Recently active topics

I can write an AA report with a CIDR, but not one excluding a CIDR.What happens is that I have to write two widgets, download to spreadsheet, match rows and then subtract. It would be far easier to just exclude a CIDR in a Widjet.

Many of our clients have been in contact with Netskope with regards to the news of the latest Salesforce breaches involving Gainsight 3rd party plugin, what should be the main takeaways to our users regarding this breach in particular and how to protect against similar attacks.  For the latest and most accurate news on this, the most trustworthy and relevant news sources should be Gainsight incident advisory on their community site and the related Salesforce security advisory. Whilst the news are still very fresh and the investigation is ongoing at the time of writing this, we have a few interesting intelligence pieces available which are worth of note at this point:This hack is related to the earlier Salesloft drift attackThe tactics used by the attackers are similar to what was witnessed during the Salesloft Drift breach in the summer of 2025. According to bleepingcomputer.com, the same threat actor behind the Drift hacks has claimed responsibility for the hack. Netskope’s analysis a

現在、Intuneにてシングルユーザーモードで展開しておりますが、マルチユーザーモードでの配布を考えております。どのように展開すればいいのでしょうか。

Netskope Global Technical Success (GTS)Understanding Netskope Policy Enforcement with URL Shortened URLs Netskope Cloud Version - 132 ObjectiveThis document aims to provide an understanding of how Netskope Policy Enforcement works with URL-shortened URLs. PrerequisiteNetskope SWG or NG-SWG license is required ContextThere are many applications on the internet that provide URL-shortening services. Customers may need clarity on how Netskope policy enforcement behaves when a URL is shortened using such tools. This document aims to provide that understanding. Do You Know?Netskope has a predefined web category called "URL Shorteners”. As of December 03, 2025, Netskope identifies ~15 cloud applications within this category.DetailsLet’s assume a customer has configured a Realtime Policy to block a social media application such as Facebook. If an end-user tries to access Facebook through a URL shortener, Netskope will still evaluate each and every transaction. The next section explains the tra

Your Netskope Monthly Highlights – December 2025The latest updates, resources, and events – all in one place.Hi there,As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities. 🚀 Product Release UpdatesRelease 133 is here!Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.📄 Release Notes - December 2025 ✅ Pro Tip: Check for features relevant to your current configurations. ✅ Features not to miss out!This section highlights key innovations from recent Netskope releases that can significantly enhance your Adoption and Value Realization journey.Top 5 Highlights:NPA Partner access : Users can now access Private Applications across up to 20 Netskope tenants (partner, MSP, etc.) by simply toggling an option in the Client UI. No nee

Event Follow-Up: Unlocking value from recent Netskope releases Date: November 12, 2025Topic: Unlocking value from recent Netskope releases 🔍 Summary:Thank you to everyone who attended our  webinar, “Unlocking value from recent Netskope releases”, held on 12th November 2025.The webinar covered  a recap of key technical features from recent releases that you might have missed. We hope you found it insightful and valuable. During this session, we covered the below topics : Deep dive into how key Netskope features work and the problems they solve. Step-by-step guidance on configuring and enabling the most impactful features Demo of selected features to show their impact in action Resources, documentation, and next steps to help you maximize value 🎥 Webinar Recording:If you missed the session or would like to revisit the content, you can watch the recording below:Customer Recording Partner Recording 📝 Share Your Feedback:We’d love to hear your thoughts! Please take a minute to fill out o

Hi Teams, i’m try to find the CMD reference for publisher CLI to change the host name and username of default user on publisher ssh but cannot find in the knowledge KB from netskope. so i wonder is it possible to change the hostname of publisher and change the default username from ubuntu ?is they any issue if we change this parameter on publisher?i’m also need to change the same for cloud exchange server too.

The Netskope Cloud R133.0.0 documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Version 133.0.0.The key new or updated features are:AI Security AI Red Teaming AI Security Guardrails Netskope AI Gateway Next Generation API Data Protection ChatGPT Enterprise: Expanded Protection for Fine-Tuning and Memory Data Netskope Client Steering Controlled GA of Windows 64-bit Client Support Mandate Enrollment into Netskope Client Netskope Private Access (NPA) NPA Source IP Egress Criteria for Client Updated NPA Tunnel Re-auth Behavior Periodic Authentication for Real-time Policy Framework SaaS Security Posture Management (SSPM) Visibility of Connectivity Between SaaS App Instance and SSPM Submit your feedback via docs.netskope.com.

Hi All, Has anyone integrated Crowdstrike NG SIEM with Netskope. In Crowdstrike i can see that their is native integration with Netskope and require API Key.  API V2 Document which is available in Crowdstrike portal is outdated. In Netskope, we need to create role and then generate API key. Not sure which role we should assign in Netskope Tenant before generating API key.and  also correct me if role creation in Tenant Admin and generating API key is wrong method. Thank you in Advance.Govi33

Hello everyone.I recently implemented and installed Netskope SASE.Before Netskope, I was using Tailscale, and I encountered an issue where DNS queries (lookups) didn't work at all when running both the Netskope client and Tailscale on Ubuntu.Some say setting exit-node to false solved the problem for Tailscale, while others say setting an exception for Tailscale's Magic DNS (100.100.100.100) solved the problem for Netskope. Even after applying both settings, the problem persisted.If anyone has solved this issue, please help.

Hello,I need to block a specific application within the https://marketplace.visualstudio.com/ domain (VSCode Marketplace).I would like guidance on how to configure Netskope to block only this specific application without affecting access to the rest of the domain.Could you please advise on the recommended procedure for this type of blocking?Thank you.

Netskope Global Technical Success (GTS)Block Websocket (WSS) Traffic Netskope Cloud Version - 132 ObjectiveHow to block Websocket Traffic via using Netskope Realtime Protection Policy PrerequisiteNetskope SWG or NG-SWG license is required ContextThere are many applications on the internet where the initial traffic begins as HTTPS but later switches to a WebSocket connection. Some customers may have a business use case to block WebSocket traffic. This document explains how to achieve this using a Netskope Realtime Protection Policy. Do You Know?Before we proceed further, there are a few important details about WebSockets that you should be aware of - Protocol Meaning Security Similar To Works on Port Number ws:// WebSocket No encryption http:// 80 wss:// WebSocket Secure Encrypted (TLS/SSL) https:// 443 wss:// stands for WebSocket Secure. It is the encrypted and secure ver

Does the Netskope client keep the SWG/NPA secure tunnels if the laptop/PC goes in sleep or hibernate mode?  Is there a recommendation? Thanks.

Hello!We have an enterprise license for Lovable AI at the company, but we want to block personal access and allow access only to those with the license. Currently, access to the license is via SSO.Since the application is not supported on Netskope, how can we achieve this license-based access control while blocking personal access?We've tried various methods using regex, HTTP headers, and attempts to block access through Google's provider and Git, but without success. When I click on Google login, for example, I'm redirected to their authentication page.

Background In today's digital age, businesses of all sizes rely on technology to operate efficiently and effectively. It is essential for IT security leaders to protect their rapidly expanding corporate infrastructure and distributed workforce. With the rise of cyber threats, cybersecurity has become a crucial component of business strategy & operations. One of the most critical aspects of cybersecurity is security hardening, which involves implementing measures to protect systems and data from potential attacks. What is Security Hardening Security hardening is a proactive cybersecurity approach aimed at fortifying the defenses of systems, networks, and applications. It involves configuring security controls inbuilt into product and controls provided by other solutions outside of the product such as perimeter security solutions i.e. firewalls, access restrictions, network restriction etc. to protect systems, services, applications against unauthorised access and abuse. Prot

Greetings All,I’ve had a persistent issue for several months with Netskope on macOS that I wanted to throw out here to see if anyone else had come across something similar. Intermittently devices with the Netskope client installed will lose all connectivity to the internet. In the logs I see usually around 50,000 of these messages in a span of just a few seconds`critical nsDNSProcessor.cpp:149 dnsProcessor Failed to get DNS resolver values`Usually as this happens all active connections are killed, like ongoing zoom calls, even though those aren’t being steered to Netskope.Before this I see the DTLS tunnel close down with this flownpadebuglog.log```[info] npaClientHandler.cpp:748:npaClientHandlerStop():0x0 Will shutdown NPA handler and dispatch thread, tunnelId = 7f8b47.[info] tcpclient.cpp:530:shutdown():0x1086a1160 Shutdown socket fd 45[info] npaClientHandler.cpp:755:operator()():0x0 The client handler is stopping and shutting down, userId = 502.[info] tcpclient.cpp:199:handleClose():

Hi Community,Does anyone know how to make the Google Antigravity Certificate Pinned App exception for MacOS?I have the issue from the beginning like Login step. I’m try to except the process name with any domain (*)Antigravity* antigravity* language_server_macos_armBut still can’t sign-in.

Netskope Global Technical Success (GTS)Q/A Attached to: WhatsApp Netskope Cloud Version - 132 ObjectiveThe objective is to cover general Q/A attached to WhatsApp PrerequisiteNetskope Next-Gen SWG ContextWhatsApp is a SaaS application, and many customers want to understand Netskope’s capabilities for managing WhatsApp traffic and the types of controls that can be applied. Author NotesWhatsApp can be accessed either through a web browser or via its native application. Throughout this document, I will use the following terminology: “WhatsApp Web Access” when referring to WhatsApp accessed through a web browser. “WhatsApp Native Application” when referring to WhatsApp accessed through the native application. Q/A SectionQuestion 1: Does Netskope identify WhatsApp as a Cloud Application?Answer: Yes. Netskope identifies WhatsApp as a Cloud Application and provides a pre-defined Cloud App Connector.Path: Netskope Tenant UI >>> App Catalog >>> Cloud Question 2: Is Netskope’s p

Hi folks,do you know if when setting fallback action to alert, real time policies are still evaluated when a fallback action has been triggered?Use case : you don’t want to block download when file size > 400Mo (max file size analyzed by TP)1.You set fallback action to alert2.You set a RTP allow_all_vip for a VIP group to be allowed to download and surf with no exception3.You set a RTP block_dl_400 for all users to block download with constraints file size >400Mo AND specifics files typesExpected result when download a file under 400Mo, TP is applied, all users can download. when download a file great than 400Mo, fallback action is applied, then RTP is applied regarding the user’s groupIn Real life, when standard user try to download a file >400Mo, block_dl_400 is not applied, log indicate fallback action, so it seems that policies are not evaluated after fallback action.Moreover it seems that Netskope tenant is setting MIME/TYPE as application/octet-stream whatever the origin

​Netskope Global Technical Success (GTS)Mapping API v2 endpoints to RBAC v3 Roles Netskope Cloud Version - 132 ObjectiveThe objective is to map map API v2 endpoints to RBAC v3 Roles PrerequisiteNetskope SWG or Next-Gen SWG license is requiredLogged in user should have Predefined Tenant Admin role assigned ContextThe customer aims to map the API v2 endpoints to the new RBAC v3 role. This knowledge base article explains how to correctly create a role with exact mapping of endpoints. Topics coveredHow to create a custom Role as per RBAC v3How to map the endpoint to roleHow to create a Service accountHow to generate an API tokenHow to change the expiration of API token Do You Know?As of Nov 7, 2025, Netskope has introduced new RBAC V3, users will not be able to create new token or change expiration of api  from path Netskope Tenant UI >>> Settings >>> Tools >> API v2 RBAC V3 provides functional controls and uniform authorization for both WebUI and REST API based int

 Goal: Create a guide on how to pass Tenant Admin role from Okta to Netskope.Example: When logging in to Netskope Admin Console through Okta, different roles should be passed as per the requirement of the flow.Information coming from Partner: Administrator should be able to configure different roles for different members as per the requirement definition.Limitations: For a single Okta application, only 1 SSO can be configured in Netskope. To achieve this either we need to have multiple groups or single application with defined role.Key Concepts:Netskope Tenant - Admin should have local tenant admin account access to the Netskope tenant so that he can create custom roles / see the predefined roles during first time configuration. Workflow:This can be solved using 2 methods. Method 1 - Using Group AttributesIn this method you can create multiple groups. Just remember that the group name should be the same as the Predefined role / Custom role configured in the Netskope Tenant. Steps:1 - S

WSL will work on windows , This info is not mentioned in netskope site (Windows Linux Subsystem)go to WSL settings change the networking mode to “ VirtioProxy” save it then run your commands , it should work In netskope tenant , you can see the logs refer to your laptop name . 

We are trying to install the netskope clinet via IDP using the below command. But somehow it is not successful. msiexec /I NSClient.msi tenant=XXX domain=goskope.com installmode=IDP mode=peruserconfig enrollauthtoken=XXX enrollencryptiontoken=XXX (/qn - we removed the qn just ot see the live progress what is happening). With Email-Invite it is working on the same PC, but we are trying to install via IDP for bulk installation without users intervention to enter the credentials. We have configred the token at MDM distribution and also created the SAML authentication under Forward Proxy. When we see the logs and didn’t found anything resolvable. "event_details": "Installed client version 132.0.7.2513",        "actor": "System"    }}2025/11/26 11:13:04.911 stAgentSvc p155c tc24 info addonmanapi.cpp:756 addonmanapi posting client status2025/11/26 11:13:04.911 stAgentSvc p155c tc24 error addonmanapi.cpp:759 addonmanapi Post Client Status addon userkey is empty2025/11/26 11:13:04.911 stAgentS

Great news! If you missed our live session on the Cloud Exchange v6.0 Updates & Customer/Partner Enablement Session—or want to review the content—the recording is now available!Product Management Director Agasthiamani Sankaran walked through the critical updates, including: What's NEW in v6.0: New features and value proposition. Performance & Cost Optimization. Upgrade & Migration Path guidance. CE Product Life Cycle overview for long-term planning. Watch Recording