Product Forums

Hello folks, I'm having difficulties to use traffic steering on my Galaxy S8. Hopefully, I want to know what caused this and if it is what it is, way to configure my Galaxy S8/Android device to use VPN like iOS would be nice.   I've sent invitation to my email account on Security Cloud Platform -> Netskope Client -> Users. Then clicking Android Client link on the mail led me to Google Play Store link. Then Google Play Store Netskope Cloud Directory page appears and I tab install button. Then open. Then Netskope Client says "Client is waiting for configuration". Then nothing. No further progress. In Settings, Organization, Gateway, Gateway IP Address, Steering Configuration, Device Classification are blank.   My other Galaxy Note 10 appears to working fine.   both devices gets link like https://play.google.com/store/apps/details?id=com.netskope.netskopeclient&referrer=utm_source%3Daddon-viccns.goskope.com%26utm_medium%3D7345%26utm_term%3dsfsdfsdE6zBjE5gj2Ib6%26u

Is it fair to say that Netskope can be used to protect user activity when connected to public wifi?

In this example, we want to block Streaming and Downloadable Video, and need to: Remove that category from the default steering exceptions to ensure it is steered to the Netskope cloud. Identify which URLs you want to block and which you want to bypass. For mediacompanyabc.com most if not all the actual streaming content is hosted on mediacompanyabc.com/videos, so for our example we are going to create a custom category with an exclusion to accommodate our use case. using mediacompanyabc.com/videos as the exclusion to a custom News and Media category. Create a custom URL list and call it “Streaming and Downloadable Video UL” (UL is for URL List) and add mediacompanyabc.com/videos to it. Create a custom category and call it “News and Media CC” (the CC is for Custom Category) and include the News and Media category and exclude the Streaming and Downloadable Video UL. Create your policies with an allow for News and Media preceding a block for Streaming and Downloadable

Please reference the updated Inline Learning path sections for this content Below is the course order by depth of contentNG-SWG: Introduction and Concepts - Getting StartedBest Practice Policy Strategy - Adoption/Maturing PoliciesBest Practice Use Cases - Specific Use Case Review

Does the Netskope Agent update work with Nomad software cache 1E- Vendor?

Hello Community, I have deploy the MacOS agent via Intune, but at the client configuration, the user need to accept to add a Proxy configuration. (like file attached.) I know it's possible to bypass that for Jamf by following this configuration : https://docs.netskope.com/en/deploy-netskope-client-with-jamf.html Anyone of you is in the same situation ? do you have resolve it ?  Thanks for your feedbacks.

Case1 – Set multiple domains laptop as a posture parameter without any SAML authentication & client installation via email invite only·Will NPA solution work properly ??·What is the draw back if we implement NPA without IDPCase2 – Initially multiple domains laptop as a posture parameter, without IDP user used Netskope NPA solution and after some time IDP SAML authentication integrate with Netskope·Then what is the impact on current NPA working user after IDP integration·Both user work parallelly or not??Case3 – If Azure AD used as a SAML authentication configured for IDP & SCIM integration with same Azure AD·Then how to deploy Netskope client to different domain user systems and work·what is the traffic flow from other domain system to CFS environment?

Hello Netskope community,    Last week I received an alert that malware was discovered by malware on a host. I reached out to owner of the host and asked him to remove the malware. The owner of the host removed confirmation however netskope portal is still showing that malware. How do I verify that the malware is removed and how does Netskope verify the malware is removed?   Thanks  

Hi all, wondered if anyone rolling out SWG has had any issues with getting Windows updates to install with SWG enabled in Asia.   I have the same Windows steering bypasses set up for EU users and Asia but for some reason India and HK  users are getting a fail to update on the windows update page unless i disable the netskope client.   My exceptions are below.  I've covered everything MS say i need except go.microsoft.com and its not needed for EU users and just directs to the micosoft buy our devices  page.  Any ideas ?      *.download.windowsupdate.com*.update.microsoft.com*.windowsupdate.com*.windowsupdate.microsoft.comdl.delivery.mp.microsoft.comdownload.microsoft.comntservicepack.microsoft.comr.manage.microsoft.comwindowsupdate.microsoft.comwustat.windows.com

Hii community,   What is the incident creation criteria of an alert in Netskope?, what would be the process that will create an alert?   Thanks

Hii community,   I have noticed that in netskope platform, we are not able to see incidents but alerts so i had a question that "How do DLP incidents get converted into Netskope Alerts?".   Looking forward to answer. Thanks

Does anyone out there know if you can embed a link into the custom block page messages a user receives?

We are looking to deploy the Netskope client in our VDI environment. The VDI systems are running Windows 10 are non persistent with FSLogix, so upon logging out of the Virtual machine, the device is removed from the environment and then rebuit, thus a fresh machine that could be randomly assigned to any user. FSLogix allows the clients to maintain data they want persistent in their profile.I am wondering if there is any special configuration that I need to do when deploying the client to these VDI systems on the Golden Image/Master Build? Would this below suffice?******\servershareNetskopeNSClient-90.1.0.805.msi token=12345abcde host=addon-company.goskope.com mode=peruserconfig autoupdate=off /qn******Would there be anything else I need to do on the client? We use the above command to deploy to our physical Windows endpoints successfully.Thank you.

In our latest Cloud and Threat Report, we breakdown the most significant trends we saw in 2021: Google Drive emerges as the top app for malware downloads Emotet copycats continue to abuse Microsoft Office documents More than half of managed cloud app instances are targeted by credential attacks Rate at which users leave their jobs (and take data with them when they do) doubles   One of the major highlights was the while OneDrive was the top app for malware downloads in 2020, Google Drive took the top spot in 2021, with OneDrive coming in second place.               And then, in our December Threat Labs Report, you will find a detailed view of last month’s threat activity, which shows that even tho Google Drive was at the top for most of the year, it has already begun to fall, being replaced yet again by Microsoft OneDrive.     What is going on here? Well, OneDrive and Google Drive are incredibly popular, so attackers try to abuse th

Dear All, We are migrating to Netskope Proxy and was wondering if it is possible to block IE11 traffic to the internet. We will still want to allow any intranet traffic (create rules as business case comes up supporting legacy app in the intranet). I am aware that this can be done by Applocker and AV policies but I was thinking that NetSkope CASB would be the ideal technology so that the configuration is dynamic enough to allow legacy app as required. This initiative is to align with ASCS Essential 8 maturity model. The closest info that I have is https://www.netskope.com/blog/ie-vulnerability Thanks in advance.  

Environment: Netskope client installed with client configuration "Allow disabling of Clients" disabled Requirement: Need to Disable/Enable Netskope client from admin console instantly.   Hi Folks,   We might have faced an event where we have to enabledisable Netskope client from the admin console, But it takes more than 2-3 minutes to get it reflected on the Client. Sometimes it takes more than 5 minutes to get it reflected on the end-user machine which really makes the troubleshooting duration extended.   Resolution:   1) EnableDisable Netskope client from Security Cloud Platform > Netskope Client > Devices 2) Add some dump changes on Client steering configuration (Security Cloud Platform > Traffic Steering > Steering Configuration)3) Revert the steering configuration changes back.4) Click OK.5) Update the Netskope client configuration. Now Client will be enableddisabled instantly.   eg: Check the attached screenshot. Here I have edited "s" fr

Hi All,  I am looking for getting alerts from the Netskope tenant. So far I am seeing 2 API endpoints which gives me similar results.  https://docs.netskope.com/en/get-alerts-data.html https://docs.netskope.com/en/view-security-assessment-violations.htmlCan someone please help me understand the difference between them? And when should I use which endpoints?  I am very new here, let me know if I started the discussion at the wrong place. thanks!

For some reason I felt that in a recently Netskope release I saw something about a referrer policy.   We have run into issues in our organization with some websites functioning properly as we silently block the "Online Ads" URL category. Often times, a URL may be classified as Online Ads, but may be necessary for the website to function. We have often just created a real-time protection policy to permit the URLs in a URL list and applied this to the appropriate users. I thought I saw something about using a referrer policy in a recent release that if you permitted the main page, any subsequent URLs that were loaded were also permitted. Almost like a parent-child relationship with processes. I may be dreaming, but I could not find anything in the recent release notes or documentation.   If this does not exist, does this functionality exist if Netskope does not have a defined Cloud App that would permit the associated URLs? Would the only action be to create the URL lists as we

We began updating a test group to client release 90 earlier in the week, and have experienced issues with VPN (Cisco Anyconnect) and launching web apps from Citrix (even on-prem hosted).  Just curious if anyone else has experienced issues with Client R90?

Hello community,   Is there anyone who tested Netskope for Android? (Next-Gen SWG, CASB or NPA)  Any idea on how to set it up or any recommendations for articles/KBs ? Thank you!

Have placed this under SWG but it applies generally to the GoSkope interface.   Is there a way to export and import data from the various sections into CSV or another format? Or maybe there is some CLI or API?   For example the policies, or traffic steering exceptions, or any of the other sets of data. This will make it easier to collaborate and edit information en masse. At the moment we update each item individually and are stuck with web interface for presenting data.

Netskope Admin Console can be tied with your Identity Provider (IDP) such as Okta or Azure. It's just a few checkboxes that you would normally enable on Netskope tenant to allow users on IDP to login to Netskope using admin-role attribute for the Role Based Access Control. There are just a few checkboxes and strings you add to the Netskope tenant. Most configuration is done on the IDP. Okta and Azure have an app published for this purposed called "Netskope Admin Console".  Once SSO is enabled users assigned to this app can login by going to your Netskope tenant URL (SP initiated flow) or by going to the IDP and launching Netskope app from there (called IDP initiated flow). While turning this off you would normally uncheck the "Enable SSO" checkbox on Netskope tenant. Just wanted to make you aware that this will turn off the SP initiated flow i.e. Netskope will not redirect you to the IDP. But the users on the IDP may still be able to launch the app and login using IDP initiated flow. T

The guides linked to below illustrate how to configure Netskope IPSec tunnels with your AWS environment for egress traffic filtering and monitoring. This integration provides unmatched visibility and real-time data and threat protection for the traffic leaving your AWS environment. Steering your AWS egress traffic to the Netskope cloud allows you to apply full capabilities of the Netskope platform, including cloud network firewall, web content filtering, data leakage and threat protection, third-party risk protection, etc. You can integrate your AWS environment with Netskope with the following methods: You can establish IPSec VPN tunnels with AWS Site-to-Site VPN between your AWS virtual private gateway, which is associated with a single Amazon Virtual Private Cloud (VPC) and Netskope Points of Presence (POPs). You must repeat this implementation for each Amazon VPC from which you’d like to steer traffic to the Netskope cloud. With this option, you can stream up to 250 Mbps of bandwidt

The Netskope CSPM and Storage Scan services are multi-account security solutions that provides visibility into resources, configurations, data protection, and malware on the AWS cloud. Implementing this solution, you can identify and remediate risky misconfigurations, identify sensitive data (DLP), and detect malware and ransomware.   The purpose of the AWS Implementation Guide is to enable every AWS Marketplace customer to seamlessly activate, deploy and configure the Netskope CSPM and Storage Scan in AWS Control Tower environment while taking full advantage of the resources pre-configured by AWS Control Tower as part of the initialization.   Solution overview and features Netskope Cloud Security Posture Management (CSPM) and Storage Scan allows organizations to confidently adopt and secure multi-cloud services. The Netskope solution gives organizations the ability to continuously assess public cloud deployments to mitigate risk, detect threats, scan and protect sensiti

In case you missed it IDC came out with their 2021 MarketScape for Cloud Security Gateways earlier this month.  Cloud Security Gateways is IDC's category for CASB products.   Netskope CASB was recognized as surpassing all vendors in IDC’s criteria for both Strategies and Capabilities.  In the new report, IDC specifically points out Netskope’s ability to handle “advanced use cases,” including “compromised account, data exfiltration, and malicious/accidental insider threat detection.”  If you're interested you can get your copy of the excerpt covering Netskope Get your copy of the IDC report today.