Netskope Homemade: Season 2
Recently active
Enjoy our second edition of home recipes from Netskopers around the globe, because good food is all the better when shared. The holidays are a time for traditions—and at Netskope, one of our favorite traditions is sharing a collection of Netskopers’ beloved homemade recipes. From savory dishes to sweet treats, discover the flavors that bring us joy, connection, and warmth. 🍳Get the cookbook! 🍽️ Do you have a favorite recipe that you make around the holiday season? Feel free to comment and continue the discussion!
Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?
Policy:Block Confidential Word ChatGPTDescription:Policy to prevent sensitive data from being entered into ChatGPTVideo Link:Block Confidential Word ChatGPT
Policy:Block Download File TypeDescription:Policy to prevent downloading of files that may put the organization at risk, for example binary filesVideo Link:Block Download File Type
Netskope Global Technical Success (GTS)How to Block Google Doodle Games Netskope Cloud Version - 121 ObjectiveThis article provides a step-by-step guide to blocking access to Google Doodle games using URL filtering techniques, helping administrators tailor network content access to meet professional or educational standards. PrerequisiteNetskope SWG license is required ContextGoogle Doodles are widely recognized for their creative and interactive designs, often featuring games that can attract user attention. While they offer entertainment, some organizations may seek to restrict access to these games to maintain productivity or ensure compliance with internet usage policies. This document provides a step-by-step guide on using URL filtering techniques to block access to Google Doodle games, allowing administrators to customize and manage content visibility across their networks effectively. ProcedureStep 1: Identifying the URL Pattern.Google Doodle games use the parent domain www.goog
Netskope Global Technical Success (GTS)Block VPN and Proxy Extension Installation in Chrome Browser Netskope Cloud Version - 121 ObjectiveThis article helps administrators block the installation of unauthorized VPN and Proxy extensions in Chrome browser to protect network integrity.The goal is to protect network security and enforce browsing policies. PrerequisiteNetskope SWG license is required ContextVPN and Proxy extensions can be used to bypass network monitoring and violate corporate internet usage policies. For organizations that need to enforce strict browsing guidelines, blocking these extensions is essential. This document details how administrators can prevent VPN and Proxy extension installation in Chrome and Edge. ProcedureTo block the installation and functionality of VPN/proxy extensions, implement the following two policies: 1.Custom URL Category Policy: Create a policy that uses a custom URL category with a regex pattern to match VPN/proxy installation traffic and set
We have Policy schedules set on several policies to force re-evaluation of access periodically. Do others use these? Has anyone created an Advanced Analytics report or alert that can be set to proactively notify you when these time windows are coming due?
Hello all,I am looking at creating reports to help identify bandwidth utilisation for customer sites. We want to identify what applications and sites are generating the most traffic. If the previous product it was simple to filter based on a location (which is a way to reference the IPsec tunnels used to connect a site to the cloud). Netskope seems to be less location focused. Ideally I would like to filter a widget or Dashboard using a filter that is a list of the IPsec Tunnels. Is there a simple way to do this?I can filter based on countries, but the customer has multiple sites in some countries. The source locations reference towns or cities that do not match up with the customer site. In France the even have multiple sites in the same city. Filtering by IP CIDR allows only filtering by a single CIDR network. It is not possible to filter based on a defined network location. The only solution I have at the moment is the source egress public IP address. This works as it clearly
Policy:Block Risk CountryDescription:Policy for blocking access to websites in risk countriesVideo Link:Block Risk Country
Policy:Block Tag DenyDescription:Policy to block cloud applications using custom TAGVideo Link:Block Tag Deny
Policy:Block Upload DLP Source CodeDescription:In this example we will prevent sending emails (Gmail) with files that contain "source code" in their content.Video Link:Block Upload DLP Source Code
Netskope has been granted three new U.S. patents for its innovative approaches to IoT security and AI/ML based policy engines. Middle-ware artificial intelligence (AI) engine (US 12,166,776, Dec. 2024) Systems and methods for computing device association (US 12,137,389, Nov. 2024) Machine learning based policy engine preference for data access (US 12,126,655, Oct. 2024)These patents enhance Netskope's comprehensive intellectual property portfolio and solidify its competitive position in the industry.
Stating the Obvious: The Rise of QR Code-Based AttacksQR code-based attacks are on the rise, and it's no surprise why. Almost everyone carries a smartphone, making QR codes effortless to scan. QR codes are everywhere—on restaurant menus, event tickets, and even advertisements—creating a massive attack surface for bad actors to exploit.You may have come across the term “Quishing”—a blend of QR code and phishing. Essentially, it’s phishing using a QR code to lure victims. However, this is just the tip of the iceberg. Threat actors can use QR codes to deliver malicious payloads, exploit browser vulnerabilities, or carry out other harmful activities.What’s the Right Security Approach?For QR-based phishing, the guidance might seem straightforward: treat it like any other phishing attempt. Don’t enter sensitive information unless you’re confident in the source, and stay vigilant for suspicious signs. However, the sheer size of the attack surface and users’ reduced caution—especially when out
Stating the Obvious: The Rise of QR Code-Based Attacks QR code-based attacks are on the rise, and it's no surprise why. Almost everyone carries a smartphone, making QR codes effortless to scan. QR codes are everywhere—on restaurant menus, event tickets, and even advertisements—creating a massive attack surface for bad actors to exploit.You may have come across the term “Quishing”—a blend of QR code and phishing. Essentially, it’s phishing using a QR code to lure victims. However, this is just the tip of the iceberg. Threat actors can use QR codes to deliver malicious payloads, exploit browser vulnerabilities, or carry out other harmful activities. What’s the Right Security Approach? For QR-based phishing, the guidance might seem straightforward: treat it like any other phishing attempt. Don’t enter sensitive information unless you’re confident in the source, and stay vigilant for suspicious signs. However, the sheer size of the attack surface and users’ reduced caution—especially when
Netskope Global Technical Success (GTS)Netskope controls for ChatGPT Native Client - Windows OS Netskope Cloud Version - 121 ObjectiveThe purpose of this document is to explore Netskope's capabilities for managing and securing the ChatGPT Native Client on Windows OS. PrerequisiteNetskope Inline CASB and SWG license is required ContextChatGPT is accessible through both its web platform and the Native Client application. While implementing security controls for ChatGPT's web platform is straightforward—thanks to extensive documentation on Netskope's capabilities for applying granular traffic controls. This document focuses on Netskope's ability to manage and secure the ChatGPT Native Client on Windows OS. FindingsNetskope acknowledges ChatGPT as a Cloud Application and provides a pre-defined cloud app connector. As of Dec 10, 2024 with Netskope’s ChatGPT predefined connector, customers can exercise control over the following activities:Image 1 As of December 10, 2024, the ChatGPT Native
Policy:Block Upload File ConverterDescription:In this example we will block the upload action for cloud applications from the "File Converter" category.Video Link:Block Upload File Converter
Policy:Enable - Test Netskope IPSDescription:In this video we show how to activate Netskope IPS and perform the detection test with an EICAR test fileVideo Link:Enable / Test Netskope IPS
Chief Evangelist, Bob Gilbert, performs a live demo of Train Your Own Classifier, which is Netskope’s groundbreaking solution that puts the power of AI in the hands of customers. Anyone deployed on the Netskope platform with advanced data protection can now train AI/ML models using their own unique corpus of data.
Anyone have this issue?
Off-boarding User Monitoring Protections in Practice Wednesday, January 158am PST | 4pm GMT | 5pm CETRegister now! Get a glimpse into some of the off-boarding protections that our internal security team has developed to aid them in monitoring users who transition from Netskope. In this webinar we’ll touch on:Who gets monitored and why How we use policies to collect data and maintain security posture How we use automation to start collecting data almost instantly
