Skip to main content

- - Articles Overview
Learn
Product Release Notes
Groups
Events
Support

EN

Total Economic Impact Study: The Business Impact of Netskope SSE

2 days ago

Home
Search

Unanswered questions

173 Topics

Recently active

Most views Most replies

IftesamNetskope Partner

asked in Additional Discussions

Difference between Advanced debugging logs and logs collected from tenant.

I recently encountered the below mentioned issue and would like to have better understanding of the same.I have collected advanced debugging logs from the users system, where in the option of “Start” for outer capture was disabled, still I collected the logs and those were as expected.However when I tried collecting the same logs from the tenant for that user, I observed the logs were different and some of the captures which were present in the previously collected advanced debugging logs from the system were missing in the logs collected from the tenant.Attaching the screenshots for reference:Events triggered for the date and time : 2024/07/17 14:47:00.213Logs collected from the tenant :Advanced debugging logs collected from the device for the same time :Need to understand why the captured even for the same timestamp are different.

EmmanuelVNew Member III

asked in Next Gen SWG

Network Location automation

Hi all,Is there a way to create/modify/delete Network Location with API?I already do it with csv but i did not find it with API.Thanks for your help

CarlosNew Member III

API Data Protection Policy - User Profiles

Seeking some assistance with API Data Protection Policies.Looking to leverage ‘User Profiles' so that API policies will only trigger on a subset of users. From what I can see, user profiles only allows importing the full user identity. Is there a way to set up domain wildcards so that it trigger for all users of a domain e.g. *@domain.com? Note: Currently using Classic API data protection policies for M365.Is this something that will be addressed with the Nextgen API?

cgrahamNew Member III

Usage report for Generative AI category includes Adobe?

As per title. Wondering why Adobe products have been included in the AI usage report. Adobe CC is categorised as “Web Design” and Adobe document cloud is “Business Process Management”.

nadkickNew Member III

asked in Additional Discussions

Switch from UPN to IdP mode

Hello,Driven by Netskope’s enrolment vulnerability, we want/need to move our Windows endpoints from UPN to IdP mode. Does anyone know if there is a way to use a script to change the existing configs of the already installed agents? Before we plan to uninstall and re-install all 10k agents, we would like to elaborate if there is another way by eg deleting/modifying an existing config file.Appreciate any feedback. Thanks,Nadja

asked in Next Gen SWG

Difference between Category vs Application

Hi NetskoperI will like to allow Reddit for “BROWSE and DOWNLOAD” and not worry about URL updated when change.In SWG, I can use Application=Reddit, but there was no “BROWSE” If I will to use custom Category, I can see “BROWSE and DOWNLOAD” but I have to keep monitoring if the URL has change. I like to know what is the difference between Category vs Application? When should I use them effectively?thank

EmmanuelVNew Member III

asked in Next Gen SWG

Real-time Protection Policy Hits

Hi all,I would like to see the stats of our policies. I have a widget of Real-time Protection Policy Hits showing the top policies but as i will deploy shortly CFW, i want to check if a policy is used or not.How can i get the stats for each policies i have (report in NAA, other) ?ps: when i click on “View all active policies” it redirects me to a blank page https://mytenantforexample.goskope.com/ns#/inspectionThank

TKO3SonsNew Member III

asked in Discussions

Issues with Advanced Analytics pulling 90 days

Has anyone else ran into issues with the Advanced Analytics attmpting to pull informaiton for 90 days? I’m attempting to pull reports for the previous quarter, but i’m running into charts that appears to be missing information going back that far.

yunsNew Member

asked in Security Posture Management

Establish an access control system(s) : IAM Policies with Effect as Allow and Action with sts:AssumeRole for CrossAccountArn

hello,in reagrds to this CSPM findings “Establish an access control system(s) : IAM Policies with Effect as Allow and Action with sts:AssumeRole for CrossAccountArn”which is being flag for AWSControlTowerExecution, based on some research i have dont the issue is bc this roles have an excessive permissions, however this are default roles created by controltower, hence how can we work this finding out to remediate ? or is this a false positive as im being advice bc control tower has a principal in it limits who can use the role.however I wanted to bring it to the community to see if some has a better understanding of this and can help me understand if it is in fact a FP or how can this be remediated effectible?

QuanNetskope Partner

asked in Cloud Firewall

Can borderless WAN hardware be purchased locally in china?

Is there any local distributor/partner in china mainland? Can customers in china place the local order to these distributor/partners (if available) for Netskope services?

mazamNetskope Partner

asked in Next Gen SWG

How to block Microsoft copilot by going through bimng.com

Please share any solution to block copilot by going to bing.com and clicking copilot. Adding copilot.microsoft.com/ to custom block list does not work, Blocking AI category does not work. No application event or page event indicating any other specific URL that can be added to custom category.

asked in Next Gen SWG

Group Sequence of Event

HiHow do you group to view the sequence of event for web access?Eg, Access to website, aaa.com which redirect to okta.com and redirect to bbb.com, etc ……If you can image it will be like “Wireshark Follow TCP Stream”. I can view go thru each event but is inefficient and can missed out detail. thx

AlfaBaneExplorer III

asked in Next Gen SWG

HTTP Header Guidance

We’ve yet to implement any HTTP Header elements and policies but have a use case where I believe this is the best solution. However, I wanted to get some guidance.Use Case: Dept wants a specific account (ex. - staff1@email.com) to only be able to access 3 sites (I’ll use examples): newssite1.com newssite2.com one.teamspace.com All other sites are to be blocked completelyWe tested this by:building out URL List + Custom Category for the above list of URL’s creating a RTP policy to allow the sites via Custom Category for staff1@email.com creating a RTP policy to block remaining categories for staff1@email.com placing this well below the allow policy With the nature of news sites, though, everything feeding the content for the site (content servers, ads, other domains, etc) were blocked and unusable. Since “browse” for the rest of the web needs to be blocked, RBI wasn’t an applicable solution. I’ve since set the “block” policy to “alert” to glean more information on the web categories

Edison_VaLbuenaNetskope Partner

asked in Next Gen SWG

Rename groups in postman

Hello,An integration was carried out between Netskope and Postman version 11.1.25, groups and users are already synchronized, but it does not allow the names to be modified once they are created. You are trying the following json: POST /groups/{groupId}/rename { "name": "New group name" } When the change is made it does not throw any error, on the contrary it sends 200 OK. Thank you

asked in Discussions

Issue Password for Single User to Uninstall Agent

HiWe have users in “All Users” group in Client Configuration. They are password protect from client installation.However, I have to issue the password to 1 user to uninstall password which means all other users can also uninstalled with this password. Is there anyway just generate 1 time password for that user to uninstall without having to share the actual “password ptotect client uninstallation”? thx

osintphNew Member

asked in Netskope Cloud Exchange (CE)

Netskope to Syslog vs Storage Bucket

First of all, sorry if that sounds like a stupid question, but i did try to find a straight forward way online, and, all points to certain configurations via Cloud Exchange Plugins.Here is my szenario, it actually is fairly simple.I need to integrate a customers Netskope Environment (and no, I have no other details at this point as this is still exploratory) to a SIEM, the SIEM is not one of the big names. In most other cases, we have done Integrations either via an API that is available, via Storage Buckets, or, usually the most straight forward, via simple Syslog.Given this, aside from this link: - are there other ways for Syslog integration? I found this one somewhere but i do not think this is still or ever was applicable? 2.1.1 Log in to the Netskope Admin Console:• Open your web browser and navigate to the Netskope Admin Console.• Enter your credentials to log in.2.1.2 Navigate to Settings:• Once logged in, go to the Settings menu, usually found on the left sideba

monikaNetskope Partner

Risk management

Can we set policy like before sending the sensitive data across the other domain get a approval notification to manager , and if manager approves it then user can share the data??

wilsonExplorer III

asked in Discussions

Page events source CIDR Field question: Multiple CIDR

Within AA page events, is there a way to have multiple CIDR? I heard that commons work, I heard that you can add the field multiple times, but neither seems to work for me. Screenshot attached.

jschueleNew Member III

Classic vs Next Generation API Data Protection for Google Drive & OneDrive

I was reading the support articles for migrating to NextGen connectors for Google Drive and OneDrive and notice some features we currently use will no longer be supported (e.g. Disable Print & Download, Sharing Content to More than X External Collaborator, REST API Support, etc). Can you tell me why, or is coming at a later date? Thx

erwingdavidNew Member

asked in Inside Netskope

syslogs on fowarder

can i send syslog to a forwarder who is on premise?

rohit_chandnaNew Member III

asked in Next Gen SWG

Browser extensions

Could we manage browser extensions (including installation and execution) using NGSWG for MS edge and firefox?

Jais100rbhNetskope Partner

Issue with WhatsApp QR Code Scanning When Netskope Client is Enabled

An issue I have encountered with WhatsApp QR code scanning on my device when the Netskope client is enabled. The problem seems to be consistent and reproducible under the following circumstances:When attempting to scan the WhatsApp Web QR code using the mobile app, the camera opens but fails to recognize or scan the QR code. I am able to log into one WhatsApp account by scanning the QR code, but when attempting to log into another WhatsApp account on the same device using a different QR code, the scan fails, and I am unable to complete the login process. This issue occurs only when the Netskope client is active. Disabling the Netskope client allows both the QR code to be scanned without any problems.Given the critical role that both Netskope and WhatsApp play in our daily operations, this issue is impacting productivity.I would appreciate any assistance or guidance you can provide to resolve this matter. If you need any additional information or would like me to perform further diagnos

barrycuda72New Member

asked in Additional Discussions

Cloud Exchange - Business Rules

Using the LogShipper to send logs to my SIEM. One application in particular is very chatty and the logs it sends are not that important. I am trying to create a business rule that will exclude that application from sending logs. Right now, I have the default rule and one additional rule: Query: NOT (app Like "My App"). This does not work, do I have to use Regex for this? Documentation for business rules are really poor.

cswordNew Member III

asked in Discussions

Exporting platform audit log data with AA

I’m curious if Netskope platform audit log data can be exported using Advanced Analytics or put on the road map? It would be helpful to generate reports for events such as Create/Delete Admins, tunnel modifications, and other events. This arose from a recent PCI audit (looking forward into PCI 4.) where logs related to VPN access must be reviewed (and eventually ingested into SIEM or similar platform to search for anomalies) and immediately searchable up to 90 days and stored for 1 year. Thanks!

jschueleNew Member III

Shared Google Drive not listed

A user has shared a Google Drive with me and an external partner. In Google Admin it shows as Active and I am a manager. The external partner has access, but I do not see it in API-Enabled Protection → Google Drive → Teams, or when I try to create a new DLP policy and choose subset of Team Drives. It is configured identically to the other shared drives in the list. What could be preventing it from being visible? It meets all the criteria outlined in the config guide…https://docs.netskope.com/en/netskope-help/data-security/api-data-protection/api-data-protection-for-google-drive/configure-google-drive-for-api-data-protection/#google-team-shared-drive-support

1
2
3
4
5
6
7

Page 4 / 7

Badge winners

Rohit_Bhaskarhas earned the badge Simplified Cocial Chamption
Rohit_Bhaskarhas earned the badge Simplified Engagement Enthusiast
Rohit_Bhaskarhas earned the badge Simplified Collaborator
mkoyfmanhas earned the badge Retired Alumni
Saif-Chaudhryhas earned the badge Retired Alumni

Show all badges

Powered by Gainsight

Terms & Conditions Cookie settings

Sign up

Already have an account? Login

Login with SSO

Employee Partner

or

Username *

E-mail address *

I am a... *

First Name *

Last Name *

Company Name *

Job Title *

Country Name *

State/Province *

Topics of Interest… *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

If you haven't already registered, now is a good time to do so. After you register, you can post to the community, receive email notifications, and lots more. It's quick and it's free! Create an account

Login with SSO

Employee Partner

or

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK

Explore

Why Netskope
Products
Solutions
What is SASE?
What is SSE?
What is Zero Trust?
What is a Next Gen SWG?
What is a CASB?

Resources

Blog
Netskope Community
Resource Library
Security Defined
Technical Support
Threat Labs
Trust Portal
URL Lookup

Company

About Netskope
Careers
Events
Executive Briefing Program
Newsroom
Our Customers
Partners
Partner portal

Contact

Contact Us
1-800-979-6988
2445 Augustine Dr. 3rd floor, Santa Clara, CA 95054

Privacy Policy
Vulnerability Disclosure Policy
Terms of Use
CCPA Compliance Statement

© 2024, All rights reserved.