Skip to main content
  • EN

Recently active topics

71 Topics
S
Netskope Employee
Saniya MurtuzaNetskope Employee
published in AnyDesk
Block Any Desk using Netskope's Cloud Firewall Module

Netskope Global Technical Success (GTS)Block Any Desk using Netskope's Cloud Firewall Module Netskope Cloud Version - 120 ObjectiveThe objective of this document is to describe the procedure for blocking AnyDesk using Netskope. While Anydesk is referenced for example, this procedure can be applied for similar Remote Control Applications that an IT Administrator would like to access control over, within the organization. PrerequisiteThis use case can be implemented using Netskope’s Cloud Firewall / SWG Module. This document will describe the procedure for Blocking Anydesk Applications via Cloud Firewall Module. ContextAnyDesk and TeamViewer are both remote desktop applications that allow users to connect to and control another computer over the internet. They are commonly used for remote support, remote work, and accessing files or applications on another device from a different location. While these applications are available for free, they might not be sanctioned for use within the or

200
S
Netskope Employee
8 days ago
S
Netskope Employee
Saniya MurtuzaNetskope Employee
published in AnyDesk
Block Any Desk using Netskope's SWG Module - MAC OS

Netskope Global Technical Success (GTS)Block Any Desk using Netskope's SWG Module - MAC OS Netskope Cloud Version - 120 ObjectiveThe objective of this document is to describe the procedure for blocking AnyDesk using Netskope. While Anydesk is referenced for example, this procedure can be applied for similar Remote Control Applications that an IT Administrator would like to access control over, within the organization. PrerequisiteNetskope SWG License is required ContextAnyDesk is a remote desktop application that enables users to connect to and control another computer over the internet. It is commonly used for remote support, remote work, and accessing files or applications from different locations. Although AnyDesk is available for free, it may not be sanctioned for use within the organization. Therefore, IT teams may need to manage and control its usage. This document outlines the procedure for blocking AnyDesk on MAC OS Do You Know?As of August 29, 2024, Netskope recognizes AnyDesk

60
S
Netskope Employee
8 days ago
K
kdibbleNew Member III
asked in CASB
Internal collaborator count on API Data Protection policies

We are creating policies based on thresholds of internal users that are collaborators of a document. In doing that, we’ve ran into the following issues: 1.) We’ve seen in the alerts section that a lot of our alerts associated have a collaborator count that is different from what we see in the incidents section. For example, here you can see 135 collaborators. However if you look at the actual incident, this is only shared with 4 individual users, and a group of 64 users. That doesn’t add up to 135. We are seeing this for lots of alerts/incidents. 2.) In our DLP profiles, we have a a configuration for various exposure definitions. We are wondering if the following is an AND or OR in terms of the internal/external and # of internal users. The reason we ask is that it seemed that we were triggering on internal documents that are shared with less than 100 users. Let us know if there is any further clarification needed here.  

120
K
8 days ago
S
SakeeNew Member III
asked in DLP
AND Operator Value in DLP Rules

I am trying to determine when a DLP Rule needs to leverage the NEAR operator versus the AND operator. In one example incident, a DLP Rule defined as (P1 NEAR P2) appears to have been triggered when the two entities were over 10,000 characters apart.What is the default value of the AND operator, is it truly more than 10,000 characters?

212
S
Netskope Employee
8 days ago
D
Netskope Employee
DiogenesNetskope Employee
posted in Blogs
Deploy Netskope Client for Mac using Jumpcloud MDM

In this article, we will cover how to silent deploy the Netskope Client on Mac devices using IDP enrollment mode with Jumpcloud MDM. Prerequisite: SAML Forward Proxy integration with Jumpcloud as an IDP must be configured prior to deploying the Netskope Client. Configuration Steps 1 - Install Netskope CertificatesDownload both certificates from the Netskope Tenant on Settings > Manage > Certificates > Signing CA:  Jumpcloud allows you to choose only one certificate per policy. Follow the steps off the link Create a Mac or iOS Install Certificate Policy  and create two certificate policies on Jumpcloud. One for the Netskope Root Certificate and one for the Netskope Intermediate Certificate: Approve System Extension and Network ExtensionCreate a new Jumpcloud policy following the steps of the link Create Mac System Extension Policy  to Approve the System Extension and use the following details on the policy:In the latest SO versions it is necessary to check the System extension

9994
D
Netskope Employee
9 days ago
Anmol
Netskope Employee
AnmolNetskope Employee
published in Real-Time Protection: Key Policies
How to automate URL List Updates via APIREST API

Netskope Global Technical Success (GTS)KB - How to automate URL List Updates via API Netskope Cloud Version - 120 Objective  Demonstrate the process of automating URL list updates via API.PrerequisiteNetskope SWG LicenseContextNetskope enables users to create, delete, and update URL lists using API calls. This knowledge base article provides step-by-step details for managing URL lists programmatically, helping streamline and automate URL list maintenance.Use CaseWhen migrating a large list of URLs (e.g., 1000 URLs) from a third-party solution to Netskope, manual transfers can be cumbersome, especially with dynamically updated feeds. Even if URLs can be exported to CSV, you’d still need to format them correctly and repeatedly import them to stay current with updates. By automating URL list updates from an online JSON feed, you can streamline the transfer process, enabling a centralized, up-to-date URL store across multi-vendor proxy environments. This approach reduces manual effort and

650
Anmol
Netskope Employee
9 days ago
J
jpiresNew Member
asked in Next Gen SWG
Entra Conditional Access Issue

We have recently enabled conditional access in Entra and ran into a problem.  Our setup says that only machines coming from one of our facilities or a Netskope IP range can access Teams, Outlook, etc.The issue we are having occurs when a user is booting up their machine, Netskope does not enable before Teams and Outlook, causing the user to have to close the apps and click Sign In until a Netskope tunnel is enabled.Is there something from the Netskope tenant we need to adjust to prevent users from having to close all of their programs each time they reboot or is this issue on the Microsoft side?  We considered a GPO for preventing Teams and Outlook from booting to allow Netskope to enable as well.Any information anyone could provide would be appreciated.  Thank you!

521
A
Netskope Employee
11 days ago
M
maxNew Member
asked in Next Gen SWG
Connection closed by client nsClientUI_s1

I’m trying to determine what caused the following chain of actions:2024/11/04 16:00:22.638 stAgentSvc p14d8 tcc0 error NSCom2.cpp:1038 NSCOM2 recv failed 100542024/11/04 16:00:22.638 stAgentSvc p14d8 tcc0 error NSCom2.cpp:783 NSCOM2 startServerMessagePump: Connection closed by client nsClientUI_s1 Then further down in the logs I’m seeing: 2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info config.cpp:10145 Config [sessId 1] Marking user config for delete2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info npaTunnelMgr.cpp:933 CNpaTunnelMgr Handle session change for NPA active session 1, log off session 12024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info npaTunnelMgr.cpp:608 CNpaTunnelMgr Set NPA (desired) status from [NPA_TO_STOP] to [NPA_TO_STOP]2024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info tunnelMgr.cpp:1695 CTunnelMgr Disconnecting tunnel for sessId 12024/11/04 16:00:34.177 stAgentSvc p14d8 t14dc info tunnel.cpp:288 nsTunnel TLS disconnecting nsTunnel, context = NSTUNNEL_DISCO

241
A
Netskope Employee
11 days ago
B
bntrotterNew Member
asked in Security Posture Management
Steer specific sub-domain but Allow Bypass for the remainder

Is it possible to steer specific site sub-domain traffic thru Netskope but have the remainder of the traffic bypass Netskope.I have a specific site sub-domain that my leadership wants to have blocked.  But currently the parent domain is set as a Steering Exception.

281
A
Netskope Employee
11 days ago
A
adebrattoNew Member
asked in Next Gen SWG
Real-Time Protection Policy Review

Our organization must review our policies to determine if the existing policies are still valid and need to be retained.  Problem we are having is that “allow” rules do not appear to log anywhere.  Short of turning all “allow” rules to be “alert” rules, does anyone have a way to validation if a web access rule is actually being used and needed to be retained?

362
A
12 days ago
V
vedNew Member
asked in DLP
OCR DLP Detection

 Hello everyone! I hope you're all doing well. I'm currently exploring how to set up an OCR DLP detection policy on Netskope for our organization's security needs. Could anyone provide guidance or step-by-step instructions on configuring such a policy? Any insights, tips, or best practices would be greatly appreciated. Thanks in advance for your help!

5422
AllenWu
Netskope Partner
13 days ago
shubhamk
Netskope Partner
shubhamkNetskope Partner
asked in Next Gen SWG
Browser extensions

Dear Team, Could we manage browser extensions (including installation and execution) using NGSWG? Best Regards,Shubham

6175
A
13 days ago
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
posted in Blogs
Add user and group via scim API

This one is more for my tech partners than for customers. If you tie your idp into your Netskope tenant you would never do this. This is really just for a lab environment. This will create users and groups that you can then use in policy.  Create API token for scimGo to Settings > Tools > REST API v2 > New Token  Create an API token that has the two scim endpoints added.  With the token copied and stored somewhere. Go to API Documentation.  Add the token to the Authorize In the scim section use the apis to view and create the users/groups.  Adding a userStart by adding the user. Be sure to change the userNamePOST /api/v2/scim/Users{  "schemas": [    "urn:ietf:params:scim:schemas:core:2.0:User"  ],  "userName": "taylorkelce",  "name": {    "familyName": "kelce",    "givenName": "taylor"  },  "active": true,  "emails": [    {      "value": "taylor@eras.tour",      "primary": true    }  ],  "externalId": "User-Ext_id",  "meta": {    "resourceType": "User"  }} Search for your user

6603
Gary-Jenkins
Netskope Employee
14 days ago
M
maxkorNew Member III
asked in Private Access for ZTNA
Devcie classification unmanaged

Hi All, My device classification policy matches when all three criteria are met...There are a lot of users complaining that they can't access ZTNA, so I checked and they're unmanaged...I fixed it by pushing an update to the client and restarting the service/computer. It's probably not possible to do it every few days for users what is can be the root cause of pull users out from device classification policy.   

1259
M
14 days ago
P
pppNew Member
asked in Private Access for ZTNA
Multiple policies to a single App Definition

Hello,Is this allowed to use multiple policies assigned to a single App via tags? Is it possible to predict the behavior in such a scenario?App AServer ABCTag: AApp BServer XYZTag: BApp CServer WWWTag: A, BPolicy AAllow Group AManagedClientTag: APolicy BAllow Group BManagedClientTag: BPolicy A - blockBlock allClientTag: APolicy B - blockBlock allClientTag: BUser A - member of group AUser B - member of group BUser C - member of both group A and B Will users A, B and C be able to reach server WWW?We assume that blocking policies have fewer conditions, so they are processed later.Regards

170
P
14 days ago
A
Netskope Employee
asankaranNetskope Employee
Netskope Cloud Exchange (CE) v5.1 is NOW GA

Gartner Forecasts Global Security and Risk Management (SRM) Spending to Grow 14% in 2024 Worldwide end-user spending on security and risk management is projected to total $215 billion in 2024, an increase of 14.3% from 2023, according to new forecast from Gartner, Inc. The continuous adoption of cloud, continuous hybrid workforce, rapid emergence and use of generative AI (GenAI), and the evolving regulatory environment are forcing security and risk management (SRM) leaders to enhance their security and risk management spending. At the same time, they are focusing their efforts by adopting technical security capabilities that provide far greater visibility and responsiveness across the organization’s entire digital ecosystem and restructuring the way the security function operates to enable agility without compromising security. Netskope Cloud Exchange (CE) enables a collaborative ecosystem of tools and controls to secure a modern, distributed enterprise. It builds on a strategy o

2240
A
Netskope Employee
15 days ago
F
fbrunnerNew Member III
asked in DLP
Netskope SMTP Proxy - Scanning O365 Email Body contents

I have been digging through documentation but have been unable to find an answer on this specific SMTP Proxy DLP issue.  We currently use Netskope DLP to cover network exfiltration and endpoints (USB, etc), and we’re testing Netskope’s SMTP Proxy DLP.  For some reason, we’re unable to get Netskope to trigger on DLP violations in the message body.  It always catches content in attachments, but if I paste the exact same test content in the message body (SSN, CC, etc) it fails to trigger a violation.  Is this by design, or am I missing something in the config?  Thanks

171
F
15 days ago
A
AlfaBaneExplorer III
posted in Additional Discussions
Single mode -vs- Multi-user mode installation

Hello all,    I wanted to see if anyone had any use-case, pros/cons, intent, etc information in terms of client installations. Beyond "Optional parameter. Use this parameter when installing in a multi-user system", I've been unable to find any additional information or context.    For reference, when we deploy the client or provision devices, the Netskope client MSI is installed with a mode=peruserconfig parameter. While our devices can be used by any user in our environment with appropriate access, there are next to no devices that are intended to be regularly used by multiple users.    I just wanted to reach out and see what your experiences have been. 

14185
monika
Netskope Partner
16 days ago
mfaris
Netskope Employee
mfarisNetskope Employee
Netskope Cloud 121.0.0 Documentation Available Now!

The Netskope Cloud R121 documentation is here! New & updated articles are live on docs.netskope.com. The release notes are here: Netskope Release Notes Version 121.0.0.The key new or updated features are: Cloud Tap: General Availability (GA) of Cloud TAP Netskope Private Access (NPA): Multiple IdP Support for Browser Access Submit your feedback via docs.netskope.com.

1270
mfaris
Netskope Employee
16 days ago
H
Netskope Partner
hshimizuNetskope Partner
asked in Next Gen SWG
Do I get a warning if I exceed the number of registered URLs in my Netskope tenant?

Dear Everyone, The limit for URL lists per tenant is 300 K.Does anyone get an Error in the tenant UI when creating a URL List in a tenant that exceeds 300 K?If anyone has experience creating a ULR List that exceeds 300 K, it would be helpful for me.I would like to know whether tennant UI could inform it to user or not. URL List LimitsCurrently, the total URL List limit per tenant across all URL lists is 300K. The URL List limit using Regex across all URL lists in that tenant is 1K (this 1K count includes only the regex written not the expanded format).https://docs.netskope.com/en/url-list-best-practices/Thank you and Best Regards,Hiroaki.S

382
N
19 days ago
Kmaheshwari
Netskope Employee
KmaheshwariNetskope Employee
published in Additional Discussions
Netskope Sentinel One Device ClassificationNetskope, Sentinel One, Device Classification

Integrating SentinelOne and Netskope to leverage threat detection and enforce device classification provides a robust endpoint-to-cloud security approach.This integration facilitates effective device classification and management, enabling consistent security policies across both cloud and endpoint environments. Requirements:SentinelOne Admin Access Netskope Tenant Implementation:SentinelOne ConfigurationConfigure the script on SentinelOne Tenant > Remote Ops > Create New Click on Upload New Script and provide the script details Upload the script Script content:This script will create an empty file with a specific file name in a specific directory that Netskope's client will look at and It will be created when there is high risk as determined by SentinelOne - and when the Netskope client sees this, it will be able to match on the device and respond appropriately. # Define the directory and file path$targetDirectory = "C:\ProgramData\Sentinel\Addons\SentinelRSO"$filePath = Join-Pa

470
Kmaheshwari
Netskope Employee
20 days ago
Gary-Jenkins
Netskope Employee
Gary-JenkinsNetskope Employee
posted in Additional Discussions
Cribl Netskope Events and Alerts Integration

Cribl Netskope Events and Alerts Integration Netskope’s Events and Alerts can be pulled into Cribl via the Netskope REST v2 APIs. You can use Cribl Stream to filter and redirect to the destination of your liking. Note: Netskope Steaming Events (WebTx) aren’t supported currently. RequirementsNetskope tenant with API v2 enabled Cribl Stream accountSetup StepsNetskope Generate API token CriblCreate Data Source VerifySave and Run NetskopeGenerate API tokenIn your Netskope tenant go to Settings > Tools > REST API v2 > New Token  Add permission scopes to the token. You will need to add all scopes that you want to pull. In my example, I am going to grab all Events and Alerts. Give your token a name, and expiration period. Use the following scopes Events/api/v2/events/dataexport/events/application/api/v2/events/dataexport/events/audit/api/v2/events/dataexport/events/incident/api/v2/events/dataexport/events/infrastructure/api/v2/events/dataexport/events/network/api/v2/events/dataexport

15184
Gary-Jenkins
Netskope Employee
20 days ago
N
ngriffinNew Member
asked in CASB
Netskope API Programming with PowerShell - Getting 401 Unauthorized Error Code

I’m attempting to connect to the Netskope API via a PowerShell script. I’ve created an access token with the appropriate endpoint configured. The script is receiving a 401 response which indicates that I’m not authorized yet. I’m not sure how to present the access token in the header. Is there any documentation or examples on how to authorize to the API endpoint I’m trying to connect to? Here’s a snippet of my PowerShell script:# Variables$netskopeAccessToken = "<insert_access_token_here"$type = "File, Folder"$filter = "(app eq 'OneDrive') and (exposure eq 'External')"$netskopeUri = "https://<domain>.goskope.com/api/v2/ui/casbapi/inventory/resources"# API Header$headers = @{ 'Authorization' = 'api_key' + $netskopeAccessToken 'Accept' = 'application/json'}# API Body$body = @{ type = $type filter = $filter}$response = Invoke-RestMethod -Uri $netskopeUri -Method Get -Body $body -Headers $headers 

361
N
20 days ago
P
pppNew Member
asked in Private Access for ZTNA
Problem with auto update

Hello Community,some of our clients stuck on version 114 or 117 - most updated without a problem. Has anyone encountered something similar and maybe solve it? Best regards

360
P
20 days ago
aplaza
Netskope Employee
aplazaNetskope Employee
published in Video Library
Quarterly Product Release Webinar - October 2024

Hear from our Product Management and Product Adoption leads as they cover the latest platform updates from Release 118, 119, and 120.  Key product updates:Site, User—App Synthetic Monitoring for Web Apps and Custom Web Applications  E2E Encrypted App Inspection and AI generated insights for CCI attributes (CCI copilot) Enhanced risk profiling for 3rd party applications—Workday, Entra ID, and Google Workspace Expanded App Coverage for Box, Slack, ServiceNow, and Cisco Webex on a new NG CASB API platform Comprehensive categorization and classification insights for URLs, domains, and IPs using the URL lookup API for SWG Malware workflow for submitting false positive and allowlisting  Reset UEBA UCI score to 1000 for use-cases such as role changes and test users Leverage MIP and Box Labels for DRM Integration for Classification  Provide visibility into custom classifier performance, including insights into the training data Endpoint DLP Printer Content Control Support for AIP/MIP Sensitivi

890
aplaza
Netskope Employee
21 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings