Product Forums

Hi Team, i have a question: during installation at the customer, it’s possible to convert the casbi license for dropbox to gmail license and maintain the same number of user?   Thanks a lot, A.

  Hey Community,    it seems that since version 93.0.1 we're not able to complete installations of the netskope client. Here's a snippet of the post install error from the macOS install.log. 2022-05-04 13:28:10-07 NNN-NNNN-NNNNNNN installer[1929]: install:didFailWithError:Error Domain=PKInstallErrorDomain Code=112 "An error occurred while running scripts from the package “NSClient_93.0.1.944.pkg”." UserInfo={NSFilePath=./postinstall, NSURL=file:///Library/Application%20Support/JAMF/Downloads/NSClient_93.0.1.944.pkg#STAgent_unsigned.pkg, PKInstallPackageIdentifier=com.netskope.STAgent.pkg, NSLocalizedDescription=An error occurred while running scripts from the package “NSClient_93.0.1.944.pkg”.}   Is anyone else struggling with this.? Right now all of our new users are unable to use Netskope. We escalated this to Netskope support two and a half weeks ago (4/19) without resolution. Does anyone here have any insight?

I am interested to know how other customers are able to present a block page when a user is browsing from a network segment that has an SSL Decrypt Bypass policy applied.  Currently, users are shown a generic "this site can't be reached" message versus our branded block page.  Netskope Support stated the branded block page (custom User Notification) cannot be displayed since Netskope is not intercepting the traffic due to the SSL Decrypt bypass policy.  Is anybody else experiencing the same issue?

In this article we’ll demonstrate how you can implement automatic remediation for security posture violation findings discovered by Netskope Cloud Security Posture Management (CSPM).   Netskope CSPM continuously assesses public cloud deployments to mitigate risk, detect threats, scan and protect sensitive data and monitor for regulatory compliance. Netskope simplifies the discovery of security misconfigurations across your clouds. Netskope Auto-Remediation framework for GCP enables you to automatically mitigate the risk associated with these misconfigurations in your GCP cloud environment.   Netskope CSPM security assessment results for such security benchmark standards as NIST, CIS, PCI DSS, as well as for your custom rules are available via the View Security Assessment Violations Netskope API.   Netskope auto-Remediation solution for GCP deploys the set of GCP Cloud functions that query the above Netskope API on the scheduled intervals and mitigates supported violation

when configuring a CASB  real time policy for the Google Gmail app, is it possible to configure email deletion activity? or how to achieve this

Using JAMF to deploy Netskope Client v93.0.1.944 to target Macs (10.14.6 through 12.3.1).   Installation is successful, but on Big Sur and higher, it can take up to 10 minutes for the client to automatically enable and download its configuration updates. If the Update link is clicked, the client downloads updates and enables itself.   If I run "/Library/Application Support/Netskope/STAgent/nsdiag -u" from Terminal, the client downloads updates and enables itself.   However, if I run that as a Execute Command or as an After script in the policy (or separately), I get the following message: "Failed to download configuration updates."   Any suggestions would be appreciated... thanks!

Hello folks, I'm having difficulties to use traffic steering on my Galaxy S8. Hopefully, I want to know what caused this and if it is what it is, way to configure my Galaxy S8/Android device to use VPN like iOS would be nice.   I've sent invitation to my email account on Security Cloud Platform -> Netskope Client -> Users. Then clicking Android Client link on the mail led me to Google Play Store link. Then Google Play Store Netskope Cloud Directory page appears and I tab install button. Then open. Then Netskope Client says "Client is waiting for configuration". Then nothing. No further progress. In Settings, Organization, Gateway, Gateway IP Address, Steering Configuration, Device Classification are blank.   My other Galaxy Note 10 appears to working fine.   both devices gets link like https://play.google.com/store/apps/details?id=com.netskope.netskopeclient&referrer=utm_source%3Daddon-viccns.goskope.com%26utm_medium%3D7345%26utm_term%3dsfsdfsdE6zBjE5gj2Ib6%26u

Is it fair to say that Netskope can be used to protect user activity when connected to public wifi?

In this example, we want to block Streaming and Downloadable Video, and need to: Remove that category from the default steering exceptions to ensure it is steered to the Netskope cloud. Identify which URLs you want to block and which you want to bypass. For mediacompanyabc.com most if not all the actual streaming content is hosted on mediacompanyabc.com/videos, so for our example we are going to create a custom category with an exclusion to accommodate our use case. using mediacompanyabc.com/videos as the exclusion to a custom News and Media category. Create a custom URL list and call it “Streaming and Downloadable Video UL” (UL is for URL List) and add mediacompanyabc.com/videos to it. Create a custom category and call it “News and Media CC” (the CC is for Custom Category) and include the News and Media category and exclude the Streaming and Downloadable Video UL. Create your policies with an allow for News and Media preceding a block for Streaming and Downloadable

Please reference the updated Inline Learning path sections for this content Below is the course order by depth of contentNG-SWG: Introduction and Concepts - Getting StartedBest Practice Policy Strategy - Adoption/Maturing PoliciesBest Practice Use Cases - Specific Use Case Review

Does the Netskope Agent update work with Nomad software cache 1E- Vendor?

Hello Community, I have deploy the MacOS agent via Intune, but at the client configuration, the user need to accept to add a Proxy configuration. (like file attached.) I know it's possible to bypass that for Jamf by following this configuration : https://docs.netskope.com/en/deploy-netskope-client-with-jamf.html Anyone of you is in the same situation ? do you have resolve it ?  Thanks for your feedbacks.

Case1 – Set multiple domains laptop as a posture parameter without any SAML authentication & client installation via email invite only·Will NPA solution work properly ??·What is the draw back if we implement NPA without IDPCase2 – Initially multiple domains laptop as a posture parameter, without IDP user used Netskope NPA solution and after some time IDP SAML authentication integrate with Netskope·Then what is the impact on current NPA working user after IDP integration·Both user work parallelly or not??Case3 – If Azure AD used as a SAML authentication configured for IDP & SCIM integration with same Azure AD·Then how to deploy Netskope client to different domain user systems and work·what is the traffic flow from other domain system to CFS environment?

Hello Netskope community,    Last week I received an alert that malware was discovered by malware on a host. I reached out to owner of the host and asked him to remove the malware. The owner of the host removed confirmation however netskope portal is still showing that malware. How do I verify that the malware is removed and how does Netskope verify the malware is removed?   Thanks  

Hi all, wondered if anyone rolling out SWG has had any issues with getting Windows updates to install with SWG enabled in Asia.   I have the same Windows steering bypasses set up for EU users and Asia but for some reason India and HK  users are getting a fail to update on the windows update page unless i disable the netskope client.   My exceptions are below.  I've covered everything MS say i need except go.microsoft.com and its not needed for EU users and just directs to the micosoft buy our devices  page.  Any ideas ?      *.download.windowsupdate.com*.update.microsoft.com*.windowsupdate.com*.windowsupdate.microsoft.comdl.delivery.mp.microsoft.comdownload.microsoft.comntservicepack.microsoft.comr.manage.microsoft.comwindowsupdate.microsoft.comwustat.windows.com

Hii community,   What is the incident creation criteria of an alert in Netskope?, what would be the process that will create an alert?   Thanks

Hii community,   I have noticed that in netskope platform, we are not able to see incidents but alerts so i had a question that "How do DLP incidents get converted into Netskope Alerts?".   Looking forward to answer. Thanks

Does anyone out there know if you can embed a link into the custom block page messages a user receives?

We are looking to deploy the Netskope client in our VDI environment. The VDI systems are running Windows 10 are non persistent with FSLogix, so upon logging out of the Virtual machine, the device is removed from the environment and then rebuit, thus a fresh machine that could be randomly assigned to any user. FSLogix allows the clients to maintain data they want persistent in their profile.I am wondering if there is any special configuration that I need to do when deploying the client to these VDI systems on the Golden Image/Master Build? Would this below suffice?******\servershareNetskopeNSClient-90.1.0.805.msi token=12345abcde host=addon-company.goskope.com mode=peruserconfig autoupdate=off /qn******Would there be anything else I need to do on the client? We use the above command to deploy to our physical Windows endpoints successfully.Thank you.

In our latest Cloud and Threat Report, we breakdown the most significant trends we saw in 2021: Google Drive emerges as the top app for malware downloads Emotet copycats continue to abuse Microsoft Office documents More than half of managed cloud app instances are targeted by credential attacks Rate at which users leave their jobs (and take data with them when they do) doubles   One of the major highlights was the while OneDrive was the top app for malware downloads in 2020, Google Drive took the top spot in 2021, with OneDrive coming in second place.               And then, in our December Threat Labs Report, you will find a detailed view of last month’s threat activity, which shows that even tho Google Drive was at the top for most of the year, it has already begun to fall, being replaced yet again by Microsoft OneDrive.     What is going on here? Well, OneDrive and Google Drive are incredibly popular, so attackers try to abuse th

Dear All, We are migrating to Netskope Proxy and was wondering if it is possible to block IE11 traffic to the internet. We will still want to allow any intranet traffic (create rules as business case comes up supporting legacy app in the intranet). I am aware that this can be done by Applocker and AV policies but I was thinking that NetSkope CASB would be the ideal technology so that the configuration is dynamic enough to allow legacy app as required. This initiative is to align with ASCS Essential 8 maturity model. The closest info that I have is https://www.netskope.com/blog/ie-vulnerability Thanks in advance.  

Environment: Netskope client installed with client configuration "Allow disabling of Clients" disabled Requirement: Need to Disable/Enable Netskope client from admin console instantly.   Hi Folks,   We might have faced an event where we have to enabledisable Netskope client from the admin console, But it takes more than 2-3 minutes to get it reflected on the Client. Sometimes it takes more than 5 minutes to get it reflected on the end-user machine which really makes the troubleshooting duration extended.   Resolution:   1) EnableDisable Netskope client from Security Cloud Platform > Netskope Client > Devices 2) Add some dump changes on Client steering configuration (Security Cloud Platform > Traffic Steering > Steering Configuration)3) Revert the steering configuration changes back.4) Click OK.5) Update the Netskope client configuration. Now Client will be enableddisabled instantly.   eg: Check the attached screenshot. Here I have edited "s" fr

Hi All,  I am looking for getting alerts from the Netskope tenant. So far I am seeing 2 API endpoints which gives me similar results.  https://docs.netskope.com/en/get-alerts-data.html https://docs.netskope.com/en/view-security-assessment-violations.htmlCan someone please help me understand the difference between them? And when should I use which endpoints?  I am very new here, let me know if I started the discussion at the wrong place. thanks!

For some reason I felt that in a recently Netskope release I saw something about a referrer policy.   We have run into issues in our organization with some websites functioning properly as we silently block the "Online Ads" URL category. Often times, a URL may be classified as Online Ads, but may be necessary for the website to function. We have often just created a real-time protection policy to permit the URLs in a URL list and applied this to the appropriate users. I thought I saw something about using a referrer policy in a recent release that if you permitted the main page, any subsequent URLs that were loaded were also permitted. Almost like a parent-child relationship with processes. I may be dreaming, but I could not find anything in the recent release notes or documentation.   If this does not exist, does this functionality exist if Netskope does not have a defined Cloud App that would permit the associated URLs? Would the only action be to create the URL lists as we

We began updating a test group to client release 90 earlier in the week, and have experienced issues with VPN (Cisco Anyconnect) and launching web apps from Citrix (even on-prem hosted).  Just curious if anyone else has experienced issues with Client R90?