Skip to main content
  • EN

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

718 Topics
S
scolemanNew Member III
posted in Next Gen SWG
Determine communication between domains and application without decrypting the traffic

If you find yourself in a situation where you are not using the client and need to know exactly what to bypass in SSL Decryption policy or Steering Exceptions, you can use the following to quickly determine what domains you need to focus on.   Netskope relies on private keys in order to determiner the URLs for any HTTP traffic that has been encrypted using TLS.  If you don't have the private keys, you can query the SNI from the certificate exchange for the domains being called.   To do this, simply capture a successful application session using Wireshark then run the following command against the PCAP to pull the domains from the SNI in the certificate exchanges.   tshark -r ~/file.pcapng -T fields -e tls.handshake.extensions_server_name | sed ‘/^$/d’   This will produce a list separate from the below example: a88.oms.opinsights.azure.com dc.services.visualstudio.com management.azure.com login.microsoftonline.com batchexplorer.azuree

970
R
Netskope Employee
3 years ago
kvarshney
kvarshneyExplorer III
posted in Next Gen SWG
New to Netskope and wondering what SASE is?

SASE means Secure Access Service Edge, a term crafted by Gartner. SASE architecture delivers both “WAN capabilities” and “security” as a “cloud service” directly to the source (users, devices, IoT, etc.) without backhauling to enterprise data centers.   It is a fact that the Internet was not designed by keeping security in mind, as in the beginning it was not meant for business. Later, Internet security started with the Firewall when businesses started connecting to the internet. Firewall blocks outsider access to the business network while allowing returning traffic when employees access public services (websites). As the internet grew, firewalls were enhanced with URL-filtering based on URL-categorization to block website access based on content categories such as business, gambling, education, and violence. Firewalls were further enhanced with App-Control and Data-Loss-Prevention (DLP) capabilities as employees, as well as businesses, started using cloud apps from the enterpris

650
mferguson
3 years ago
pvilarino
Netskope Employee
pvilarinoNetskope Employee
posted in CASB
Highest-impact CASB Tips & Best Practices

Hi everyone   if you still haven't registered for this event, you still have time, it starts in 30 min....   May 26 , 2021 8:00am PDT   If you would like to attend the session please register with the following link https://events.netskope.com/highestimpactcasbtipsbestpract   please feel free to reach out if you have any questions.

840
R
Netskope Employee
3 years ago
B
bridgeNew Member III
asked in Private Access for ZTNA
Private access on a server

Has anyone used Private access to tunnel in for services on servers, I know I can install it but if its not logged in as a user is there a way to get it to steer traffic still.  I dont think this is possible without scripting in a login with a service account but figured id ask.  

280
stevej
3 years ago
R
rfletcherNew Member III
asked in Next Gen SWG
SWG Login - How to Log In to the Powershell Interactive login's

Has anyone had any issues with interactive login's executed via powershell when behind the Netskope SWG?For example: when connecting to exchange online or any kind of Microsoft service via powershell you are typically prompted with a O365 login prompt but when behind SWG we get "New-ExoPSSession : An error occurred while sending the request.." I found 2 work arounds 1) disabling the Netskope client and 2) custom app in the steering configuration to bypass login.microsoft.com when connecting via powershell.exe. I'm wondering if anyone else had experienced this or could think of another work around.

1620
R
3 years ago
juergen
Netskope Employee
juergenNetskope Employee
posted in Next Gen SWG
SkopeIT query bar: How find a query field name

The SkopeIT query bar is powerful tool to show filtered data. Sometimes it is a bit challenging to find the name of a field to be used in a query. E.g. we recently introduced a new SkopeIT field called "Netskope Pop". This field tells you, where the traffic was enforced. The get field name for a query just mouse over the field in the detailed event view (see screenshot). Then you can use it in a query like this: "netskope_pop like FRA1".

580
R
Netskope Employee
3 years ago
T
tonoherreraNew Member III
asked in CASB
Edit Certificate Pinned Application

Does anybody know how to change the name of a custom Certificate Pinned Application created for traffic steering, is that even possible?

630
M
Netskope Employee
3 years ago
M
Netskope Employee
mbrockneyNetskope Employee
posted in Next Gen SWG
Use Cases For Remote Browser Isolation (RBI)

In case you weren't aware, Netskope has been supporting RBI for several months now.  With RBI, risky web pages are rendered in a remote browser and only the pixels (not the potentially malicious code) are sent down to the user's browser.  I've deployed this recently with a few of my customers and great use cases have surfaced.  RBI automatically prevents downloads/uploads from risky sites.  This allows users to browse sites but prevents potentially malicious downloads.  The second use case comes into play when Uncategorized websites are sent to RBI.  You may have a newly registered domain for an app like yourcompany.altlassian.com.  If you are blocking the Uncategorized category, users will most likely open up support tickets and the site will need to be whitelisted.  With RBI, users will still be able to see those sites as they will be safely rendered in the remote browser session.  One customer mentioned that this will greatly reduce their

540
M
Netskope Employee
3 years ago
S
scolemanNew Member III
asked in Next Gen SWG
Is Netskope intercepting my browser traffic?

Question: How can I tell if my traffic is being intercepted by Netskope from a browser?

8710
R
Netskope Employee
3 years ago
S
scolemanNew Member III
posted in CASB
What is the Netskope's FedRamp Status?

Interested in checking out Netskope's FedRAMP status?   Click HERE.  

240
S
3 years ago
R
Netskope Employee
ramienNetskope Employee
posted in CASB
Monitoring Collaboration and Messaging Applications Best Practice and Considerations

Collaboration & Messaging apps like Webex, Zoom, Teams, and Slack can be challenging for any organization to tackle. As these cloud resources are being consumed from remote locations maintaining control of what users can and cannot share has become more challenging. Furthermore, consider apps like QQ, WeChat, and KakaoTalk that use certificate pinning, and you quickly realize that control becomes a privacy concern. This doesn't always have to be the case, however in this battle for control its more important than ever to address privacy first.   Here are a few things to consider: Some applications leverage other Cloud Storage Resources to share content. For instance Cisco Webex Teams uses alternate domains for Cisco Spark Messaging and chat. MS Teams uses OneDrive, Zoom can use Google Drive. Mapping collaboration and messaging apps to Cloud Storage will minimize false negatives and make policy creation and testing much easier. De-sanctioning of cloud apps and understanding wh

1760
R
Netskope Employee
3 years ago
R
Netskope Employee
ramienNetskope Employee
posted in Private Access for ZTNA
Learn about how Netskope and Okta can integrate to provide Zero Trust Network Access

The first step in adopting a Zero Trust or cloud based Remote Access solution is to ensure you have an Identity & Access Management solution that integrates with your SASE provider to deliver rich contextual access based controls.  Below is an example of how Netskope integrates with Okta to ensure identity and source of truth governance are defined and delivered as part of a Zero Trust adoption strategy.   

410
R
Netskope Employee
3 years ago
rcanzanese
rcanzaneseNew Member III
posted in Next Gen SWG
Netskope Cloud and Threat Report Infographic - February 2021

The February 2021 Cloud And Threat Report highlights 5 themes we saw in 2021 for our NG-SWG customers:   The majority of malware is delivered via cloud apps Malicious Office documents continue to be used to deliver malware Nearly half of all cloud apps in use in the enterprise have a poor CCI rating 83% of users upload data to personal apps on managed devices Cloud phishing continues to increase, using cloud-hosted baits and targeting cloud credentials Along with the report, we have published a series of blog posts that contain additional details from the report.    If you want to find out more about what is happening in your environment, you can use Advanced Analytics.  The following screenshot shows the malware, phishing, and CCI breakdown for apps within a specific enterprise environment.  This particular environment sees more cloud malware and less cloud phishing than the report shows.  How do you stack up?     https://resources.netskope.c

240
rcanzanese
3 years ago
shogrefe
shogrefeNew Member III
posted in Private Access for ZTNA
Straight Talk Series: Secure Cloud Collaboration

Businesses everywhere are facing the challenge of how to keep remote workers collaborative while also protecting their users and data. In this Straight Talk video, Netskope CISO, Lamont Orange discusses the importance of secure collaboration for today’s remote world.  

200
shogrefe
3 years ago
S
scolemanNew Member III
posted in CASB
Cloud Confidence Index Application Assessment Request

The Cloud Confidence Index is a database of over 40,000 applications which have been evaluated based on 30+ objective criteria adapted from Cloud Security Alliance Guidance. These criteria measure and application's enterprise-readiness, taking into consideration an its security, audit-ability, and business continuity.   From time to time, you may feel a need request that an application be re-assessed by our CCI Research Team, or you identify that a NEW application is not on our list.  In those cases, please send your request, including (1) the application name and (2) the reason for the request, to the CCI Research (cci-request@netskope.com).

710
S
3 years ago
S
scolemanNew Member III
asked in Next Gen SWG
Size of SWG incremental updates

What is the file size (appx) of the incremental SWG domain category updates?

370
T
Netskope Employee
3 years ago
S
scolemanNew Member III
asked in Next Gen SWG
Adding and Removing Domains from Categories

Question: How often does Netskope add or remove domains from their categories?

250
B
Netskope Employee
3 years ago
S
scolemanNew Member III
asked in Next Gen SWG
Clarification of "Native" tag in SkopeIT

Question: What does "Native" indicate in the "Browser" field in Skope IT?

1010
D
3 years ago

Badge winners

Show all badges
Terms & ConditionsCookie settings