Product Forums

Hey,I would like to know if anyone has had any problems with netskope azure upgrade, improved through marketplase.I try to update and get a docker image error context deadline exceeded (Client.Timeout exceeded while awaiting headers)

Hi,I went to upgrade two azure publisher, and got a return of ne errorPublisher image update failed: status 1 existsHas anyone ever experienced this?

Hi,We are facing some issues while we remove the user from the proxy group due to some exceptions. The policies applied on user is not getting reverted back.All restrictions are still getting applied. As a workaround we have to uninstall the client software and reinstall the same. Is there a better way to do this.

I need to deploy a Publisher for NPA. I would like to know if I can use RedHat to install the VMware ESXi OVA.

VMWare's Workspace ONE platform enables IT teams to manage any app on any device by integrating access control, application management, and unified endpoint management. In this guide you will learn how to perform a completely silent installation of the Netskope Client for supported MacOS versions.   High-Level Process From a high-level, the process is as follows: Configure Device Profile to deploy Pre-requisites Configure Workspace ONE Sensor to push pre-install file Push Netskope Client   Before you start, make sure to have Access to a Netskope t

Did you know that you can use Netskope DLP Incident dashboard to manage up to 100 Incidents at a time?   -Incident Dashboard allows you to use SkopeIT query to find Incidents by status or date range or severity or even incident number. (Sample query at the bottom of this page)   -You can change status of all incidents displayed on the page at once (You can expand page size to up to 100 per page from the drop down at the bottom right of the dashboard) Steps to find and resolve multiple incidents:   1. In the incident dashboard menu click the "Filter Search" funnel icon. (this icon switches between normal and query mode)   2. Enter a query using the "in" operator as shown for 2 incidents below. You can also add a custom status for filter e.g. if you want to omit incidents with status 'Resolved - Policy Updated' from the search. Note that incident numbers are included in single quote s

Hello, I am implementing a new proposal for Real Time Policies for Netskope, to follow best practices and reduce the number of polices to the minimum possible. Currently, I propose a structure similar to this (+ other specific policies of allow, block, dlp, threat protection etc..):Allow corporate App InstancesAllow "Sanctioned" AppsBlock not allowed CategoriesAllow allowed Categories But there are webpages that belong to a non-permitted category, but to which access must be allowed. The problem is they are webpages and not applications, I can't apply the "Sanctioned" tag. If I create a custom app with the URL of the webpage, it also does not allow adding the "Sanctioned" tag. What is the best practice recommendation to resolve the situation? I can only think of creating a new policy that is allow access to a custom URL List, but it doesn't seem like a maintainabl

Netskope Secure Web Gateway provides next generation secure web gateway (NG SWG) capabilities to prevent malware, detect advanced threats, filter websites by category, protect data, enable remote browser isolation, and control apps and cloud services for any user, location, or device. Netskope offers multiple traffic steering options to steer traffic to the Netskope Cloud: Netskope Client IPSec GRE Explicit Proxy Proxy Chaining For customers that want to leverage IPSec tunnels to steer traffic to the Netskope Cloud, Netskope strongly recommends the following:  Config

The Quick UDP Internet Connections (QUIC) protocol is a transport layer protocol created by Google.   If you are interested in learning more about the inner workings of QUIC, you can look at the Chromium Project.   Netskope recommends blocking QUIC to force a fallback to traditional HTTPS.  This allows for SSL inspection and applying Netskope’s activity, instance, and other advanced controls to traffic that would traditionally utilize QUIC.  In most Netskope configurations, no additional configuration is required.  See the sections below based on your Netskope deployment.    Client Using Secure Web Gateway, CASB, or Cloud Firewall Steering No configuration is needed in most case

Hi Everyone, Am wanting to enable CRL Checking of device certificate for Pre-Login tunnel.  I want to ensure the CRL in the certificate of the connecting NPA client will be available for verification but I'm unsure of the source doing the verification. The docs are not detailed enough. Where will the CRL Checking request originate? Will it be our management plane or the one of the many NPA Gateway's the client may connect to or some other component (eg. Stitcher)? Thank you

I am currently adding the Netskope agent install to our build script for Ubuntu 22.04When installing via the normal method detailed here: Netskope Client For Linux - Netskope Knowledge PortalThe agent installs fine but I am unable to get the agent to talk to our tenant, I enter our tenant name as both the name or the ns-auth version but this doesn't work I get the following error:Unable to verify Organization name Please verify and try again client - ERR_ORGID_NOT_FOUNDWhen trying to install the agent via the NSClient.run -i | --idp line the script fails returning " --idp command not found"I am not the best with linux by any means so would appreciate any insight into getting this to work in IDP mode so we can have staff member

Hi Everyone,Am attempting to create a report of all unsanctioned application usage where corporate email addresses have been used, is this possible with standard reporting?Thank you

I have one configuration, tied to an AD group, where people can disable Netskope to troubleshoot.  Occasionally I have people forget to enable.  I also want to track how long between enable and disable.     Is there a way to get these events in Advanced Analytics? 

Hello dear,In my company we use cisco sdwan to have high internet availability using two isps.However, as we use netskope, when Isp 1 has connectivity problems to the netskope cloud, I need to trace or change provider, so the only way cisco sdwan allows me to do this is by indicating a public ip with the port 80 open. To which public ip/port 80 I can now point the track to make my change of isp. Thanks and regards

I've recently seen some cases of web sites being blocked automatically due to low CCI which suddenly become allowed days (or even hours) later.Today's example was https://todoist.com/ which was being blocked due to low CCI in the morning, and by the afternoon was allowed.How often is the CCI reassessed for web sites ?

Hi Netskopers, is it possible to deny employees logging into unsanctioned apps using a corporate email account?  Can see it is possible to permit or deny other activities such as upload/download. Would like permit usage of unsanctioned apps using personal email addresses/accounts but not with corporate email addresses/accounts.Thank you  

to restart the netskope service so that it sends the events to the Qradar Siem, what would be the command or the options?

Hello Team, Hope you're doing fine. Could anyone please help me to get the URL with all the List of the Netskope POP accompanied with region, Public IP addresses, Development Status, ....Thank you in advance. Warmest Regards,Ali

Hey folks, has anyone tried to inspect ngrok traffic before? The ngrok config file has the option to include root CAs, which I have pointed to the usual nscacert_combined.pem but it still doesn't seem to work...any thoughts welcome!

Steps to Update Your NPA Publisher SSH into the Publisher you want to upgrade. On the Publisher option menu, select Upgrade, and then select 1 to initiate the upgrade. The upgrade should take around a minute. In the Netskope UI, go to Settings > Security Cloud Platform > Publishers. Locate the Publisher you just upgraded on the Publishers page to confirm it has a Connected status.

Hi Im having similar issues as others are when launching CE UI portal.https://community.netskope.com/t5/Additional-Discussions/Cloud-Exchange-not-staying-up-Bad-Gateway/m-p/2139I ran the ./setup but no luck. Changed the UID and GUID of the following folders to 1001 and ran the ./setup, but it keeps reverting back to 999https://community.netskope.com/t5/Additional-Discussions/Cloud-Exchange-Docker-containers-failing-to-start-upon-reboot/m-p/1271 Any ideas please?THanks Winder, 

Hi Netskope Community,We are following below admin guide & KB (both are same) for configuring Netskope SMTP proxy with MS O365 exchange.https://support.netskope.com/s/article/Configure-Netskope-SMTP-Proxy-with-Microsoft-O365-Exchangehttps://docs.netskope.com/en/configure-netskope-smtp-proxy-with-microsoft-o365-exchange.htmlWe encountered a backend error and see the attachment for error message screenshot.1. Has anyone encountered the same issue?2. What is the root casue for this issue?3. What is the fix to get rid of the error message?Thanks &

Hello Netskope community members!   For those of you who ever wondered what the "Blocked Events" dialog from the Netskope Client is actually tracking - I'll try to explain in a couple of words.         In the Steering Configuration Exceptions (Settings > Security Cloud Platform > Steering Configuration > tenant config > Exceptions) you will find the exceptions that are active for your specific tenant configuration. By default, they are filled up with exceptions that we know can be useful because of TLS decryption issues (certificate pinned apps). Note that these exceptions usually are configured with action "Bypass".  

Trying to set up an ODBC connection from Windows workstations to a GCP BigQuery service, and we get certificate errors when testing the connections. Turning off Netskope on the workstations allows the connections. Is it possible to allowlist connections to this service? I'm a Netskope amateur.  I've tried this so far, but no luck:  

Updating the client to Golden Release via tenant (“including . releases") is 105.1.1406  but the Golden MSI Windows release is 105.1.2.1408.   So are we missing functionality between these releases????