Skip to main content
  • EN

CASB

This is a discussion board on Netskope’s Cloud Access Security Broker (CASB) solution that enables rapid identification and management of cloud application usage, regardless of whether they are managed or unmanaged. Prevents sensitive data from being exfiltrated from your environment.

  • 141 Topics
  • 364 Replies
141 Topics
Maho Fujino
Netskope Partner
Maho FujinoNetskope Partner
asked in CASB
how to configure MFA in the Action section of RTP

It was mentioned that the setting can be configured under Settings > Manage > Multi-Factor Authentication Integration, but in my environment, the Multi-Factor Authentication Integration tab does not appear, as shown in the screenshot below.Has there been an update?Could you let me know where I can configure this?https://docs.netskope.com/en/multi-factor-authentication/ 

30
Maho Fujino
Netskope Partner
J
jschueleNew Member III
asked in CASB
Dropbox file names missing

We had someone upload files to their personal Dropbox account and the DLP incident forensic information is missing the file names; its replaced by a hash only. Is this a known issue, or feature?

50
J
R
Ramesh Babu KNew Member
asked in CASB
macOS-specific issues with Kubernets cluster connectivity via netskope client--TLS certificate error

we are managing multiple Kubernetes clusters hosted on GCP and AWS. While everything works as expected on Widows, users on macOS are facing connectivity issues when interacting with these clusters using tools like kubectl. when the Netskope client is enabled, users are encountering this error “Unable to connect to the server: tls: failed to verify certificate: x509: certificate signed by unknown authority”Since we are dealing with critical production workloads spread across multiple clusters. we want to avoid any manual modification of kubeconfig files. Can you suggest any possible solutions to resolve this issue.

320
R
M
Melinda_LeeNew Member III
posted in CASB
Netskope Client change tenant

Hello, I have 2 tenants, 1 for QA and 1 for production. Has anyone figured out a way to switch clients from one tenant to another without having to uninstall and reinstall? especially on a MAC system?

4336
bnorcutt
Netskope Partner
steveMC
Netskope Partner
steveMCNetskope Partner
asked in CASB
WhatsApp upload and download Issues on iOS

What could be the reason why the WhatsApp application is experiencing issues when uploading or downloading files on our iOS devices, even though there are no policies in place that should restrict these actions. How can i bypass the whatsapp application on iOS devices?, i haven’t found the procees that i need for the certificate pinned application config. Thanks for your comments  

90
steveMC
Netskope Partner
T
ToruIshizakiNew Member III
asked in CASB
Expansion of CASB-Controlled Services

Hi.I am a Netskope user in Japan. Currently, I am facing difficulties because the following cloud services in Japan cannot be controlled by CASB.It is causing significant inconvenience.I strongly request these services to be supported. Application Name: CryptobinURL:https://cryvia.cryptobin.jp/crypto/usr_index.action Application Name: Dokodemo Cabine,URL:https://dococab.tayoreru.com/login.html Application Name: HENNGE Secure Transfer  URL: https://transfer.hennge.com/#/login

200
T
J
jschueleNew Member III
asked in CASB
Can I have an internal app configured as both a private and cloud app

I want to be able to route an internal app through NPA, but also be able to apply DLP policies to it. An example would be to present an authorized employee with a user consent notification popup at login. Or a DLP policy to prevent PHI from being posted, etc. Could this be done by creating both a Private App and a Cloud App using the same domain name?

201
V
Netskope Employee
J
jschueleNew Member III
asked in CASB
Monitoring for Google Gemini enabled in Workplace

I currently have DLP policies that monitor and control users interacting with the Google Gemini app/website. They now want to enable the Gemini feature in Google Workspace, which would then use the embedded feature in Google Meets, Google Docs, etc. Is there a way to monitor this additional traffic with Netskope? FYI, I already have the CASB API connector for Google Workspace, but its limited to Gdrive and Gmail..

622
J
valkir40
Netskope Partner
valkir40Netskope Partner
asked in CASB
Fallback Action Alerts

Hi We have observed a significant increase in Fallback Action alerts, and are currently investigating ways to address this issue. These alerts primarily seem to be related to Microsoft updates. Advanced File Scanning has been disabled, yet we are still seeing Fallback Action alerts.As part of our troubleshooting, we have attempted to create steering bypass and allowed traffic related to Windows updates, but these steps have not resolved the issue.Any suggestions or further insight into addressing this would be greatly appreciated. 

3421
V
Netskope Employee
gian202b
Netskope Partner
gian202bNetskope Partner
posted in CASB
CloudApp Policies - application unavailable

This use case is about Generative AI, but I've run into this issue with other categories as well.  I create a Generative AI block and then I'm adding exceptions as needed by the business. The issue is that I have to create a URL list for those applications that do not show in "CloudApp" options. (ie. Grammarly).  What I don't understand is why is the app not available? I get that Netskope can't distinguish between activities within the app, but when I look at the Alerts and logs it's clearly categoring the URL to the application. I'm now forced to create a rather large URL list to allow Gram

3217
rodolfobsantos
Netskope Partner
J
jschueleNew Member III
asked in CASB
REST API V2 failing for Sumo Logic

Sumo Logic has a Netskope app that can be installed and configured to use API v2 to ingest logs. I created a new token in Netskope as described in the doc. I then installed the Netskope app and created the collector in Sumo Logic. It shows healthy, but there is an error saying “ 403 - error connecting to endpoint, received 403: {“message”: You cannot consume this service”}. Any ideas whats wrong? 

751
ejang
Netskope Employee
J
jpark124New Member III
posted in CASB
v2 API documentation parity to v1 available endpoints

Hello, New to Netskope.  I was able to find the v1 API documentation https://docs.netskope.com/en/netskope-platform-rest-apis.html as well as the v2 API documentation https://<tenant>.goskope.com/apidocs/?include_beta_routes=0 We're looking to utilize the versatility of the v2 permission based token.  I didn't see the v1 API endpoints available in the v2 API documentationexample: https://docs.netskope.com/en/manage-quarantine-files.html for v1 wasn't in the v2Is there additional documentation that I'm missing?  or is there a roadmap/timeline to when the v1 endpoints will be available in v2? Thank you for your time and insight into this. -Han Park

37811
N
Leandro Timotio de Lima
Netskope Employee
Leandro Timotio de LimaNetskope Employee
posted in CASB
(VIDEO) How to alert the end user accessing a cloud application with a poor reputation.

Policy:User Alert Poor ReputationDescription:Example of how to create a rule to alert the end user about the use of a cloud application with poor reputationVideo:Leandro Timotio de LimaCustomer Success ManagerLinkedin

1441
A
S
secproceoNew Member
asked in CASB
Policy Notification URL

Team,Good afternoon.How can I add a clickable URL into the “User Notification” section in Netskope? I want to direct my users to go to a specific website. I would like the website URL to show in the block pop-up policy message. I did not see an option for this in the “INSERT VARIABLE” options. I think the syntax is something like <href=https://microsoft.com>See screenshotThanks. 

571
S
J
jschueleNew Member III
asked in CASB
Google Team Drive not visible in API-Enable Protection

I can’t see a newly created Google team drive in API-Enabled Protection. It has the same configuration as the other drives that are visible in our tenant. I am also a Manager of the drive. I verified it is active in Google Admin as well. Any idea’s what could be wrong?

91
J
Leandro Timotio de Lima
Netskope Employee
Leandro Timotio de LimaNetskope Employee
posted in CASB
(VIDEO) Block Cloud Applications Using Custom TAG

Policy:Block Tag Deny Description:Policy to block cloud applications using custom TAG Video: Leandro Timotio de LimaCustomer Success ManagerLinkedin

700
Leandro Timotio de Lima
Netskope Employee
J
jschueleNew Member III
asked in CASB
CASB API for Slack exclude specific private channels

Hi, I have CASB API DLP policies configure for Slack and want to know how to exclude (whitelist) specific private channels from inspection? We are in the process of renaming our private channels with a keyword to let us know it approved to hold certain type of data. Right now its all or nothing..

190
J
aplaza
Netskope Employee
aplazaNetskope Employee
published in CASB
Feeling the weight of managing SaaS and GenAI security? It doesn’t have to be complicated.

Streamline your security operations with a converged SaaS security solution built for today’s challenges.  Join Melody Nouri, Netskope's Product Marketing Manager, and Dev CK, Director of Product Management, as they reveal how Netskope's unified Cloud Access Security Broker (CASB) can help you navigate the ever-expanding SaaS and GenAI landscape with ease, offering the tools needed to streamline your security operations. Key Topics Covered: Identify gaps in current SaaS security tools and understand their limitations. Explore the essential capabilities needed to transform SaaS security with a unified CASB approach. Watch a live demo of key use cases showcasing Netskope’s LLM-powered risk categorization, helping you stay ahead of emerging threats and reduce alert fatigue. Discover how Netskope can enhance your security posture while boosting productivity. To learn more about how to stay ahead of threats without slowing productivity, register for our upcoming webinar below:   Simplify

240
aplaza
Netskope Employee
K
kdibbleNew Member III
asked in CASB
Internal collaborator count on API Data Protection policies

We are creating policies based on thresholds of internal users that are collaborators of a document. In doing that, we’ve ran into the following issues: 1.) We’ve seen in the alerts section that a lot of our alerts associated have a collaborator count that is different from what we see in the incidents section. For example, here you can see 135 collaborators. However if you look at the actual incident, this is only shared with 4 individual users, and a group of 64 users. That doesn’t add up to 135. We are seeing this for lots of alerts/incidents. 2.) In our DLP profiles, we have a a configuration for various exposure definitions. We are wondering if the following is an AND or OR in terms of the internal/external and # of internal users. The reason we ask is that it seemed that we were triggering on internal documents that are shared with less than 100 users. Let us know if there is any further clarification needed here.  

170
K
N
ngriffinNew Member
asked in CASB
Netskope API Programming with PowerShell - Getting 401 Unauthorized Error Code

I’m attempting to connect to the Netskope API via a PowerShell script. I’ve created an access token with the appropriate endpoint configured. The script is receiving a 401 response which indicates that I’m not authorized yet. I’m not sure how to present the access token in the header. Is there any documentation or examples on how to authorize to the API endpoint I’m trying to connect to? Here’s a snippet of my PowerShell script:# Variables$netskopeAccessToken = "<insert_access_token_here"$type = "File, Folder"$filter = "(app eq 'OneDrive') and (exposure eq 'External')"$netskopeUri = "https://<domain>.goskope.com/api/v2/ui/casbapi/inventory/resources"# API Header$headers = @{ 'Authorization' = 'api_key' + $netskopeAccessToken 'Accept' = 'application/json'}# API Body$body = @{ type = $type filter = $filter}$response = Invoke-RestMethod -Uri $netskopeUri -Method Get -Body $body -Headers $headers 

2261
N
R
rmessinaNew Member III
posted in CASB
netskope installation for windows with scripted registration

We've been using netskope for a while here at the company and we have difficulty with the issue of the employee registering with the client. After reading the installation documentation on Linux, I was able to create a script for direct installation with the user's registration and it was a success. I researched a lot looking for a script to do the same in windows and I didn't find anything.Has anyone in the community been through this situation and managed to solve it? Remembering that we don't use AD.Thanks so much for everyone's help.

35814
G
J
jschueleNew Member III
asked in CASB
Netskope Client and Digital Guardian Agent Compatibility

Hi, anyone have experience running both the Netskope Client and Digital Guardian (DG) DLPE Agent at the same time? We are using Netskope for CASB and NPA. The DG Agent will have the WIP feature enabled for web traffic visibility. Thx

420
J
R
rohit_chandnaNew Member III
asked in CASB
How to block Upload and download whatsapp activity in Virtual desktop machines

How to block Upload and download whatsapp activity in Virtual desktop machines.We have already attempted to create a policy based on Cloud app, Custom app, and Category, but we are still unable to block upload/download activities on WhatsApp using the PAC file on the WVD machine.Any suggestion much appreciated.

980
R
J
jschueleNew Member III
asked in CASB
Jamf and Secure Enrollment

We use Jamf to deploy the NS Client to our Mac fleet. After enabling the new secure enrollment features (Settings > Security Cloud Platform > MDM Distribution > Secure Enrollment) and generating the access tokens, it appears we add them to our existing Jamf deployment policy. If I am reading the directions right the tokens must be renewed, and the Jamf policy updated, every 90 days by default. Is that correct? 

3642
ns-ssalomon
Netskope Employee
D
DbellNew Member
posted in CASB
Netskope Client disabled by User, how to enable via command line?

Migrated Content

27775
C

Badge winners

Show all badges
Terms & ConditionsCookie settings