Product Forums

I am currently adding the Netskope agent install to our build script for Ubuntu 22.04When installing via the normal method detailed here: Netskope Client For Linux - Netskope Knowledge PortalThe agent installs fine but I am unable to get the agent to talk to our tenant, I enter our tenant name as both the name or the ns-auth version but this doesn't work I get the following error:Unable to verify Organization name Please verify and try again client - ERR_ORGID_NOT_FOUNDWhen trying to install the agent via the NSClient.run -i | --idp line the script fails returning " --idp command not found"I am not the best with linux by any means so would appreciate any insight into getting this to work in IDP mode so we can have staff members using Ubuntu just login with their SAML credentials instead of the tenant needing to be linked.Thanks

Hi Everyone,Am attempting to create a report of all unsanctioned application usage where corporate email addresses have been used, is this possible with standard reporting?Thank you

I have one configuration, tied to an AD group, where people can disable Netskope to troubleshoot.  Occasionally I have people forget to enable.  I also want to track how long between enable and disable.     Is there a way to get these events in Advanced Analytics? 

Hello dear,In my company we use cisco sdwan to have high internet availability using two isps.However, as we use netskope, when Isp 1 has connectivity problems to the netskope cloud, I need to trace or change provider, so the only way cisco sdwan allows me to do this is by indicating a public ip with the port 80 open. To which public ip/port 80 I can now point the track to make my change of isp. Thanks and regards

I've recently seen some cases of web sites being blocked automatically due to low CCI which suddenly become allowed days (or even hours) later.Today's example was https://todoist.com/ which was being blocked due to low CCI in the morning, and by the afternoon was allowed.How often is the CCI reassessed for web sites ?

Hi Netskopers, is it possible to deny employees logging into unsanctioned apps using a corporate email account?  Can see it is possible to permit or deny other activities such as upload/download. Would like permit usage of unsanctioned apps using personal email addresses/accounts but not with corporate email addresses/accounts.Thank you  

to restart the netskope service so that it sends the events to the Qradar Siem, what would be the command or the options?

Hello Team, Hope you're doing fine. Could anyone please help me to get the URL with all the List of the Netskope POP accompanied with region, Public IP addresses, Development Status, ....Thank you in advance. Warmest Regards,Ali

Hey folks, has anyone tried to inspect ngrok traffic before? The ngrok config file has the option to include root CAs, which I have pointed to the usual nscacert_combined.pem but it still doesn't seem to work...any thoughts welcome!

Steps to Update Your NPA Publisher SSH into the Publisher you want to upgrade. On the Publisher option menu, select Upgrade, and then select 1 to initiate the upgrade. The upgrade should take around a minute. In the Netskope UI, go to Settings > Security Cloud Platform > Publishers. Locate the Publisher you just upgraded on the Publishers page to confirm it has a Connected status.   The full support article can be found here: https://support.netskope.com/hc/en-us/articles/360042838534-Upgrade-the-Publisher   Credits: Private Access Virtual Team Members

Hi Im having similar issues as others are when launching CE UI portal.https://community.netskope.com/t5/Additional-Discussions/Cloud-Exchange-not-staying-up-Bad-Gateway/m-p/2139I ran the ./setup but no luck. Changed the UID and GUID of the following folders to 1001 and ran the ./setup, but it keeps reverting back to 999https://community.netskope.com/t5/Additional-Discussions/Cloud-Exchange-Docker-containers-failing-to-start-upon-reboot/m-p/1271 Any ideas please?THanks Winder, 

Hi Netskope Community,We are following below admin guide & KB (both are same) for configuring Netskope SMTP proxy with MS O365 exchange.https://support.netskope.com/s/article/Configure-Netskope-SMTP-Proxy-with-Microsoft-O365-Exchangehttps://docs.netskope.com/en/configure-netskope-smtp-proxy-with-microsoft-o365-exchange.htmlWe encountered a backend error and see the attachment for error message screenshot.1. Has anyone encountered the same issue?2. What is the root casue for this issue?3. What is the fix to get rid of the error message?Thanks & Regards,Indu

Hello Netskope community members!   For those of you who ever wondered what the "Blocked Events" dialog from the Netskope Client is actually tracking - I'll try to explain in a couple of words.         In the Steering Configuration Exceptions (Settings > Security Cloud Platform > Steering Configuration > tenant config > Exceptions) you will find the exceptions that are active for your specific tenant configuration. By default, they are filled up with exceptions that we know can be useful because of TLS decryption issues (certificate pinned apps). Note that these exceptions usually are configured with action "Bypass".     Once you change this action from "Bypass" to "Block" - that's when you tell the client not to Bypass these connection attempts, but actually block them from establishing on the client. And we have no means to track that in the NewEdge DP, since the connection will never reach us as it's already blocked locally. So

Trying to set up an ODBC connection from Windows workstations to a GCP BigQuery service, and we get certificate errors when testing the connections. Turning off Netskope on the workstations allows the connections. Is it possible to allowlist connections to this service? I'm a Netskope amateur.  I've tried this so far, but no luck:  

Updating the client to Golden Release via tenant (“including . releases") is 105.1.1406  but the Golden MSI Windows release is 105.1.2.1408.   So are we missing functionality between these releases????  

I would like to report on the number of users working with Google Docs (Docs, Spreadsheets, ...) but there is no built-in application definition. Some of the activities are logged as "Google Drive" application but not all them, resulting in visibility gap. I would like to know how can I create a dashboard showing Google Docs usage per activity (share, edit, download, upload, ...). I tried creating a custom app definition based on the url docs.google.com but that one is not able to differ certain activities and almost everything is reported as "browsing". Thanks!

We recently enabled SWG, and file transfer download speeds are extremely slow. Is anyone else having this issue? We enabled DTLS as recommended by Netskope, but that did not fix the problem.

Hello friends,Someone has already had the problem of adding an application in bypass .. accessing this application in the cloud is via CLI , when accessing I receive this error when the client is active and NPAwithout NPA active, only the client passed the err "an unknown error occurredI noticed some errors without debugging  NSCom2.cpp:1850 NSCOM2 message INST_CERT_IN_FF sent from server to "nsClientUI_s2" client with count 1 stAgentSvc p1404 ta9c error registry.cpp:160 registry RegOpenKeyEx failed, err: 2stAgentSvc p1404 ta9c warn proxy.cpp:155 nsUtil Failed to auto detect proxy or download PAC file, error 12180stAgentSvc p1404 t3a4c info fileUtil.cpp:83 nsUtils failed to open file for reading: C:ProgramData etskopestagent/data/authtoken.pem, err: 2 stAgentUI p117c t3374 error NSCom2.cpp:1527 NSCOM2 client socket connect failed 10061 Does anyone know what could be going on? The above path has been added to the antivirus exceptions list  

We have some sites we need to bypass so that the traffic comes from our own IP address ranges. When those sites are behind AWS Elastic Load Balancers or Azure Frontdoor we're suffering frequent steering failures. E.g.User tires to access OurSite.Example.com from our office LANOurSite.Example.com is a CNAME record that resolves to ELB-Frontdoor-Unique-ID.CloudService.com, ELB-Frontdoor-Unique-ID.CloudService.com itself resolves to a generic ELB-Frontdoor.CloudService.com address, and ultimately ends up with one or more IP addresses.OurSite.Example.com is in our bypass list.Hosting systems that provide OurSite.Example.com have filters/firewall rules configured to prevent access to the site unless the source IPs are ones assocaited with our office LAN.Client logs show OurSite.Example.com is bypassed.When it works that's all that shows in the logs.When it fails the logs then show that the traffic to ELB-Frontdoor-Unique-ID.Cloud.com is getting tunnelled and going via the Net

How are other customers tuning the UBA Bulk Upload (and Download)? These 2 policeis seem to be the noisiest and have the most "false positives". There is no way that I can tell to have an exception for specific apps. For example, the Brave sync applications. This local app is constantly uploading small data about its browser (for sync purposes). I would love to exempt that from the Bulk Upload UBA policy.

Just want to know how the Netskope certificates get installed on the system automatically by any backend mechanism and how the system knows that the installed certificates in from Netskope. This would be very helpful for me to know the backend mechanism.  

Hello all, We are at the tail end of our Netskope deployment and having some hesitation with rolling out to one department. This department has users that work remote on company issued devices and have to complete an RDP connection to a device on-site. We've tested eliminating the need for the RDP connection with NPA, however the files they need to access are quite large (2GB +) and are located on an on-prem server. When they have used our VPN or NPA it can take upwards of 20 minutes just to pull down one file. We want to have our SWG policies apply to this group, but not have NPA active for them. I've tested creating policies to block NPA access, but that creates an unnecessary amount of noise for the user. I'm hoping someone can point me in the direction of how to disable NPA for these users prior to deploying the agent. Thanks for the help!

What are the sources of the "Compromised Credentials" information?Does "Compromised Credentials" include credentials traded on the dark web?

The client is migrating virtual servers and the NPA publishers are located in them. The query is where I can change the name of the network card because it does not allow me to modify the value and it is necessary to clone the equipment and make it functional.

I need deploy Netskope Client with a Windows Golden ImageMy support team have a golden image and install Netskope client. Close the Image and deploy this imageBut in Netskope report I an see that appear Duplicated "Unique Device ID"This Duplicated "Unique Device ID" can deleted? having a duplicate GUI for the NEtskope client affects or notWhat is the best method to distribute the netskope agent using a golden image?