Product Forums

New user to Netskope so apologies if this has been answered.I have an internal application with an Admin page that can be access via port 8383.This application has a public address for client apps to communicate with when they are not in the building.  The Admin page is not available when you are using the External address.Example:Internal  App.Test.com  IP 192.1.1.1External App.Test.com. IP 35.1.1.1We configured this as a Private App, however the admin page does not work and from what I can tell from the logs Netskope is using the External address.  If I use the IP address instead of the FQDN internally it works.   Any thoughts?

Hello All, Looking for some help !! If we need to manage the traffic of unmanaged Devices like personal laptop , Tablets and mobile the usual proposed methodology is Reverse Proxy integration to map the control, But i wanted to check on the below mentioned point. If we have user authentication mapped with the Netskope proxy and user when logging in via personal devices and getting authenticated via Netskope Proxy in this case do we require the reverse proxy integration? Thanks in advance for your help !! Thanks & Regards Amar  

Has anyone experienced slow download/upload speeds when implementing SWG? It appears to be with large image files. When the Netskope client is disabled, the download speeds are much faster.Thanks.

Currently we are facing an issue where a bunch of Windows 10 Netskope clients attempted to auto update from v94 to v95 based on the setting in the cloud console.  We had a large amount of upgrade failures where the person is then left with no Netskope client installed. We disabled the auto update functionality on our steering config once it started to become a major problem to prevent the rest of our users dealing with this.    We currently also use NPA for managing these machines remotely through SCCM and for access to internal resources and we require the Netskope client to be installed for any access to cloud resources. Essentially every user that this happened to is completely unable to work and fixing the issue after the fact becomes difficult as we were switching to relying on a VPN for remote access to Netskope.    Is anyone else facing this issue?

Dear All,We have recently enabled cloud update from the console for version 99.0.0. with opt in dot upgrade. We have a fleet of 28K device. We are experiencing lot of broken client. As per the STAupdate.txt the client upgrade failed with 1603 exit code, rolled back but was left in a corrupted state.We have to uninstall the client and install the new version manually to resolve the issue. STAUpdate.txt file attached. Logged a support call with the managed service provider for Netskope and hopeful to get a prompt reply and solution. It has become a service desk nightmare. Is this a common issue for all netskope client versions? Any peer comment will be highly appreciated. 

Hello Netskope Community!    This topic covers Fiddler, the 18yo Web Debugging proxy that most seasoned web developers, IT and security professionals love. This tool can help you record, view, replay and tweak web transactions in unimaginable ways making it one of the most popular web debugging tools in the world.    Fiddler Classic is only available for Windows but there is a paid version called Fiddler Anywhere which can also run on Mac and Linux.    A common question we get is, how can i make it work with Netskope? The reason behind this question can be someone who is just debugging their very own applications, a security researcher or even a Proxy SME troubleshooting an issue.    Once you install Fiddler on a Windows machine (did all my testing with Windows 11 Home edition build 22621) two things matter most: 1) how you will proxy the traffic and 2) how you will intercept the traffic.    Let me address the second item first since it

Hi, We want to script "Disable Netskope Client", "Enable Netskope Client" on MacOS. That is a full tunnel teardowns and rebuild, reloading of network stack etc. I saw some posts re using sudo launchctl [un]load /Library/LaunchDaemons/com.netskope.client.auxsvc.plist but this appears to do nothing. Certainly the NPA tunnel stays up for existing connections.Thanks

Is there the possibility of integrating IRM with Netskope and being able to restrict what types of documents can be sent through WhatsApp according to their label? I saw in the official documentation that Netskope supports the following cloud apps with MIP:Box, OneDrive, SharePoint, Google Drive. Thanks in advance for your help in this matter.

With Cert Pinned Apps, one can can specify an application (Windows EXE, Mac Process, etc) and what domains to bypass.  While there is a block option, you cannot specify specific domains, it treats the field as a "*" regardless of what is placed in the field.    My use case is that I have an application that one can put APIs into.  This is very useful, but i would like to prevent OPENAI.COM.  However, as programmed by Netskope, despite specifically putting OPENAI.com in the URL list, it blocks all Internet access from the application, which is causing disruption. This is not not explained at all during the creation process and has a single line dedicated to it in a KB article. Blink and you will miss it!   “Block: The mode and other options are not applicable and the client blocks all the app traffic”(Reference:  https://docs.netskope.com/en/adding-exceptions.html)  I am asking for support.   Please tell the Netskope representative that you are interested in adding your company's name t

This post is about API Protection (previously known as API Introspection) integration best practice:   Can I integrate multiple instances of the  same SaaS app (e.g. My company's Sharepoint dev and Sharepoint prod) to one Netskope tenant? -Sure you can. And most customers do. There is no problem as long as you are within your license quota. For licensing questions reach out to your Sales team. -Having multiple SaaS apps in one tenant is also not uncommon (e.g. Box, Webex, Zoom, O365 in one Netskope tenant). Again it is just the license you need to purchase for additional SaaS app.   I have more than 2 Netskope tenants but I have only one SaaS app tenant. Can I have the same instance of one SaaS app integrated to multiple Netskope tenants? Caution! Even though the integration may succeed (i.e. the instance grant process turns green on both Netskope tenants) few immediate side effects I would like to alert you about - You are essentially doubling your API usage becaus

What is the difference between App events, page events, and alerts into skope IT?

  Zero Trust Network Access(ZTNA) solutions provide vast security improvements compared to traditional VPNs thanks to only allowing users access to the applications they need. Autopilot can be used to simplify and streamline the bulk deployment, setup, and configuration of Windows 10/11 devices in an organization to ensure they are provisioned and locked down according to corporate standards. It can also be used for device reset, repurpose, and recovery. Netskope has a feature called Netskope Private Access Prelogon for Private Apps which assists customers to take advantage of autopilot functionality.   Netskope’s Professional Services team has been using this feature to recognize company owned devices and associate them with appropriate enrollment workflows and configuration profiles,  automatically join devices to Azure Active Directory (Azure AD) or Active Directory, auto-enroll devices into MDM services such as Intune, and Customer Out of Box Experience (OOBE) conten

Hi community,  we are facing issues with several of our websites accessed via NPA:Reaching the website is working without any issue, but if you let it in background for a while and come back to it, sometimes it falls into error without possibility to refresh the page and make it work. User needs to disable/enable agent to make it work again. Anyone faced similar issue ?Thanks, Robin

Hello Everyone,  I am trying to block the upload and send chats for WhatsApp Cloud App. I have created the  cloud app policy for WhatsApp and selected the activity "upload" and set the action "block",when we tried to upload any file it gets blocked but we are not able to block send chats for same it is still allowing.I have also tried by creating "Chat, IM & other Communication" category and selected the activity upload, and set the action "block" but it did not worked as well. Please help on how we can block the send Chats for WhatsApp web. 

Hello Team, We want to block chat activity on Whatsapp web and allow the upload activity. How can we achieve this? 

Support for corporate applications from Mobile with Android and IOS Smartphones Hello good afternoon, thinking about SSL Pining, and applications that can not be decrypted their traffic. In environments with Android and IOS mobiles, in the following native applications not Web/Cloud: Onedrive, Outlook, Sharepoint, Office 365 Suite. Thinking about the full of features and the support of these features of the Netskope Suit ( CASB, SWG, DLP, Threat Protection, API Protection, etc ) what are the scopes, limitations with respect to mobile devices with Office 365 applications. Thanks for the collaboration, for your time and the good vibes. Best regards

Hello Netskope Community,   Wondering if I can use Discord as cloud app in my real-time policy ?   I can see the app activities (when I am using it through browser) in skope it application events, also in CCI database but I cannot see the app listed inside de policies.   It is something related to my backend licenses or I just doing something wrong.   Thanks,   And e rson      

Doubts with CCI and Real Time Protection Policy Cloud App. Hello good afternoon, first of all thank you for your time and your collaboration.I have a question, regarding the apps I see in the CCI listing, example I see the Telegram app in the listing, as poor, with its CCL all OK. But the issue is when I have to go to generate a Real Time Protection policy, I select Cloud App and look for telegram .... and it does not appear ? This is correct, it is expected or something happens ? since I am supposed to be able to invoke and link in my policies all the CCL applications and be able to use them without problems, but I search for Telegram, with lowercase t, with capital T and it does not appear. Is there any kind of restriction in this regard? Thank you, I remain attentive Best regards

Microsoft Office 365 Integrations - Privileges and Roles Hello good afternoon Netskope community. A doubt, to make SCIM integration with AzureAD for Users/Groups privisioning, with an Azure-AD user having the Application Administrator Role, he can manage enterprise applications for example SCIM and SSO usage for UI administration. Now I can't find the exact role, privilege and/or permissions or permissions that are required for an account to integrate with Onedrive, with Outlook, with Sharepoint, via API to be able to use API protection It speaks of "Global Administrator", please can you confirm me exactly the granular role that allows an account to perform this type of integration between Netskope and Office 365, I already tried with the same Role Application Administrator and does not allow me. Azure AD built-in roles:https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Thanks to all of you for your time, collaboration and good

As a security architect or as a Netskope admin it is sometimes tempting to configure controls that are too broad. Especially when a tool's UI makes it easy for you to do so.:) Think of the implications of broader controls from an operations point of view. Think of some of the side effects: false positives, missed true positives, barge of DLP incidents in your queue to name few. A seasoned DLP admin would share stories of painstaking tasks of managing those incidents, storing chain of custodies using Legal Hold and Forensic folders, determining the right storage of choice and then the cost associated with it just storing files and meta data that may or may not make sense without a good DLP program in place. Here are some questions you might want to ask your DLP / Compliance team / or the sponsor of DLP program to get a discussion started on this topic:  It allows me to apply DLP to  "All Web Categories", should I go ahead and create such a broad DLP policy though? Answers to the questio

Hello, I need to obtain information about the file extension included in the Documents option, within Netskope - Policies - Real time protection - Policy category survey solution -ACTIVITIES & CONSTRAINTS - Activities Upload - Documents.If there is any document with the other options, please also send it. Attached imageThank you

Punycode is a standard for mapping characters using the ASCII standard and one of its functions is to provide support for Internationalized Domains Names (IDNs) to the internet. This is used when you see non-ascii characters like Cyrillic, Latin, Chinese and others on a domain name to make sure the DNS and subsequent HTTP requests are all completed successfully.   Punycode becomes a security risk in connection with homographic phishing – cyber-attacks in which criminals use the similar appearance of different characters to lure their unsuspecting victims to fake websites.   Example: netskоpe.com looks identical to netskope.com but the letter “o” used in the first example is in Cyrillic giving an attacker the ability to send the user to a completely different domain. The way browsers deal with the difference above is by converting punycode into ascii characters so by clicking on the first link would actually get you to xn--netskpe-ejg.com. You can play with this by finding a p

Netskope Private Access is a Zero Trust Network Access (ZTNA) solution that connects users and devices to applications rather than networks.  This differs from traditional network access solutions such as remote access VPNs.  Legacy VPNs provided network level access for remote users by essentially extending your internal network to the remote device.   This was simple from an administrative and user perspective, but ultimately provides unnecessary access for most employees.  In contrast, ZTNA solutions like Netskope Private Access provide access to applications based on contextual criteria such as user risk, device risk, and which resources are being accessed.  This is more secure and aligns to Zero Trust principles such as providing minimum access levels , continuously verifying context, and removing implicit trust based on the network.  While this is significantly more secure, it can also be more challenging for administrators to implement as they need

Hi There,  Looking to see if there will be support for copy, paste and print activities on Netskope reverse proxy.  Microsoft has them in their cloud app security suite for a couple of years now.       

Total applications supported by App instance - New App Instance. Hello good afternoon, first of all thanks for the collaboration, good vibes and for your time.I have a doubt, regarding the possibility of being able to identify corporate Instances. What applications are currently compatible with Netskope, to identify and define your corporate instance? That is to say by means of App instance - New App Instance ? https://docs.netskope.com/en/app-instance-profile.html#:~:text=Navigate%20to%20Skope%20IT%20%3E%20Application%20Events%20or%20Skope%20IT%20%3E%20Alerts. Thank you I remain attentive Regards and attentive to your comments