Product Forums

Hi, We are currently in the process of setting up a new netskope installation for private access and DLP. Things a re going fairly well and most stuff is working. We have a lot of devs in our organization and a lot of them use WSL on windows for things like their buildtools and docker etc. What we have found is we have to install the netskope linux client in WSL for it to be able to get private access. This is in addition to the windows client. Although this is logical as wsl is a hyperv vm underneath the hood, its far from optimal. Has anyone else got and alternative ways of doing it?ie can the windows netskope client provide a proxy we could define via the https_proxy variables etc? 

Hello community the new ZTNA NEXT was announced. Does anyone know the release date yet?how can we test it?Will it be a separate license?need to change the topology?

Hello all, I considered posting this here since my comment in the following post might be not seen:Netskope DLP use cases for ChatGPT - The Netskope Community We found the reason DLP is not working for chatGPT.ChatGPT input is sent as a HTTP POST, sending the message inside the JSON payload.The problem comes when the input text contains newline characters.Nweline characters are sent as ' ' and Netskope does not treat these as newline but as a literal '' and an 'n'.This means if I send for instance a list of card numbers or SSN numbers as follows:132412341234132412341234 What is being actually sent is "132412341234 132412341234".Netskope sets implicitly word boundaries to entities, this means word boundary characters (dot,

I was looking for anyone with experiences with converting over to SWG that includes the Epic (www.Epic.com).  Lessons learned, SWG implementation schedule, really anything. 

New user to Netskope so apologies if this has been answered.I have an internal application with an Admin page that can be access via port 8383.This application has a public address for client apps to communicate with when they are not in the building.  The Admin page is not available when you are using the External address.Example:Internal  App.Test.com  IP 192.1.1.1External App.Test.com. IP 35.1.1.1We configured this as a Private App, however the admin page does not work and from what I can tell from the logs Netskope is using the External address.  If I use the IP address instead of the FQDN internally it works.   Any thoughts?

Hello All, Looking for some help !! If we need to manage the traffic of unmanaged Devices like personal laptop , Tablets and mobile the usual proposed methodology is Reverse Proxy integration to map the control, But i wanted to check on the below mentioned point. If we have user authentication mapped with the Netskope proxy and user when logging in via personal devices and getting authenticated via Netskope Proxy in this case do we require the reverse proxy integration? Thanks in advance for your help !! Thanks & Regards Amar  

Has anyone experienced slow download/upload speeds when implementing SWG? It appears to be with large image files. When the Netskope client is disabled, the download speeds are much faster.Thanks.

Currently we are facing an issue where a bunch of Windows 10 Netskope clients attempted to auto update from v94 to v95 based on the setting in the cloud console.  We had a large amount of upgrade failures where the person is then left with no Netskope client installed. We disabled the auto update functionality on our steering config once it started to become a major problem to prevent the rest of our users dealing with this.    We currently also use NPA for managing these machines remotely through SCCM and for access to internal resources and we require the Netskope client to be installed for any access to cloud resources. Essentially every user that this happened to is completely unable to work and fixing the issue after the fact becomes difficult as we were switching to relying on a VPN for remote access to Netskope.    Is anyone else facing this issue?

Dear All,We have recently enabled cloud update from the console for version 99.0.0. with opt in dot upgrade. We have a fleet of 28K device. We are experiencing lot of broken client. As per the STAupdate.txt the client upgrade failed with 1603 exit code, rolled back but was left in a corrupted state.We have to uninstall the client and install the new version manually to resolve the issue. STAUpdate.txt file attached. Logged a support call with the managed service provider for Netskope and hopeful to get a prompt reply and solution. It has become a service desk nightmare. Is this a common issue for all netskope client versions? Any peer comment will be highly appreciated. 

Hello Netskope Community!    This topic covers Fiddler, the 18yo Web Debugging proxy that most seasoned web developers, IT and security professionals love. This tool can help you record, view, replay and tweak web transactions in unimaginable ways making it one of the most popular web debugging tools in the world.    Fiddler Classic is only available for Windows but there is a paid version called Fiddler Anywhere which can also run on Mac and Linux.    A common question we get is, how can i make it work with Netskope? The reason behind this question can be someone who is just debugging their very own applications, a security researcher or even a Proxy SME troubleshooting an issue.    Once you install Fiddler on a Windows machine (did all my testing with Windows 11 Home edition build 22621) two things matter most: 1) how you will proxy the traffic and 2) how you will intercept the traffic.

Hi, We want to script "Disable Netskope Client", "Enable Netskope Client" on MacOS. That is a full tunnel teardowns and rebuild, reloading of network stack etc. I saw some posts re using sudo launchctl [un]load /Library/LaunchDaemons/com.netskope.client.auxsvc.plist but this appears to do nothing. Certainly the NPA tunnel stays up for existing connections.Thanks

Is there the possibility of integrating IRM with Netskope and being able to restrict what types of documents can be sent through WhatsApp according to their label? I saw in the official documentation that Netskope supports the following cloud apps with MIP:Box, OneDrive, SharePoint, Google Drive. Thanks in advance for your help in this matter.

With Cert Pinned Apps, one can can specify an application (Windows EXE, Mac Process, etc) and what domains to bypass.  While there is a block option, you cannot specify specific domains, it treats the field as a "*" regardless of what is placed in the field.    My use case is that I have an application that one can put APIs into.  This is very useful, but i would like to prevent OPENAI.COM.  However, as programmed by Netskope, despite specifically putting OPENAI.com in the URL list, it blocks all Internet access from the application, which is causing disruption. This is not not explained at all during the creation process and has a single line dedicated to it in a KB article. Blink and you will miss it!   “Block: The mode and other options are not applicable and the client blocks all the app traffic”(Reference:  

This post is about API Protection (previously known as API Introspection) integration best practice:   Can I integrate multiple instances of the  same SaaS app (e.g. My company's Sharepoint dev and Sharepoint prod) to one Netskope tenant? -Sure you can. And most customers do. There is no problem as long as you are within your license quota. For licensing questions reach out to your Sales team. -Having multiple SaaS apps in one tenant is also not uncommon (e.g. Box, Webex, Zoom, O365 in one Netskope tenant). Again it is just the license you need to purchase for additional SaaS app.   I have more than 2 Netskope tenants but I have only one SaaS app tenant. Can I have the same instance of one SaaS app integrated to multiple Netskope tenants? Caution! Even though

What is the difference between App events, page events, and alerts into skope IT?

  Zero Trust Network Access(ZTNA) solutions provide vast security improvements compared to traditional VPNs thanks to only allowing users access to the applications they need. Autopilot can be used to simplify and streamline the bulk deployment, setup, and configuration of Windows 10/11 devices in an organization to ensure they are provisioned and locked down according to corporate standards. It can also be used for device reset, repurpose, and recovery. Netskope has a feature called Netskope Private Access Prelogon for Private Apps which assists customers to take advantage of autopilot functionality.   Netskope’s Professional Services team has been using this feature to recognize company owned devices and associate t

Hi community,  we are facing issues with several of our websites accessed via NPA:Reaching the website is working without any issue, but if you let it in background for a while and come back to it, sometimes it falls into error without possibility to refresh the page and make it work. User needs to disable/enable agent to make it work again. Anyone faced similar issue ?Thanks, Robin

Hello Everyone,  I am trying to block the upload and send chats for WhatsApp Cloud App. I have created the  cloud app policy for WhatsApp and selected the activity "upload" and set the action "block",when we tried to upload any file it gets blocked but we are not able to block send chats for same it is still allowing.I have also tried by creating "Chat, IM & other Communication" category and selected the activity upload, and set the action "block" but it did not worked as well. Please help on how we can block the send Chats for WhatsApp web. 

Hello Team, We want to block chat activity on Whatsapp web and allow the upload activity. How can we achieve this? 

Support for corporate applications from Mobile with Android and IOS Smartphones Hello good afternoon, thinking about SSL Pining, and applications that can not be decrypted their traffic. In environments with Android and IOS mobiles, in the following native applications not Web/Cloud: Onedrive, Outlook, Sharepoint, Office 365 Suite. Thinking about the full of features and the support of these features of the Netskope Suit ( CASB, SWG, DLP, Threat Protection, API Protection, etc ) what are the scopes, limitations with respect to mobile devices with Office 365 applications. Thanks for the collaboration, for your time and the good vibes. Best regards

Hello Netskope Community,   Wondering if I can use Discord as cloud app in my real-time policy ?   I can see the app activities (when I am using it through browser) in skope it application events, also in CCI database but I cannot see the app listed inside de policies.   It is something related to my backend licenses or I just doing something wrong.   Thanks,   And e rson      

Doubts with CCI and Real Time Protection Policy Cloud App. Hello good afternoon, first of all thank you for your time and your collaboration.I have a question, regarding the apps I see in the CCI listing, example I see the Telegram app in the listing, as poor, with its CCL all OK. But the issue is when I have to go to generate a Real Time Protection policy, I select Cloud App and look for telegram .... and it does not appear ? This is correct, it is expected or something happens ? since I am supposed to be able to invoke and link in my policies all the CCL applications and be able to use them without problems, but I search for Telegram, with lowercase t, with capital T and it does not appear. Is there any kind of restriction in this regard? Thank you, I remain attentive Best regards

Microsoft Office 365 Integrations - Privileges and Roles Hello good afternoon Netskope community. A doubt, to make SCIM integration with AzureAD for Users/Groups privisioning, with an Azure-AD user having the Application Administrator Role, he can manage enterprise applications for example SCIM and SSO usage for UI administration. Now I can't find the exact role, privilege and/or permissions or permissions that are required for an account to integrate with Onedrive, with Outlook, with Sharepoint, via API to be able to use API protection It speaks of "Global Administrator", please can you confirm me exactly the granular role that allows an account to perform this type of integration between Netskope and Office 365,

As a security architect or as a Netskope admin it is sometimes tempting to configure controls that are too broad. Especially when a tool's UI makes it easy for you to do so.:) Think of the implications of broader controls from an operations point of view. Think of some of the side effects: false positives, missed true positives, barge of DLP incidents in your queue to name few. A seasoned DLP admin would share stories of painstaking tasks of managing those incidents, storing chain of custodies using Legal Hold and Forensic folders, determining the right storage of choice and then the cost associated with it just storing files and meta data that may or may not make sense without a good DLP program in place. Here are some questions you might want to ask your DLP / Compliance team / or the sponsor of DLP program to get a discussion started on this topic:  It allows me to apply DLP to  "All Web Categories", should I go ahead and create

Hello, I need to obtain information about the file extension included in the Documents option, within Netskope - Policies - Real time protection - Policy category survey solution -ACTIVITIES & CONSTRAINTS - Activities Upload - Documents.If there is any document with the other options, please also send it. Attached imageThank you