Recently active topics

Netskope Global Technical Success (GTS)Microsoft m365 Copilot | Option 'Create' - Block Web Access Netskope Cloud Version - 131 ObjectiveMicrosoft m365 Copilot - Option 'Create' - Block Web Access PrerequisiteNetskope SWG or NG-SWG license is required ContextMicrosoft m365 Copilot provides an inbuilt ‘Create’ function that can generate images, infographics, stories, and more. This functionality is separate from the Copilot chatbot engine. Customers may have a use case where they want to allow all Copilot services except the ‘Create’ feature. This KB article explains how to achieve this using Netskope.Link - https://m365.cloud.microsoft/createDo You Know?When you first navigate to https://m365.cloud.microsoft/ and then click on ‘Create’ option, the traffic is redirected to https://m365.cloud.microsoft/create, and in the backend services from another URL https://designerapp.officeapps.live.com/designerapp/TraceRequest.ashx are invoked. Given this pattern, sub-domain designerapp.officeapp

Hello Team,I am working on SSL inspection with Netskope in our organization (Bogotá, Colombia) and encountered the following issue when accessing a specific domain: Domain: jarvis.grupokonecta.co Netskope error message excerpt: IncompleteCertChain (unable to get local issuer certificate) … Blocked by SSL_INCOMPLETE_CHAIN Verification error: unable to get certificate for issuer = ‘/C=BE/O=GlobalSign nv-sa/CN=GlobalSign GCC R3 DV TLS CA 2020’, subject = ‘/CN=.grupokonecta.co’, altnames = DNS:.grupokonecta.co, DNS:grupokonecta.co’, caissuers = ‘http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt’, sslerrdesc = ‘unable to get local issuer certificate’ I have verified via openssl s_client -connect jarvis.grupokonecta.co:443 -servername jarvis.grupokonecta.co -showcerts and online tools such as SSL Labs, and indeed the certificate chain appears incomplete (missing or not served correctly by the server). What we have reviewed so far: The server certificate for *.grupokonecta.co i

Every time we deploy an Intune image to a new device, the Netskope client registers but will fail when downloading the client configuration.  We have to manually uninstall the client and then send a new invite to the user to reinstall the client.

Thee following topic covering how to block Google AI mode has been posted )How to Block Google AI Mode? | Community ) but now with Google presenting poor quality AI responses via “AI Overview” on nearly all AI searches, we are looking for a way to block these search results without completely blocking Google Search.There is a known way to block “AI Overview” by appending “&udm=14” to the search request URI, however Netskope does not appear to have any support for inline modification of URI’s. Has anyone been able to work around this limitation or found another way (such as HTTP header insertion) to block the “AI Overview”? 

Your Netskope Monthly Highlights – November 2025The latest updates, resources, and events – all in one place.Hi there,As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities. 🚀 Product Release UpdatesRelease 132 is here!Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.📄 Release Notes - November 2025 ✅ Pro Tip: Check for features relevant to your current configurations. ✅ Features not to miss out!This section highlights key innovations from recent Netskope releases that can significantly enhance your Adoption and Value Realisation journey.Top 5 Highlights:Localization Zones – Deliver a native language and localized content experience while maintaining seamless access across regions. Suppress Alerts in Real-time Protection

Netskope Global Technical Success (GTS)  ObjectiveEnsure that sensitive data is identified, monitored, and protected across all environments, including cloud services, web traffic, email, and private applications , by applying appropriate Data Loss Prevention (DLP) controls and policies based on Netskope’s capabilities. PrerequisiteA Netskope Next-Gen Advance DLP license is required to enable inline DLP inspection, as well as API Data Protection capabilities for sanctioned SaaS applications. Context Organizations across industries must prevent the unauthorized exposure of sensitive data such as PII, PCI, PHI, or intellectual property.Netskope DLP provides visibility and control over sensitive information moving across sanctioned and unsanctioned cloud applications, web uploads, email, and endpoint traffic.Key objectives include: Preventing accidental or intentional data leaks to personal or unsanctioned apps. Maintaining compliance with regulations such as PCI DSS, HIPAA, GDPR, SOX,

EntraIDやjamf　Proでマルチユーザーモードでの展開方法が知りたい

■ご質問内容・F/Wなどで除外しないとIntune条件付きアクセスでMacOSが正しく判定できない場合のNetskopeの設定方法 ■大前提条件・Jamf ProとMicrosoft社のIntuneを連携して利用しております。 ■問題点１）MacOSに限りEntraID時でNetskopeを無効化しなければデバイス情報をMicrosoft社に渡せなく　　EntraIDの準拠がされない状況が発生しております。　　⇒対応策：弊社ではEntraIDに登録時にはNetskopeを無効化して準拠している。　　　　　　　  準拠後はNetskopeを有効化している。 ２）Microsoft社 Intune条件付きアクセスで準拠したMacOSに限りSharepoint上のページにアクセスする場合　　デバイス情報をIntune側に渡せなくてデバイス登録をしてくださいとエラーが発生してしまいます。　⇒対応策：一時的に条件付きアクセスのサイトでアクセスする場合はNetskopeを無効化しております。

Report for viewing email applications and instances being used, risk score, activities, and applied policies.Report:Advanced Analytics - Webmail Usage (Last 7 Days)  

Hi Team, Is it possible to integrate/ install AD agent so that we can apply client configuration based on OU. and Use Entra ID integration for SSO? Just for Sign-in.  Possible that we can use OU to provide access to private resources.? One way is to create groups and provide access to private resources and apply client configuration group or all users. Since we have multiple branch offices. we need to create many Groups and import in Entra ID.  So wondering if we can enable private access based on OU and apply client configuration based on OU as well.

Does anyone have any experience with allowing Partner Access for a 3rd party? We are thinking through building out device classification rules for a potential Partner Access use-case and it got me thinking about this topic. what will we see in Devices in our tenant for these devices? I assume we won’t have any “enable”/”disable” options but want to be sure safeguarding our partner safeguarding our environment

Starting a few months ago our company users have reported consistent and numerous blocks by Google to access our own Workspace tenant apps (Google Admin, Gemini, Gdrive, etc). The message received by the users say, “Our systems have detected unusual traffic from your computer network. Please try your request again later.” It then presents your network IP and says it does not equal the Netskope POP IP (e.g. 10.10.10.10 ≠ 163.116.140.55). This implies that Google no longer trusts the Netskope POP subnets and see’s the proxied traffic as a risk. Is Netskope aware of this issue and are you working with Google to remediate it? Thanks 

Netskope Global Technical Success (GTS)KB - How to create a dashboard for tracking Device Status Advanced Analytics Netskope Cloud Version - 131ObjectiveTo create a dashboard in Netskope Advanced Analytics that provides daily visibility into enabled and disabled devices across the organization. This dashboard can also be scheduled and automatically shared with admins for monitoring purposes.PrerequisitesBefore configuring dashboard, ensure the following:License for Netskope Advanced Analytics. Admin role with permissions to create and share dashboards. Basic understanding of Netskope device page. Understanding of the WorkingNetskope Advanced Analytics allows admins to query device information and generate visual reports. By filtering device status (enabled/disabled), you can create a dashboard that provides:Total number of devices in the tenant. Count of enabled devices. Count of disabled devices. Trend analysis over a daily timeline.This helps admins proactively monitor device health

It seems that users under SkopeIT are only displayed when accessing Cloud Apps or the Web.Events from Cloud Firewall or Private Apps are not included, resulting in limited visibility.Do you have any suggestions on how we can monitor user activity in these cases?

Use case: Our Support team can connect other users’ laptop with AOVPN feature but with zero Trust is blocking the admin drive access.In this user case, Support team can access the laptop CAL-XXX for Admin related activities but with Zero trust its not possible so what is the alternative solution? Is there any tool ? which can be used 

When running a query against “/api/v2/infrastructure/publishers” the list of to be returned fields can be attached. However it seems that only fields from the first level of the JSON can be selected. Does anyone know, if other fields e.g. assessment[latency], can be referenced in the field-list as well? And how? Thanks Timo

Netskope Global Technical Success (GTS)KB - Netskope Alerts and Events Streaming RBACv3 Netskope Cloud Version - 130ObjectiveThis document aims to help customers on the Service Account (RBACv3) creation with the needed API V2 endpoints for the Netskope events and alerts. RequirementsNetskope CASB Inline/SWG license is required ConfigurationOption #1: Predefined Role usage (Recommended)Currently Netskope offers a predefined role for cloud exchange integration: “Netskope Cloud Exchange”. This role includes all the API endpoints needed for Cloud Exchange deployments that have all the four modules enabled (Ref. Cloud Exchange Module Descriptions). In case your deployment is based on Log shipper module only, we suggest defining a custom ad-hoc role with the needed API endpoints only. Custom role creation instructions can be found in the Option #2 section. If you prefer to keep Predefined role maintained by Netskope, please jump to Step #2. Option #2: Custom Role CreationPath: Netskope Tenan

The Netskope Cloud R132.0.0 documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Version 132.0.0.The key new or updated features are:CASB Real-time Protection Universal Reverse Proxy Skope IT Visibility Support for Transaction Event in Skope IT SaaS Security Posture Management (SSPM) Enhanced Findings UI Visibility for Modified and Deleted Rules in the Rules UI Submit your feedback via docs.netskope.com.

Overview Some environments using Netskope Client may encounter SSL or certificate validation issues when running Google Cloud CLI (gcloud) commands.This happens because gcloud relies on its own embedded cacert.pem bundle (under the SDK’s certifi package), which doesn’t automatically include enterprise root certificates — such as Netskope’s Root CA. Important note about bypassing *.googleapis.com In many enterprise deployments administrators add bypass rules for *.googleapis.com (so some Google APIs are sent directly to Google). However, simply configuring core/custom_ca_certs_file with only the Netskope root certificate — or relying only on the Netskope root in a custom bundle — frequently does not resolve SSL errors for these bypassed domains.Why this happens (observed behaviour):After a bypass, the TLS connection may be negotiated directly with Google (or with different certificate chains), or the client and the SDK may expect the full set of public root CAs. If only the Netskope roo

The Netskope Cloud R131.1.0 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Hotfix Version 131.1.0.Submit your feedback via docs.netskope.com.

 Collaboration Opportunity: Help Us Design the Next Generation of Data VisibilityThe Netskope UX & Product Team is kicking off a strategic study to fundamentally improve how data security professionals gain visibility into their data landscape and manage data risk across the entire enterprise. Our goal is to co-create this new experience with our users. We are looking for:Role: Data Protection / Security team members or similar operational roles who have a need for visibility into their data landscape Company: All sizes, regions, and industries are welcomeSession Details:Format: Remote, 1-hour collaborative workshop over Zoom. Reward: Each participant will receive a $50 gift card as a thank you for their valuable time and expertise.Ready to influence the future of data protection at Netskope? Sign up here: https://forms.gle/aizQVGaWL6yCanzX9

Dear Netskope-Team,First of all: I love the new SpeedTest Feature! SpeedTestBut I think something is not working correctly yet, because the download speed is always below 1 Mbit/s.Here my results:POP: DUS1Test ID: ypjx-9133686Latency: 11.20 msJitter: 2.75 msDown Speed: 0.25 mbpsUp Speed: 538.54 mbpsHTTP version: 1.1 Could you please help? Anybody in the community with the same problem? Best regards