Netskope Global Technical Success (GTS)
Q/A Attached to: WhatsApp
Netskope Cloud Version - 132
Objective
The objective is to cover general Q/A attached to WhatsApp
Prerequisite
Netskope Next-Gen SWG
Context
WhatsApp is a SaaS application, and many customers want to understand Netskope’s capabilities for managing WhatsApp traffic and the types of controls that can be applied.
Author Notes
WhatsApp can be accessed either through a web browser or via its native application. Throughout this document, I will use the following terminology:
- “WhatsApp Web Access” when referring to WhatsApp accessed through a web browser.
- “WhatsApp Native Application” when referring to WhatsApp accessed through the native application.
Q/A Section
Question 1: Does Netskope identify WhatsApp as a Cloud Application?
Answer: Yes. Netskope identifies WhatsApp as a Cloud Application and provides a pre-defined Cloud App Connector.
Path: Netskope Tenant UI >>> App Catalog >>> Cloud
Question 2: Is Netskope’s pre-defined Cloud App Connector for WhatsApp applicable to WhatsApp Web Access or the WhatsApp Native Application?
Answer: It applies only to WhatsApp Web Access
Question 3: What kind of controls can be applied to WhatsApp Web Access through Netskope’s pre-defined Cloud App Connector?
Answer: Using Netskope's pre-defined Cloud App Connector for WhatsApp, you can control activities such as Download and Upload.
Note: Netskope Product Management is working on a product enhancement request to add support for the Post activity as well. No release timelines available at the moment.
Question 4: Traffic destined to which domains will be counted under Netskope’s pre-defined Cloud App Connector for WhatsApp?
Answer:
Question 5: Is it possible to block complete access to WhatsApp Web using Netskope’s pre-defined Cloud App Connector?
Answer: Yes
Ref.
Question 6: Is it possible to block Download and Upload activities on WhatsApp Web using Netskope’s pre-defined Cloud App Connector?
Answer: Yes
Ref.
Question 7: Is it possible to apply DLP controls to WhatsApp Web using Netskope’s pre-defined Cloud App Connector?
Answer: Yes
Note: Customer with Extended RBI license can only apply the above controls
Ref.
Question 8: Is it possible to apply Threat Protection controls to WhatsApp Web using Netskope’s pre-defined Cloud App Connector?
Answer: Yes
Note: Customer with Extended RBI license can only apply the above controls
Ref.
Question 9: Without an Extended RBI license, can DLP and Threat Protection controls be applied?
Answer: No. An Extended RBI license is mandatory.
Question 10: Is it possible to restrict login to WhatsApp Web Access to a specific phone number?
Answer: With the current Netskope product design, this is not possible.
Interested customers may raise an IDEA with Netskope Product Management or contact their respective Accounts Team to request a Product Enhancement Request (ER).
https://community.netskope.com/topic/new
Note: IDEA can be submitted post logging in into Netskope Community
Question 11: Is it possible to apply file type controls to WhatsApp Web using Netskope’s pre-defined Cloud App Connector?
Answer: Yes. An Extended RBI license is required.
Question 12: What about controls on the WhatsApp Native Application?
Answer: The WhatsApp Native Application uses non-web ports for all activities. With the current Netskope product design, no activity controls are supported on non-web ports.
Question 13: Can we restrict end-user access to WhatsApp if they are using the WhatsApp Native Application?
Answer: Yes. This can be achieved by creating a certificate-pinned application for the WhatsApp Native Application.
Ref.
Terms and Conditions
- All documented information undergoes testing and verification to ensure accuracy.
- In the future, should any changes to Netskope best practices come to our attention, we will promptly update the documentation to reflect them.
Notes
- This article is authored by Netskope Global Technical Success (GTS).
- For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.
