Skip to main content
  • EN

Solved

230 Topics
S
SivaExplorer III
asked in Discussions
stats or groupby

Hello, is there a way in advanced analytics to find unique values of a field with count. Similar to stats in splunk? 

142
S
S
SakeeNew Member III
asked in DLP
DLP for Outlook Desktop App

When we first evaluated Netskope, visibility into non-org accounts within the Outlook desktop application was a known gap due to the application being certificate pinned. I recall that other vendors we evaluated were able to enforce DLP controls on other Outlook accounts, but these vendors often excelled in Endpoint DLP and leveraged more “legacy” approaches as opposed to Netskope’s reliance on the forward proxy.We currently block non-org accounts in the Outlook desktop app, but the allowance of client accounts within Outlook is a frequent request from our team users. With Netskope’s newer ventures into the Endpoint DLP space, are there any new or future-anticipated abilities to enforce DLP controls over these Outlook accounts/other certificate-pinned applications? 

391
zthompsoncr
Netskope Partner
farhan
Netskope Partner
farhanNetskope Partner
asked in Cloud Firewall
Netskope DNS Security and Limitation compare to Other DNS Security

Hi Team,I have a query regarding one of our customers who is currently using an existing DNS SEC setup for both outbound and inbound traffic. Customer already have NGSWG procured. Their current traffic flow is as follows:[Roaming user] USER Endpoint >>> Active Directory DC >>> DNS Forwarder >>> DNS SEC CLOUD.For Internal their is a differ IP configured for them to resolve but need to connect with Citrix VPN.They want to understand how the traffic flow works with Netskope DNS SEC, which differs as it intercepts DNS queries for inspection.Here’s the scenario: When a user queries a domain, the request first goes to the Netskope cloud for Deep Packet Inspection (DPI). If the domain is malicious, it gets blocked; otherwise, it is allowed and forwarded through the Secure Web Gateway (SWG).My question is: If the user’s machine is configured with the DNS IP of the Active Directory (AD), does Netskope return the allowed traffic back to the client machine and then forw

848
eneufeld
Netskope Employee
M
MichaelKoherNew Member III
asked in Discussions
Trending Data

I am working on something that I my brain should be so simple but i am just missing something. We have blocked DeepSeek from our environment. What I have been asked to deliver is a 90-trending report showing Access Allowed, Access Blocked over a 90-day period in a trend line. I am using the #Blocked Events but calculating the Allowed is getting it to show the trend line is where I am having issues.  Thanks for help! 

231
Aaron_Zhang
Netskope Employee
zywong
Netskope Partner
zywongNetskope Partner
asked in Next Gen SWG
Does site that failed SSL inspection reflect in SkopeIT logs?

Hi Guys,I was trying to figuring out on Windows Updates or Windows Store failing to check for updates or downloading apps. While i was moving around to check on SkopeIT logs for some clue to it and i could not see anything that shows any failure or etc may i know does SkopeIT do shows any signs of failing SSL inspection or any sort? Because the last resort that i did was to do a bypass on Windows Update’s URL then everything started to work and update can continue, i do see logs only reflecting that it is passing through properly but anything that failed before i applied the bypass is not reflected. Thanks in advance~

652
zywong
Netskope Partner
J
jschueleNew Member III
asked in CASB
REST API V2 failing for Sumo Logic

Sumo Logic has a Netskope app that can be installed and configured to use API v2 to ingest logs. I created a new token in Netskope as described in the doc. I then installed the Netskope app and created the collector in Sumo Logic. It shows healthy, but there is an error saying “ 403 - error connecting to endpoint, received 403: {“message”: You cannot consume this service”}. Any ideas whats wrong? 

331
ejang
Netskope Employee
P
pppNew Member III
asked in Discussions
Delay in Advanced Analytics

Hello Community,is it normal that the data in AA is delayed? Sometimes the latest event is from an hour ago, sometimes two?Best regards

211
Aaron_Zhang
Netskope Employee
D
dkolb-netskope
asked in Additional Discussions
Netskope CA certificates

Does Netskope notify us when their signing CA certificates are changed/updated? Recently we have had an issue where we needed to manually upload the certs for a tool and I was curious if Netskope notifies all of their customers when this certificate is renewed or being changed.Let me know if anyone has experienced the signing CA’s changing/updating and if Netskope notifies anyone.Thanks in advance!

641
D
M
maxkorNew Member III
asked in Private Access for ZTNA
Devcie classification unmanaged

Hi All, My device classification policy matches when all three criteria are met...There are a lot of users complaining that they can't access ZTNA, so I checked and they're unmanaged...I fixed it by pushing an update to the client and restarting the service/computer. It's probably not possible to do it every few days for users what is can be the root cause of pull users out from device classification policy.   

19510
A
M
mattwalkerNew Member
asked in Additional Discussions
IDP Install for non-domain joined sytems

Hi All!  Hoping someone can help pin down an issue we're running into with deployment of the Netskope Client via IdP. FWIW - We're using Okta as our IdP.  IdP Install reference: https://docs.netskope.com/en/netskope-help/netskope-client/netskope-client-deployment-options/deploy-netskope-client-via-idp/We have the Okta account set up in Settings>Security Cloud Platform>Forward Proxy SAML. We also have the .msi file on the computer. We run the following install script:  msiexec /I NSClient.msi tenant=**MASKED** domain=goskope.com installmode=IDP mode=peruserconfig autoupdate=on /qn After running the script, the Netskope client installs, and the user is prompted to enter in their Okta credentials. The user completes Okta authentication (we can see the successful log within Okta) but then the Netskope enrollment window flashes to a "Hmmm... can't reach this page" error.   Has anyone here run into a similar issue or know how

4904
S
Netskope Employee
J
jschueleNew Member III
asked in Discussions
Netskope Client for iPad

I saw the article on support for the Netskope Client on iPad. When I use the email invite though there is link for the iOS Client, only the iOS Profile. I see a note about this issue, but don’t understand what it wants me to do. How do I enable the default email template? I’m sure I changed it years ago, but can’t remember where.. Can someone clarify how I get it visible in the email invite?– If you are unable to see the link to download Netskope Client for iOS in the email invite, use the default email template that includes the link to download Netskope Client for iOS. 

922
R
K
kdibbleNew Member III
asked in DLP
Not Near Best Practices

We are working towards implementing a rule that looks for plaintext credentials within shared documents. In doing so, we’ve utilized the Passwords (contextual) pre-defined entity. We’ve noticed that this entity is catching teams and zoom meeting passcodes. We do not want to catch these passcodes in the rule and are trying to create a “not near” advanced expression. I’m looking for guidance on how to perform this. For example here is what we have: P1 = Passwords (Contextual)D5 = Custom Dictionary of words like “meeting”, “teams”, “zoom”, etc… Both options we’ve tried: 1.) ( P1 AND ( NOT ( P1 NEAR D5 ) ) )2.) (P1 AND NOT (P1 NEAR D5)) Any help would be appreciated.  

1509
A
D
dkolb-netskope
asked in Additional Discussions
Secure Enrollment Authentication Token Question

Hello,I was wondering if the Secure Enrollment Authentication Token gave a warning before expiring?I could not find any documentation that said there would be any banners or notifications when the token is about to expire so I wanted to know if there is some sort of warning for it.Thanks in advance!

991
S
Netskope Employee
N
ngriffinNew Member
asked in CASB
Netskope API Programming with PowerShell - Getting 401 Unauthorized Error Code

I’m attempting to connect to the Netskope API via a PowerShell script. I’ve created an access token with the appropriate endpoint configured. The script is receiving a 401 response which indicates that I’m not authorized yet. I’m not sure how to present the access token in the header. Is there any documentation or examples on how to authorize to the API endpoint I’m trying to connect to? Here’s a snippet of my PowerShell script:# Variables$netskopeAccessToken = "<insert_access_token_here"$type = "File, Folder"$filter = "(app eq 'OneDrive') and (exposure eq 'External')"$netskopeUri = "https://<domain>.goskope.com/api/v2/ui/casbapi/inventory/resources"# API Header$headers = @{ 'Authorization' = 'api_key' + $netskopeAccessToken 'Accept' = 'application/json'}# API Body$body = @{ type = $type filter = $filter}$response = Invoke-RestMethod -Uri $netskopeUri -Method Get -Body $body -Headers $headers 

1231
N
W
wdeguaraNew Member III
asked in Additional Discussions
Netskope and Docker

Just wondering whether any community members who are Docker users have been able to get Netskope working with it ?

40983
J
danisilfi
Netskope Partner
danisilfiNetskope Partner
asked in Private Access for ZTNA
npa_api_policy_enabled is not enabled

Dear Netskope buddies,  Im trying get the list of npa policies from my tenant through API method and, when i launch the command (im using postman, but the result from the API web Netskope its the same) i get the following message: “NPA policy feature npa_api_policy_enabled is not enabled”Do you know why the tenant its getting me this message?The option /api/v2/policy/npa is allowed in REST API v2 sectionI have searching in the tenant something similar to this, but i didnt find any option to configure this feature.If this feature is configurable, please, could you tell me where can i find it to enable? Thanks in advance,  Best regards,    

763
ejang
Netskope Employee
J
juanmNew Member III
asked in Additional Discussions
SCIM-Based User Provisioning with GSuite

Hi all! It is supposed that Netskope can import the OUs and User Groups from GSuite user platform directly using SCIM but, I couldn't find the way to do it. In addition, all the documentation I find is related to SCIM integration with Azure AD and Okta. I've been looking for a way into GSuite Admin Console and there is nothing similar. Anyone here has had the same issue? Thanks!

3275
maheshchavan
Netskope Partner
AllenWu
Netskope Partner
AllenWuNetskope Partner
asked in Additional Discussions
Data Retention of Audit Log

Hi there, Does anyone know for how long Netskope will keep admin’s audit log on the console?Failed to find more info from kb and not sure if purchasement of extended data retention or AA will cover this and extend the data retention period of audit log to at least 1 year.https://docs.netskope.com/en/audit-log-1/ Thanks

891
S
Netskope Employee
J
jschueleNew Member III
asked in Private Access for ZTNA
NPA Policy restrict access source country

I have specific NPA policies created that are configured for Client access. However, I would like to also add the Criteria = Source Country option to restrict to clients in the US only, which is possible in my Cloud App policies. This option is currently grayed out and wondering why and will it be available in the future? I can see in the event logs that the POP Name is being registered, so it knows that much at least.. Thx

1202
S
Netskope Employee
J
jschueleNew Member III
asked in Private Access for ZTNA
NPA Browser Access Session Limits

After enabling Browser Access for an app behind NPA, is there a way to enforce session limits? Thx

452
J
2
2022RossNew Member
asked in Cloud Firewall
Block internet access on servers

Try to deploy netskope on a server to block internet access  with an exception of  windows updates. I’ve been directed to the Cloud Explicit Proxy documentation but it seems like an overkill to what im trying to achieve.Anyone implemented this ?​​​​​​

971
N
S
simonmaNew Member
asked in Private Access for ZTNA
Publisher App Reachability

Hello,Assuming a private apps is defined with a single hostname (with the exception of CIDR or wildcard domain) and reachability status is normal, what is the default traffic behaviour if the publishers associated with the app are suddenly unable to each the app? Is the traffic dropped?Is reachability only relevant in scenarios where a single hostname in an app is defined? The private app FAQ document states the following. When an app is specifies with multiple ports or a port range, the Publisher will use only the first port from the list or range to check availability. For example, port range 70-90 will return unreachable, even if you are listening on port 80, because the only port that will be checked is 70 (this is a known limitation). If an app definition specifies multiple ports and/or port ranges, it will check whether any of them is reachable. For example, if you specify 22, 70-90, if it’s able to reach port 22, it will mark the app as reachable. Can anyone clarify these state

1361
N
E
eldadNew Member III
asked in Next Gen SWG
How to create users group

Hi community,I'm wondering where I can create new users group to use when I create new client configuration. Thanks,

8999
N
S
secproceoNew Member
asked in Discussions
Netskope Client for iOS

Can the Netskope client be installed for iOS (iPad) without using Intune? I need to install it for one device. If so, are there instructions? Thanks. 

973
S
shubhamk
Netskope Partner
shubhamkNetskope Partner
asked in Netskope Cloud Exchange (CE)
Adding Netskope tenant on Cloud Exchange

Dear Team,I am in the process of setting up Cloud Exchange, and the deployment has been successful, including access to the UI. However, I am encountering issues when attempting to add a tenant to the Cloud Exchange. The following errors appear in the logs:[CE_1045, CE_1044, CE_1126]I have reviewed the configuration and validated the tokens, but I am still unable to onboard the tenant.Could you please assist in troubleshooting this issue?Detailed Error: 09/10/2024 10:20:10 PM    CE_1045    error    Error occurred while validating v1 token, Exception occurred while parsing JSON response.Traceback (most recent call last):  File "/usr/local/lib/python3.9/site-packages/requests/models.py", line 971, in json    return complexjson.loads(self.text, **kwargs)  File "/usr/local/lib/python3.9/json/__init__.py", line 346, in loads    return _default_decoder.decode(s)  File "/usr/local/lib/python3.9/json/decoder.py", line 340, in decode    raise JSONDecodeError("Extra data", s, end)json.decoder.JS

702
ejang
Netskope Employee

Badge winners

Show all badges
Terms & ConditionsCookie settings