Recently active topics

Hi everyone,I have enabled On-Premises Detection across all Netskope Clients in my environment and configured the public egress IPs for our corporate offices.My use case is to determine how many employees are working on-premises vs. remotely (home office) over different periods, such as weekly, monthly, and semester-based reporting.The On-Premises Check provides the information I need to identify whether a user is currently connected from an office network, but I haven't been able to find an API or other programmatic method to extract this data historically.At the moment, the only option I have found is manual extraction from the Netskope UI, which makes it difficult to automate the reporting and integrate it into our dashboards.What would be the recommended way to programmatically retrieve On-Premises Detection/Check results?Is there an API endpoint, reporting API, event type, or another Netskope data source that exposes this information, preferably including the user, detection statu

Hear from our internal security team as they share how we leverage User Entity Behavioral Analytics (UEBA) and a UCI-based confidence score to flag the moment an agent's behavior drifts from baseline.Learn how to:Apply UEBA to build a behavioral fingerprint for an AI agent and detect when it's been compromised or gone rogue Recognize the risky agent behaviors UEBA flags (spikes in downloads/uploads, DLP policy violations, first-time access to new applications, and spikes in failed logins) Interpret the User Confidence Index (UCI) score to gauge an agent's risk level and take timely action Combine UEBA with traditional controls (access management, contextual DLP, and human-in-the-loop approvals) for defense in depth against agentic AI riskFor more information, check out our blog post.   View past events in this series! Check out some customer questions below, or feel free to comment and continue the discussion!  Q: We are using Anthropic Claude AI within our environment. We would like t

We have created a client config such that user connected to office network, their private access should be disabled. When they are outside office network, they are getting Netskope IP. But when in Office network, they are getting ISP IP. Why such behaviour in above steering config. This is the Steering config which we have created. Why it is taking ISP IP instead of Netskope IP when connected to office network.  

Question for the community…..Assuming we are blocking the following 2 categories (and of course blocking all of the known malicious)"Newly Observed Domain" "Newly Registered Domain"What is the opinion as to allowing “Uncategorized”?   I do understand that it is not impossible that a malicious link (in an email for example) could contain just an IP address (since all IP addresses generally are categorized as “Uncatgorized” by default) and therefore is an outlier risk (as uncommon this may be), but are there other known risks here I am not considering? The reason for the ask is that we have found that websites that are categorized by Netskope, on occasion at least, are legitimate business sites and thus have negative impact.  While we can add these to a custom policy that will allow access, it is a bit of a whack-a-mole exercise in futility since sites are added to this list all the time.

Hello Everyone,Hope All are doing well.I have some query regarding SAML-Forward Proxy Secure Enrollment..We’ve successfully completed the integration of Netskope Forward Proxy with Microsoft Entra ID (SAML), and everything is functioning as expected.Configuration Summary Microsoft Entra ID Created Enterprise Application Completed SCIM Provisioning Verified user synchronization on Netskope Configured Single Sign-On (SAML) for Netskope Forward Proxy Netskope Configured SAML Forward Proxy and exchanged certificates successfully Tested the configuration using the SAML Forward Proxy test button — validation completed successfully ✅  Client Enrollment BehaviorAfter deploying the Netskope Client agent, users are prompted to authenticate using Microsoft Entra ID credentials via SAML. During the enrollment process, however, the configuration download fails, displaying an Enrollment Error message.To isolate the issue, we temporarily disabled Secure Enrollment under

Hi everyone,I’m new to Netskope and have recently completed the NSK101 course, so I have a basic understanding of Netskope concepts.I’m looking to build strong practical and troubleshooting skills and eventually become proficient in Netskope.Could experienced Netskope professionals please share:A recommended learning roadmap Key modules/topics to focus on Hands-on labs or real-world scenarios to practice Recommended certifications/resourcesI’d really appreciate your guidance and experience. Thanks! 🙏

Hi everyone,If I understand correctly, AI Gateway currently supports Anthropic, OpenAI, and Google models running locally on infrastructure (thanks to the ESXi integration).Is there a solution to intercept traffic from a wider range of models—such as Qwen, Llama, DeepSeek, or others—running locally in our data center on a vLLM or LM Studio instance?Thanks !

This has to be someplace on the support site, I just can’t find it:  How many characters are allowed in the pop-up before the need to scroll?

Hi All, Recently i found a topic of exceptions that needs to be made to let MacOs PSSO fully work. I was wondering if any of you have implemented this for Europe, as the exceptions may be different from companies based in the US. Somehow with internet security registrating a device on macos does not work. I Already made a exception for the AppSSOagent however this did not work.  I would like to know what you guys have listed as exceptions so that Intune PSSO on MacOs does not break! Cheers, Mike

Hola comunidad,Estoy revisando la implementación de SCIM User Provisioning con RBACv3 en Netskope, específicamente para un entorno donde Google Workspace Al revisar la documentación disponible de Netskope, encontré guías específicas para el aprovisionamiento mediante SCIM con:User Provisioning with Okta https://docs.netskope.com/en/integration-with-okta-for-user-provisioning User Provisioning with Microsoft Entra ID https://docs.netskope.com/en/integration-with-entra-id-for-user-provisioningEn ambos escenarios se documenta la integración para realizar el aprovisionamiento de usuarios y grupos hacia Netskope mediante SCIM.Para Google Workspace encontré las siguientes referencias:Netskope Admin SSO – Google IDP Integration, orientada al acceso administrativo al tenant de Netskope mediante SSO/SAML:   Netskope User Provisioning with Secure LDAP to Google Cloud Identity, que documenta el aprovisionamiento utilizando Secure LDAP:   Sin embargo, mi duda es específicamente sobre una integrac

Missed the Netskope Customer Success Webinar on NPA TLS Certificate Rotation? The recording is now available.In this session, we covered Netskope's migration of the NPA Management Plane TLS certificate chain from GlobalSign R3 to GlobalSign R46 and what customers need to know.🔎 What we coveredWhat is changing with the TLS certificate rotation Impact on the NPA Management Plane Potential enrollment/re-enrollment issues with older components Configuration synchronization considerations Required NPA component versions🎬 Watch the Recording

Hi Guys,I am trying to deploy the Netskope Client on macOS devices using Endpoint Central, but I am unable to complete the device enrollment.I have enabled the Secure Enrollment Method and am following the Netskope documentation below:Netskope – Deploy Netskope Client with Endpoint Central on macOSIt appears that the enrollment tokens are being picked up by the agent, but the devices are still not getting enrolled.One important point is that not all of our Mac devices are fully managed through ManageEngine MDM. Could this be related to the enrollment failure, or are there any additional MDM profiles/permissions required for Secure Enrollment?Please suggest the required configuration or troubleshooting steps.Thanks,Jayesh

I am trying to figure out an easy way to block personal Copilot without blocking enterprise Copilot. I tried creating two RTP policies: One blocks the ‘Microsoft Copilot’ app, and the other (which sits before the block policy) allows access to Microsoft 365 Copilot. Even with this setup, I can still go to copilot.microsoft.com, and I can even log in with my personal email account and have my personal Copilot running on my work computer.

Note to readers: This page is no longer being maintained. We're busy building a new, improved page for you!For all our latest and previous webinar recordings, please visit our dedicated Webinar Recordings Page.Thanks for your understanding! =========================================================================Dear Valued Customers, We sincerely thank you for your active participation in the Technical Workshops hosted by Customer Solutions Group (CSG) at Netskope.In this post we are sharing Netskope Academy links, which have recording and slide-deck of the most recent workshops. To access recording of a Customer Workshop, log-in to your NETSKOPE ACADEMY account, and then click the desired link listed below.  If you are Netskope partner, visit this community post to access the recordings. If you are Netskope employee, visit this internal page to access the recordings. Recording of Spanish and Portuguese events If you have question about your subscriptions, deployment statu

The Netskope Cloud R141.1.0 hotfix documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Hotfix Version 141.1.0.Submit your feedback via docs.netskope.com.

We are Muting rules inside the Security Posture IaaS but as new Instance/Resources comes onboard the instance is not muted. Every week I have to go into the section and mute rules that have been muted in the past. We should be able to MUTE this at the top level so all new ones are muted by default as they come online?

I can’t see the main publisher menu with the options. Am I missing something?   

 May we know if Netskope supports QUIC now?Update: It seems not yet 6 month ago.If you have the same request, join the vote for this func support here:-----------------------------------We only found this 3y old article.and docs not sure if it is up to date.https://docs.netskope.com/en/about-netskope-secure-web-gateway

Your Netskope Monthly Highlights – September 2026The latest updates, resources, and events – all in one place.Hi there,As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities. 🚀 Product Release UpdatesRelease 141.0.0 is here! Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.📄 Release Notes - September 2026✅ Pro Tip: Check for features relevant to your current configurations. ✅ Features not to miss out!This section highlights key innovations from the recent Netskope release that can significantly enhance your Adoption and Value Realization journey.Top Highlights:1. Free / Included Standard Features Advanced Analytics HomePage Control Center : Unifies deployment health, user experience, and network telemetry metrics directl