Skip to main content

- - Articles Overview
Learn
Product Release Notes
Groups
Events
Support

EN

Netskope Homemade: Season 2

10 days ago

Home
Search

Recently active topics

57 Topics

adebrattoNew Member

asked in Next Gen SWG

Real-Time Protection Policy Review

Our organization must review our policies to determine if the existing policies are still valid and need to be retained. Problem we are having is that “allow” rules do not appear to log anywhere. Short of turning all “allow” rules to be “alert” rules, does anyone have a way to validation if a web access rule is actually being used and needed to be retained?

Michael Horne OCDNetskope Partner

asked in Private Access for ZTNA

NPA access without a client from branch sites

Hello,I want to clarify if the Netskope client is required for NPA access for users who are at the office.We have deployed NPA so that we can force an external public Application traffic through a publisher to get a fixed public IP address due to public IP address whitelisting requirements. As we have IPSec tunnels connecting the site to Netskope cloud, do we still need to have the client installed on the users device? Do we need to have browser based access configured for this to work?For Zscaler this is not a requirement. We use Zscaler ZPA for another customer to route Guest Wifi clients to the self-registration portal. The Guest traffic goes over IPsec tunnels to the Zsclaer cloud and Zsclaer send to to a ZPA connecter. This allows the routing of Guest traffic without having to send it over the customers internal network.This set up does not seem to work in Netskope. If application trafic is sent over the IPsec traffic Netskope, it is not sent to the Publisher. It works when the

ematcheyNetskope Employee

published in Dashboard Gallery

China Traffic Insights

Netskope administrators often need visibility into user-level and app-level data transfer volumes within China in order to help them track utilization.The objective of this dashboard, attached below, is to provide insights into data consumption volumes in China, assisting customers in optimizing their steering and security policies. Specifically, this report helps to identify the primary users and websites responsible for consuming the largest amount of data transferred in China within a specific time period.

mattwalkerNew Member

asked in Additional Discussions

IDP Install for non-domain joined sytems

Hi All!  Hoping someone can help pin down an issue we're running into with deployment of the Netskope Client via IdP. FWIW - We're using Okta as our IdP.  IdP Install reference: https://docs.netskope.com/en/netskope-help/netskope-client/netskope-client-deployment-options/deploy-netskope-client-via-idp/We have the Okta account set up in Settings>Security Cloud Platform>Forward Proxy SAML. We also have the .msi file on the computer. We run the following install script:  msiexec /I NSClient.msi tenant=**MASKED** domain=goskope.com installmode=IDP mode=peruserconfig autoupdate=on /qn After running the script, the Netskope client installs, and the user is prompted to enter in their Okta credentials. The user completes Okta authentication (we can see the successful log within Okta) but then the Netskope enrollment window flashes to a "Hmmm... can't reach this page" error.   Has anyone here run into a similar issue or know how

john.gaoNew Member

asked in Cloud Firewall

Inquiry Regarding Server-Side Events and Traffic Inspection

Hello,We have quite a few joint customers who utilize your security solution. Recently, we’ve observed that some of these customers are encountering challenges with server-sent events (SSE) that we employ in our production environment for near real-time communication.Could you kindly clarify if Netskope buffers SSE streams for traffic inspection? If so, is there a recommended configuration or approach to ensure uninterrupted SSE functionality? Thank you for your assistance. Best regards,John

sean.clowesNew Member

asked in Next Gen SWG

Agent Deployment after macOS 15+

Hey folks, does anyone have any experience so far deploying Netskope Steering Agent to macOS in versions above 15? Our Jamf policies that have worked for some time have stopped. Specifically the VPN configuration profile fails to deploy with the error:The ‘VPN Service’ payload could not be installed. The VPN service could not be created. This continues to work on anything below 15. Anyone needed to update their Jamf policies in order to get this to work? And by policies I mean the configuration profiles?

cjcarewNew Member

asked in Discussions

V2 API Pagination

Hi Folks,Apologies if this is a simpleton question, however it’s doing my head in. I have the api working and am able to use the dataexport endpoint to extract malware alerts. My issue is that I only receive one record in the response and I know there is 115 in the time period of the search. The record I receive is the very first in the results. I can confirm that by checking in the console.My (hopefully simple) question is what is the format of the api query to iterate through the results so that the full list can be retrieved? I’ve tried ?operation=next&index=(the index name supplied in the first query). However that returns an empty response.I’d appreciate any guidance.Regards,Campbell

jschueleNew Member III

asked in Discussions

Netskope Client for iPad

I saw the article on support for the Netskope Client on iPad. When I use the email invite though there is link for the iOS Client, only the iOS Profile. I see a note about this issue, but don’t understand what it wants me to do. How do I enable the default email template? I’m sure I changed it years ago, but can’t remember where.. Can someone clarify how I get it visible in the email invite?– If you are unable to see the link to download Netskope Client for iOS in the email invite, use the default email template that includes the link to download Netskope Client for iOS.

KrugerNew Member III

asked in Next Gen SWG

instagram messaging

Have been looking to see if there is a way to block instagram messaging posting.. but allow users to view the messaging window. It looks like all the available activities have not targeted the messaging feature.Has anyone ever had success in allowing viewing of the messaging page but not allow users to post messages?Thanks

Leandro Timotio de LimaNetskope Employee

posted in Next Gen SWG

(VIDEO) Block Upload - File Converter Cloud App

Policy:Block Upload File Converter Description:In this example we will block the upload action for cloud applications from the "File Converter" category. Video:

Davide MolinoNetskope Employee

published in Malware Protection

How to create a custom threat protection profile

Netskope Global Technical Success (GTS)How to create a custom threat protection profile Netskope Cloud Version - 122 ObjectiveThe purpose of this article is to explain how to create a custom threat protection profile to allow or block specific files. PrerequisiteNetskope CASB/SWG license is required.Netskope Standard Threat Protection license is required. ContextWhen customers create a Malware policy they would normally leverage our default threat protection profile while not noticing that you can create a custom malware profile where you can enhance the detection list and bypass any false positives without the need to create any additional policies. ConfigurationFor this example, we are going to create two file profiles based on MD5 (or SHA256), then proceed to create a custom threat protection profile.Create a new file profile:Go to Policies >>> File, click on “New File Profile”, select “File Hash” then click on “MD5”, proceed to add any MD5 that you wish to bypass from Malw

Davide MolinoNetskope Employee

published in Real-Time Protection: Key Policies

Best Practices To Manage Guest Traffic Using Netskope

Netskope Global Technical Success (GTS)Best Practices To Manage Guest Traffic Using Netskope Netskope Cloud Version - 122 ObjectiveHandle guest users traffic transparently Prerequisite Netskope SWG license is required ContextIn this context, we suggest to steer Guest traffic to Netskope Cloud Proxy through an IPSec/GRE tunnel! IPSEC/GRE steering is used when Netskope Client cannot be installed on the clients (see related KB here). One valid scenario is to control and filter the Guest users’ traffic, such as Guest Wifi networks, for this use-case only Guest Wifi networks have to be pushed into the IPSEC/GRE tunnel.⚠️In this use-case if the Decryption policies are not well configured, users can face one of the most typical SSL errors: The untrusted certificate!This happens when the client’s OS or the applications don’t trust the Netskope’s CA, below two examples of ssl errors:Image 1 Image 2 To avoid these SSL errors we’ll disable the decryption (Web content inspection) for the Guest Tra

Juan SebastiánNetskope Employee

published in Cloud Firewall

IPS - Best Practices and important facts

Netskope Global Technical Success (GTS)IPS - Best Practices and important facts Netskope Cloud Version - 122 ObjectiveProvide important information about IPS as well as best configuration practices PrerequisiteNetskope Standard/Advanced Threat Protection with IPS enabled. If IPS is not currently enabled please get in touch with your CSM or Sales Team. No license is required. ContextThe customer wants to ensure that IPS is correctly configured ConfigurationImportant points regarding IPS (Intrusion Prevention System):Detailed documentation on enabling IPS can be found in this document: https://docs.netskope.com/en/about-ips-settings/ To confirm if IPS is enabled in your tenant, navigate to Settings > Threat Protection. There you can see if IPS is currently active. Netskope's IPS has two action modes: Block Mode and Alert Only Mode. This can be easily viewed in the SIGNATURE OVERRIDES tab. Best practices to keep in mind: It's recommended to enable IPS in Alert Only mode for a period o

Santhosh NairNetskope Employee

published in Google Drive

Block Google Drive Personal Instance Access

Netskope Global Technical Success (GTS)Block Google Drive Personal Instance Access Netskope Cloud Version - 122 ObjectiveGoogle Drive personal account access should be blocked PrerequisiteNetskope CASB Inline license is required ContextSome customers use Google Suite, with Google Drive as their official Storage application. They might want to allow only their business Google Drive instance and block personal Gdrive accounts. This document will discuss how to achieve this. Do You Know?Netskope acknowledges Google Drive as a Cloud Application and provides a pre-defined cloud app connector. As of Dec 10 2024, Netskope's Google Drive predefined cloud app connector can identify instances.ConfigurationStep 1 - Instance TaggingPath: Netskope Tenant UI >>> Policies >>> Profiles - - - App Instance >>> New Custom App Instance >>> New App InstanceNote - Netskope enables administrators to name application instances using Application Events. Step 2 - Real-time pr

Mauro MarinNetskope Employee

published in Google Drive

How to Allow Access to Specific Google Drive Shared Files Only

Netskope Global Technical Success (GTS)How to Allow Access to Specific Google Drive Shared Files Only Netskope Cloud Version - 121 ObjectiveAllow access to specific Google Drive shared files only while blocking access to Cloud Storage Category. PrerequisiteNetskope CASB/SWG license is required. ContextMany of our customers choose to block the Cloud Storage category as part of their data security strategy, primarily to reduce the risk of unauthorized data storage and prevent sensitive information from being uploaded to unapproved cloud services. By blocking the Cloud Storage category, organizations can ensure that their employees are not inadvertently storing business-critical or sensitive data in unsecured or non-compliant cloud platforms, mitigating the potential for data breaches or leaks.However, in certain cases, customers also need to allow access to specific cloud services, such as Google Drive, for business operations. Google Drive is widely used for collaboration and file shar

Zarmin ShaikhNetskope Employee

published in Grammarly

Grammarly Web - Block Activities ‘Upload & Download’

Netskope Global Technical Success (GTS)Grammarly Web - Block Activities ‘Upload & Download’ Netskope Cloud Version - 122 ObjectiveBlock ‘Activities - Upload & Download’ on Grammarly Web PrerequisiteNetskope CASB license is required ContextHow to block Upload & Download activity on Grammarly Web Do You Know?Netskope acknowledges Grammarly as a Cloud Application and provides a pre-defined cloud app connector. As of Dec 17, 2024 with Netskope’s Predefined connector, Customers can exercise following activities on Grammarly Web Application. Lab RecreateRealtime protection policyPath: Netskope Tenant UI >>> Policies >>> Real-time Protection VerificationEnd-user tried Uploading content on Grammarly Web App, and received the below message.End-user tried downloading content on the Grammarly Web App, and received the below message. You may verify the Policy Hit as below: You may verify the Alerts under Skope IT >>> Alerts Page Terms and ConditionAll documen

Zarmin ShaikhNetskope Employee

published in CASB/SWG Inline

Shielding Sensitive Data: Blocking Watermarked Document Uploads on Grammarly Web App with DLP Controls

Netskope Global Technical Success (GTS)Shielding Sensitive Data: Blocking Watermarked Document Uploads on Grammarly Web App with DLP Controls Netskope Cloud Version - 122ObjectiveImplement DLP Controls on Grammarly to Prevent the Upload of organization watermarked Documents. PrerequisiteNetskope CASB license is required ContextThis document provides detailed guidance on implementing DLP controls using a custom DLP profile to prevent the upload of sensitive, watermarked organizational documents to the Grammarly Web App. Do You Know?Netskope acknowledges Grammarly as a Cloud Application and provides a pre-defined cloud app connector. As of Dec 17, 2024 with Netskope’s Predefined connector, Customers can exercise following activities on Grammarly Web Application. Lab RecreateIn this scenario, we are using a data sample of documents containing the organization's watermark. For example, the company enforces a policy that designates all watermarked documents as sensitive, and such documents

stevanNetskope Employee

published in Inside Netskope

Netskope Endpoint SD-WAN: The Unsung Hero for Tracking Netskope Client BypassesBlog

Netskope products serve the purpose of security AND as tools to troubleshoot with. Tools that are often overlooked by everyone, including us!In this article, we are going to cover one of our newest products acquired through the purchase and partnership of Infiot’s Borderless WAN (BWAN). BWAN is the technology commonly known as Software Defined Wide Area Networking (SD-WAN). We will answer the questions of:How does the Netskope Endpoint SD-WAN Client become a tool to be used? How am I able to use the Netskope Endpoint SD-WAN Client for displaying bypasses in the Netskope Endpoint SD-WAN console?As a little background information, “Netskope BWAN extends the concept of network segmentation beyond traditional network perimeters, catering to the needs of a modern workforce that operates from varying locations and uses a multitude of devices. Netskope BWAN ensures network segmentation for any device by encapsulating each session in a secure and encrypted tunnel. This segmentation extends

ElTetuNew Member III

posted in Community Feedback

Missing Community post

HiI did bookmark a couple of weeks ago the links from a community posts named “Simplifying NPA: End-to-End workflow”.These were 3 posts (part 1 to part 3) with a really good and detalied explanation of how the NPA service works, and when I’ve tried to check them again I get a 404 page not found message indicating that “the page you are looking for might have been removed, is temporarily unavailable, or the name has been changed.”i have tried to look for these wonderfull posts via tags, name and so on, but it seems that they do not exist anymore, I have also tried to ask this same thing mailing to community@netskope.com as the 404 webpage suggest, but it seems that this account doesn’t allow to receive emails…So I hacet thought to just ask here if anybody remembers these posts or know what happened to them or how to access them again…The bookmarked links I have are the following:Simplifying NPA: End-to-End workflow - Part 1 | CommunitySimplifying NPA: End-to-End workflow - Part 2 | Com

Zarmin ShaikhNetskope Employee

published in Grammarly

Grammarly Web App Global Block

Netskope Global Technical Success (GTS)Grammarly Web App Global Block Netskope Cloud Version - 121 ObjectiveBlock Grammarly Web App Globally PrerequisiteNetskope CASB license is required ContextHow to block Grammarly App via Real Time Protection Policy Do You Know?Netskope acknowledges Grammarly as a Cloud Application and provides a pre-defined cloud app connector. As of Oct 25, 2024 with Netskope’s Predefined connector, Customers can exercise following activities on Grammarly Web Application. ConfigurationRealtime protection policyPath: Netskope Tenant UI >>> Policies >>> Real-time Protection VerificationEnd-user tried accessing Grammarly Web App, and received the below message.Note - User Notification format used above Link You may verify the Alerts under Path: Netskope Tenant UI >>> Skope IT >>> Alerts Terms and ConditionAll documented information undergoes testing and verification to ensure accuracy. In the future, it is possible that the applica

aplazaNetskope Employee

published in Community News & Announcements

Netskope Homemade: Season 2Holiday Cookbook

Enjoy our second edition of home recipes from Netskopers around the globe, because good food is all the better when shared. The holidays are a time for traditions—and at Netskope, one of our favorite traditions is sharing a collection of Netskopers’ beloved homemade recipes. From savory dishes to sweet treats, discover the flavors that bring us joy, connection, and warmth. 🍳Get the cookbook! 🍽️ Do you have a favorite recipe that you make around the holiday season? Feel free to comment and continue the discussion!

LionelNetskope Partner

asked in Additional Discussions

Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

Leandro Timotio de LimaNetskope Employee

(VIDEO) Prevent Sensitive Data From Being Sent to ChatGPT

Policy:Block Confidential Word ChatGPT Description:Policy to prevent sensitive data from being entered into ChatGPT Video:

Leandro Timotio de LimaNetskope Employee

posted in Next Gen SWG

(VIDEO) Block Download File Type

Policy:Block Download File Type Description:Policy to prevent downloading of files that may put the organization at risk, for example binary files Video:

Zulkifal B ANetskope Employee

published in Real-Time Protection: Key Policies

How to Block Google Doodle Games

Netskope Global Technical Success (GTS)How to Block Google Doodle Games Netskope Cloud Version - 121 ObjectiveThis article provides a step-by-step guide to blocking access to Google Doodle games using URL filtering techniques, helping administrators tailor network content access to meet professional or educational standards. PrerequisiteNetskope SWG license is required ContextGoogle Doodles are widely recognized for their creative and interactive designs, often featuring games that can attract user attention. While they offer entertainment, some organizations may seek to restrict access to these games to maintain productivity or ensure compliance with internet usage policies. This document provides a step-by-step guide on using URL filtering techniques to block access to Google Doodle games, allowing administrators to customize and manage content visibility across their networks effectively. ProcedureStep 1: Identifying the URL Pattern.Google Doodle games use the parent domain www.goog

1
2
3

Page 1 / 3

Badge winners

Rohit_Bhaskarhas earned the badge Simplified Social Champion
Rohit_Bhaskarhas earned the badge Simplified Engagement Enthusiast
Rohit_Bhaskarhas earned the badge Simplified Collaborator
mkoyfmanhas earned the badge Retired Alumni
Saif-Chaudhryhas earned the badge Retired Alumni

Show all badges

Powered by Gainsight

Terms & Conditions Cookie settings

Sign up

Already have an account? Login

Login with SSO

Employee Partner

or

Username *

E-mail address *

I am a... *

First Name *

Last Name *

Company Name *

Job Title *

Country Name *

State/Province *

Topics of Interest… *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

If you haven't already registered, now is a good time to do so. After you register, you can post to the community, receive email notifications, and lots more. It's quick and it's free! Create an account

Login with SSO

Employee Partner

or

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK

Explore

Why Netskope
Products
Solutions
What is SASE?
What is SSE?
What is Zero Trust?
What is a Next Gen SWG?
What is a CASB?

Resources

Blog
Netskope Community
Resource Library
Security Defined
Technical Support
Threat Labs
Trust Portal
URL Lookup

Company

About Netskope
Careers
Events
Executive Briefing Program
Newsroom
Our Customers
Partners
Partner portal

Contact

Contact Us
1-800-979-6988
2445 Augustine Dr. 3rd floor, Santa Clara, CA 95054

Privacy Policy
Vulnerability Disclosure Policy
Terms of Use
CCPA Compliance Statement

© 2024, All rights reserved.