Skip to main content
  • EN

Unanswered questions

26 Topics
N
nesi10062New Member
asked in Private Access for ZTNA
REST API V2 - create new private app issue

Hi guys I need your help, I’ve created an REST API V2 token and added the relevant endpoints as described in this doc: https://docs.netskope.com/en/netskope-help/data-security/netskope-private-access/private-access-rest-apis/after trying every combination to create a new publisher app with the Swagger UI, I get this response:{ "message": "User Portal App cannot be created.", "status": "error"}what am I doing wrong? 😤

2044
S
Netskope Employee
11 hours ago
C
crimsonNew Member
asked in DLP
Default Global DLP Policies Best Practice?

Hello all,I’m looking for recommendations/examples of global default DLP policies.Currently, my organization has a default block policy at the bottom of the tenant for categories that we’ve deemed to have no business use case (weapons, security risk, etc) or to be risky for usage (cloud storage, social media, etc.).In a similar fashion, I’d like to have DLP rules at the bottom of the tenant to act on web traffic before Netskope allows it through. I’ve done some testing with just outright blocking any activities that could be used to exfil data (upload, post, send, edit, etc.) and very quickly ran into issues, and example being background traffic for the Microsoft Edge browser being classified as upload and resulting in a large number of user notifications. I’m currently working through using app tagging to exclude any standard user applications from this policy.Given that not all websites have support for DLP, I’d ultimately like the behavior to be “If the website supports DLP, check t

70
C
11 hours ago
shboul
Netskope Partner
shboul
asked in Next Gen SWG
Adding Tailscale VPN as an Exception in Netskope Tenant

Hi,I'm working on implementing Netskope, and I need assistance with configuring an exception for Tailscale VPN. Since Tailscale operates differently from traditional VPNs, I’m facing challenges in setting it up as an exception. Has anyone successfully added Tailscale VPN as an exception in Netskope tenant?

130
shboul
Netskope Partner
3 days ago
S
secproceoNew Member
asked in Private Access for ZTNA
Creating Large Subnet for NPA Access

Team,Good morning and Happy Friday.I wanted to create a separate topic from my previous question. :)I'm creating a large NPA subnet for my networking and server teams, which will need access to the same resources.Instead of having 50 different subnets that include all servers, routers, switches, etc. I created the configuration below. I will also enable the use “Use Publisher DNS” option.  Question: Should I include the wildcard hostnames of our internal domains? Below is an example.Thanks again for your input.   

480
S
3 days ago
M
maxkorNew Member III
asked in Private Access for ZTNA
Browser access portal

Hi all,When I try to create more than one application this option is not enabled.The browser access portal does not support more than one application? I need to publish 5-6 different apps/services through the portal. How do I accomplish that? 

502
E
3 days ago
E
eranNew Member III
asked in Next Gen SWG
REST API V2 - /adem/

Hi,I’m trying to use /api/v2/adem/deviceoslist on the REST API v2.Before adding the specific permission for the endpoint - I’m getting "You cannot consume this service".After adding it, I’m getting "Unauthorized".Both times the error code is 403.How can I use this Endpoint?Thanks

1274
Mauro Marin
Netskope Employee
4 days ago
Leandro Timotio de Lima
Netskope Employee
Leandro Timotio de LimaNetskope Employee
asked in DLP
(VIDEO) Block Source Code Upload to Email

Policy:Block Upload DLP Source Code Description:In this example we will prevent sending emails (Gmail) with files that contain "source code" in their content. Video: Leandro Timotio de LimaCustomer Success ManagerLinkedin

851
A
4 days ago
E
ElTetuNew Member III
asked in Private Access for ZTNA
Apps published on User Portal

HiI’ve seen on documentation how to create a User Portal, where logged-in users can obtain a list of Browser Access (only) applications they are authorized to access and launch from the portal, but I cannot see anywhere how to select the applications that are available on this User PortalI mean, how do I choose what Private Applications can see the logged-in users on the portal? Are these applications the same for all users or the users only see the ones they are allowed to access?Thanks!

191
E
4 days ago
S
secproceoNew Member
asked in CASB
Policy Notification URL

Team,Good afternoon.How can I add a clickable URL into the “User Notification” section in Netskope? I want to direct my users to go to a specific website. I would like the website URL to show in the block pop-up policy message. I did not see an option for this in the “INSERT VARIABLE” options. I think the syntax is something like <href=https://microsoft.com>See screenshotThanks. 

121
S
5 days ago
J
jschueleNew Member III
asked in CASB
Google Team Drive not visible in API-Enable Protection

I can’t see a newly created Google team drive in API-Enabled Protection. It has the same configuration as the other drives that are visible in our tenant. I am also a Manager of the drive. I verified it is active in Google Admin as well. Any idea’s what could be wrong?

41
J
5 days ago
P
pppNew Member III
asked in Private Access for ZTNA
Problem with auto update

Hello Community,some of our clients stuck on version 114 or 117 - most updated without a problem. Has anyone encountered something similar and maybe solve it? Best regards

762
P
7 days ago
E
elawaetzExplorer III
asked in Discussions
Cloud Exchange Logshipper Syslog integration with Darktrace?

Has anyone had any luck with Syslog integration from Cloud Exchange into Darktrace?Darktrace describes the expected format like this:Darktrace expects the Netskope Web Gateway data to include the string "darktrace_netskope" followed by a JSON formatted representation of the Netskope logging. The order of fields within the JSON is not important. For example: darktrace_netskope {"src_time": "Fri Jan 1 00:10:00 2021","userkey": "user.name@company.com","dst_region": "Region","category": "Business","src_longitude": 52.2,"transaction_id": 0,"ur_normalized": "user.name@company.com","src_latitude": 0.12,"dst_longitude": 52.2,"domain": "www.example.org","dst_zipcode": "555555","access_method": "Client","src_timezone": "Global/UTC","ccl": "unknown","bypass_reason": "SSL policy matched","user_generated": "yes","dst_country": "ZZ","srcip": "198.51.100.1","site": "example","traffic_type": "Web","src_region": "Region","user": "user.name@example.org","appcategory": "Business","page_id": 0,"insertion_

48515
S
10 days ago
C
cswordNew Member III
asked in Netskope Cloud Exchange (CE)
Web Scraper Plugin for Threat Exchange not recognizing CIDR blocks to push to URL list

Can CIDR blocks be scraped and pushed to a Netskope URL list using the web scraper plugin for threat exchange? I have one setup to pull from the Proofpoint Emerging Threats IP block list (https://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt) but it seems to only push individual IPv4 addresses and ignores anything with a CIDR. 

90
C
11 days ago
T
tpimpaoNew Member III
asked in Discussions
How to Retain "Total Bytes" Visibility with DND Policy for Network Locations?

Hi everyone,I'm reaching out to see if anyone has encountered a similar situation or has suggestions for our use case.We’re using Network Locations in Netskope to control the traffic of specific servers to the internet. These Network Locations are allowed to access only a limited set of URLs, and we apply a DND (Do Not Decrypt) policy to this traffic because we don’t want to decrypt it.The challenge we’re facing is that when the DND policy is applied, we lose visibility of the "Total Bytes" metric for all connections originating from this Network Location.Has anyone dealt with this issue before? Is there a way to retain the Total Bytes visibility while keeping the DND policy in place?Thanks in advance for your insights and help!

50
T
12 days ago
S
secproceoNew Member
asked in Additional Discussions
Netskope Administration Using SSO

Team,Good evening.I followed the instructions below, but Netskope only creates a “TenantAdmin” role in the console using SSO. Is there a way to utilize the other roles created in Netskope, such as “DelegatedAdmin” and “Compliance Officer,” etc.? I can log into Netskope using an SSO account created in Azure with no problem. The issue is the account always shows up as “TenantAdmin” for the role.   Thanks. 

244
S
12 days ago
2
2022RossNew Member
asked in Additional Discussions
NS Anget not getting Sterring Config

Deployed NS agent via intune to windows 10 machines ~4000. the deployement was successful however we seen a rise in agents on machines not steering traffic as intended.Example 1​​​​​This is very random and given the users are machines are part of the right groups and OU Troubleshooting Done:1. Enough Licenses ---check 2. User part of the right group ---check3. Device sync fine with intune ---check 4, windows up to date  --------check 5. manually update version ----Done6. unstallting agent -----Done ( sometimes this fixes the issue when intune reinstalls agent) Any help will be appriciated   

170
2
13 days ago
S
secproceoNew Member
asked in Private Access for ZTNA
Creating Subnet for NPA Access

Team, Good morning, and Happy Friday! I had a meeting with my server admins and network engineers. I was told they must access hundreds of servers through RDP and network gear, such as routers, switches, and administration consoles. In addition, smaller subnets /24s may be created. My plan is to make administration of NPA easier, I was going to add a /16 or /8 subnet range in my NPA configuration that includes all the above devices. I wanted to know if anyone had any issues or limitations with NPA using large subnets. The extensive subnet ranges will only be used for two groups. All other teams will have one-to-one NPA configuration. Thanks again for your time and input.

544
S
14 days ago
Sushil007
Netskope Partner
Sushil007Netskope Partner
asked in Next Gen SWG
Trend Micro Security Agent No internet Connection error

When I have installed the netskope client, my trent micro security agent gives the error Check you internet Connection and I am not able to scan. What should I configure in my netskope tenant to allow the internet connection?

593
A
17 days ago
E
elawaetzExplorer III
asked in Private Access for ZTNA
Providing URLs in the NPA block pop-up / user notification

We have configured a User Notification / pop-up when users receive a Block action in NPA, to advice them, that they have tried to access an application which is blocked.We also coach them to raise a ticket for this on our ServiceNow system, and ideally we would like to provide a link in the pop-up, that leads users directly to our ServiceNow instance.It says in the description:“The "User Notification" template can be customized by directly editing the HTML below. Use the insert button to insert Netskope template variables. Only simple text and links are supported.”I have already learned, that apparently variables are not an option for the NPA pop-up.How about inserting URLs into the notification?I have tried various options, but it doesn’t seem to make its way into the pop-up. --Erik 

300
E
19 days ago
D
dkolb-netskope
asked in Dashboard Gallery
Advanced Analytics - Number of users with Endpoint DLP enabled versus Number of users at company

Hello,I was wondering if there is a way to see the number of users with endpoint DLP enabled versus the amount of total users in our company through the analytics dashboard?We tried to import a AD group that everyone has and then we have one for when the endpoint DLP is enabled for the user, so I was wondering if there is a way in Advanced Analytics where we can show that percentage of users enrolled versus the amount of employees?I attempted to use the devices section to create the widget based on user group and # of users, however when I do “Devices Event Date is any time” it does not populate the correct amount of users for any of the categories.Thank you in advance!

411
Aaron_Zhang
Netskope Employee
21 days ago
Michael Horne OCD
Netskope Partner
Michael Horne OCDNetskope Partner
asked in Private Access for ZTNA
NPA access without a client from branch sites

Hello,I want to clarify if the Netskope client is required for NPA access for users who are at the office.We have deployed NPA so that we can force an external public Application traffic through a publisher to get a fixed public IP address due to public IP address whitelisting requirements.  As we have IPSec tunnels connecting the site to Netskope cloud,  do we still need to have the client installed on the users device? Do we need to have browser based access configured for this to work?For Zscaler this is not a requirement. We use Zscaler ZPA for another customer to route Guest Wifi clients to the self-registration portal. The Guest traffic goes over IPsec tunnels to the Zsclaer cloud and Zsclaer send to to a ZPA connecter. This allows the routing of Guest traffic without having to send it over the customers internal network.This set up does not seem to work in Netskope.  If application trafic is sent over the IPsec traffic Netskope, it is not sent to the Publisher. It works when the

645
Michael Horne OCD
Netskope Partner
21 days ago
S
sean.clowesNew Member
asked in Next Gen SWG
Agent Deployment after macOS 15+

Hey folks, does anyone have any experience so far deploying Netskope Steering Agent to macOS in versions above 15?  Our Jamf policies that have worked for some time have stopped. Specifically the VPN configuration profile fails to deploy with the error:The ‘VPN Service’ payload could not be installed. The VPN service could not be created. This continues to work on anything below 15. Anyone needed to update their Jamf policies in order to get this to work? And by policies I mean the configuration profiles?

60226
zthompsoncr
Netskope Partner
24 days ago
J
john.gaoNew Member
asked in Cloud Firewall
Inquiry Regarding Server-Side Events and Traffic Inspection

Hello,We have quite a few joint customers who utilize your security solution. Recently, we’ve observed that some of these customers are encountering challenges with server-sent events (SSE) that we employ in our production environment for near real-time communication.Could you kindly clarify if Netskope buffers SSE streams for traffic inspection? If so, is there a recommended configuration or approach to ensure uninterrupted SSE functionality? Thank you for your assistance. Best regards,John

334
S
Netskope Employee
24 days ago
A
adebrattoNew Member
asked in Private Access for ZTNA
Breaking out printer traffic - Is this possible?

We are just kicking the tires on the Netskope Private Access functionality.  We are trying to understand if it would be possible to drop certain traffic out of the Netskope tunnel and onto the local wire.  For example, we do not want to send print jobs from the endpoints to the publishers if we can just break that traffic out of the tunnel and drop it right to the printers in office.Any advice?  We have been tinkering with on-premise / off-premise steering configs but cannot put a finger on how this could/shoudl work.

902
E
24 days ago
Lionel
Netskope Partner
LionelNetskope Partner
asked in Private Access for ZTNA
Make it Possible to Create Steering Profiles via API Call

Hello,In the context of a ZTNA project, we have the option to publish "all ZTNA applications" or only the applications necessary for the user group/OU in the Steering profile. In a ZTNA approach, it seems interesting to publish only the applications necessary for users who are members of a group.Would it be possible to obtain an API Endpoint to automate the creation and assignment of a steering profile with the necessary applications?

352
E
24 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings