Skip to main content
  • EN

Additional Discussions

Welcome to our Additional Discussions Forum! Here, you can engage in lively conversations and exchange ideas on a wide range of topics that go beyond the scope of our product forums

  • 191 Topics
  • 431 Replies
191 Topics
G
gdaNew Member
asked in Additional Discussions
how to unenroll netskope agent

Hello, we have disabled unenroll from client UI through client config. But in some instance need this operation  [eg: IT accidentally enrolled while troubleshooting under user's windows session]. Wondering if this can be done from CLI or manually deleting user level files. Thanks for your help

80
G
C
ccreedNew Member
asked in Additional Discussions
M365 Vs Azre Security Groups

I have a question around Azure Groups. Does Netskope Support the ability to Apply inline Security Polices Against “M365 Groups” or is it only Entra “Security Groups”   

50
C
ppasseri
Netskope Employee
ppasseriNetskope Employee
posted in Additional Discussions
The Netskope Intelligent SSE Platform and the Threats Outlined in the Verizon 2022 DBIR

I have read the Verizon 2022 DBIR and I could not help but noticing that some of the risks outlined in the document can be mitigated by our platform. More in detail:   At page 8, the report states that "Error continues to be a dominant trend and is responsible for 13% of breaches." This finding is heavily influenced by misconfigured cloud storage. While this is the second year in a row that we have seen a slight leveling out for this pattern, the fallibility of employees should not be discounted.” This is obviously something that we can mitigate with our CSPM. An additional important message is that remote access plays an important role for attackers. More in detail (page 14) "remote access established by the attacker is important and that there are a slew of ways of creating that persistent access. In terms of vectors, these align well with the notion that the main ways in which your business is exposed to the internet are the main ways that your business is exposed to the

631
S
S
steff94New Member III
asked in Additional Discussions
New netskope SpeedTest speedtest.goskope.com - download speed not correct?!

Dear Netskope-Team,First of all: I love the new SpeedTest Feature! SpeedTestBut I think something is not working correctly yet, because the download speed is always below 1 Mbit/s.Here my results:POP: DUS1Test ID: ypjx-9133686Latency: 11.20 msJitter: 2.75 msDown Speed: 0.25 mbpsUp Speed: 538.54 mbpsHTTP version: 1.1 Could you please help? Anybody in the community with the same problem? Best regards

2010
S
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Single Sign-On BWAN / ZTNA

Hello,In the context of a project involving the Netskope agent (ZTNA) and BWAN, we use the SAML Forward proxy component to authenticate users on first login (and periodically).Today, users are subject to two authentication procedures. As a result, the user experience is degraded.Is it possible to have a single sign-on between the two Netskope / BWAN agents?

1294
J
cubiaz55
cubiaz55New Member III
asked in Additional Discussions
Netskope Performance Troubleshooting Tool - Windows

Hey-o Community! Was recently using the Netskope Performance t/s tool for Windows and I noticed that part of the testing that takes place appears to be ping attempts to a POP gateway, however if ICMP is inherently not allowed to POP’s then why is this even part of the testing? Unless someone knows if “No-Pinging” is just something an organization can choose to NOT have while others do? Looking to get clarity to also understand just how useful this tool actually is.  

1442
S
Netskope Employee
M
munster
asked in Additional Discussions
Access China GOV website

HiSome of the China Gov websites have IP restriction that only allow coming China IPs.As we are connected via JP POP,  China website will deny the access.  I believe FProxy can mitigate this issue, can share China FProxy IP to use?Thank

412
M
B
b-radNew Member
asked in Additional Discussions
User Login Reporting

Looking for advice on how to accomplish the following:Identify all SaaS Apps that our users are logging into, and identify the user groups (departments, OUs, etc.) that are logging in for each SaaS App Key information that we are looking for on the App is the following: App Name URL URL Category CCI Available - Is the application in CCI? Here is what I tried that was inefficient, lack of quality data, etc.:I tried querying web_tx for URI containing /Login/ I then queried App Names against CCI via API Lastly, I manually looked up Apps in CCI to try and find users with traffic associated to the app (the issue here is that a browse to the site would show up and not indicative of a user login)Any advice and/or direction would be appreciated. (Was not sure the appropriate category to put this question into - thus chose Additional Discussions)

441
S
Netskope Employee
fsoffia
Netskope Partner
fsoffiaNetskope Partner
asked in Additional Discussions
Netskope Client in multi user environment how many tunnels ?

HalloIn a multi user environment the Netskope Client does a tunnel to Netskope POP for each logged in user or is there a unic tunnel for all users ?Thanks

562
fsoffia
Netskope Partner
carlosValderr
Netskope Partner
carlosValderrNetskope Partner
asked in Additional Discussions
Bug Client Configuration peruserconfig?

Hi,We are experiencing an anomalous case on machines where we have installed the NS Client in peruser config mode. We have noticed that when a user with higher client config privileges (disable client, etc.) logs in and subsequently another user connects to the same machine, the second user inherits the client configuration privileges of the user with higher privileges. Only by restarting the service is the client configuration correctly re-established for the user. We noticed this because user 2 now has permissions to disable the client. We have tested it in v123. Estamos experimentando un caso anómalo en máquinas donde tenemos instalado el NS Client con el modo peruser config. Nos hemos dado cuenta que cuando un usuario con mayores privilegios de configuración del cliente (deshabilitar cliente, etc.) inicia sesión y posteriormente otro usuario se conecta a la misma máquina, el segundo usuario hereda los privilegios de configuración del cliente del usuario con mayores privilegios. Sol

1203
N
W
wilsonExplorer III
asked in Additional Discussions
Newtonsoft.Json.xml

For the Netskope Adaptor software, we recently became aware of “Newtonsoft.Json.xml” - does anyone know what the functionality of this is?  Up to now, we have center our attention and double-check our backups for “nsADImporterConfig.json”  

311
V
Netskope Employee
T
Netskope Partner
TED_tsukaharaNetskope Partner
posted in Additional Discussions
Request：A notification when the Secure Enrollment token is nearing its expiration date.

【Background】With the activation of Secure Enrollment, authentication tokens must be renewed each time before their expiration. Engineers need to confirm the pre-expiration notifications for the tokens and carry out the necessary tasks to address any identified issues. 【Request】We request a notification when the Secure Enrollment token is nearing its expiration date.We would also like the ability to configure how many days in advance the notification is sent.  

1382
M
D
dkolb-netskope
asked in Additional Discussions
Secure Enrollment Authentication Token Question

Hello,I was wondering if the Secure Enrollment Authentication Token gave a warning before expiring?I could not find any documentation that said there would be any banners or notifications when the token is about to expire so I wanted to know if there is some sort of warning for it.Thanks in advance!

3052
M
mfaris
Netskope Employee
mfarisNetskope Employee
posted in Additional Discussions
Netskope IPSec Integration Guide with Amazon Web Services

The attached guide illustrates how to configure Netskope IPSec tunnels with your AWS environment for egress traffic filtering and monitoring. This integration provides unmatched visibility and real-time data and threat protection for the traffic leaving your AWS environment. Steering your AWS egress traffic to the Netskope cloud allows you to apply full capabilities of the Netskope platform, including cloud network  firewall, web content filtering, data leakage and threat protection, third-party risk protection, etc.

2150
mfaris
Netskope Employee
A
apezuelaNew Member III
asked in Additional Discussions
Debug device classification

Hi,In our organization, we have different device classification profiles created. Is there any way to observe how these classifications are applied? Sometimes we encounter issues where a device is no longer recognized despite theoretically meeting the classification rules we created, and we have no way of seeing which requirement it has failed to meet.Best regards,

801
S
Netskope Employee
EwanBrown
Netskope Partner
EwanBrownNetskope Partner
asked in Additional Discussions
New Phone and need to reset OTP for Netskope Community

HelloI have a new phone and I need to add my OTP (Google Authenticator) to this phone.  I was hoping it could be done by resetting it through my profile setting.  IT’s not jumping out at me.  Anyone got some instructions or a link on how to re-add my Google Authenticator. Many thanks.

140
EwanBrown
Netskope Partner
sumit_infotrust
Netskope Partner
sumit_infotrustNetskope Partner
posted in Additional Discussions
Required parameters are missing in SAML request

Getting the following error from netskope on submitting Rpaas authentication.  I can see that SAML auth is a success and correct parameters are being passed Required parameters are missing in SAML request. Please contact your admin for assistance.Error code - 0x0008301  <samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_34c3170d-c2d5-4641-a500-efff1156aab1" Version="2.0" IssueInstant="2023-05-19T23:49:59.463Z" Destination="https://saml-infotrust.goskope.com/saml2/http-post/sso/y27jeqzXClz3pXsFW9HY/2" > <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">https://sts.windows.net/3e1da75a-6547-480c-900d-575bebac3e46/</Issuer> <samlp:Status> <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /> </samlp:Status> <Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion"

3721
E
S
secproceoNew Member
asked in Additional Discussions
Netskope Administration Using SSO

Team,Good evening.I followed the instructions below, but Netskope only creates a “TenantAdmin” role in the console using SSO. Is there a way to utilize the other roles created in Netskope, such as “DelegatedAdmin” and “Compliance Officer,” etc.? I can log into Netskope using an SSO account created in Azure with no problem. The issue is the account always shows up as “TenantAdmin” for the role.   Thanks. 

414
S
2
2022RossNew Member
asked in Additional Discussions
NS Anget not getting Sterring Config

Deployed NS agent via intune to windows 10 machines ~4000. the deployement was successful however we seen a rise in agents on machines not steering traffic as intended.Example 1​​​​​This is very random and given the users are machines are part of the right groups and OU Troubleshooting Done:1. Enough Licenses ---check 2. User part of the right group ---check3. Device sync fine with intune ---check 4, windows up to date  --------check 5. manually update version ----Done6. unstallting agent -----Done ( sometimes this fixes the issue when intune reinstalls agent) Any help will be appriciated   

530
2
D
dkolb-netskope
asked in Additional Discussions
Netskope CA certificates

Does Netskope notify us when their signing CA certificates are changed/updated? Recently we have had an issue where we needed to manually upload the certs for a tool and I was curious if Netskope notifies all of their customers when this certificate is renewed or being changed.Let me know if anyone has experienced the signing CA’s changing/updating and if Netskope notifies anyone.Thanks in advance!

2601
D
M
mattwalkerNew Member
asked in Additional Discussions
IDP Install for non-domain joined sytems

Hi All!  Hoping someone can help pin down an issue we're running into with deployment of the Netskope Client via IdP. FWIW - We're using Okta as our IdP.  IdP Install reference: https://docs.netskope.com/en/netskope-help/netskope-client/netskope-client-deployment-options/deploy-netskope-client-via-idp/We have the Okta account set up in Settings>Security Cloud Platform>Forward Proxy SAML. We also have the .msi file on the computer. We run the following install script:  msiexec /I NSClient.msi tenant=**MASKED** domain=goskope.com installmode=IDP mode=peruserconfig autoupdate=on /qn After running the script, the Netskope client installs, and the user is prompted to enter in their Okta credentials. The user completes Okta authentication (we can see the successful log within Okta) but then the Netskope enrollment window flashes to a "Hmmm... can't reach this page" error.   Has anyone here run into a similar issue or know how

7084
S
Netskope Employee
dburgess23
Netskope Partner
dburgess23Netskope Partner
asked in Additional Discussions
Admin having issues

Anyone have this issue? 

250
dburgess23
Netskope Partner
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
Device Classification: Verification of Certification Chain, Expiration, CRL

Hello,In the context of implementing a Device Classification profile, we can verify the presence of a certificate. Currently, the presence of a certificate is sufficient to meet the criteria.Is it possible to extend this verification by checking the certification chain, expiration date, etc.

871
Rohit_Bhaskar
Netskope Employee
Lionel
Netskope Partner
LionelNetskope Partner
asked in Additional Discussions
On-Premise Detection

Hello,In the context of On-Premise detection, it is currently possible to use a DNS/http request. To validate detection, it is necessary to depend on the tested resources.The slightest network disturbance can lead to poor detection of the user's location Is it possible to use the Public IP to identify the user's locality? This IP is visible to the agent.

2721
Rohit_Bhaskar
Netskope Employee
A
AlfaBaneExplorer III
posted in Additional Discussions
Single mode -vs- Multi-user mode installation

Hello all,    I wanted to see if anyone had any use-case, pros/cons, intent, etc information in terms of client installations. Beyond "Optional parameter. Use this parameter when installing in a multi-user system", I've been unable to find any additional information or context.    For reference, when we deploy the client or provision devices, the Netskope client MSI is installed with a mode=peruserconfig parameter. While our devices can be used by any user in our environment with appropriate access, there are next to no devices that are intended to be regularly used by multiple users.    I just wanted to reach out and see what your experiences have been. 

26055
monika
Netskope Partner

Badge Winners

Show all badges

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings