Skip to main content
  • EN

Unanswered questions

16 Topics
A
adebrattoNew Member
asked in Next Gen SWG
Real-Time Protection Policy Review

Our organization must review our policies to determine if the existing policies are still valid and need to be retained.  Problem we are having is that “allow” rules do not appear to log anywhere.  Short of turning all “allow” rules to be “alert” rules, does anyone have a way to validation if a web access rule is actually being used and needed to be retained?

654
A
5 hours ago
Michael Horne OCD
Netskope Partner
Michael Horne OCDNetskope Partner
asked in Private Access for ZTNA
NPA access without a client from branch sites

Hello,I want to clarify if the Netskope client is required for NPA access for users who are at the office.We have deployed NPA so that we can force an external public Application traffic through a publisher to get a fixed public IP address due to public IP address whitelisting requirements.  As we have IPSec tunnels connecting the site to Netskope cloud,  do we still need to have the client installed on the users device? Do we need to have browser based access configured for this to work?For Zscaler this is not a requirement. We use Zscaler ZPA for another customer to route Guest Wifi clients to the self-registration portal. The Guest traffic goes over IPsec tunnels to the Zsclaer cloud and Zsclaer send to to a ZPA connecter. This allows the routing of Guest traffic without having to send it over the customers internal network.This set up does not seem to work in Netskope.  If application trafic is sent over the IPsec traffic Netskope, it is not sent to the Publisher. It works when the

141
N
6 hours ago
J
john.gaoNew Member
asked in Cloud Firewall
Inquiry Regarding Server-Side Events and Traffic Inspection

Hello,We have quite a few joint customers who utilize your security solution. Recently, we’ve observed that some of these customers are encountering challenges with server-sent events (SSE) that we employ in our production environment for near real-time communication.Could you kindly clarify if Netskope buffers SSE streams for traffic inspection? If so, is there a recommended configuration or approach to ensure uninterrupted SSE functionality? Thank you for your assistance. Best regards,John

70
J
9 hours ago
S
sean.clowesNew Member
asked in Next Gen SWG
Agent Deployment after macOS 15+

Hey folks, does anyone have any experience so far deploying Netskope Steering Agent to macOS in versions above 15?  Our Jamf policies that have worked for some time have stopped. Specifically the VPN configuration profile fails to deploy with the error:The ‘VPN Service’ payload could not be installed. The VPN service could not be created. This continues to work on anything below 15. Anyone needed to update their Jamf policies in order to get this to work? And by policies I mean the configuration profiles?

39223
S
14 hours ago
C
cjcarewNew Member
asked in Discussions
V2 API Pagination

Hi Folks,Apologies if this is a simpleton question, however it’s doing my head in. I have the api working and am able to use the dataexport endpoint to extract malware alerts. My issue is that I only receive one record in the response and I know there is 115 in the time period of the search. The record I receive is the very first in the results. I can confirm that by checking in the console.My (hopefully simple) question is what is the format of the api query to iterate through the results so that the full list can be retrieved? I’ve tried ?operation=next&index=(the index name supplied in the first query). However that returns an empty response.I’d appreciate any guidance.Regards,Campbell

953
R
1 day ago
J
jschueleNew Member III
asked in Discussions
Netskope Client for iPad

I saw the article on support for the Netskope Client on iPad. When I use the email invite though there is link for the iOS Client, only the iOS Profile. I see a note about this issue, but don’t understand what it wants me to do. How do I enable the default email template? I’m sure I changed it years ago, but can’t remember where.. Can someone clarify how I get it visible in the email invite?– If you are unable to see the link to download Netskope Client for iOS in the email invite, use the default email template that includes the link to download Netskope Client for iOS. 

472
R
1 day ago
K
KrugerNew Member III
asked in Next Gen SWG
instagram messaging

Have been looking to see if there is a way to block instagram messaging posting.. but allow users to view the messaging window. It looks like all the available activities have not targeted the messaging feature.Has anyone ever had success in allowing viewing of the messaging page but not allow users to post messages?Thanks

80
K
1 day ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

382
D
Netskope Employee
8 days ago
T
TwoodsNew Member III
asked in Discussions
Policy Schedule alerting or Reporting

We have Policy schedules set on several policies to force re-evaluation of access periodically.  Do others use these?   Has anyone created an Advanced Analytics report or alert that can be set to proactively notify you when these time windows are coming due?

60
T
9 days ago
Michael Horne OCD
Netskope Partner
Michael Horne OCDNetskope Partner
asked in Discussions
Creating reports / widgets that filter based on Tunnels

Hello all,I am looking at creating reports to help identify bandwidth utilisation for customer sites.  We want to identify what applications and sites are generating the most traffic.  If the previous product it was simple to filter based on a location (which is a way to reference the IPsec tunnels used to connect a site to the cloud).  Netskope seems to be less location focused.  Ideally I would like to filter a widget or Dashboard using a filter that is a list of the IPsec Tunnels.  Is there a simple way to do this?I can filter based on countries, but the customer has multiple sites in some countries. The source locations reference towns or cities that do not match up with the customer site. In France the even have multiple sites in the same city. Filtering by IP CIDR allows only filtering by a single CIDR network. It is not possible to filter based on a defined network location. The only solution I have at the moment is the source egress public IP address.  This works as it clearly

60
Michael Horne OCD
Netskope Partner
9 days ago
Leandro Timotio de Lima
Netskope Employee
Leandro Timotio de LimaNetskope Employee
asked in DLP
(VIDEO) Block Source Code Upload to Email

Policy:Block Upload DLP Source Code Description:In this example we will prevent sending emails (Gmail) with files that contain "source code" in their content. Video:  

280
Leandro Timotio de Lima
Netskope Employee
10 days ago
dburgess23
Netskope Partner
dburgess23Netskope Partner
asked in Additional Discussions
Admin having issues

Anyone have this issue? 

80
dburgess23
Netskope Partner
11 days ago
J
jschueleNew Member III
asked in CASB
CASB API for Slack exclude specific private channels

Hi, I have CASB API DLP policies configure for Slack and want to know how to exclude (whitelist) specific private channels from inspection? We are in the process of renaming our private channels with a keyword to let us know it approved to hold certain type of data. Right now its all or nothing..

50
J
11 days ago
N
nraghuv1New Member III
asked in Next Gen SWG
Google Suite Applications Review

Hello Community,  I am writing to formally request a comprehensive list of all applications incorporated within the Google Suite. As we are currently assessing our permissions policy, it is imperative to identify which applications should be authorized for business use and which should be subject to restrictions. Our existing Google Suite policy grants access to all global users; however, we aim to implement restrictions on specific applications, including YouTube, for designated user groups. Having a detailed enumeration of these applications will greatly assist us in making well-informed decisions regarding access permissions. Thank you in advance for your assistance with this matter.

160
N
15 days ago
D
dkolb-netskope
asked in Additional Discussions
Netskope CA certificates

Does Netskope notify us when their signing CA certificates are changed/updated? Recently we have had an issue where we needed to manually upload the certs for a tool and I was curious if Netskope notifies all of their customers when this certificate is renewed or being changed.Let me know if anyone has experienced the signing CA’s changing/updating and if Netskope notifies anyone.Thanks in advance!

260
D
18 days ago
M
maxNew Member
asked in Security Posture Management
Feature Request: Separate mechanism/process to permit REST API calls being made to the Netskope tenant

Administrative access to the Netskope tenant is restricted by the Allowlist, meaning administrators can only access the tenant if they are connecting from an IP address listed in the Allowlist. The Allowlist not only controls administrative access, but we have also noted that when attempts are being made to establish REST API connections or calls to the tenant these calls will fail if the IP address it is originating from is not on the Allowlist.There are instances where we want API calls from IP address ranges but at the same time we do not want administrative access to the tenant being granted to these IP addresses.Case in point. We are working with a Netskope SME to implement the Netskope Codeless Connector which sits in Microsoft Sentinel. The connector ingests Netskope logs directly into Sentinel via REST API calls. Sentinel does not have its own IP address range so it uses the Azure Public  IP Addresses to make those API calls. These calls will fail because the IP address which t

110
M
23 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings