Skip to main content
  • EN

Recently active topics

75 Topics
S
sean.clowesNew Member
asked in Next Gen SWG
Agent Deployment after macOS 15+

Hey folks, does anyone have any experience so far deploying Netskope Steering Agent to macOS in versions above 15?  Our Jamf policies that have worked for some time have stopped. Specifically the VPN configuration profile fails to deploy with the error:The ‘VPN Service’ payload could not be installed. The VPN service could not be created. This continues to work on anything below 15. Anyone needed to update their Jamf policies in order to get this to work? And by policies I mean the configuration profiles?

10
S
22 minutes ago
D
dkolb-netskope
asked in Additional Discussions
Secure Enrollment Authentication Token Question

Hello,I was wondering if the Secure Enrollment Authentication Token gave a warning before expiring?I could not find any documentation that said there would be any banners or notifications when the token is about to expire so I wanted to know if there is some sort of warning for it.Thanks in advance!

271
S
Netskope Employee
18 hours ago
E
ElTetuNew Member III
posted in Community Feedback
Missing Community post

HiI did bookmark a couple of weeks ago the links from a community posts named “Simplifying NPA: End-to-End workflow”.These were 3 posts (part 1 to part 3) with a really good and detalied explanation of how the NPA  service works, and when I’ve tried to check them again I get a 404 page not found message indicating that “the page you are looking for might have been removed, is temporarily unavailable, or the name has been changed.”i have tried to look for these wonderfull posts via tags, name and so on, but it seems that they do not exist anymore, I have also tried to ask this same thing mailing to community@netskope.com as the 404 webpage suggest, but it seems that this account doesn’t allow to receive emails…So I hacet thought to just ask here if anybody remembers these posts or know what happened to them or how to access them again…The bookmarked links I have are the following:Simplifying NPA: End-to-End workflow - Part 1 | CommunitySimplifying NPA: End-to-End workflow - Part 2 | Com

50
E
20 hours ago
S
Netskope Employee
Saniya MurtuzaNetskope Employee
published in Netskope Client
Understanding and actioning notification related to Secure Enrollment

Netskope Global Technical Success (GTS)Understanding and actioning notification related to Secure Enrollment Netskope Cloud Version - 121ObjectiveThis document contains instructions for customers who have either received an email communication related to “Secure Enrollment” or see a pop-up message when logging into the Netskope Tenant UI, titled “Secure Enrollment not deployed”. This document will only discuss the requirement of enabling Secure Enrollment and passing the authentication token to end user devices. Parent ArticleLink ContextNetskope has been notified of a Security gap in Netskope’s client enrollment authentication process. In some specific cases, this gap can be used to impersonate users from the same organization or from other organizations without proper validation.To address this issue, Netskope has implemented a fix which is generally available to customers today.This fix can be implemented by “enabling the Secure Enrollment” option on the Web UI What happens as a res

560
S
Netskope Employee
23 hours ago
K
kdibbleNew Member III
asked in DLP
Not Near Best Practices

We are working towards implementing a rule that looks for plaintext credentials within shared documents. In doing so, we’ve utilized the Passwords (contextual) pre-defined entity. We’ve noticed that this entity is catching teams and zoom meeting passcodes. We do not want to catch these passcodes in the rule and are trying to create a “not near” advanced expression. I’m looking for guidance on how to perform this. For example here is what we have: P1 = Passwords (Contextual)D5 = Custom Dictionary of words like “meeting”, “teams”, “zoom”, etc… Both options we’ve tried: 1.) ( P1 AND ( NOT ( P1 NEAR D5 ) ) )2.) (P1 AND NOT (P1 NEAR D5)) Any help would be appreciated.  

638
ejang
Netskope Employee
1 day ago
NicolaScand
Netskope Partner
NicolaScandNetskope Partner
asked in Private Access for ZTNA
PQDN

Is it possible to allow rdp access to a private app using a PQDN? If so, what steps would have to be implemented to enable this? 

151
N
1 day ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Device Classification: Verification of Certification Chain, Expiration, CRL

Hello,In the context of implementing a Device Classification profile, we can verify the presence of a certificate. Currently, the presence of a certificate is sufficient to meet the criteria.Is it possible to extend this verification by checking the certification chain, expiration date, etc.

111
Rohit_Bhaskar
Netskope Employee
1 day ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
On-Premise Detection

Hello,In the context of On-Premise detection, it is currently possible to use a DNS/http request. To validate detection, it is necessary to depend on the tested resources.The slightest network disturbance can lead to poor detection of the user's location Is it possible to use the Public IP to identify the user's locality? This IP is visible to the agent.

141
Rohit_Bhaskar
Netskope Employee
1 day ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

112
Rohit_Bhaskar
Netskope Employee
1 day ago
Natedog0024
Natedog0024New Member
asked in Private Access for ZTNA
revoke NPA session

Hello,is there a way to revoke an existing NPA session? Ex. Employee is terminated remotely but has an active NPA session they authenticated to that doesn’t expire for 6 more hours.thanks,Nate

301
N
2 days ago
1
11qwerty22New Member
asked in Netskope Cloud Exchange (CE)
CE Log Shipper - Netskope client device logs (disable client/re-enable client)

Hello,We are ingesting Netskope logs via CE Log Shipper into Elastic. These are events and alerts. How can we ingest the Netskope client related events for users disabling/re-enabling the client? Advanced Analytics presents this information, so the logs exist. Can they be exported via CE Log Shipper?Thanks.

181
N
2 days ago
EsraDemircioglu
Netskope Partner
EsraDemirciogluNetskope Partner
asked in DLP
I want to hide some parts of datas

Hello Team, I want to set a policy which can hide some parts of datas (for example credit card numbers) during download/upload processes. (For example If I download document, I want card numbers become like 1111 xxxx xxxx xxxx )Is Netskope able to do this?Note: My question is not answered in this link  https://docs.netskope.com/en/dlp-entity/#entity-obfuscation-1  Thank you in advance,

532
N
2 days ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Private Access for ZTNA
Make it Possible to Create Steering Profiles via API Call

Hello,In the context of a ZTNA project, we have the option to publish "all ZTNA applications" or only the applications necessary for the user group/OU in the Steering profile. In a ZTNA approach, it seems interesting to publish only the applications necessary for users who are members of a group.Would it be possible to obtain an API Endpoint to automate the creation and assignment of a steering profile with the necessary applications?

111
N
2 days ago
C
cjcarewNew Member
asked in Discussions
V2 API Pagination

Hi Folks,Apologies if this is a simpleton question, however it’s doing my head in. I have the api working and am able to use the dataexport endpoint to extract malware alerts. My issue is that I only receive one record in the response and I know there is 115 in the time period of the search. The record I receive is the very first in the results. I can confirm that by checking in the console.My (hopefully simple) question is what is the format of the api query to iterate through the results so that the full list can be retrieved? I’ve tried ?operation=next&index=(the index name supplied in the first query). However that returns an empty response.I’d appreciate any guidance.Regards,Campbell

821
N
2 days ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in Community News & Announcements
Total Economic Impact Study: The Business Impact of Netskope SSE

Explore the hard-cost savings and economic impact benefits of transitioning to Netskope's Security Service Edge (SSE) with the 2024 Forrester Total Economic Impact™ (TEI) study.  Discover the value of Netskope One SSE with the Forrester examination of the potential return on investment (ROI) enterprises may realize through the deployment of Netskope.Inside the study, Forrester explores:The financial impact of SSE technology investment, in quantified true hard-cost savings Business value justification analysis with payback within six months Benefits analysis across seven areas that improve outcomes for networking, I&O, and security teamsReady to build a business case for the value you’d receive? Download the study.

280
aplaza
Netskope Employee
2 days ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
Inside Netskope 08: Protecting Lost/Stolen Managed Devices with Netskope ClientInside Netskope

Hear from our internal security team as they discuss the possible settings and changes which can be made in the Netskope tenant to accommodate a lost/stolen corporate managed device.  Learn how to: Modify settings in the tenant proactively for lost/stolen device cases in the future Effectively deal with lost/stolen devices by setting up protective measures against device misuse Minimize data loss in case of lost/stolen device cases by blocking data movement from the device  Check out our blog for more information!

391
N
2 days ago
Jais100rbh
Netskope Partner
Jais100rbhNetskope Partner
asked in Private Access for ZTNA
Publisher password reset

Hey Netskope buddies, I’m reaching out for help because I’ve forgotten the passwords for two of my publishers and I’m currently unable to log in. I attempted to use some Ubuntu commands to reset the password, but it’s asking for the current password, which I don’t have.I would greatly appreciate any assistance you could provide in resetting my passwords.

281
N
2 days ago
J
jschueleNew Member III
asked in Private Access for ZTNA
Sign-in Redirect Breaking NPA Browser Access

I have an internal private app configured in NPA to allow Browser Access for a consultant. Everything works fine until it redirects to Google for the login process and we see a Google error message “Access Blocked: This app’s request is invalid”, “Error 400: redirect_url_mismatch”. Any idea’s how to get around this? Thx

311
N
2 days ago
M
maxkorNew Member III
asked in Private Access for ZTNA
Browser access portal

Hi all,When I try to create more than one application this option is not enabled.The browser access portal does not support more than one application? I need to publish 5-6 different apps/services through the portal. How do I accomplish that? 

171
N
2 days ago
A
adebrattoNew Member
asked in Private Access for ZTNA
Breaking out printer traffic - Is this possible?

We are just kicking the tires on the Netskope Private Access functionality.  We are trying to understand if it would be possible to drop certain traffic out of the Netskope tunnel and onto the local wire.  For example, we do not want to send print jobs from the endpoints to the publishers if we can just break that traffic out of the tunnel and drop it right to the printers in office.Any advice?  We have been tinkering with on-premise / off-premise steering configs but cannot put a finger on how this could/shoudl work.

181
N
2 days ago
S
Netskope Employee
Saniya MurtuzaNetskope Employee
published in Real-Time Protection: Key Policies
Setting Up Keyword-Based Blocking on Search Engines

Netskope Global Technical Success (GTS)Setting Up Keyword-Based Blocking on Search Engines Netskope Cloud Version - 121 ObjectiveThis document provides guidance around configuring keyword based blocking on search engines PrerequisiteNetskope SWG Entitlement is required ContextMany customers have specific requirements about blocking search of specific keywords on Search engines.This use case is around such a requirement and will demonstrate how to configure keyword based blocking on search engines. Lab RecreateFor this example, we will create a policy that will block the search of keywords - “Sport” and “Sports” on a search engine like google.This can be done by creating a regex that matches the keywords “sport” and “sports” in the search panel of Search engine.However, the regex should also ensure that a keyword such as “Sportland” should not get blocked.To create a Regex and understand the supported syntax, you can leverage this document from Netskope Knowledge base Below steps can be

90
S
Netskope Employee
2 days ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in CASB
Feeling the weight of managing SaaS and GenAI security? It doesn’t have to be complicated.

Streamline your security operations with a converged SaaS security solution built for today’s challenges.  Join Melody Nouri, Netskope's Product Marketing Manager, and Dev CK, Director of Product Management, as they reveal how Netskope's unified Cloud Access Security Broker (CASB) can help you navigate the ever-expanding SaaS and GenAI landscape with ease, offering the tools needed to streamline your security operations. Key Topics Covered: Identify gaps in current SaaS security tools and understand their limitations. Explore the essential capabilities needed to transform SaaS security with a unified CASB approach. Watch a live demo of key use cases showcasing Netskope’s LLM-powered risk categorization, helping you stay ahead of emerging threats and reduce alert fatigue. Discover how Netskope can enhance your security posture while boosting productivity. To learn more about how to stay ahead of threats without slowing productivity, register for our upcoming webinar below:   Simplify

120
aplaza
Netskope Employee
6 days ago
D
drftordieNew Member
asked in Next Gen SWG
Netskope Blocking Dialpad calls in Chrome only on MAC - Help

Hello all,I have a weird issue that I dont know how to fix. The issue is that when using Dialpad (Cloud Phone System) in the Chrome, Safari or the Brave browser on a MAC device (this does not seem to affect Windows) to make calls and or use Dialpads meeting feature something is being blocked. But the kicker is it is not being blocked when using Firefox on the MAC.What happens for calls is I will initiate the call (I used my personal cell for the test) it will not make the default ringing noise we all know and love but the noise that Dialpad makes when starting the call (its like a ding, ding noise idk). Then my cell sees the incoming call, I answer it but neither side can hear the other talking. The call will stay connected but again no one can hear the other person. Then sometimes when I answer the call on my cell it will seem like it connected the call then just hang up the call automatically.I made sure that the domains in the Desktop Native, Mobile, & Browser Applications secti

250
D
7 days ago
S
Netskope Employee
scarlileNetskope Employee
posted in Next Gen SWG
Checking URL for category and URL List using Rest API

How can we check which category and URL list a specific URL belongs to?Rest API provides a useful method to extract this information. How to use Rest API:-Go to Settings/Tools/Rest API v2  Select API DocumentationEnsure there is a token which has:- /api/v2/nsiq/urllookupSearch or scroll down to /api/v2/nsiq/urllookupClick to try out the API Edit the text to select the URLs  you want to check for category and URL list Click Execute  You will get a response back which will show whether the has succeeded or not, but also some info which might be useful for your API tool of choiceIf you get an error, check your API token, and any brackets, or commas in the requested body above. The response will show the categories (pre-defined & Custom) and URL lists To verify the categories are correct, check the tenant UI If you need to modify the URL lists, check out:-https://community.netskope.com/real-time-protection-key-policies-72/how-to-automate-url-list-updates-via-api-7167 

220
S
Netskope Employee
7 days ago
S
Netskope Employee
Saniya MurtuzaNetskope Employee
published in AnyDesk
Block Any Desk using Netskope's Cloud Firewall Module

Netskope Global Technical Success (GTS)Block Any Desk using Netskope's Cloud Firewall Module Netskope Cloud Version - 120 ObjectiveThe objective of this document is to describe the procedure for blocking AnyDesk using Netskope. While Anydesk is referenced for example, this procedure can be applied for similar Remote Control Applications that an IT Administrator would like to access control over, within the organization. PrerequisiteThis use case can be implemented using Netskope’s Cloud Firewall / SWG Module. This document will describe the procedure for Blocking Anydesk Applications via Cloud Firewall Module. ContextAnyDesk and TeamViewer are both remote desktop applications that allow users to connect to and control another computer over the internet. They are commonly used for remote support, remote work, and accessing files or applications on another device from a different location. While these applications are available for free, they might not be sanctioned for use within the or

200
S
Netskope Employee
7 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings