Skip to main content
  • EN

Unanswered questions

27
P
proxydeployerNew Member
 Next Gen SWG
Justification log location

When creating a coaching policy, when the user enters a justification reason, where is this captured in the admin portal?

00
P
armeld
Netskope Partner
armeldNetskope Partner
 Next Gen SWG
[API] Granular URL list deployment

Hello, At the moment we don’t have any parameter available to deploy the URL list(s)(/api/v2/policy/urllist/deploy)I assume it’s the same limitation than through the WebUI: when we “apply changes” in the URL list menu, we apply all pending changes, even the ones from other admins It would be great to add the {id} of the URLs list to be deployed to avoid the automation tools to apply changes on other URL lists Thank you :)

50
armeld
Netskope Partner
rodborges
Netskope Partner
rodborgesNetskope Partner
 Private Access for ZTNA
SSH to Publisher from tenant

I think that it would be helpful to have a button (or something) to do a SSH to the publisher directly from the tenant.

60
rodborges
Netskope Partner
I
iqzsystemsNew Member
 Next Gen SWG
Ngrok Taffic is Blocking

Hi Folks,Our development team is currently facing an issue with Ngrok connectivity. I’ve attached a reference screenshot for your review.Could someone please guide us on how to allow this traffic?Appreciate your support.  

110
I
H
HemantNew Member
 Artificial Intelligence and Machine Learning
Report/Dashboard to track Source Code upload

Hi Community,I was wondering if we have an Advance Analytics Report/Dashboard to track the use of source codes. That is track the upload, Download or other activities of programme language codes. I have already tried to check for same in Netskope Library and in the Netskope dashboard gallery. 

90
H
J
jschueleNew Member III
 CASB
Netskope API Integration with Postman

I have the Netskope REST API Events v2 integration configured within Postman and queries are successful. I am wondering is there a method to limit the query by user, as well as number of days?My use case is as employees is leaving the company, I would like to just add there user name into the query, and have it pull the last 30 days of Alert, Application, and Incident logs for them, so I can export in CSV format. Thanks 

170
J
J
JohnLNew Member
 CASB
Determine block status of a URL

In working with the Netskope CASB, we’ve had analysts come up with the question “would this URL be blocked?”  I know we can go into Skope IT and do a URL Lookup to see what categories a URL is linked to and what policies “cover” it.  However, this doesn’t see to answer the fundamental question, “would it be blocked?”  There is the simple solution of, “just try it”, which will provide the answer, but this has some obvious downsides.  And it seems that the Netskope system must know if a URL is blocked or not, it will block browsing to a URL afterall.  Is there something I am missing in the interface which does this?  Or, is there a safe way to validate a URL from an analyst’s system, which doesn’t involve “ya, just try visiting a potentially malicious URL”?

200
J
Gowtham
Netskope Partner
GowthamNetskope Partner
 Additional Discussions
Netskope Data and Management plane

Hi Team, I have a few questions with Netskope Plane for customers compliance reasons. 1) on which plane is customer data stored?2) What data is available on the data plane?3) What data is available on the management plane? Is management plane available in India? Thanks in Advance

160
Gowtham
Netskope Partner
A
Netskope Partner
AllenWu
 DLP
DLP policies will not be triggered again for the files with same MD5 hash

ObjectiveHighlight the outcome that Netskope does not re-examine files with the same MD5 hash permanently. PrerequisiteThis issue generally applies to all Netskope Standard and Professional DLP modules, including, but not limited to, NGSWG DLP, Email DLP, Endpoint DLP, and more. ContextCustomers can initially upload a file that contains no detectable data identifiers. Later, they may modify only the file name to include sensitive keywords. As a result, they can bypass Netskope’s DLP detection mechanism, potentially leaking sensitive information through the file name alone. Do You Know?If the administrator has not changed the DLP policies that should have been triggered, such data leakage will not generate any forensic records or DLP violation alerts. This means the administrator will be unable to track or investigate the data leakage incident. NotesWe’ve discovered that others have already raised similar concerns. I encourage you to vote for this feature as well, as this design issue d

190
A
Netskope Partner
A
Netskope Partner
AllenWu
 Netskope Threat Protection
Anyone successfully triggered compromised credential detection?

Curious if anyone has successfully triggered compromised credential alerts in recent months.We've noticed that there have been no detections of compromised credentials for several months. We've reached out to support and the L3 team, but no test samples have been provided to demonstrate the functionality in the console.We're wondering if anyone has observed any related events that could confirm this feature is functioning as expected.

120
A
Netskope Partner
J
jjsarpiNew Member
 Next Gen SWG
Netskope Client for External Service Providers

Hello everyone,Here's my problem: we have a bastion server on AWS (Active Directory authentication) that is restricted in terms of authorized IPs (at the AWS instance level), and we need mobile service providers (smartphone access points, for example, so no fixed IPs, and we can't open the entire internet without our authentication portal being blown up in 2 seconds) to be able to connect to it.The IP ranges of our Netskope server are authorized, so my question is: Would it be possible to create a specific Netskope client that service providers could activate when they need to connect to our bastion server and then deactivate it after ? Has anyone had a similar need? I asked the AI, and they told me it's possible. Theoretically, I should create a "mobility providers" user group where we could place the email addresses of our mobility providers for enrollment, but I don't have this menu, even though I'm a "tenant admin." Our Netskope account supports SWG and NPA.Thanks in advance if you

302
bnorcutt
Netskope Partner
F
forumengNew Member
 Next Gen SWG
Netskope Private Accessの仕様について

 1. Private Appsの登録上限数について弊社の契約において、登録可能なPrivate Appsの最大数は20個で正しいでしょうか。2. Publisherの冗長化と優先順位についてイントラネット上のアプリケーションへのアクセスに高可用性を持たせるため、1つのPrivate Appに対して複数のPublisherを設置することを検討しています。この構成において、Publisherの優先順位付けや、特定のPublisherへアクセスを誘導するような設定は可能でしょうか。もし優先順位の設定ができない場合、どのPublisherがどのような基準で自動選択されるのでしょうか。（例：ユーザーから最もレイテンシが低いPublisherなど）

140
F
A
Netskope Partner
AllenWu
 DLP
When will Netskope support DLP detection on Google Workspace

At least two years ago, users were already raising similar concerns to the ones we are now requesting.However, in the App Catalog (CCI), Google Docs still only shows “discovery only” support. Google Slides and Google Sheets are not even listed in the catalog at this moment.  I sincerely believe that Google Workspace is one of the most popular enterprise ready SaaS suites.I’m genuinely curious about your thoughts on this and how your companies currently monitors or regulates user activity within Google Workspace.If you agree, let’s vote together for this feature request. 

170
A
Netskope Partner
ajit321aj
Netskope Partner
ajit321ajNetskope Partner
 Next Gen SWG
Netskope reverse proxy for AWS with AZure entra ID.

Do help in setting up reverse proxy for AWS using Azure ENTRA ID.If you have any document or Links available publicly do share. while i have stuck in executing.

120
ajit321aj
Netskope Partner
mohit9234
Netskope Partner
mohit9234Netskope Partner
 CASB
Outlook sink issue in browser

Hi Team,I’ve observed an issue where Outlook on the browser does not receive new emails when the Netskope client is enabled. However, at the same time, the Outlook desktop application continues to receive emails without any problem.This leads me to believe that the Netskope client might be interfering with mail synchronization on the browser. Could you please help investigate and provide a solution for this?

190
mohit9234
Netskope Partner
dinbarzily
Netskope Partner
dinbarzilyNetskope Partner
 Next Gen SWG
Redirecting Large File Downloads to S3 or SharePoint – Policy Implementation Help

i have this Use Case For example, if a file is larger than 200 MB, I want it to be automatically redirected and uploaded to a SharePoint or S3 bucket.How can I achieve this using Netskope?

291
ejang
Netskope Employee
T
tinomNew Member III
 Private Access for ZTNA
Printing via NPA, to an onprem printer

Searching the forums and I couldn’t find an answer. We have the need to print, to on-prem printers (via a print server), for remote users.I’ve created the Private App for the Print Server with the following portsTCP 135,137,139,445,631,9100UDP 135,137,139,445,631,9100But it doesn’t seem to be working. Although management (via mmc) of the print server is fine.Any idea?I don’t think I need to create a Private App for the printer(s) themselves, since the Print Server should be the connection manager / proxy for that traffic.

180
T
C Vinothkanna
Netskope Partner
C VinothkannaNetskope Partner
 Private Access for ZTNA
Matching Criteria limitation and Policy schedule option is not available for the Private application policies

We would like to control the Private application (Client based access) with Time bound & Geolocation for the users.The Client based Private application defined policy doesn’t have the source IP as match criteria for identifying the users Geolocation. The Private Application policy doesn’t have the policy schedule option like the Cloud app or the web access policies.We are expecting whether this can be achieved with the Netskope or addressed by Netskope in the future releases.Thank you.

272
C Vinothkanna
Netskope Partner
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
 Next Gen SWG
Alternatives - Deployment/Enrollment with UPN - Based on Postman-SCIM - Users - Groups

Alternatives - Deployment/Enrollment with UPN - Based on Postman-SCIM - Users - GroupsHello community, how's it going? Good afternoon, I hope you're all well. I have a specific case to discuss:In a scenario where we have a complete refusal to touch anything in Azure AD or AD-onprem (nothing at all, no way - no agent, no directory import, no enterprise app, no ID entry, etc., nothing at all, it's not possible because there's absolutely no option), here we already know, we use our beloved Postman to use SCIM and start generating users/groups, so to speak, "manually." Then we have the AD users with UPNs, everyone happy without touching AD but with the AD-onprem UPN users, already in the Tenant using the Postman SCIM API.We can deploy with tools like System Center, DesktopCentral, or anything else for .msi files with UPN values. Everything's OK here too. We install, the Windows users of the AD domain start, and the UPN registration and enrollment are OK, as expected. Now, here's my big que

520
MetgatzNK
Netskope Partner
W
wilsonExplorer III
 Next Gen SWG
Help.salesforce.com AI bot

Yes, I am  going to create a case, but on the chance I can shortcut the process I thought I would ask here. Has anyone developed a solution for the AI chatbot at help.salesforce.com?We know we are going to have to SSL bypass, we just having figured out what URLs yet.  

251
V
Netskope Employee
J
jamesbanNew Member III
 Next Gen SWG
socks5 proxy support

Want to migrate from onprem proxy to NS proxy for SOCKS proxy use case. Can someone help with the key consideration before migration plan? 

302
J
M
Mike BNew Member
 CASB
SSL cert decryption issues.

hi all!   We’ve been having great difficulties with Applications that are sensitive to SSL decryption.  Namely Software developer tools.    We have perhaps 2000 software devs, that could all potentially use a different dev tool, but many do use the same of course.  The issue is, the developers are either unwilling to help work with us to get the Netskope certs included into their application cert store, or they are unable to help us due to unknown OS type knowledge.    We have been charged with doing whatever we can to avoid any individualized “one off” type protections on the dev’s individual systems, as something that could be “deployed” would be very much more desirable.   We do have tamper protection enabled, so I know we’ll have to provide the NetSkope certs to whatever solution we find.     We have a few of their packages with a solution, but it usually requires us working with the user to implement.  We also have some cert pinned apps setup, and a couple DND’s setup as well.  Of

660
M
R
R3F1N3DNew Member
 Private Access for ZTNA
Netskope on Azure Virtual Desktop

Hello Netskope Community, we want to use netskope on a azure virtual desktop environment which uses FSLOGIX.But sadly we don’t get it running. We configured the installation of the client in the golden image with the multisuser modecommand:tenant=igz domain=de.goskope.com installmode=IDP mode=peruserconfig enrollauthtoken=*token*enrollencryptiontoken=*token* autoupdate=on /qnthere would be a npavdimode as well but as far as I understood this mode is only needed when all  users should use the same tunnel on the vdi.We want that the user on the vdi needs to logon to the client with his azure user, so he has his personal tunnel up with his own private app permissions. On the first logon on sessionhost A it works without any problems.If I relogon and get on sessionhost B my npa will not connecting anymore. We think that on the first logon my client genereates an encryption key to safe the client settings. And on sessionhost B this wont match anymore.we are getting the following errors in t

341
S
Netskope Employee
V
Vishal KumarNew Member
 Private Access for ZTNA
Enabling MultiFactor Authentication support for Manage Engine

It would be great if Multi Factor Authentication Integration will be provided for Manage Engine. Our corporation is using Manage Engine for multiple applications for Multi Factor Authentication. If Integration of Netskope for Manage Engine will be supported/ provided, then we would be leveraged to use the same solution for Multi Factor especially for NPA. For NPA all forum & Garner suggest for enabling multi factor for best security strategy. 

81
S
Netskope Employee
A
Axs_ISGNew Member
 CASB
Netskope clients Deployment with Passkey

Hi all, Nice to meet you! I'm currently distributing Netskope clients on company computers (both Windows and Ubuntu). I have configured the Netskope clients to Google Workspace accounts.This works fine for users without a passkey (Yubikey), but if they enable one, the client doesn't complete the login process. Has anyone else experienced this issue and found a solution?Thank you.  

403
S
Netskope Employee

Badge Winners

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings