Recently active topics

58 Topics

I
ivan.baracNew Member
asked in DLP

How to limit upload for WeChat Windows app

I have request from customer to limit file size for upload in WeChat Windows desktop up. Limit size is 25 MB. I created File profile for File Size and include all Types, but doesn’t work well, I have notification action is blocked, but file is uploaded. If someone have idea how to solve that problem, please help me.

0
I
1 day ago
Ccapali
Netskope Partner
CcapaliNetskope Partner
asked in Netskope Academy / Training Discussions

¿ How i can get my NSK101 Certificate ?

I just passed my Netskope NSK101 exam; however, I don't know where to download my certificate or which page I need to link my partner account with Pearson VUE to obtain my certificate. Can someone please help me with this issue?

3
Rohit_Bhaskar
Netskope Employee
1 day ago
S
simonmaNew Member
asked in Private Access for ZTNA

NPA - On-premise Detection Exceptions

Hello,We are observing a problem with on-prem detection enabled in client config with NPA.Exceptions are being done on the cloud proxy side instead of the client. We have multiple exceptions configured whereby user traffic must originate from our office IPs due to whitelisting requirements.We are now on R117.0.2.136.It has been indicated that Netskope were working on a feature which would allow customers to choose if exceptions should be done at the client or cloud for BOTH on and off prem.Is anyone aware of the status of this feature?Regards,Simon

1
S
1 day ago
prajakta.yadav
Netskope Partner
prajakta.yadavNetskope Partner
asked in CASB

Policy enhancement

Hi, How to determine the maturity of policies in our tenant. For example, we have Netskope tenant with all policies implemented, then how to check whether these policies are enough or any enhancement is required further?

0
prajakta.yadav
Netskope Partner
2 days ago
C
Netskope Employee
Carl SuárezNetskope Employee
published in WhatsApp

Implementing Steering bypass for WhatsApp's native agent traffic on the Android platform

 Netskope Global Technical Success (GTS)Use Case - Implementing Steering bypass for WhatsApp's native agent traffic on the Android platform Netskope Cloud Version - 117 ObjectiveCreate a Certificate Pinned Application for WhatsApp Android Native Agent and add it into the Netskope client steering configuration PrerequisiteNetskope CASB Inline/SWG license is required ContextHow can WhatsApp traffic from Android devices be excluded from routing through Netskope? DetailsWhatsApp, being a certificate-pinned app, can be excluded or bypassed from the steering configuration on Android devices. Lab RecreateStep 1 - Click over new certificate pinned appPath: Netskope Tenant UI >>> Settings >>> Security Cloud Platform >>> App Definition  Step 2 - Add the required detailsName - [WhatsApp]Platform - AndroidDefinition - com.whatsapp, com.whatsapp.w4b Note - The process names for WhatsApp on the Android platform are com.whatsapp &  com.whatsapp.w4b  Step 3 - Add Certifi

220
C
Netskope Employee
2 days ago
Mandeep Singh
Netskope Employee
Mandeep SinghNetskope Employee
published in Netskope Threat Protection

‘Patient Zero’ Real-time Protection PolicyF.A.Q.

Netskope Global Technical Success (GTS)KB - ‘Patient Zero’ Real-time Protection Policy(Netskope Cloud Sandboxing) ObjectiveUnderstanding the Significance of Patient Zero in Cybersecurity: Building a Robust Defense via Netskope Prerequisite.Netskope Advanced Threat Protection license is required. ContextThis article explores the significance of Patient Zero events, emphasizing the need to take it seriously in cybersecurity defense strategies. It outlines creating a Real-time policy to mitigate Patient Zero events and provides insights into addressing common queries associated with Patient Zero events Reference https://docs.netskope.com/en/netskope-help/data-security/threat-protection/creating-a-threat-protection-policy-for-patient-zero/ Do you know?Before we proceed, let me address some foundational questions: What is Patient Zero?"Patient Zero" typically refers to the initial infection or point of entry in a cyber attack scenario. It represents the first victim or system to be compromi

1071
M
3 days ago
W
Netskope Employee
Wilfredo Marchena LuzonNetskope Employee
published in Generative AI

KB - Restrict Microsoft Copilot via Netskope Header Insertion

Netskope Global Technical Success (GTS)KB - Restrict Microsoft Copilot via Netskope Header Insertion Netskope Cloud Version - 117 ObjectivePrevent the use of Microsoft Copilot via Netskope Header Insertion. PrerequisiteNetskope CASB/SWG license is required. ContextThere are scenarios where customers wish to prevent Microsoft Copilot usage as it does not have any business use case. ConfigurationMicrosoft introduced a HTTP header approach to prevent the use of Copilot without commercial data protection.Please visit: Manage CopilotThe Key-value for this feature is: “x-ms-entraonly-copilot: 1” which must be inserted on the following domains:bing.com copilot.microsoft.com edgeservices.bing.comFor bing.com (#1) and copilot.microsoft.com (#2), Netskope already has these domains as a part of 2 predefined connectors.bing.com:copilot.microsoft.com:On the other hand, for the missing domain, we will need to create a custom connector leveraging our universal connector.Go to: Settings >>> S

310
W
Netskope Employee
3 days ago
Deepak_InfoTru
Netskope Partner
Deepak_InfoTruNetskope Partner
asked in Next Gen SWG

Single Netskope Tenant with multiple tenant Idp

I have a very weird requirement for a client: Can we sync users in single Netskope tenant from multiple tenant Idp. In this case, clients have on premises AD integration with Azure AD/Entra ID? Each on-prem AD here represents separate organizations If above is possible: How can we do Netskope Tenant SSO login for different Admins from different organization? How can we do CASB API as each organizations has separate O365 presence? Is it even possible to do Reverse Proxy for different applications? What are other limitations we are looking here if we go with this set up?  

0
Deepak_InfoTru
Netskope Partner
3 days ago
J
jdavilaNew Member
posted in Private Access for ZTNA

how to automatically disable agent npa tunnel, when endpoints are in company internal network?.

how to automatically disable agent npa tunnel, when endpoints are in company internal network?. It is necessary that when the endpoints are in the internal network of the company, and the endpoint needs to connect to the internal web applications, these are not encapsulated and the traffic is not sent to the netskope cloud. If not, the traffic must go directly through the internal network.How does netskope manage to do this, because it has been tested and found that the netskope agent for https always tunnels traffic to the cloud, so for intra-enterprise web applications you will never be able to access it directly.  

16
S
4 days ago
Mandeep Singh
Netskope Employee
Mandeep SinghNetskope Employee
published in Malware Protection

Understanding Netskope's Predefined Web Category 'Security Risk' and Its Subcategories

Netskope Global Technical Success (GTS)KB - Understanding Netskope's Predefined Web Category 'Security Risk' and Its Subcategories Netskope uses the Security Risk category and applies to sites where security risks are pervasive and can directly threaten business availability. Security Risk is the parent category, and all those preceded with "Security Risk - " are subcategories of the parent.Ref. - LinkSecurity Risk (main/parent category)Security Risk subcategories Security Risk - Ad Fraud Security Risk - Attack Security Risk - Botnets Security Risk - Command and Control server Security Risk - Compromised/malicious sites Security Risk - Cryptocurrency Mining Security Risk - DGA Security Risk - Hacking Security Risk - Malware Call-Home Security Risk - Malware Distribution Point Security Risk - Miscellaneous Security Risk - Phishing/Fraud Security Risk - Spam sites Security Risk - Spyware & Questionable Software URLs categorized under "Security Risk" in Netskope encompass

270
Mandeep Singh
Netskope Employee
4 days ago
S
simonmaNew Member
asked in Private Access for ZTNA

Publisher App Reachability

Hello,Assuming a private apps is defined with a single hostname (with the exception of CIDR or wildcard domain) and reachability status is normal, what is the default traffic behaviour if the publishers associated with the app are suddenly unable to each the app? Is the traffic dropped?Is reachability only relevant in scenarios where a single hostname in an app is defined? The private app FAQ document states the following. When an app is specifies with multiple ports or a port range, the Publisher will use only the first port from the list or range to check availability. For example, port range 70-90 will return unreachable, even if you are listening on port 80, because the only port that will be checked is 70 (this is a known limitation). If an app definition specifies multiple ports and/or port ranges, it will check whether any of them is reachable. For example, if you specify 22, 70-90, if it’s able to reach port 22, it will mark the app as reachable. Can anyone clarify these state

0
S
4 days ago
A
aldiazNew Member III
asked in Private Access for ZTNA

Modify keepalive time interval between publisher and private app

Hi team,I´d like to know if it´s possible to modify the keepalive time interval between publisher and private app?Thanks in advance!

4
S
4 days ago
Iftesam
Netskope Partner
IftesamNetskope Partner
asked in Additional Discussions

Difference between Advanced debugging logs and logs collected from tenant.

I recently encountered the below mentioned issue and would like to have better understanding of the same.I have collected advanced debugging logs from the users system, where in the option of “Start” for outer capture was disabled, still I collected the logs and those were as expected.However when I tried collecting the same logs from the tenant for that user, I observed the logs were different and some of the captures which were present in the previously collected advanced debugging logs from the system were missing in the logs collected from the tenant.Attaching the screenshots for reference:Events triggered for the date and time : 2024/07/17 14:47:00.213Logs collected from the tenant :Advanced debugging logs collected from the device for the same time :Need to understand why the captured even for the same timestamp are different.

2
Iftesam
Netskope Partner
6 days ago
S
Saif-ChaudhryNew Member
posted in Additional Discussions

Can you send me all Netskope log data in Microsoft Sentinel?

If you work with Security Architects, SOC Engineer, or a SOC Analyst, all of them will tell you one thing “Send me ‘ALL’ the logs!” because their ability to find threats or investigate incidents is reduced without the log data or if the required log data is dispersed in various log data stores. If your chosen partner for cloud is Microsoft, then they will also tell you one more thing “Send it to Microsoft Sentinel!” If you happen to be a person responsible to fetch these logs from Netskope then it’s okay to establish feeling where you think the whole world is working towards making your life difficult. I can tell you one thing – I’m not one of them so let me explain why I think I’m the angel 👼 out there to save you ....! Let’s get some fundamentals out of our way: Cloud Exchange – it’s our integration platform to enable third party partner integrations. Packaged as a multi-container application. Modules - Cloud Exchange (CE) comes with four primary modules: Log Shipper, T

4
M
Netskope Employee
7 days ago
M
Netskope Employee
madhurasridharNetskope Employee
published in Inside Netskope

Inside Netskope: Session 05 Recap - Using Layered Protections for SaaS Applications

In case you missed the latest webinar in our Inside Netskope series—where Netskope experts show you how we protect our users, applications, and data using our own cloud-based architecture—a recording and recap of our recent session on Using Layered Protections for SaaS Applications can be found below. Feel free to comment and continue the discussion!  📽 Watch on-demand 🍿 Q: Do you have any book or links for reading materials needed to perform at my duties professionally?A: In relation to this topic specifically, we have a corresponding Community post for the three products we discussed during the presentation that talk about how we use layered protections for SaaS Applications as well as recommendations.Security posture for Workday application at Netskope Security posture for Github application at Netskope Security posture for Salesforce application at NetskopeDocs.Netskope is also a great place to get additional information and use cases. Q: Can Netskope be applied together with SI

280
M
Netskope Employee
8 days ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library

Inside Netskope 05: Using Layered Protections for SaaS ApplicationsInside Netskope

Hear from our security engineers on how they use different Netskope products to holistically secure SaaS apps to improve the security coverage and posture of an organization. Layered Protection for SaaS apps [Salesforce, Github, Workday] at Netskope:Client Enforcement - Access to Salesforce allowed only when connecting with a Netskope client that is registered with the production Netskope tenant Realtime and API protection policies for confidential data [PII, PCI, passwords, API security keys] Security Posture Management - Compliance standards and rules are checked against the configurations of Salesforce, so that any vulnerabilities and threats are remediated by Salesforce admins Endpoint DLP Protection - File origin policy to block movement of data downloaded from Salesforce to unsanctioned external storage devices User Behavior Analytics - Bulk downloads, failed logins, access from risky countries, suspicious download, and delete are some of the alerts we monitor and investigate Che

420
aplaza
Netskope Employee
8 days ago
E
EmmanuelVNew Member III
asked in Next Gen SWG

Network Location automation

Hi all,Is there a way to create/modify/delete Network Location with API?I already do it with csv but i did not find it with API.Thanks for your help

1
ejang
Netskope Employee
9 days ago
C
CarlosNew Member III
asked in DLP

API Data Protection Policy - User Profiles

Seeking some assistance with API Data Protection Policies.Looking to leverage ‘User Profiles' so that API policies will only trigger on a subset of users. From what I can see, user profiles only allows importing the full user identity. Is there a way to set up domain wildcards so that it trigger for all users of a domain e.g. *@domain.com? Note: Currently using Classic API data protection policies for M365.Is this something that will be addressed with the Nextgen API? 

1
ejang
Netskope Employee
9 days ago
mfaris
Netskope Employee
mfarisNetskope Employee

Netskope Cloud Hotfix 117.1.0 Documentation Available Now!

The Netskope Cloud R117.1.0 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Hotfix Version 117.1.0.Submit your feedback via docs.netskope.com.

880
mfaris
Netskope Employee
9 days ago
C
cgrahamNew Member
asked in CASB

Usage report for Generative AI category includes Adobe?

As per title. Wondering why Adobe products have been included in the AI usage report. Adobe CC is categorised as “Web Design” and Adobe document cloud is “Business Process Management”.

1
S
Netskope Employee
9 days ago
N
nadkickNew Member III
asked in Additional Discussions

Identify mode of enrollment (UPN vs IdP)

Hello,Is there a way in the tenant to identify on how a user has been enrolled (UPN vs IdP)? In preparation for mitigating Netskope’s enrolment vulnerability, we need to find a way to identify users/devices that are affected as they have been enrolled using UPN mode (we starting with UPN and switched to IdP for new subsidiaries). In addition, this might be a way to identify devices that should not be there (aka exploited the vulnerability).Thank you!Regards,Nadja

0
N
9 days ago
N
nadkickNew Member III
asked in Additional Discussions

Switch from UPN to IdP mode

Hello,Driven by Netskope’s enrolment vulnerability, we want/need to move our Windows endpoints from UPN to IdP mode. Does anyone know if there is a way to use a script to change the existing configs of the already installed agents? Before we plan to uninstall and re-install all 10k agents, we would like to elaborate if there is another way by eg deleting/modifying an existing config file.Appreciate any feedback. Thanks,Nadja

0
N
9 days ago
C
Carlos21New Member
asked in Netskope Academy / Training Discussions

¿ How i can get my NSK101 Certificate ?

I just passed my Netskope NSK101 exam; however, I don't know where to download my certificate or which page I need to link my partner account with Pearson VUE to obtain my certificate. Can someone please help me with this issue?

0
C
9 days ago
mherbinet
Netskope Employee
mherbinetNetskope Employee
posted in Next Gen SWG

Share your experience on AM2 Root Certificate Rotation

Hello all,This is the start of a thread about AM2 Certificate Authority Rotation as we are getting closer to August deadline.The goal of this thread is not to provide a guide of the migration. You can find plenty of great explanation in the official docs:https://docs.netskope.com/en/netskope-root-certificate-rotation-guide-1/and also in our recent webinar here: However, if you have any question, please feel free to ask questions here.Or if you don’t know who is your CSM or Sales Representative, we can help you as well in this transition.As feedback are provided, we will also put more comment here.

3
mherbinet
Netskope Employee
10 days ago
M
munster
asked in Next Gen SWG

Difference between Category vs Application

Hi NetskoperI will like to allow Reddit for “BROWSE and DOWNLOAD” and not worry about URL updated when change.In SWG, I can use Application=Reddit, but there was no “BROWSE” If I will to use custom Category, I can see “BROWSE and DOWNLOAD” but I have to keep monitoring if the URL has change. I like to know what is the difference between Category vs Application? When should I use them effectively?thank

2
S
Netskope Employee
11 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings