpenKeyEx failed, err: 2 Best Regards.

We can't be the only ones out there fighting these limitations with Google and Netskope.Google has Badge Labels (like most collaboration services) but they are pretty much focused around doing DLP inspection. Essentially, assign a label of "Confidential" and specific DLP detections are done (i.e. Credit Card). What we would love to do is use labels as a way to enforce access control. With the new R107 release of Google Badge Label support, there isn't really any meaningful actions that can be used (that Google doesn't natively do already). We would love to detect if a label is detected to enforce access control to that document. For example, if we assign a label called "Important People Only" (which is made up of a handful of internal people and some external people) and someone assigned the label to a document Netskope will perform an action to update the people it is shared with to the people in the group called "Important People Only". Currently, the only actions are to re

IntroductionChatGPT and other AI chatbots have been getting a lot of attention lately.  They are extremely helpful in getting information, responding to custom queries, and can even be used to write code along with other common daily tasks.  They represent an exciting new digital frontier but from a security perspective, they also represent yet another place for your corporate data to go.  Netskope’s inline Next-gen Secure Web Gateway capabilities can block posting of sensitive data to collaboration tools such as Slack and Teams out of the box.  It got me to thinking that since ChatGPT is essentially a chat system, why can’t we use a similar capability to block posting sensitive information to ChatGPT?  As one quick tangent, I also want to give OpenAI some credit as they also warn the user that it’s not appropriate to put personal data into their platform:   That being said, this is as after I already posted the data and relies on ChatGPT recognizing the

We’re having an issue with our web server blocking Netskope IPs. Where can I find a list of IPs that I can whitelist?

Hello, Wondering what is the use case for DNS steering in Steering config and How does it differ from "Use publisher DNS" in PrivateApps.   

Good Afternoon folks We're pretty new to Netskope, so please excuse me if this is the wrong place for this question or if it's a particularly basic question, and we're going through the Eseential 8 security process at the moment. To that end, we're looking to prevent Admin accounts from being able to access the internet when logged into machines with Netskope installed. Is this something that Netskope is capable of? I'm assuming it's a policy that we can roll out to a created group of users? Thanks very much

Hello All,The following articles have come out re: Evasive Phishing that domain front-ends Google to protect potentially malicious or unintended traffic from being picked up by filtering or threat. The following articles address how this works:https://cofense.com/blog/google-amp-the-newest-of-evasive-phishing-tactic/https://www.malwarebytes.com/blog/news/2023/08/phishing-campaigns-found-to-be-using-amp-urls-to-avoid-detection This means if NGSWG can't categorize the URL is hiding in AMP then it will treat the site as categorized as safe (or likely safe) based on that it is hosted at google, not the real site of xxx.xxx (or whatever malicious site and path is included there). Examples:https://www.google.com/amp/s/xxxxx.xxxx/somesite.html or https://www.google.co.uk/amp/s/xxxx.xxx/badimage.img From a position of making sure this product is competitive in the market, there are some other vendor tools that can granularly expose this hidden URL and site an

We are looking to start using a knowledge sharing platform called notion.so. Does anyone have experience with setting up DLP on this platform?  I'm curious if I can just use the same web policies there.

I have a number- of applications where a corporate IP address allows access without authentication.  For the first 15 or so, we have been 100% successful in using the Forwarder back to corporate and then sending the traffic from here.  However, the most recent set, library resources works some days and don't work on other days.   Has anyone seen this behavior?  

Provisioning Users from AWS accounts (Customer manages AWS Amazon WorkMail, for their mail accounts - business mail service). Hello good afternoon, how are you doing? As always, thanks for your cooperation and support as always. I have a question, a customer X, has a mail service on AWS, no Azure AD, no local AD, no google apps. So he only has for his mail accounts AWS - Mail Account - Enterprise Service. Is Netskope compatible, for the moment I have not seen any document, do you know if it is compatible Netskope, to provision fianles users, users to Tenant, by SCIM, LDAP or IDP, against AWS, in order to provision users and groups ? Does anyone have any information, data or details regarding this scope of Netskope ? Thanks, I remain attentive Best regards

the way to see the Cloud exchange console is which? Should I open from any browser with the IP where the connector is located or do I have to do it on the client's server where the connector was installed?

I know it is not recommended to steer VoIP traffic to Netskope because it adds additional hops to reach the destination causing possible performance/audio drops.I tried bypassing MS Teams in the past in our environment and experienced slower speeds and conditional access issues. What would be the best way to bypass VoIP traffic on ports 3478-3481 to the authentication URL teams.microsoft.com with conditional access in mind?

Hi AllCould someone please shed some light on below queries, we are having issues with Prelogon Tunnel in our environment. Do we need to specify prelogonuser= argument during msi install with 105.0x?Since Client Configs does not allow  the use of same prelogin account in different Configs , what is expected behavior when different users associated to different client configs login to the perusermode configured machine? Would the prelogon account change to the one defined in client config pulled down by last logged in user?Especially when logged on users changing their AD passwords, they get the error  “Information could not be read from the domain controller”.Please adviseThanksParul

Has anyone been able to look for a specific google drive label (metadata) with an API policy using a DLP profile and then restrict/change access to the file? I feel like this worked a long time ago but we can't seem to get it going now.Essentially, when a user applies a specific label on a Google document (corporate google drive configured with API Introspection) we want to detect that label when the document is shared externally. The action will be to remove the external share.

I have a single publisher that I've configured and deployed as an initial investigation of the configuration.   Is there a recommended way of capturing all the customization that was necessary to get it working in our environment?   I can certainly go back through our support cases and gather them, but that would likely require applying the config modifications on each new host individually.   As we look to roll out a fleet of publishers, manually entering these configurations on each device could be significantly slow our rate of depoyment.

Hello folks, I hope you're all doing well with your schedules!I have one concern/issue with the o365 native iPad app.What is occurring here is that we have installed the Netskope client on the user's BYOD and the user is unable to login into their 0365 native apps on their iPad. When I checked Skope, it shows User Login FailedAnyone who has dealt with similar challenges or has suggestions about how to address them? Thank you in advance.

Hi Community Team, A DLP policy with PCI-DSS profile is placed as top-rule to identify sensitive information in upload & download activities. It is working as expected only with DOCX files. This policy is not working with CSV, TXT, JPG & PNG files. When uploading CSV/TXT files, the policy is not even being hit. I would like enquire with Netskope community if anyone has noticed such issue and how they fixed it. Thanks.

Hi Community Team,Working Scenario: When we upload or download sensitive data (Credit card, CVV & email) with TXT, CSV & DOCX files to Facebook & LinkedIn, then Netskope DLP is alerting fine with PCI-DSS, DLP-PCI & DLP-PII profiles.Working Scenario: when we type & send sensitive data (Credit card, CVV & email) in LinkedIn Messages, then that message is being alerted (fine). LinkedIn Message DLP alert is showing Activity as POST and Object type as Message.Failed: However, When we type & send sensitive data (Credit card, CVV & email) in Facebook Messages, then it is not being blocked or alerted. We are expecting the action to be POST and activity should be Message or anything. However, Facebook Message sensitive data share action is not visible in Application Events, Alerts and Page Events.Below screenshot is the policy. Has anyone noticed this issue? If yes, please suggest the fix.Thanks. 

We've had success implementing and increasing adoption of Private Access over the past 3 years.  But, 1-2 users weekly report Private Access going down.  Suddenly their Netskope Client stops routing network traffic including DNS and IP.  To resolve we uninstall and reinstall of the Netskope Client.  We have created several support cases but support suggests to uninstall and reinstall the Netskope Client which we deem a work around, not a fix.  Trying to determine if its something we are doing wrong or a problem with the Client. Anyone experiencing similar issues?