Skip to main content

Solved

244 Topics
M
munster
asked in Additional Discussions
Manual Trigger Netskope Client Upgrade

Hiv118 was available. How frequent will the client check of newer version? How can I manually trigger upgrade?thank

2311
V
Netskope Employee
neerajvohra
Netskope Partner
neerajvohraNetskope Partner
asked in Next Gen SWG
Allow Google Gemini with Google drive blocked

In our environment, Google drive is blocked as cloud app.We have allowed Google Gemini app. When user use Gemini AI and try to export to doc, it gets blocked. When I unblock Google drive, Gemini also works fine.Is there anyway we can keep blocking Google drive and allow Google Gemini with export option?From the har troubleshooting, I can see “http://client6.google.com” url is getting blocked but if I allow it, Drive also works. Please guide how can I resolve this. Thanks. 

2943
neerajvohra
Netskope Partner
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
asked in Private Access for ZTNA
Google Workspace - IDP Client - Google Authenticator

Google Workspace - IDP Client - Google AuthenticatorHello good afternoon community, I hope you are very well.I have a question, regarding the use of MFA or a two-factor authentication for users with the following case:Users with IDP mode installed - Provisioning users to Tenant with Azure-AD . SAML Proxy for IDP - Google Worskpace.Now if a customer wants or needs that apart from the enrollment via IDP, in this case Google Workspace, reauth must be applied at Private Access level so that every so often it performs the reauth.Now thinking if the customer wants that when this reauth occurs, in addition to validate the Google Workspace credentials, use Google Authenticator, this configuration is not specific to Netskope, but in this case the Google Workspace itself? Is this correct?Thank you very much community for your time, advice and collaboration.Best regards

591
S
Netskope Employee
A
aldiazNew Member III
asked in Private Access for ZTNA
Modify keepalive time interval between publisher and private app

Hi team,I´d like to know if it´s possible to modify the keepalive time interval between publisher and private app?Thanks in advance!

2214
S
rapchua
Netskope Partner
rapchuaNetskope Partner
asked in CASB
Netskope Client service Not Starting

Hello,We have installed Netskope client and encountering intermittent connections/service not starting properly once a machine booted up. This is happening for multiple users few weeks after deploying Netskope.Did anyone encounter the same issue? I am searching any related documentation/forums but I think I overlooked it. Thank you.

3082
rapchua
Netskope Partner
J
jschueleNew Member III
asked in CASB
Azure OpenAI App Steering

I am using CASB Inline/API only right now (not SWG) and we use Azure OpenAI. I wanted to know is there a reason that Azure OpenAI is not a fully supported Cloud App (in the Generative AI category) that I can steer and control by DLP policy? I would also like to see it show up with our instance as well. Thx

431
ejang
Netskope Employee
E
EPicmNew Member
asked in Next Gen SWG
User disabled the netskope client, I need to enable it back remotely

Hi,New here and I would like to ask if possible and if not where there is a wish a feature option.I had some naughty users who were  disabling the Netskope client (WISHLIST can it be disabled only by inputting a password )Under client Configuration > Tamperproof, I have selected to Hide Client Icon os system tray.Now, my question is, I would like to make sure that all my users are client-enabled on their windows computers.Is there a simple way to do it? Powershell preferably.Thanks E

6552
F
Netskope Employee
E
EleComteNew Member III
asked in Private Access for ZTNA
Detect install type of Netskope Client (single or multi user)

Hi everyone,   Is there a way (prefer. registry key) to determine is a Netskope Client install was single user (default) or multi user mode? This would help in "cleanup" of messed-up installs.   Best regards,   Etienne

7146
S
corantoba
Netskope Partner
corantobaNetskope Partner
asked in Security Posture Management
Kill client's process or service without authorization

Hello everyone, is it possible to control that a user closes the process or service associated with the Netskope client?As far as I know, I can control a user to disable the client but this leaves the user the ability to kill the client process and thus navigate outside Netskope.

11283
G
A
AlfaBaneExplorer III
asked in Private Access for ZTNA
NPA: Ivanti Management Console

We are expanding our NPA footprint soon. Several of the users that are about to gain NPA access use the Ivanti Management Console (remote management console) on a daily basis. Attempting to log into the console results in the following error:  Console Initialization Error:  Unable to connect to the database.A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 0 - No such host is known.).We have Private apps created for this host and IP already.  Has anyone else configured this successfully for NPA access? 

1332
A
mgoetz
Netskope Partner
mgoetzNetskope Partner
asked in Private Access for ZTNA
Multi tags in NPA Apps with Terraform

Hello,I would like to use multiple tags for private apps.What would be the syntax here?tags { tag_name = "TEST, TEST1, TEST3" } ?I would be grateful for your help.Marco

943
S
J
jschueleNew Member III
asked in DLP
Endpoint DLP & System Scanning

Is the option to perform local system scans (Windows, MacOS) on the roadmap? I really need the ability to identify files matching my DLP polices that reside on our users managed computers. Thx

901
ejang
Netskope Employee
A
AlfaBaneExplorer III
asked in Private Access for ZTNA
NPA: managing Periodic Reauthentication on mobile (iOS & Android) devices

For Private Access environments in which users also have mobile (iOS & Android) access to certain Private Apps, what’s the best way to avoid flooding users with daily Periodic Reauthentication on their computers as well as their phones? Maybe a better question would be “what is the expected user experience in terms of Periodic Reauthentication” for users leveraging Private Access on both their work computers and their phones?should users be prompted to reauth on both devices?  is it just whichever device prompts first?  is the expected behavior different for iOS & Andriod? Also, if the reauth period lapses or the prompt is missed or accidentally closed on the phone and private access disables, what is the best way to instruct end-users on restoring Private Access on their phones ? On computers, reauthentication is easily done via the client menu, but I’ve been unable to find any such option on the Netskope client/app on iOS   @sshiflett 

1732
Rohit_Bhaskar
Netskope Employee
X
xstuartbarrettxNew Member III
asked in Next Gen SWG
Bulk URL Lookups

Hi, has anyone found a way to do bulk URL lookups? I have 100’s of URLs that I want to find their associated categories of. I’ve tried using Advanced Analytics, but it seems unreliable to give me the pre-defined Netskope categories that I’m searching for. 

3804
F
Netskope Employee
J
jasonbeebeNew Member III
asked in Private Access for ZTNA
Active Directory and DNS with Multiple Regions

My organization has two main regions (USA and India).  I currently have ADDS/DNS servers in both regions.  I have two private apps configured for ADDS.  One of them is directing traffic to the India ADDS servers using the local NPAs, the other is doing the same for USA.I have a prelogin user that has access to both private apps.I also have a DNS private app defined (*._http.domain.local, *._kkdcp.domain.local, etc) but it only uses the USA publishers.With this configuration, our USA users are working fine with very little lag on computer startup and login.  Our India users, however, are experiencing very long startup and login times.My question is, what is the proper way of configuring AD and DNS access for clients when the organization is multi-regional and you want the client to always access the closest ADDS/DNS servers?Some solutions I am considering are:Divide each region’s users into separate groups and give them only access to their local ADDS server.  This however does not solv

3292
J
monika
Netskope Partner
monikaNetskope Partner
asked in DLP
Device classification

When a user tries to download any files from his/her BYOD using organization's email platform, the download should be blocked.?? How can we achieve  this in Netskope please provide me the steps..

1631
ejang
Netskope Employee
A
Anonymous
asked in DLP
Netskope Email DLP with Mimecast

Dear All   I tried to setup Netskope Email DLP with Mimecast, however it seems like the message has not successfully deliver to mimecast MTA. 1. Configured SMTP settings (Domain, Tenant ID, Next Hop FQDN which is mimecast smart host, port)2. Configured exchange flow connector to route message to Netskope smart host3. Configured real time policy with action add X header: block when sensitive data is detect4. Setup content examination definitions and policy from Mimecast when receive X header: block 5. Test sending outbound email with sensitive info on the content. Tested sending another email without any sensitive info. (Both email had failed to deliver to recipient)6. Checked on SKope IT > Alerts > noticed that Email DLP policy has triggered with email consisted of sensitive info.7. Checked on Mimecast message tracking, however did't receive any message (for both sensitive and without sensitive message) Is there any steps that I miss out? Thank

3064
S
Netskope Employee
C
CuriousExplorer II
asked in Private Access for ZTNA
VPN and NPA Not Happy Together

Hi Everyone, Have an issue where remote NS clients have the following environment and in this order:1. IPv4 and IPv6 addresses assigned (eg. from home wifi or mobile hotspot)- The IPv6 address assigned (global internet address starts with 2001:xxx)2. NPA Tunnel is established3. Connect to corporate VPN service4. Clients are then unable to access applications via the VPN NPA applications continue to operate successfully but the NS client service appears to interfere with the VPN tunnel. Stop the NS client service and there is no issue with the VPN. Disable IPv6 and the VPN and NPA work successfully, this is not recommended by Microsoft so not really a desirable option. Have tried to configure clients to 'Prefer IPv4 over IPv6' this was looking promising but not producing reliable results. Issue still appears to randomly occur, still testing this. Anyone else experience this issue?

6785
E
Indu
Netskope Partner
InduNetskope Partner
asked in Next Gen SWG
Netskope client SSL decryption issues

Our Real-time protection policies are simple - block high risk websites, allow enterprise websites and alert uploads and downloads of social media. No NPA. We have multiple issues with traffic passing through Netskope SSL decryption. Few issues we noticied so far (be it any browser - firefox, chrome, edge or tor)- websites (with SSL decryption) are intermittently not loaded (one day they work fine, next day they won't and the cycle repeats again)- websites (with SSL decryption) are extremely slow- downloading objects like 200MB files takes high times (minutes to hours)- few websites have their dynamic buttons disabled or not becoming live- there are instances the websites failed won't show in debug logs, application & page events & alerts. Clearly killed by Netskope client, but not logged or sent to cloud. The websites works as soon as we mention in SSL BYPASS. Same sites with SSL bypass- websites (with SSL bypass) are loading every time without intermittent issues- w

17275
B
M
munster
asked in Next Gen SWG
How to tell if URL was manually access by user or refer by link?

HiHow can I tell if URL was manually access by user or refer by link?Eg,  in a webpage, there were images downloaded from S3 storage vs user goto the S3 storage. Thank

2171
F
Netskope Employee
E
ElTetuNew Member III
asked in Private Access for ZTNA
Clientless Browser Access

HiI have configured a new NPA browser access for an end customer and we cannot make it work and I don’t know what’s failing, hope any of you can help me.I have configured the reverse proxy account on Netskope tenant, as well as the Azure AD Enterprise application. On the netskope tenant I have also configured a new private application with the browser access enabled, and a real-time policy that allows the users that are also added on Azure’s Netskope application to access the private application. When we have tested the solution, by accessing the application via browser typing the “public hostname” of the private application as the URL, it is redirected to Azure to authenticate the user, and the authentication works fine.After authenticate the user, the browser is then redirected and we can see that it is finally redirected to the customer private host FQDN (which is not published on the Internet), so users can only access to the application via browser access when they are on-premise

7862
E
A
AyyanarGNew Member III
asked in Next Gen SWG
How to test Patient Zero policy is really work or not

Hi team, We have created the Patient Zero threat protection policy in my environment, before enabling rule to wider group like to do testing that rule. could you guide me if anyway to do test in Realtime?

1513
ppasseri
Netskope Employee
J
jschueleNew Member III
asked in Private Access for ZTNA
NPA Browser Access HTTP vs HTTPS

So i configured a test private application to use HTTP browser access. FYI, the the app is hosted in our AWS environment and uses an auto-generated Amazon certificate. After enabling developer tools in my Chrome browser it clearly shows the session is still using TLS encryption. The only thing visibly different by enabling HTTP vs HTTPS in the private app configuration is it adds 80 to the unique URL name. Everything else appears to be encrypted. Can you explain in more detail what the difference between configuring HTTP and HTTPS?

2163
J
U
ullasNew Member
asked in DLP
Integration of Netskope with SentinelOne XDR

Hello Team, Good Day.I'm curious to know the setps or methods for integrating Sentinelone EDR and Netskope DLP solution for the Data analysis part.As a part of my study on Endpoint Security, I feel DLP also play a major role in protection of Data at Endpoints as same as EDR. Seeking guidance here for the integration.Thank you for the help. Regards & Thanks,

6562
Gary-Jenkins
Netskope Employee
M
munster
asked in Next Gen SWG
Block Zip File Contains Executable

HiHow to block download/upload binary files in zip?How many layer of zip the engine will unzip for scanning?thank

5775
ejang
Netskope Employee

Badge winners

Show all badges
Terms & ConditionsCookie settings