Skip to main content
  • EN

Unanswered questions

143 Topics
thiagofc
Netskope Partner
thiagofcNetskope Partner
asked in Next Gen SWG
Crashes after Netskope Upgrade - Release 120

Anyone having issues and crashing on Windows NSClient after that was upgrade the Tenant and the Golden Release to the Lastest?We have a customer the MP is located on DE, the users are claiming a lot about crashes in Windows, to the point where it was necessary to force the equipment to be shut down or reset. We are wondering if the problem started after the Tenant Update was made, they were in the release 119 last week, and now they have migrated to 120.I realized that the agent from NSClients with setup to the Last Golden Release right now is the Lasted Release = 120, very interesting… 

0
thiagofc
Netskope Partner
4 hours ago
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
asked in Next Gen SWG
Netskope - Azure AD - IDP Integration - Enroll & Reauth

Netskope - Azure AD - IDP Integration - Enroll & Reauth Private APPsHello community, hope all is well.I have a doubt with a certain point:In an environment was configured IDP mode against Azure-AD in an environment where users have office 365.1.- The agent installation is done in IDP mode and the IDP mode operates correctly, it enrolls the user, to the user based agent.Now the situation is as follows as it is very but very common and typical in office365/Azure-AD environments users already have their office 365 account logged in, either in your outlook client, in teams, onedrive on the web itself, then what happens when the installation process was performed in IDP mode and the enrollment occurs, this process was practically automatic since the user was already logged in to office 365/azure-ad as discussed above.I understand this is an issue of Office 365/Azure-AD and not of Netskope itself, now what was done to request the credentials, was to unblock the user from all access where

3
MetgatzNK
Netskope Partner
1 day ago
M
munster
asked in Next Gen SWG
URL Shortened Coaching

HiI have RTP shortened url category with coaching.When user access the shortened url, a coaching page is shown and user required to click ACCEPT to proceed to actual webpage.By clicking ACCEPT, how can I corelated the actual url with shortened url?You can use https://tinyurl.com/4trp238r for testingThank

2
N
2 days ago
MetgatzNK
Netskope Partner
MetgatzNKNetskope Partner
asked in Additional Discussions
Hub - Spoke gateway - Dynamic Public IP - Spokes-branchs

Hub - Spoke gateway - Dynamic Public IP ( Spokes-branchs )  Hello community, good afternoon.  I have a question regarding the sdwan borderless wan part of Netskope. Understanding a Hub-Spoke architecture Where I have one or a few SDWAN Gateway in Hub mode and other Spoke branches with their corresponding gateways. My doubt is the following. If I have Spoke/BranchOffice sites, where eventually there is a need for some other connection from the other branches to some particular resource of that branch, I would understand that it is not necessary that my Gateway - Spoke sdwan does not have static public IP, but dynamic either by 4G/5G or some high quality ADSL connection and / or public IP links Dynamics, for the Gateways / Spoke would not be critical to have static public IP where if in the case of the Hub if you have preferably static Public IP and / or port forwarding to the IP of the gateway-sdwan. Hub, but if it could allow and set up the tunnels and according to the policies would a

1
MetgatzNK
Netskope Partner
2 days ago
S
sam47New Member
asked in Private Access for ZTNA
Dropped connection as no Publisher is active

HiWe are unable to access website, checked alerts and found connection was dropped as no publisher is active.

0
S
3 days ago
J
jschueleNew Member III
asked in Private Access for ZTNA
NPA Browser Access Session Limits

After enabling Browser Access for an app behind NPA, is there a way to enforce session limits? Thx

0
J
5 days ago
M
maxkorNew Member III
asked in Private Access for ZTNA
Devcie classification unmanaged

Hi All, My device classification policy matches when all three criteria are met...There are a lot of users complaining that they can't access ZTNA, so I checked and they're unmanaged...I fixed it by pushing an update to the client and restarting the service/computer. It's probably not possible to do it every few days for users what is can be the root cause of pull users out from device classification policy.   

2
M
5 days ago
J
JasNew Member
asked in Private Access for ZTNA
Configuration Failed to load

Hello,So we have installed Netskope client on one of our endpoints and during the enrollment process we got an error “ Configuration failed to load” Can anyone let us know the root cause of the problem and its workaround.Thanks. 

2
J
6 days ago
farhan
Netskope Partner
farhanNetskope Partner
asked in Next Gen SWG
Netskope client Citrix supported version

Hi team,Please let us know if the Netskope client is compatible on this citrix version or not.Citrix Virtual Apps and Desktops 7 2203 LTSR CU3 - Virtual delivery Agent.Citrix Workspace Environment Management Agent. 

1
ejang
Netskope Employee
7 days ago
prajakta.yadav
Netskope Partner
prajakta.yadavNetskope Partner
asked in Next Gen SWG
Cert-pinned application

Hello,Netskope added the cert-pinned applications under steering configuration exception by default.Can we get a list of these applications added by NS?

4
Rohit_Bhaskar
Netskope Employee
9 days ago
Swapnil Sonkar
Netskope Partner
Swapnil SonkarNetskope Partner
asked in Next Gen SWG
india ID Adhaar Block Failed By DLP

Hi i tried several time India ID prof Adhaar card image and the Adhaar number also is not getting  blocked in upload as well as in text message. i also tried by Regex thand also its not Blocking.Kindly please help on this?

1
ejang
Netskope Employee
9 days ago
J
jschueleNew Member III
asked in DLP
sync_item_content not in activity list

I see application events pertaining to Cloud Storage with an Activity of sync_item_content, but I can’t filter on that activity, or see it in the list of all activities. Am I missing something?What I would like to do is use it in a DLP policy to identify files being synced to personal cloud storage instances. Thx  

0
J
13 days ago
dinbarzily
Netskope Partner
dinbarzilyNetskope Partner
asked in Private Access for ZTNA
How to create device classification based on Netskope private app registry value

hey all,How to create device classification based on Netskope private app registry value? attached screenshot i want to monitor on these value when private app is connected value device will be managed . thanks

0
dinbarzily
Netskope Partner
18 days ago
T
Netskope Employee
tpommetNetskope Employee
asked in Community News & Announcements
Netskope at Fal.Con Next Week - Sept 16-18 - Aria Resort & Casino

Netskope is heading to Fal.Con next week Sept 16-18 Aria Resort & Casino. Stop by booth #1606 to catch the latest demos on Netskope One highlighting a number of use cases as well as Netskope/CrowdStrike integrations and many of our other partners.If you are attending, it’s a great way to speak in person with one of our SMEs - David Willis, VP Technology Integrations; Gary Jenkins - Principal Solutions Architect - Technology Integrations; Fabio Rosa, Principal Solutions Architect; Damian Chung, BISO and Andy Horwitz, SVP of Global Partner Eco-System and many others.Catch one of our sessions:Tuesday, Sept 17th at 1:30pm - Theater 2Security Controls for Gen AI from Cloud to Endpoint presented by David Willis, Vice President Technology Integrations, NetskopeThursday, Sept 19th at 12:30pm - NGS24Unifying the SOC: Integrated Protection with SSE, Email, and Next-Gen SIEM Panelists:•Wayne Cross, Director Cyber Security and Infrastructure, Borden Ladner Gervais LLP (BLG)•Damian Chung, BISO,

0
T
Netskope Employee
23 days ago
J
jschueleNew Member III
asked in CASB
Netskope Client and Digital Guardian Agent Compatibility

Hi, anyone have experience running both the Netskope Client and Digital Guardian (DG) DLPE Agent at the same time? We are using Netskope for CASB and NPA. The DG Agent will have the WIP feature enabled for web traffic visibility. Thx

0
J
24 days ago
N
nesi10062New Member
asked in Private Access for ZTNA
Intermittent failure to access private apps from the Office

When some users are at the office, every now and then they become unable to access private apps Chrome simply hangs.When that happens, if they disconnect and reconnect from Wi-Fi, the issue is fixed, until it breaks again after a few hours/minutes.This doesn't happen when they are working from home.

3
S
25 days ago
N
nadkickNew Member III
asked in Additional Discussions
Identify mode of enrollment (UPN vs IdP)

Hello,Is there a way in the tenant to identify on how a user has been enrolled (UPN vs IdP)? In preparation for mitigating Netskope’s enrolment vulnerability, we need to find a way to identify users/devices that are affected as they have been enrolled using UPN mode (we starting with UPN and switched to IdP for new subsidiaries). In addition, this might be a way to identify devices that should not be there (aka exploited the vulnerability).Thank you!Regards,Nadja

1
ns-ssalomon
Netskope Employee
1 month ago
S
steff94New Member III
asked in Next Gen SWG
Disable outgoing XFF-Header to hide public ip of clients?

Hi all, because of privacy reasons, we don’t want Netskope to pass along the X-Forwarded-For-Header containing the public IP address of our users to the Internet.. The following website tests can be used to prove that Netskope always provides this information.notskope.comBrowser Spy (gaijin.at) How can we disable this Feature of Netskope? We don’t want Netskope to pass along the original public IP of our users ...The setting for the XFF Header unser Settings → Security CLoud Plattform is set to “Do not trust” but it has obviously nothing todo with our problem: In our current on-premise proxy we had the option to remove theXFF Information: 

1
Rohit_Bhaskar
Netskope Employee
1 month ago
prajakta.yadav
Netskope Partner
prajakta.yadavNetskope Partner
asked in Additional Discussions
Remediation profile

Hi, We want to integrate CrowdStrike for EDR with Netskope using the link- “https://docs.netskope.com/en/integrating-crowdstrike-for-edr/#integrating-crowdstrike-for-edr-1”As per the document I understand that Netskope pushes the malware hash file to CrowdStrike, endpoints are checked to see if that malware hash file exists. If so, Netskope retrieves the identity of the endpoints and captures the details in a Skope IT alert. If no endpoints have the malware hash file, Netskope publishes the Indicators of Compromise IOC into CrowdStrike’s Custom IOC repository.  But I have few questions here as- 1. When NS pushes malware hash file to CS, if there is any active detection occurs we will get alert on NS under remediation alert type. But will we get the detection alert on CS for the same? For this same scenario, when we are getting the remediation alert on NS, it will be block from NS. But will it be block from CS also and in this case will it be added under IOC of CS? 

0
prajakta.yadav
Netskope Partner
1 month ago
R
rohit_chandnaNew Member III
asked in CASB
How to block Upload and download whatsapp activity in Virtual desktop machines

How to block Upload and download whatsapp activity in Virtual desktop machines.We have already attempted to create a policy based on Cloud app, Custom app, and Category, but we are still unable to block upload/download activities on WhatsApp using the PAC file on the WVD machine.Any suggestion much appreciated.

0
R
1 month ago
dinbarzily
Netskope Partner
dinbarzilyNetskope Partner
asked in Private Access for ZTNA
slow connection - private app

How to Troubleshoot on private app access for slow connection or unaccusable applications for users (randomly) ? We don’t have DEM advanced license .What kind of tools or options do I have in order to troubleshoot on a slow connection to private apps? I am familiar with :The NPA Troubleshooter Tool Export logs from the client when slowness for private applications occurs.

0
dinbarzily
Netskope Partner
1 month ago
dinbarzily
Netskope Partner
dinbarzilyNetskope Partner
asked in Private Access for ZTNA
private app access slow connection

How to Troubleshoot on private app access for slow connection or unaccusable applications for users (randomly) ? We don’t have DEM advanced license .What kind of tools or options do I have in order to troubleshoot on a slow connection to private apps? I am familiar with :The NPA Troubleshooter Tool Export logs from the client when slowness for private applications occurs.

0
dinbarzily
Netskope Partner
1 month ago
Deepak_InfoTru
Netskope Partner
Deepak_InfoTruNetskope Partner
asked in Private Access for ZTNA
Publisher not able to access private applications but can telnet

We are having an issue where user can`t access a private app via publisher and we have checked all the configuration is correct in Netskope Tenant and the same has been confirmed with Netskope Support engineering as well.However, we can telnet the same application on the same port from publishers itself.Both publishers and private applications are on the same subnet.  When we run a TCPdump on the publishers we can see SYN packet from user`s machine is reaching to the publisher, but publisher is not getting SYN-ACK packet from the private applications. There is no firewall blocking it as publishers and private apps are in the same subnet. Let me know what your thoughts on this. 

3
Deepak_InfoTru
Netskope Partner
1 month ago
1
11qwerty22New Member
asked in DLP
Detection of DLP post in Windows 11 / Copilot

Has anyone been successful in making the DLP work while using preview Copilot in the Windows 11? I don’t see the traffic alerts/page events in the SkopeIT. My assumption is it is using msedgewebview2.exe websocket which means Netskope is not capable of doing MiM inspection? Thanks.

6
1
1 month ago
M
MelanieWhiteNew Member
asked in Security Posture Management
Netskope and iCloud Private Relay

I have difficulty downloading and installing apps from the InTune Company Portal app on my iPad mini, which of course has Netskope enabled.  There are error codes but they don’t point to InTune.  Looking through debug logs, I see mask.icloud.com and mask.apple-dns.net as well as cloudapp.azure.com.I have added the above values in an SSL Do Not Decrypt URL list without success.  I have also created a Network Location Profile using the IP address for the host fef.msua04.manage.microsoft.com.  I used that in a destination location steering config, (made sure I updated the local client before testing) but none of this has resolved the issue.Additionally - after adding mask.icloud.com and apps.apple.com (the latter did not stay)...I WAS able to install ONE app while at work.  Went home for more testing to prove the issue resolved - but everything thereafter failed...whether at home or back at work the next day.I’m at a loss and need some help finding a solution.  Thank you for any help.

0
M
1 month ago

Badge winners

Show all badges
Terms & ConditionsCookie settings