Product Forums

Hi everyone, happy Friday/weekend! I just have a couple of things that I wanted to ask and get answers. I've searched the documentation and have found no information regarding my question, though I might have used incorrect keywords1. If I am steering all web traffic to Netskope, what happens to web traffic that did not hit any policy ? Does Netskope have implicit deny?2. If I have Realtime Threat Protection policy below,Source: AnyDestination: Any Categorized web traffic Activities and Constraints: Upload and DownloadProfile and Action: Default Malware scan where all severities are just alerting with no Remediation Profilewhat happens when a categorized site did not hit any severity? will it load the site or not?I know these are basic questions and I appreciate you all for taking time in providing answers.Thanks and have a great weekend! 

Hi team can i able to give access to specific users who can have disable option. And have r

Microsoft’s Azure Active Directory is widely used by thousands of organizations around the globe.  It is the largest directory and identity provider in the world with this trend only accelerating as more and more organizations migrate away from on-premises Active Directory.    Those tens of thousands of organizational directories present an interesting security challenge to ensure users only access authorized tenants and resources.  Microsoft has long provided Tenant Restrictions as a means to restrict logins to authorized tenants.         In April of 2022, Microsoft announced a new, robust method of controlling access to Azure AD directories and applications called Cross-tenant Access policies.  Cross-tenant access takes the core concepts of tenant restrictions and provides a number of key enhancements.  Cross-tenant Access policies are granular and allow administrators to specify combinations of users, groups, and applications f

Hi Guys,Does anyone know a site to check on Netskope Proxy status in Real Time ?

Hi everyone, thanks for reading. I'm trying to build some reports with Advanced Analytics.I wanted to created some widgets first and then reuse them to build several reports.I couldn't find a way to do that. I only can create widgets directly inside the report, which limits these widgets to be used in the report they were created from. If I create widgets outside a report I cannot find how to insert them in a report. NS docs say the following:WidgetsA widget is a good choice if you want to create, change, and test a report in one place but use it in multiple dashboards.The widget and the dashboard must be in the same folder. If the widget is changed, the changes to the widget will show in your dashboard. If the widget is deleted, the dashboard will show an error for this tile.REF: https://docs.netskope.com/en/creating-reports--dashboards-.html  I have both reports and widgets inside the same folder as the docs says. Does somebody know how to make it? Otherwise I wou

Hi,We have some issues with a html that shows a circle loader. This html is categorised as malware by netskope: malware name: Trojan.HTML.MALINK.FASJSNORSmd5: 51618ac2b7cf5c4937213e965c00f20aSha256: 0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5This is the script content that loads the HTML:  <script language="Javascript">var _skz_pid = "9POBEX80W";</script> <script language="Javascript" src="http://cdn.jsinit.directfwd.com/sk-jspark_init.php"></script>  In virustotal, it is also categorised as malwareSearching in url scan, you can see several webpages with this hash, but it always refer to 40X HTTP response.This is one example: https://urlscan.io/result/7d7170fa-b6d7-43bd-87da-df6028f0a753/  Reading this post, it seems that some hosting server, wordpress plugis, etc, are using this html loader template instead of 404 page.Most likely, some malware was pointing to some server, but then , the m

Hello All, I was wondering if there was a way to remove items from the alerts page for sites know I want to block but don't want to see in Skope IT alerts page?     An example would be items that are triggering based on "securepubads.g.doubleclick.net" as a malsite.  I know I want to block these but I don't want all of these entries filling up our Alerts log in Skope IT.  Is there a way to block this but not alert to Skope IT easily without having to pull it into a new policy with a custom URL list?   Thank you.

Enabling hybrid work is key to retaining and recruiting talent. Zero Trust Network Access (ZTNA) enables employees using any device to access desired resources to make them productive no matter where they work.   In this webinar, we’ll dive into the Netskope’s ZTNA offering, Netskope Private Access, and review its key capabilities, architecture, sample use cases such as Microsoft Autopilot integration, and new features including API for automation and pre-logon capabilities.   Join Netskope Solution Architect, Sam Shiflett as he compares legacy remote access methods with modern zero trust network access (ZTNA). You won’t want to miss live demos highlighting how to implement the below use cases at your organization. Learn how you can: Enable access for employees and contractors  (without losing control) Remotely onboard new devices including active directory and autopilot integration Secure access to applications deployed in public clouds Rapidly on

Dropbox is flexible cloud storage service increasingly exploited by attackers for opportunistic and targeted campaigns. In my latest Cloud Threats Memo, i described two recent campaigns, providing some strategies to mitigate the risk of legit cloud storage services exploited for malicious purposes.   https://www.netskope.com/blog/cloud-threats-memo-dropbox-flexible-cloud-storage-increasingly-exploited-by-attackers

What are the use cases of Netscope chrome extension? Is this designed just to address Chromebook support? Does this extension only steer browser-based traffic or other app-based web traffic as well running on any client machine? Can I push the extension through MDM or UEM?

Hi Team, I am seeing intermittent outlook disconnect through forward proxy. Has anyone seen this issue? What is the best practice for outlook-O365 traffic through Netskope forward proxy with SSL inspection?

Hello , Is any one seeing performance degradation in their  internet access when  netskope  is enabled ? ( netskope client version 90.x) I have opened case now as so many users reported to gather today, vs few early this week. RP

Hello, Wondering if anyone has run into this before. I am testing a per user install and i am finding that the steering configuration is sticking between users. So if one user has steeringconfig1 and they logout and the next user has steeringconfig2, the user changes on the client, the client configuration changes, but the steering configuration does not. Has anyone else seen this prior? Nate

Hello everyone, thanks for reading this. I'm trying to detect MIP labels with real-time SMTP outbound app policies, but I cannot make it work. I found this video (Microsoft and Netskope Email MIP) where it shows a bit how MIP label ID has been set as a regex and scan type is Metadata&Content.Unfortunatelly it does not show the rest of DLP Rule configuration. I tried the same config as the video, also tried the same but adding "^.+" and ".+$" before and after the regex respectively as well.I also tried putting the whole "MSIP_Label_{LABEL-ID}_Name" string, which can be seen opening the MIP labeled MS Office document and going to "File > Information > Properties > Advanced Properties > Custom Tab".I set scan type as Metadata&Content, set the threshold to 1 and set apply action to severity low.None of this worked for me. I hope someone has faced this situation and found a solution.Thanks in advance,Òscar

Configuration Document for Netskope Tenant SSO with One Login

I am trying to understand how the forward proxy handles user authentication/identification when SSL is set to bypass when there is no agent running on the endpoint. 

The deployment guide you can find following the link below illustrates how to deploy Netskope Private Access Amazon EC2 Auto Scaling.   Netskope Private Access (NPA), a Zero Trust Network Access (ZTNA) solution, seamlessly connects authenticated users anywhere, using any devices to private resources in data centers and public cloud environments. Built on the NewEdge security private cloud, NPA delivers fast and direct application connectivity, ensuring a superior user experience. To learn more about Netskope Private Access please refer to the Netskope Private Access product overview  and Netskope Private Access documentation.   Amazon EC2 Auto Scaling helps you maintain application availability and allows you to automatically add or remove EC2 instances according to conditions you define. You can use the fleet management features of EC2 Auto Scaling to maintain the health and availability of your fleet. You can also use the dynamic and predictive scaling features of EC2

Does Netskope have a list of web site URLs that have been defined for testing policies?

In case you didn't see the blog article published on May 10, here's some information on the new applications Netskope has added support for in our CASB API product. We started rolling out support for these new applications at the end of April: Workday Yammer Citrix ShareFile Okta With the addition of these four new applications, Netskope now supports a total of 23 applications in our CASB API product. If you're not familiar with, or not using our CASB API product (and only using CASB Inline as part of NG-SWG and/or Cloud Inline), there are significant additional benefits that an API based product delivers, both standalone and in conjunction with an inline solution. If you have only an inline deployment for CASB, or you’re just starting to look at CASB solutions, you may be wondering why you’d want or need a CASB API deployment. With API, CASB takes advantage of existing APIs in SaaS and IaaS applications to provide full granular context on data exposure and controls. Becaus

Hi Team, i have a question: during installation at the customer, it’s possible to convert the casbi license for dropbox to gmail license and maintain the same number of user?   Thanks a lot, A.

  Hey Community,    it seems that since version 93.0.1 we're not able to complete installations of the netskope client. Here's a snippet of the post install error from the macOS install.log. 2022-05-04 13:28:10-07 NNN-NNNN-NNNNNNN installer[1929]: install:didFailWithError:Error Domain=PKInstallErrorDomain Code=112 "An error occurred while running scripts from the package “NSClient_93.0.1.944.pkg”." UserInfo={NSFilePath=./postinstall, NSURL=file:///Library/Application%20Support/JAMF/Downloads/NSClient_93.0.1.944.pkg#STAgent_unsigned.pkg, PKInstallPackageIdentifier=com.netskope.STAgent.pkg, NSLocalizedDescription=An error occurred while running scripts from the package “NSClient_93.0.1.944.pkg”.}   Is anyone else struggling with this.? Right now all of our new users are unable to use Netskope. We escalated this to Netskope support two and a half weeks ago (4/19) without resolution. Does anyone here have any insight?

I am interested to know how other customers are able to present a block page when a user is browsing from a network segment that has an SSL Decrypt Bypass policy applied.  Currently, users are shown a generic "this site can't be reached" message versus our branded block page.  Netskope Support stated the branded block page (custom User Notification) cannot be displayed since Netskope is not intercepting the traffic due to the SSL Decrypt bypass policy.  Is anybody else experiencing the same issue?

In this article we’ll demonstrate how you can implement automatic remediation for security posture violation findings discovered by Netskope Cloud Security Posture Management (CSPM).   Netskope CSPM continuously assesses public cloud deployments to mitigate risk, detect threats, scan and protect sensitive data and monitor for regulatory compliance. Netskope simplifies the discovery of security misconfigurations across your clouds. Netskope Auto-Remediation framework for GCP enables you to automatically mitigate the risk associated with these misconfigurations in your GCP cloud environment.   Netskope CSPM security assessment results for such security benchmark standards as NIST, CIS, PCI DSS, as well as for your custom rules are available via the View Security Assessment Violations Netskope API.   Netskope auto-Remediation solution for GCP deploys the set of GCP Cloud functions that query the above Netskope API on the scheduled intervals and mitigates supported violation

when configuring a CASB  real time policy for the Google Gmail app, is it possible to configure email deletion activity? or how to achieve this

Using JAMF to deploy Netskope Client v93.0.1.944 to target Macs (10.14.6 through 12.3.1).   Installation is successful, but on Big Sur and higher, it can take up to 10 minutes for the client to automatically enable and download its configuration updates. If the Update link is clicked, the client downloads updates and enables itself.   If I run "/Library/Application Support/Netskope/STAgent/nsdiag -u" from Terminal, the client downloads updates and enables itself.   However, if I run that as a Execute Command or as an After script in the policy (or separately), I get the following message: "Failed to download configuration updates."   Any suggestions would be appreciated... thanks!