Skip to main content
  • EN

Recently active topics

92 Topics
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
Quarterly Product Release Webinar - October 2024

Hear from our Product Management and Product Adoption leads as they cover the latest platform updates from Release 118, 119, and 120.  Key product updates:Site, User—App Synthetic Monitoring for Web Apps and Custom Web Applications  E2E Encrypted App Inspection and AI generated insights for CCI attributes (CCI copilot) Enhanced risk profiling for 3rd party applications—Workday, Entra ID, and Google Workspace Expanded App Coverage for Box, Slack, ServiceNow, and Cisco Webex on a new NG CASB API platform Comprehensive categorization and classification insights for URLs, domains, and IPs using the URL lookup API for SWG Malware workflow for submitting false positive and allowlisting  Reset UEBA UCI score to 1000 for use-cases such as role changes and test users Leverage MIP and Box Labels for DRM Integration for Classification  Provide visibility into custom classifier performance, including insights into the training data Endpoint DLP Printer Content Control Support for AIP/MIP Sensitivi

70
aplaza
Netskope Employee
6 hours ago
N
ngriffinNew Member
asked in CASB
Netskope API Programming with PowerShell - Getting 401 Unauthorized Error Code

I’m attempting to connect to the Netskope API via a PowerShell script. I’ve created an access token with the appropriate endpoint configured. The script is receiving a 401 response which indicates that I’m not authorized yet. I’m not sure how to present the access token in the header. Is there any documentation or examples on how to authorize to the API endpoint I’m trying to connect to? Here’s a snippet of my PowerShell script:# Variables$netskopeAccessToken = "<insert_access_token_here"$type = "File, Folder"$filter = "(app eq 'OneDrive') and (exposure eq 'External')"$netskopeUri = "https://<domain>.goskope.com/api/v2/ui/casbapi/inventory/resources"# API Header$headers = @{ 'Authorization' = 'api_key' + $netskopeAccessToken 'Accept' = 'application/json'}# API Body$body = @{ type = $type filter = $filter}$response = Invoke-RestMethod -Uri $netskopeUri -Method Get -Body $body -Headers $headers 

150
N
1 day ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Dashboard Gallery
Security Health Check (Self-Service) Dashboard

 Looking to quickly pinpoint the security concerns in your environment? Take a look into our Security Health Check (Self-Service) Dashboard!  This is a one-stop dashboard which allows you to perform self-service health checks and to locate security concerns/gaps in your environment. The dashboard is expanded from 2 dimensions: 1) How Netskope is protecting your environment; 2) What Netskope is protecting your environment from.  The dashboard covers 9 major topics, which helps you identify & investigate: NewEdge Network & Traffic SteeringPOP utilization in restricted regions Unexpected access methods Device & Client ManagementUsers disabling Netskope Client Old/unsupported Client versions being used Alerts & PoliciesAlerts, alert types, policies triggered Top users triggering alerts (and the corresponding activities) SSL/TLS InspectionLow SSL inspection rate Unexpected bypassed traffic Coaching PoliciesIncorrect/unexpected coaching policies detected Justification reasons

10053
Aaron_Zhang
Netskope Employee
1 day ago
M
maxkorNew Member III
asked in Private Access for ZTNA
Devcie classification unmanaged

Hi All, My device classification policy matches when all three criteria are met...There are a lot of users complaining that they can't access ZTNA, so I checked and they're unmanaged...I fixed it by pushing an update to the client and restarting the service/computer. It's probably not possible to do it every few days for users what is can be the root cause of pull users out from device classification policy.   

948
N
1 day ago
M
Netskope Employee
mitchellNetskope Employee
posted in Blogs
Automated ZTNA Deployment for Azure with Bicep

This Azure Bicep template facilitates the automated deployment of Netskope Publisher instances in Azure environments. It's designed to streamline the deployment process for DevOps teams, enabling quick and consistent Publisher setups while following infrastructure-as-code best practices.This can be a key item on how to achieve ZTNA in PaaS environments: You can check out the files here: https://github.com/Mitsj0l/nskpub_azureSupported Functions ✨Azure Integration: Automated deployment of Netskope Publisher Marketplace VMs Integration ready for Azure Pipelines End-to-end deployment in 3-4 minutes Network Management: Support for existing networking components VNet, Subnet, and NSG integration Option to create new or use existing network components Security & Configuration: Secure parameter handling through dedicated parameter files API token and SSH key management Cloud-init based post-deployment setup Automated Publisher registration with Netskope tenant  Project Structure

250
M
Netskope Employee
2 days ago
S
smzothoNew Member III
posted in Additional Discussions
Netskope randomly disabling

Hi Team I'm really happy to be part of this wonderfully community, my name is Simphiwe.We have many of our users whose Neskope gets disabled randomly and when this happens they lose access to a number of important applications within the organization. The only way to temporarily fix this is to restart the Netskope service or to completely restart the computer. However this is a short-time fix. I just want to know what are the main causes of Netskope getting disabled and how to fix this ? Thank you  

25045
M
2 days ago
Rohit_Bhaskar
Netskope Employee
Rohit_BhaskarNetskope Employee
published in Community News & Announcements
Netskope Customer Workshops: Recording

Dear Valued Customers, We sincerely thank you for your active participation in the Technical Workshops hosted by Customer Solutions Group (CSG) at Netskope.In this post we are sharing Netskope Academy links, which have recording and slide-deck of the most recent workshops. To access recording of a Customer Workshop, log-in to your NETSKOPE ACADEMY account, and then click the desired link listed below.  If you are Netskope partner, visit this community post to access the recordings. If you are Netskope employee, visit this internal page to access the recordings. Recording of Spanish and Portuguese events If you have question about your subscriptions, deployment status, and access to netskope resources (technical support & academy) - Contact your Customer success manager (CSM) START HERE ...Netskope 101 & Common Use Cases (Webcast: 01-FEB-2024)“Review of Netskope customer journey, deployment and adoption. Basics of SSE, SASE, SSL decryption, zero trust concept, and co

51859
Rohit_Bhaskar
Netskope Employee
5 days ago
dinbarzily
Netskope Partner
dinbarzilyNetskope Partner
asked in Private Access for ZTNA
slow connection - private app

How to Troubleshoot on private app access for slow connection or unaccusable applications for users (randomly) ? We don’t have DEM advanced license .What kind of tools or options do I have in order to troubleshoot on a slow connection to private apps? I am familiar with :The NPA Troubleshooter Tool Export logs from the client when slowness for private applications occurs.

591
N
5 days ago
A
AlfaBaneExplorer III
posted in Private Access for ZTNA
Avaya Softphone over NPA

We're gradually expanding our NPA footprint in our company. Recently the first user needing the use of Avaya One-X Agent was looped in and the log-in fails. We've had the app configured for some time now but no testers until now. I have some internal discussions going with the involved teams but wanted to reach out here to see if anyone has any useful tips/experience implementing NPA access to a softphone solution. Of course, Avaya related products would be ideal, but any information would be welcomed. 

2052
aludovico
Netskope Partner
5 days ago
Anmol
Netskope Employee
AnmolNetskope Employee
published in Real-Time Protection: Key Policies
How to submit file hashes for Threat Scanning via API

Netskope Global Technical Success (GTS)How to submit file hashes for Threat Scanning via API Netskope Cloud Version - 120 ObjectiveTo demonstrate the process for submitting files hashes for Threat Scanning via API PrerequisiteNetskope Advanced Threat protection license is requiredBackend flags : “Retrohunt API Query” needs to be enabled. Kindly raise a support case to get the flag enabled  ContextNetskope allows submitting files hashes for Threat scanning via API as well. This KB will give details about the process to follow for calculating & submitting file hashes for File Detection (On Tenant) & Threat scanning via API. DemonstrationThis process requires three API endpoint as shown below :https://achadha.goskope.com/api/v2/nsiq/retrohunt/ioc/info https://achadha.goskope.com/api/v2/nsiq/retrohunt/ioc/getinf https://achadha.goskope.com/api/v2/nsiq/retrohunt/ioc/report  Create a new token with the below permissions:Path: Netskope Tenant UI >>> Settings >>> Tool

1130
Anmol
Netskope Employee
5 days ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in Private Access for ZTNA
Uncover why traditional VPNs fall short in meeting the demands of modern remote access

See a live demo, discover what sets Netskope apart, and hear success stories of transformation! Join us as we explore the pitfalls of sticking with traditional VPNs and discover a cloud-based remote access solution that meets today’s needs and tomorrow’s challenges. Key Topics Covered: Criteria for selecting a new remote access solution, including application support and unified security policies Advantages of a universal zero trust policy for seamless local and remote access How Netskope’s ZTNA Next solution enables full VPN replacement, even for legacy apps Live demo showcasing what sets Netskope apart Success stories of transformation that illustrate real-world impact To learn more about how Netskope's cloud-based remote access solution can replace outdated VPNs and elevate your security strategy, register for our upcoming webinar below:   Elevate Your Remote Access: Transform Your VPN with SASE and Zero Trust Americas Europe, Middle East, and Africa Asia-Pa

120
aplaza
Netskope Employee
6 days ago
1
11qwerty22New Member
asked in Netskope Cloud Exchange (CE)
CE Log Shipper - Netskope client device logs (disable client/re-enable client)

Hello,We are ingesting Netskope logs via CE Log Shipper into Elastic. These are events and alerts. How can we ingest the Netskope client related events for users disabling/re-enabling the client? Advanced Analytics presents this information, so the logs exist. Can they be exported via CE Log Shipper?Thanks.

90
1
6 days ago
H
Netskope Partner
hshimizuNetskope Partner
asked in Next Gen SWG
Do I get a warning if I exceed the number of registered URLs in my Netskope tenant?

Dear Everyone, The limit for URL lists per tenant is 300 K.Does anyone get an Error in the tenant UI when creating a URL List in a tenant that exceeds 300 K?If anyone has experience creating a ULR List that exceeds 300 K, it would be helpful for me.I would like to know whether tennant UI could inform it to user or not. URL List LimitsCurrently, the total URL List limit per tenant across all URL lists is 300K. The URL List limit using Regex across all URL lists in that tenant is 1K (this 1K count includes only the regex written not the expanded format).https://docs.netskope.com/en/url-list-best-practices/Thank you and Best Regards,Hiroaki.S

231
zthompsoncr
Netskope Partner
6 days ago
yihualiao
Netskope Employee
yihualiaoNetskope Employee
posted in Artificial Intelligence and Machine Learning
New Blog Post: Proactive App Connector Monitoring with Machine Learning

App connectors are a critical component of the Netskope secure access service edge (SASE) platform, offering visibility into user activities based on their interactions with cloud applications. These connectors monitor various types of user actions, such as uploads, downloads, and sharing events in apps like Google Drive and Box, by analyzing network traffic patterns. With this visibility, security administrators can then configure and enforce real-time policies to prevent malware, data theft and exfiltration.we’ve developed a patent-pending app activity monitoring system that leverages advanced machine learning algorithms to automatically identify significant anomalies in app event counts. Please read our latest blogpost for details: https://www.netskope.com/blog/proactive-app-connector-monitoring-with-machine-learning 

170
yihualiao
Netskope Employee
7 days ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
October 2024 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: We saw CASB, NG-SWG, and Self-Service health check dashboards in Netskope community. What’s the difference and how to best use each of them?A: There are 3 different “health check” dashboards with different purposes & use cases in our community:CASB Health Check DashboardThe purpose of this dashboard is to help you maximize the ROI of your Netskope investment and to ensure you are using Netskope products to their full potential. With a focus on CASB, the dashboard covers multiple topics such as NewEdge Network, Traffic Steering, SSL Inspection, Application Risk Management, Malware Protection, and DLP, which answers the question “how Netskope is protecting your e

150
Aaron_Zhang
Netskope Employee
7 days ago
thiagofc
Netskope Partner
thiagofcNetskope Partner
asked in Next Gen SWG
Crashes after Netskope Upgrade - Release 120

Anyone having issues and crashing on Windows NSClient after that was upgrade the Tenant and the Golden Release to the Lastest?We have a customer the MP is located on DE, the users are claiming a lot about crashes in Windows, to the point where it was necessary to force the equipment to be shut down or reset. We are wondering if the problem started after the Tenant Update was made, they were in the release 119 last week, and now they have migrated to 120.I realized that the agent from NSClients with setup to the Last Golden Release right now is the Lasted Release = 120, very interesting… 

1074
thiagofc
Netskope Partner
7 days ago
EsraDemircioglu
Netskope Partner
EsraDemirciogluNetskope Partner
asked in DLP
I want to hide some parts of datas

Hello Team, I want to set a policy which can hide some parts of datas (for example credit card numbers) during download/upload processes. (For example If I download document, I want card numbers become like 1111 xxxx xxxx xxxx )Is Netskope able to do this?Note: My question is not answered in this link  https://docs.netskope.com/en/dlp-entity/#entity-obfuscation-1  Thank you in advance,

110
EsraDemircioglu
Netskope Partner
7 days ago
Mandeep Singh
Netskope Employee
Mandeep SinghNetskope Employee
published in Real-Time Protection: Key Policies
Best Practices - Security Risk and Its Subcategories

Netskope Global Technical Success (GTS)Best Practices - Security Risk and Its Subcategories Netskope Cloud Version - 120 ObjectiveBest Practices for managing traffic to predefined web categories: Security Risks and its Subcategories PrerequisiteNetskope SWG license is required ContextThis document offers detailed, step-by-step instructions for implementing a Real-Time Protection Policy targeting predefined web categories Security risk and its subcategories. Do You Know?As of October 23, 2024, Netskope has ~131 predefined web categories. Among these, 15 categories are specifically related to Security Risk and its subcategories. Ref. - Link What is the Security Risk web category?The websites that pose potential threats to users or their data are marked under Security Risk web categories. This includes sites associated with malware distribution, phishing scams, and other harmful activities. Security Risk is the parent category, and all those preceded with "Security Risk - " are subcategor

360
Mandeep Singh
Netskope Employee
7 days ago
E
eranNew Member III
asked in Next Gen SWG
REST API V2 - /adem/

Hi,I’m trying to use /api/v2/adem/deviceoslist on the REST API v2.Before adding the specific permission for the endpoint - I’m getting "You cannot consume this service".After adding it, I’m getting "Unauthorized".Both times the error code is 403.How can I use this Endpoint?Thanks

180
E
7 days ago
A
ArijNew Member
asked in DLP
DLP - Detect IP addresses in a log file

Hello, I have a file containing records in this format: 2022.03.18 11:46:45 DEBUG web[XXXXXXXX][auth.event] login success [method|BASIC][provider|REALM|ldap][IP|10.10.10.10|10.10.10.10:55637][login|XXXXXX]I used this regular expression to detect private IP addresses: (10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.1[6-9]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.2[0-9]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(172\.3[0-1]{1}[0-9]{0,1}\.[0-9]{1,3}\.[0-9]{1,3})|(192\.168\.[0-9]{1,3}\.[0-9]{1,3})Using this regular expression, I can't detect any IP addresses in the file sent through netskope. What can I do and where is the problem?

385
S
Netskope Employee
8 days ago
B
barrycuda72New Member
asked in Next Gen SWG
3rd Party access

We have Netskope authenticating against EntraID using SCIM.  This works great for all our employees.  What I want to do is add some 3rd party contractors so they can access some internal resources.  They have a UPN of Contractor@acme.com but no email address.  Any suggestions?

120
B
8 days ago
J
jschueleNew Member III
asked in Private Access for ZTNA
Sign-in Redirect Breaking NPA Browser Access

I have an internal private app configured in NPA to allow Browser Access for a consultant. Everything works fine until it redirects to Google for the login process and we see a Google error message “Access Blocked: This app’s request is invalid”, “Error 400: redirect_url_mismatch”. Any idea’s how to get around this? Thx

120
J
8 days ago
W
wdeguaraNew Member III
asked in Additional Discussions
Netskope and Docker

Just wondering whether any community members who are Docker users have been able to get Netskope working with it ?

29333
J
8 days ago
M
Netskope Employee
mkoyfmanNetskope Employee
published in Next Gen SWG
Configuring CLI-based Tools and Development Frameworks to work with Netskope SSL Interception

If Netskope is deployed inline (for CASB or Web), some CLI tools will not work because they use certificate bundles distributed with those tools (i.e. Python distribution, for example), and they do not access system certificate store where Netskope client installs Netskope root CA. The guidance below will allow you to enable those tools to seamlessly work with Netskope SSL interception.In order for these tools to trust Netskope-signed certificates, they need to be configured to trust Netskope Certificate Authority (CA). This is typically accomplished by setting certain environment variables to point to Netskope CA to allow for smooth SSL operation.The variables need to be set to point to the following files that contain Netskope CA:On a Mac: /Library/Application Support/Netskope/STAgent/data/nscacert.pemOn Windows: %ProgramData%\Netskope\STAgent\data\nscacert.pemFor example to set REQUESTS_CA_BUNDLE variable on a Mac to point to the Netskope root CA, you can run this command:export REQ

19433
J
8 days ago
J
jschueleNew Member III
asked in Discussions
Netskope Client for iPad

I saw the article on support for the Netskope Client on iPad. When I use the email invite though there is link for the iOS Client, only the iOS Profile. I see a note about this issue, but don’t understand what it wants me to do. How do I enable the default email template? I’m sure I changed it years ago, but can’t remember where.. Can someone clarify how I get it visible in the email invite?– If you are unable to see the link to download Netskope Client for iOS in the email invite, use the default email template that includes the link to download Netskope Client for iOS. 

130
J
9 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings