Product Forums

Does anyone know what the “Export User Key” is used for in Netskope? This feature is located in Setting>Security Cloud Platform>User section?I could not find any documentation on the use case for this feature. I’ve attached the screenshot below.  Is there a place to store the json file once the user key is downloaded?  Thanks.  

Summary.Reviewed https://community.netskope.com/casb-swg-inline-92/netskope-inline-dlp-with-microsoft-information-protect-mip-labels-6942?tid=6942&fid=92It is clear from this article, that we could label a document Confidential, put in a DLP policy that blocks the label "Confidental" into public AI sites, and that document would be prevented (when used in appropriate specific connector situations, with possible adherence to generic connectors.But the question is - if someone were to copy and paste text from a labeled document, and directly pasted it into a prompt, would the DLP block still occur?

The recent security incident involving Salesloft has highlighted the importance of robust cybersecurity measures to counter supply chain attacks. This document provides an overview of what happened in the Salesloft supply chain attack targeting Salesforce, elaborates on what should we know about supply chain vulnerabilities, and outlines how Netskope SSPM can contribute in preventing such attacks from happening in the first place. What is Salesloft? Salesloft is a Revenue Orchestration Platform which supports the utilization of the Drift AI chat agent to integrate with corporate applications like Salesforce. The Salesloft Git repositories were the initial component compromised, where improperly stored secrets allowed the threat actor to gain access to the vendor infrastructure where they were able to pivot into the OAuth tokens used to integrate with Salesforce. This access was valuable because the integration required permissions to read sensitive data—such as customer records and cre

Hi Team, Is it possible to integrate/ install AD agent so that we can apply client configuration based on OU. and Use Entra ID integration for SSO? Just for Sign-in.  Possible that we can use OU to provide access to private resources.? One way is to create groups and provide access to private resources and apply client configuration group or all users. Since we have multiple branch offices. we need to create many Groups and import in Entra ID.  So wondering if we can enable private access based on OU and apply client configuration based on OU as well.

Does anyone have any experience with allowing Partner Access for a 3rd party? We are thinking through building out device classification rules for a potential Partner Access use-case and it got me thinking about this topic. what will we see in Devices in our tenant for these devices? I assume we won’t have any “enable”/”disable” options but want to be sure safeguarding our partner safeguarding our environment

Starting a few months ago our company users have reported consistent and numerous blocks by Google to access our own Workspace tenant apps (Google Admin, Gemini, Gdrive, etc). The message received by the users say, “Our systems have detected unusual traffic from your computer network. Please try your request again later.” It then presents your network IP and says it does not equal the Netskope POP IP (e.g. 10.10.10.10 ≠ 163.116.140.55). This implies that Google no longer trusts the Netskope POP subnets and see’s the proxied traffic as a risk. Is Netskope aware of this issue and are you working with Google to remediate it? Thanks 

Use case: Our Support team can connect other users’ laptop with AOVPN feature but with zero Trust is blocking the admin drive access.In this user case, Support team can access the laptop CAL-XXX for Admin related activities but with Zero trust its not possible so what is the alternative solution? Is there any tool ? which can be used 

When running a query against “/api/v2/infrastructure/publishers” the list of to be returned fields can be attached. However it seems that only fields from the first level of the JSON can be selected. Does anyone know, if other fields e.g. assessment[latency], can be referenced in the field-list as well? And how? Thanks Timo

There a lot of AI based browesrs, the likes of Comet by Perplexity, Atlas by Chatgpt etc. which have their own security parameters yet to be assessed and considered safe for use by Corporate Employees. There seem to be no pre defined category and these browsers are not yet identified as applications in Netskope. Is there a workaround to be able to block the applications?

Here's an article for Netskope on blocking Base64 encoded sensitive data using custom regex, along with the step-by-step DLP policy creation process. Blocking Base64 Encoded Sensitive Data with Netskope DLP: A Step-by-Step Guide In today's cloud-centric world, organizations face the persistent challenge of preventing sensitive data from leaving their control. While traditional DLP solutions are effective against clear-text data, a common evasion technique involves encoding sensitive information, particularly using Base64, to bypass detection. This article will demonstrate how Netskope's powerful DLP capabilities, combined with custom regular expressions, can effectively block the sharing of sensitive data transformed into Base64 encoded strings.The Challenge: Evading DLP with Base64 EncodingBase64 encoding is a method of representing binary data in an ASCII string format. While legitimate for many purposes, it can be misused to obscure sensitive information like credit card numbers, so

Hi there, I want to use Workato to create an Automation with Netksope. Specifically the OTP feature for disabling internet security. Aim:1. User clicks Disable Internet Security2. Launches web page to enter email address3. Email sends OTP or next page provides OTPSomething along the lines of the above. Can someone share if they have done something similar (with another Automation platform too) or can someone share what I would need for this?

Hello Netskope Community, With the recent launch of Google’s AI mode in Google searches, I am looking for a way to block it using Netskope. I noticed that the URL pattern is different between the AI mode and the regular search results, however the wildcard matching cannot be used because of the way Netskope handles wildcards. I am not seeing an obvious way to use regex to match it, however if someone else does please let me know. I also explored matching the activity based on HTTP header and was unable to find a unique header field that I could match on (again if anyone knows different please let me know). My next plan of attack is to try making a custom CCI application using the Netskope App Activity recorder browser extension and block access to it, but I haven’t tried that yet. Does anyone have any other ideas?Thank you in advance. 

Hello All,Could someone please provide a clear explanation of the internet speed test? I’ve been troubleshooting an internet slowness issue, and while testing with Fast.com and Speedtest.net (https://www.speedtest.net/), I get impressive speeds (around 80 Mbps).However, when I test using Netskope's speed test (https://speedtest.goskope.com/), it shows much lower speeds (around 5 Mbps). This discrepancy is creating confusion about which test to trust, especially since the ISP technicians don’t use Netskope and rely on public websites to verify the speed

Hi everyone,I set the “Online Ads” category to Silent Block in our policy. It works fine on Google Search (ads are blocked silently), but when we try other search engines like Microsoft Bing, DuckDuckGo, Yahoo Search, or Yandex, the ads are still visible.Has anyone else run into this? Is this expected behavior, or did we miss a setting to make it apply across different search engines?Appreciate any insights!

Team, Good morning. I’m using NPA to connect to Azure Databricks via Private Link’s.My initial connection works fine but the connection fails on the second attempt.I must clear the cache on the endpoint and disable/enable all clients services in the Netskope console for the connection to work again.When the connection fails, I get the error message below. Has everyone experience this issue connecting to Azure Databricks using NPA?   

 was just talking about this in another thread here. We have a URL list that resolves this. We haven't had to update it in awhile but it's easy enough if we have to.\b(?:\d{1,3}\.){3}\d{1,3}\b\/filestreamingservice\/files\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*\/filestreamingservice\/files\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*.intunewin.bin\b(?:\d{1,3}\.){3}\d{1,3}\b\/.*\/ctldl.windowsupdate.com\/msdownload\/update\/v3\/static\/trustedr\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/pr\/.*\/Office\/Data\/.*\b(?:\d{1,3}\.){3}\d{1,3}\b\/d\/msdownload\/.*  so with this regex above for Microsoft Delivery Optimization what actions are you all allowing Browse, Download, Post, ect…??

How are others solving for this? 

When I look at my Slack Channels some have “FC:” in the front of then name (e.g. FC:F063A1D5X9A:Test). What does FC mean? I was able to figure out that “DM” = direct message and “MPDM” = multi person direct message. I don’t see these defined in any Netskope documents though..

Hi Team, Wanted to know if we can restrict the USB file transfer to USB devices via EDLP? Use case- If a user attempts to transfer a file larger than 100MB, the action should be blocked. Thanks

Hi, I'm having a hard time with the netskope client on Linux. This is a WSL2 installation, and a netskope agent is running on the windows host. But the windows agent status has no influence on the behavior of the guest linux one. Very often, the nsclient config outputs a normal status with tunnel up, and private access enabled. Unfortunately the show-pa show this :  $ nsclient show-pastart process....Status: Connected (User Tunnel) Sent: 0 bytes Received: 78646 bytes and the nsdebuglog.log is spammen with this kind of errors : 2025/09/16 20:21:00.358996 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:01.381263 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:02.404470 stAgentSvc p46ba6 t46db5 error nsKernelUserShim.cpp:359 KernelUserShim Failed to register NAT flow!2025/09/16 20:21:25.547248 stAgentSvc p47489 t4755c error nsKernelUserShim.

I was wondering if there is any documentation on what this page returns for sites visited. I find that some sites users visit will show here but the majority will not. I cannot find a difference between the sites that show here and ones that do not.. Like the sites are not blocked etc.. what is Netskope using to determine what gets presented to the “Websites:” Thanks

I recall stumbling upon a Community article a while back for a regex chrome / edge pattern match used in app definition for a steering bypass.  For the life of me i cant find it, was looking to create a steering bypass for all processes except for Chrome, Edge , Safari and Firefox.anyone done this? (useful to have in some heavy dev environments for a limited group of folk)

Hi there We use MacOS in our estate. I want to build an automation with a tool like Tines or Workato whereby, when a user clicks the Disable Client/Internet Security option, the automation will run a workflow that gets the OTP via an API request.How can I go about doing this please?

Hello,I would like to know if it is possible to allow copy and paste when using ZTNA in browser access mode.If yes, could you please provide guidance on how to configure it?Thank you 

What's the best way to create a DLP Rule that looks for Email Addresses (using the Built In Netskope Email pattern) but not generate hits on our company domain ie @company.com.I was trying to make a custom Entity and then use a not clause in the DLP Rule but not sure if that will give us the behavior I was looking for.