Product Forums

How to allow google maps image, which is blocking under cloud storage category.

Does the Netskope client keep the SWG/NPA secure tunnels if the laptop/PC goes in sleep or hibernate mode?  Is there a recommendation? Thanks.

Hello,I need to block a specific application within the https://marketplace.visualstudio.com/ domain (VSCode Marketplace).I would like guidance on how to configure Netskope to block only this specific application without affecting access to the rest of the domain.Could you please advise on the recommended procedure for this type of blocking?Thank you.

Hi Teams, i’m try to find the CMD reference for publisher CLI to change the host name and username of default user on publisher ssh but cannot find in the knowledge KB from netskope. so i wonder is it possible to change the hostname of publisher and change the default username from ubuntu ?is they any issue if we change this parameter on publisher?i’m also need to change the same for cloud exchange server too.

Background In today's digital age, businesses of all sizes rely on technology to operate efficiently and effectively. It is essential for IT security leaders to protect their rapidly expanding corporate infrastructure and distributed workforce. With the rise of cyber threats, cybersecurity has become a crucial component of business strategy & operations. One of the most critical aspects of cybersecurity is security hardening, which involves implementing measures to protect systems and data from potential attacks. What is Security Hardening Security hardening is a proactive cybersecurity approach aimed at fortifying the defenses of systems, networks, and applications. It involves configuring security controls inbuilt into product and controls provided by other solutions outside of the product such as perimeter security solutions i.e. firewalls, access restrictions, network restriction etc. to protect systems, services, applications against unauthorised access and abuse. Prot

Greetings All,I’ve had a persistent issue for several months with Netskope on macOS that I wanted to throw out here to see if anyone else had come across something similar. Intermittently devices with the Netskope client installed will lose all connectivity to the internet. In the logs I see usually around 50,000 of these messages in a span of just a few seconds`critical nsDNSProcessor.cpp:149 dnsProcessor Failed to get DNS resolver values`Usually as this happens all active connections are killed, like ongoing zoom calls, even though those aren’t being steered to Netskope.Before this I see the DTLS tunnel close down with this flownpadebuglog.log```[info] npaClientHandler.cpp:748:npaClientHandlerStop():0x0 Will shutdown NPA handler and dispatch thread, tunnelId = 7f8b47.[info] tcpclient.cpp:530:shutdown():0x1086a1160 Shutdown socket fd 45[info] npaClientHandler.cpp:755:operator()():0x0 The client handler is stopping and shutting down, userId = 502.[info] tcpclient.cpp:199:handleClose():

Hi Community,Does anyone know how to make the Google Antigravity Certificate Pinned App exception for MacOS?I have the issue from the beginning like Login step. I’m try to except the process name with any domain (*)Antigravity* antigravity* language_server_macos_armBut still can’t sign-in.

Hi folks,do you know if when setting fallback action to alert, real time policies are still evaluated when a fallback action has been triggered?Use case : you don’t want to block download when file size > 400Mo (max file size analyzed by TP)1.You set fallback action to alert2.You set a RTP allow_all_vip for a VIP group to be allowed to download and surf with no exception3.You set a RTP block_dl_400 for all users to block download with constraints file size >400Mo AND specifics files typesExpected result when download a file under 400Mo, TP is applied, all users can download. when download a file great than 400Mo, fallback action is applied, then RTP is applied regarding the user’s groupIn Real life, when standard user try to download a file >400Mo, block_dl_400 is not applied, log indicate fallback action, so it seems that policies are not evaluated after fallback action.Moreover it seems that Netskope tenant is setting MIME/TYPE as application/octet-stream whatever the origin

WSL will work on windows , This info is not mentioned in netskope site (Windows Linux Subsystem)go to WSL settings change the networking mode to “ VirtioProxy” save it then run your commands , it should work In netskope tenant , you can see the logs refer to your laptop name . 

We have periodic reauthentication enabled for users, but on mobile devices, although a pop-up notification appears, users cannot view or be redirected to complete the  Periodical IdP Re-authentication to restore private app access.Is there any guidance available for this configuration?

How do I decrypt/read the TLS traffic in Advance Debug Logs while using Wireshark? 

Hello,I have a DLP policy that blocks the upload of unlabeled documents. The issue I’m facing is that when I try to upload a PPTX file that is labeled with Microsoft Purview Information Protection (MPIP), the upload is blocked by this policy.It’s important to note that not all PPTX files are blocked—only some of them.What I’ve noticed is that, for the blocked files, the “True file type” is detected as “ZIP archive.” In contrast, for files where the label is recognized and the upload is allowed, the “True file type” is shown as “Microsoft PowerPoint 2007 XML.”Has anyone encountered this problem before? Your help would be very much appreciated.Thanks, 

Hello,I am running VirtualBox in NAT mode on my machine with the Netskope Client installed on the host. The VMs inside VirtualBox are failing to connect or update due to SSL/Certificate errors caused by Netskope's inspection.I want to bypass SSL Decryption specifically for the VirtualBox application, but I do not want to bypass traffic for the whole machine or use a broad IP-based exception. Thanks.

What is currently supported to passthrough Phish-Resistant MFA methods like passkeys from unmanaged devices over Reverse proxy, universal reverse proxy and NPA browser access steering methods? We are moving to enforcing phish-resistanct MFA and need to understand what is supported and what has been tested. If this is not currently supported, is this on the roadmap or would this require the use of enterprise browser?  

Does anyone know what the “Export User Key” is used for in Netskope? This feature is located in Setting>Security Cloud Platform>User section?I could not find any documentation on the use case for this feature. I’ve attached the screenshot below.  Is there a place to store the json file once the user key is downloaded?  Thanks.  

Summary.Reviewed https://community.netskope.com/casb-swg-inline-92/netskope-inline-dlp-with-microsoft-information-protect-mip-labels-6942?tid=6942&fid=92It is clear from this article, that we could label a document Confidential, put in a DLP policy that blocks the label "Confidental" into public AI sites, and that document would be prevented (when used in appropriate specific connector situations, with possible adherence to generic connectors.But the question is - if someone were to copy and paste text from a labeled document, and directly pasted it into a prompt, would the DLP block still occur?

The recent security incident involving Salesloft has highlighted the importance of robust cybersecurity measures to counter supply chain attacks. This document provides an overview of what happened in the Salesloft supply chain attack targeting Salesforce, elaborates on what should we know about supply chain vulnerabilities, and outlines how Netskope SSPM can contribute in preventing such attacks from happening in the first place. What is Salesloft? Salesloft is a Revenue Orchestration Platform which supports the utilization of the Drift AI chat agent to integrate with corporate applications like Salesforce. The Salesloft Git repositories were the initial component compromised, where improperly stored secrets allowed the threat actor to gain access to the vendor infrastructure where they were able to pivot into the OAuth tokens used to integrate with Salesforce. This access was valuable because the integration required permissions to read sensitive data—such as customer records and cre

Hi Team, Is it possible to integrate/ install AD agent so that we can apply client configuration based on OU. and Use Entra ID integration for SSO? Just for Sign-in.  Possible that we can use OU to provide access to private resources.? One way is to create groups and provide access to private resources and apply client configuration group or all users. Since we have multiple branch offices. we need to create many Groups and import in Entra ID.  So wondering if we can enable private access based on OU and apply client configuration based on OU as well.

Does anyone have any experience with allowing Partner Access for a 3rd party? We are thinking through building out device classification rules for a potential Partner Access use-case and it got me thinking about this topic. what will we see in Devices in our tenant for these devices? I assume we won’t have any “enable”/”disable” options but want to be sure safeguarding our partner safeguarding our environment

Starting a few months ago our company users have reported consistent and numerous blocks by Google to access our own Workspace tenant apps (Google Admin, Gemini, Gdrive, etc). The message received by the users say, “Our systems have detected unusual traffic from your computer network. Please try your request again later.” It then presents your network IP and says it does not equal the Netskope POP IP (e.g. 10.10.10.10 ≠ 163.116.140.55). This implies that Google no longer trusts the Netskope POP subnets and see’s the proxied traffic as a risk. Is Netskope aware of this issue and are you working with Google to remediate it? Thanks 

Use case: Our Support team can connect other users’ laptop with AOVPN feature but with zero Trust is blocking the admin drive access.In this user case, Support team can access the laptop CAL-XXX for Admin related activities but with Zero trust its not possible so what is the alternative solution? Is there any tool ? which can be used 

When running a query against “/api/v2/infrastructure/publishers” the list of to be returned fields can be attached. However it seems that only fields from the first level of the JSON can be selected. Does anyone know, if other fields e.g. assessment[latency], can be referenced in the field-list as well? And how? Thanks Timo

There a lot of AI based browesrs, the likes of Comet by Perplexity, Atlas by Chatgpt etc. which have their own security parameters yet to be assessed and considered safe for use by Corporate Employees. There seem to be no pre defined category and these browsers are not yet identified as applications in Netskope. Is there a workaround to be able to block the applications?

Here's an article for Netskope on blocking Base64 encoded sensitive data using custom regex, along with the step-by-step DLP policy creation process. Blocking Base64 Encoded Sensitive Data with Netskope DLP: A Step-by-Step Guide In today's cloud-centric world, organizations face the persistent challenge of preventing sensitive data from leaving their control. While traditional DLP solutions are effective against clear-text data, a common evasion technique involves encoding sensitive information, particularly using Base64, to bypass detection. This article will demonstrate how Netskope's powerful DLP capabilities, combined with custom regular expressions, can effectively block the sharing of sensitive data transformed into Base64 encoded strings.The Challenge: Evading DLP with Base64 EncodingBase64 encoding is a method of representing binary data in an ASCII string format. While legitimate for many purposes, it can be misused to obscure sensitive information like credit card numbers, so

Hi there, I want to use Workato to create an Automation with Netksope. Specifically the OTP feature for disabling internet security. Aim:1. User clicks Disable Internet Security2. Launches web page to enter email address3. Email sends OTP or next page provides OTPSomething along the lines of the above. Can someone share if they have done something similar (with another Automation platform too) or can someone share what I would need for this?