Skip to main content
  • EN

Unanswered questions

23 Topics
J
jschueleNew Member III
asked in CASB
Dropbox file names missing

We had someone upload files to their personal Dropbox account and the DLP incident forensic information is missing the file names; its replaced by a hash only. Is this a known issue, or feature?

30
J
R
Ramesh Babu KNew Member
asked in CASB
macOS-specific issues with Kubernets cluster connectivity via netskope client--TLS certificate error

we are managing multiple Kubernetes clusters hosted on GCP and AWS. While everything works as expected on Widows, users on macOS are facing connectivity issues when interacting with these clusters using tools like kubectl. when the Netskope client is enabled, users are encountering this error “Unable to connect to the server: tls: failed to verify certificate: x509: certificate signed by unknown authority”Since we are dealing with critical production workloads spread across multiple clusters. we want to avoid any manual modification of kubeconfig files. Can you suggest any possible solutions to resolve this issue.

200
R
M
munster
asked in Next Gen SWG
Block Python Access Internet

HiIs there anyway to block python from access internet to download packages?Whether from VSC or cmdline, etc? thank 

273
N
AllenWu
Netskope Partner
AllenWuNetskope Partner
asked in DLP
Email Draft Activity Should be Monitored by NGSWG DLP?

Anyone concerns about Email draft can not be detected by Netskope?On App Catalog it says “Create, Edit, Post, Send” support DLP.On the Application Events, ObjectID can successfully be fetched and we also can clearly saw the activities and content through DevTools.However, DLP policy is not triggered but the action is recorded.We also created a support case on this but L3 support responded and claimed it should be related to SMTP DLP module. We are curious if anyone else has encountered this and have similar concern as we do. 

585
AllenWu
Netskope Partner
J
jschueleNew Member III
asked in DLP
Data Classification integration with Cyera

Are there any planned integrations with Cyera for data classification label usage in DLP policies?Does anyone have experience with this product and use case?Thanks

131
S
Netskope Employee
elawaetz
elawaetzExplorer III
asked in Private Access for ZTNA
How does Publisher perform App Reachability check for UDP?

Given an application in NPA, which has both TCP and UDP ports as part of the app. definition, how does the Publisher App Reachability check work?I have an application/server, which is in fact currently unreachable (due to a NAT issue in a firewall) from the defined publisher(s), which has both TCP and UDP ports as part of the app. definition in NPA.This app is incorrectly marked as Green in the portal, but if I remove the UDP ports from the app. definition, the status correctly turns Red.So, the questions is, if adding UDP ports to a private app. simply means, that the Publisher App Reachability check will automatically turn Green, as a UDP check makes no sense? --Erik    

524
elawaetz
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

863
mlestoquoy
Netskope Partner
R
rohit_chandnaNew Member III
asked in Discussions
How to Download all Marketplace Apps grouped for Teams

How to Download all Marketplace Apps grouped for Teams

100
R
steveMC
Netskope Partner
steveMCNetskope Partner
asked in CASB
WhatsApp upload and download Issues on iOS

What could be the reason why the WhatsApp application is experiencing issues when uploading or downloading files on our iOS devices, even though there are no policies in place that should restrict these actions. How can i bypass the whatsapp application on iOS devices?, i haven’t found the procees that i need for the certificate pinned application config. Thanks for your comments  

70
steveMC
Netskope Partner
D
drftordieNew Member
asked in Next Gen SWG
Netskope Slowing internet down especially Meeting Softwares (Google Meet, Slack Huddle etc.)

I have a subset of users on Mac device that are telling me that meetings (Google Meet, Slack Huddle etc.) are very choppy. I have added google.meet.com and Slack URLS to the steering domain bypass. But still having issues, I see in alot of these users logs:Tunnel down due to errorDetected Dead PeerThe below is seen the most:Tunnel down due to errorTunnel Down Due to SSL Error I have had users disable IPv6, power cycle their home modem and router, some have contacted their ISP and click renew DCHP many times. Any thoughts?

14113
D
AllenWu
Netskope Partner
AllenWuNetskope Partner
asked in Cloud Firewall
DNS Security fails to support multiple txt type records

Hi team,We noticed that DNS TXT record response originally includes multiple entries, but after processing through Netskope, only a single entry remains.Not sure if it is because on our tenant DNS Security is enabled. Does anyone also face the same issue?

593
AllenWu
Netskope Partner
W
wilsonExplorer III
asked in Next Gen SWG
Network locations information extraction

Is there a way to dump out the Network Locations and which IP address are contained in each?

251
N
M
munster
asked in Additional Discussions
Access China GOV website

HiSome of the China Gov websites have IP restriction that only allow coming China IPs.As we are connected via JP POP,  China website will deny the access.  I believe FProxy can mitigate this issue, can share China FProxy IP to use?Thank

152
M
C
ccreedNew Member
asked in Next Gen SWG
Enhancement WEB UI SWG

Under Security Cloud Platform > Traffic Steering > App Definitions add ability to Disable. currently only supports edit and delete

120
C
T
ToruIshizakiNew Member III
asked in CASB
Expansion of CASB-Controlled Services

Hi.I am a Netskope user in Japan. Currently, I am facing difficulties because the following cloud services in Japan cannot be controlled by CASB.It is causing significant inconvenience.I strongly request these services to be supported. Application Name: CryptobinURL:https://cryvia.cryptobin.jp/crypto/usr_index.action Application Name: Dokodemo Cabine,URL:https://dococab.tayoreru.com/login.html Application Name: HENNGE Secure Transfer  URL: https://transfer.hennge.com/#/login

170
T
S
steff94New Member III
asked in Next Gen SWG
Disable outgoing XFF-Header to hide public ip of clients?

Hi all, because of privacy reasons, we don’t want Netskope to pass along the X-Forwarded-For-Header containing the public IP address of our users to the Internet.. The following website tests can be used to prove that Netskope always provides this information.notskope.comBrowser Spy (gaijin.at) How can we disable this Feature of Netskope? We don’t want Netskope to pass along the original public IP of our users ...The setting for the XFF Header unser Settings → Security CLoud Plattform is set to “Do not trust” but it has obviously nothing todo with our problem: In our current on-premise proxy we had the option to remove theXFF Information: 

4924
A
S
SivaExplorer III
asked in Discussions
Report on Device Classification and Client configuration

Hi there, is there a report to list Device Classification and Client configuration values for all NSClient devices? 

322
S
E
ElTetuNew Member III
asked in Next Gen SWG
Forward Proxy vs Reverse Proxy on clientless scenario

Hi,If a customer has a corporate site where they configure Cloud Explicit Proxy as a steering method and they have clientless devices, such as servers, and the customer wants all traffic to be authenticated, what is the difference between configuring a SAML Forward Proxy account to authenticate this traffic and configuring a Reverse Proxy as a Service on the Netskope tenant? Additionally, which option is the best approach?If the clientless device is a BYOD from a third-party worker, I assume that the best option would be to use the Reverse Proxy so that they don’t need to change the proxy settings on the device. But what about servers or corporate-managed clientless devices? What kind of authentication method should be used for them, and what are the differences, if any, between these methods? Thanks! Regards

662
E
R
RobinTNew Member
asked in Private Access for ZTNA
Is re-auth feature useful in a windows corporate workstation context

Hi Netskope community,  I’ve deployed NPA for my company for several years now, with the re-auth feature enabled (every X days). This feature is leading to some difficulties in autopilot context + comes with few “bug” here and there, with complains from few users requiring to manually re-auth. While reviewing those problems, I’m challenging the utility of this feature in my context:I have Windows 11 environment, all devices hybrid joined when the auth expired, there is a popup appearing, getting the local windows auth token automatically and disappearing by itself after few seconds I have a conditional access rule in azure disabled MFA for NPA app when it comes from trusted corporate device. Nobody in the company had to enter credentials because the auth is always OK since it comes from local windows session.In this situation, for windows corporate laptop, I’m wondering if there is any reason to enable this feature from a security standpoint.I know that Netskope is recommending to acti

412
R
C
ChrisGNew Member
asked in Private Access for ZTNA
Browser access - CNAME change with authentication loop

Hi all - we have configured browser access for a private app. Everything works fine with the authentication flow with our IdP into the private app through the normal reverse proxy public host URL. We have set the CNAME of a custom host to revert to the public host URL. When we go to the custom host URL, it goes into a loop where it authenticates fine then tries to resolve to the custom host (not the public host reverse proxy URL) and creates an indefinite loop (IdP → netskope SAML → IdP). We confirmed with the SAML tracer that it indeed keeps resolving to the custom host URL and not the public host URL as intended. Anyone had the issue and hot to resolve it?

261
S
Netskope Employee
Sanjib
Netskope Partner
SanjibNetskope Partner
asked in Dashboard Gallery
AA Dashboard: Number of devices and users with no activity for last 7 days

Is it possible to generate following reports in Advanced Analytics Dashboard?List all devices that have shown no activity within the last 7 days List all users accounts with no activity within the last 7 daysExample: Out of 50 devices/users following 10 devices/users have not used Netskope for last 7 days.Devices    Users    Netskope EventsHost 1      User1                   0Host 2      User2                   0Host 3      User3                   0Host 4      User4                   0Host 5      User5                   0Host 6      User6                   0Host 7      User7                   0Host 8      User8                   0Host 9      User9                   0Host 10    User10                 0 

424
Aaron_Zhang
Netskope Employee
A
adebrattoNew Member
asked in Discussions
Client Check In - Dashboard or Advanced Analytics

Good day,Anyone know of a dashboard or advanced analytics report that can look for Netskope clients that have not checked in after X period of time? For compliance reasons, we want to make sure we are tracking down inactive devices and clients.Thanks in advance!

666
Aaron_Zhang
Netskope Employee
H
hungnn3009New Member
asked in Private Access for ZTNA
Azure Virtual desktop Published App with Netskope

Hi  We are using the ZTNA Multisession with Azure virtual desktop at the moment and all working well so far using virtual desktop. User can launch virtual desktop, netskope automatically enroll and authenticate after that and user can start access on prem app … Now instead of publishing virtual desktop we need to publish virtual application through Azure virtual desktop What we have seen is that most of the time virtual app is launched well before netskope can enroll and establish causing the virtual app (URL address) not be able to displayed/access For now when publishing virtual application we need to put the time delay in there for 1 or 2 minutes before actual URL/App is launching so to give neskope agent enough time to establish (Private access and Internet gateway) is there any better way to accomodate this task? Any script can be done to check the status of netskope before actual launching the virtual application? 

260
H

Badge winners

Show all badges
Terms & ConditionsCookie settings