Skip to main content

- - Articles Overview
Learn
Product Release Notes
Groups
Events
Resources

EN

Netskope Cloud 127.0.0 Documentation Available Now!

1 month ago

Welcome to the Netskope Community

4,656 Topics
3,015 Replies
6,979 Members

Getting Started

Product Learning Path

Video Library

Knowledge Center

Submit an Idea

Product Forums

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure

Next Gen SWG

Next Generation Secure Web Gateway (Next Gen SWG)

Cloud Access Security Broker

Confidently adopt cloud applications and services – without sacrificing security

Security Posture Management

Data Loss Prevention (DLP)

Your one stop shop for all things Netskope Data Loss Protection.

Netskope Cloud Exchange (CE)

Private Access For ZTNA

Private Access For ZTNA

AI and ML

Artificial Intelligence and Machine Learning

Recent Discussions

Recent activity
Help others
Categories

MetgatzNKNetskope Partner

Alternatives - Deployment/Enrollment with UPN - Based on Postman-SCIM - Users - Groups

Alternatives - Deployment/Enrollment with UPN - Based on Postman-SCIM - Users - GroupsHello community, how's it going? Good afternoon, I hope you're all well. I have a specific case to discuss:In a scenario where we have a complete refusal to touch anything in Azure AD or AD-onprem (nothing at all, no way - no agent, no directory import, no enterprise app, no ID entry, etc., nothing at all, it's not possible because there's absolutely no option), here we already know, we use our beloved Postman to use SCIM and start generating users/groups, so to speak, "manually." Then we have the AD users with UPNs, everyone happy without touching AD but with the AD-onprem UPN users, already in the Tenant using the Postman SCIM API.We can deploy with tools like System Center, DesktopCentral, or anything else for .msi files with UPN values. Everything's OK here too. We install, the Windows users of the AD domain start, and the UPN registration and enrollment are OK, as expected. Now, here's my big que

pjapardhanaNetskope Employee

Netskope Academy / Training Discussions

Smarter Training Registration Is Here!

We’re excited to introduce a simpler, more transparent way to register for training at Netskope Academy! You can now self-register for courses using training vouchers, which means no more forms or back-and-forth. Just purchase training, receive your voucher, and enroll in minutes. Any existing, non-expired training credits you already have will automatically convert into vouchers. We’ve created a short video to show you how the new system works. See the new process in action: We’re confident this update will make your learning experience faster and easier.Questions? Contact us at training@netskope.com

wilsonExplorer III

Help.salesforce.com AI bot

Yes, I am going to create a case, but on the chance I can shortcut the process I thought I would ask here. Has anyone developed a solution for the AI chatbot at help.salesforce.com?We know we are going to have to SSL bypass, we just having figured out what URLs yet.

jforrestNetskope Employee

Mastering Zero Trust & SASE: Key Insights from Our 5-Part Series

Hello Community!We're thrilled to announce the completion of our comprehensive 5-part series designed to guide you through the intricate world of Zero Trust and maximizing your Netskope Security Service Edge (SSE) investment. This series has been crafted to provide you with actionable insights, strategic context, and a clear understanding of how Netskope empowers your security journey.In a landscape where "never trust, always verify" is paramount, understanding your traffic, applications, users, and data is critical. This series breaks down complex concepts into digestible, interlinked posts, offering value for new adopters and seasoned professionals alike. Why Read the Full Series? By exploring all five posts, you'll gain a holistic perspective on: Foundational Concepts: How Netskope steers traffic and the core role of its client. Deep Visibility: Unlocking granular context for informed security decisions. Strategic Adoption: A phased approach to implementing Zero Trust, consideri

jforrestNetskope Employee

Categorizing Applications: Risk Management through Trust Zones

Executive Summary: Trust Zones – Your Key to Zero Trust, Visibility, and GRC In today's dynamic threat landscape, securing your enterprise goes beyond simple "allow" or "block" decisions for applications. It demands nuanced, risk-adaptive controls. Trust Zones provide a structured framework to categorize applications based on their inherent risk, management oversight, and data criticality. This approach is fundamental to a mature Zero Trust strategy and critical for robust Governance, Risk, and Compliance (GRC).Netskope dramatically simplifies and empowers this process: Centralized Risk Intelligence: Our App Catalog (over 84,000 cloud apps!) provides deep risk insights and enables custom tagging, allowing you to align apps with your organizational Trust Zones. Dynamic Policy Enforcement: These App Tags feed directly into real-time policies, enabling dynamic, granular controls that adapt without constant policy change control. Unified Risk Orchestration: Risk Exchange integrates App

mkoyfmanNetskope Employee

Configuring CLI-based Tools and Development Frameworks to work with Netskope SSL Interception

If Netskope is deployed inline (for CASB or Web), some CLI tools will not work because they use certificate bundles distributed with those tools (i.e. Python distribution, for example), and they do not access system certificate store where Netskope client installs Netskope root CA. The guidance below will allow you to enable those tools to seamlessly work with Netskope SSL interception.In order for these tools to trust Netskope-signed certificates, they need to be configured to trust Netskope Certificate Authority (CA). This is typically accomplished by setting certain environment variables to point to Netskope CA to allow for smooth SSL operation.The variables need to be set to point to the following files that contain Netskope CA:On a Mac: /Library/Application Support/Netskope/STAgent/data/nscacert.pemOn Windows: %ProgramData%\Netskope\STAgent\data\nscacert.pemFor example to set REQUESTS_CA_BUNDLE variable on a Mac to point to the Netskope root CA, you can run this command:export REQ

jamesbanNew Member III

socks5 proxy support

Want to migrate from onprem proxy to NS proxy for SOCKS proxy use case. Can someone help with the key consideration before migration plan?

Mike BNew Member

SSL cert decryption issues.

hi all! We’ve been having great difficulties with Applications that are sensitive to SSL decryption. Namely Software developer tools. We have perhaps 2000 software devs, that could all potentially use a different dev tool, but many do use the same of course. The issue is, the developers are either unwilling to help work with us to get the Netskope certs included into their application cert store, or they are unable to help us due to unknown OS type knowledge. We have been charged with doing whatever we can to avoid any individualized “one off” type protections on the dev’s individual systems, as something that could be “deployed” would be very much more desirable. We do have tamper protection enabled, so I know we’ll have to provide the NetSkope certs to whatever solution we find. We have a few of their packages with a solution, but it usually requires us working with the user to implement. We also have some cert pinned apps setup, and a couple DND’s setup as well. Of

jforrestNetskope Employee

Implementing Zero Trust: The Inline Adoption Funnel

Implementing Zero Trust is a journey, not a single destination. The Netskope Zero Trust Inline Adoption Funnel provides a structured, progressive approach to gradually implementing Netskope's powerful security capabilities. This strategy is typically broken into the following key pillars or stages, building complexity and control as you gain confidence and visibility, while clearly defining roles and supporting compliance:Successful security programs, and the adoption of advanced models like Zero Trust, fundamentally rely on the harmonious interplay of people, process, and tooling. When one or more of these critical components is missing or misaligned – whether it's a lack of skilled personnel, undefined workflows, or unoptimized technology – the efficacy of your security initiatives, and thus the successful adoption of this vital Zero Trust model, will be severely hampered. This funnel, therefore, emphasizes the comprehensive engagement required across your organization.1. Threat Pill

R3F1N3DNew Member

Private Access for ZTNA

Netskope on Azure Virtual Desktop

Hello Netskope Community, we want to use netskope on a azure virtual desktop environment which uses FSLOGIX.But sadly we don’t get it running. We configured the installation of the client in the golden image with the multisuser modecommand:tenant=igz domain=de.goskope.com installmode=IDP mode=peruserconfig enrollauthtoken=*token*enrollencryptiontoken=*token* autoupdate=on /qnthere would be a npavdimode as well but as far as I understood this mode is only needed when all users should use the same tunnel on the vdi.We want that the user on the vdi needs to logon to the client with his azure user, so he has his personal tunnel up with his own private app permissions. On the first logon on sessionhost A it works without any problems.If I relogon and get on sessionhost B my npa will not connecting anymore. We think that on the first logon my client genereates an encryption key to safe the client settings. And on sessionhost B this wont match anymore.we are getting the following errors in t

MetgatzNKNetskope Partner

Alternatives - Deployment/Enrollment with UPN - Based on Postman-SCIM - Users - Groups

Alternatives - Deployment/Enrollment with UPN - Based on Postman-SCIM - Users - GroupsHello community, how's it going? Good afternoon, I hope you're all well. I have a specific case to discuss:In a scenario where we have a complete refusal to touch anything in Azure AD or AD-onprem (nothing at all, no way - no agent, no directory import, no enterprise app, no ID entry, etc., nothing at all, it's not possible because there's absolutely no option), here we already know, we use our beloved Postman to use SCIM and start generating users/groups, so to speak, "manually." Then we have the AD users with UPNs, everyone happy without touching AD but with the AD-onprem UPN users, already in the Tenant using the Postman SCIM API.We can deploy with tools like System Center, DesktopCentral, or anything else for .msi files with UPN values. Everything's OK here too. We install, the Windows users of the AD domain start, and the UPN registration and enrollment are OK, as expected. Now, here's my big que

wilsonExplorer III

Help.salesforce.com AI bot

Yes, I am going to create a case, but on the chance I can shortcut the process I thought I would ask here. Has anyone developed a solution for the AI chatbot at help.salesforce.com?We know we are going to have to SSL bypass, we just having figured out what URLs yet.

jamesbanNew Member III

socks5 proxy support

Want to migrate from onprem proxy to NS proxy for SOCKS proxy use case. Can someone help with the key consideration before migration plan?

Mike BNew Member

SSL cert decryption issues.

hi all! We’ve been having great difficulties with Applications that are sensitive to SSL decryption. Namely Software developer tools. We have perhaps 2000 software devs, that could all potentially use a different dev tool, but many do use the same of course. The issue is, the developers are either unwilling to help work with us to get the Netskope certs included into their application cert store, or they are unable to help us due to unknown OS type knowledge. We have been charged with doing whatever we can to avoid any individualized “one off” type protections on the dev’s individual systems, as something that could be “deployed” would be very much more desirable. We do have tamper protection enabled, so I know we’ll have to provide the NetSkope certs to whatever solution we find. We have a few of their packages with a solution, but it usually requires us working with the user to implement. We also have some cert pinned apps setup, and a couple DND’s setup as well. Of

R3F1N3DNew Member

Private Access for ZTNA

Netskope on Azure Virtual Desktop

Hello Netskope Community, we want to use netskope on a azure virtual desktop environment which uses FSLOGIX.But sadly we don’t get it running. We configured the installation of the client in the golden image with the multisuser modecommand:tenant=igz domain=de.goskope.com installmode=IDP mode=peruserconfig enrollauthtoken=*token*enrollencryptiontoken=*token* autoupdate=on /qnthere would be a npavdimode as well but as far as I understood this mode is only needed when all users should use the same tunnel on the vdi.We want that the user on the vdi needs to logon to the client with his azure user, so he has his personal tunnel up with his own private app permissions. On the first logon on sessionhost A it works without any problems.If I relogon and get on sessionhost B my npa will not connecting anymore. We think that on the first logon my client genereates an encryption key to safe the client settings. And on sessionhost B this wont match anymore.we are getting the following errors in t

Vishal KumarNew Member

Private Access for ZTNA

Enabling MultiFactor Authentication support for Manage Engine

It would be great if Multi Factor Authentication Integration will be provided for Manage Engine. Our corporation is using Manage Engine for multiple applications for Multi Factor Authentication. If Integration of Netskope for Manage Engine will be supported/ provided, then we would be leveraged to use the same solution for Multi Factor especially for NPA. For NPA all forum & Garner suggest for enabling multi factor for best security strategy.

Axs_ISGNew Member

Netskope clients Deployment with Passkey

Hi all, Nice to meet you! I'm currently distributing Netskope clients on company computers (both Windows and Ubuntu). I have configured the Netskope clients to Google Workspace accounts.This works fine for users without a passkey (Yubikey), but if they enable one, the client doesn't complete the login process. Has anyone else experienced this issue and found a solution?Thank you.

gdaNew Member

Additional Discussions

how to unenroll netskope agent

Hello, we have disabled unenroll from client UI through client config. But in some instance need this operation [eg: IT accidentally enrolled while troubleshooting under user's windows session]. Wondering if this can be done from CLI or manually deleting user level files. Thanks for your help

AlanNew Member

Compressed file inspection

Good morning!Can Netskope identify executable files or even other types within compressed files (zip), for example?

secproceoNew Member

Netskope and JAMF Plist Updates

I had a user change her last name which changed her email address. It appears the JAMF “plist” is not updating. I checked Netskope and her updated name and email address is synced with SCIM. I can manually send the Netskope client invite to the user and everything works as expected. When the Netskope client is deployment through JAMF it appears the “plist” has the users previous email address which will not work. It appears everything on the Netskope side is updated and correct. Has everyone experience this issue? Is there a JAMF “plist” reset? Thanks.

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

Next Gen SWG

334 topics

CASB

144 topics

Security Posture Management

Security Posture Management

39 topics

Private Access for ZTNA

Private Access for ZTNA

197 topics

DLP

86 topics

Netskope Cloud Exchange (CE)

Netskope Cloud Exchange (CE)

14 topics

Cloud Firewall

10 topics

DEM: Digital Experience Management forum

DEM: Digital Experience Management forum

9 topics

Advanced Analytics

Advanced Analytics helps organizations understand and manage their exposure to cloud risks by providing a 360° view of activity throughout the Netskope platform.

Discussions

101 topics

Dashboard Gallery

Dashboard Gallery

70 topics

Other Forums

Dive into the Netskope Forums Community for comprehensive discussions on cloud security, network protection, and innovative cybersecurity solutions. Connect with experts and peers to share knowledge, experiences, and best practices in safeguarding digital assets and ensuring secure cloud adoption.

Additional Discussions

191 topics

Artificial Intelligence and Machine Learning

25 topics

Netskope Threat Protection

14 topics

Community Resources

Community Resources

About the Netskope Community

8 topics

Introduce Yourself

57 topics

Community News & Announcements

128 topics

Learn

Education, Training, Certification, and Thought Leadership

Netskope Academy / Training Discussions

18 topics

Video Library

83 topics

Blogs

46 topics

Inside Netskope

59 topics

Community Feedback

Community Feedback

Community Feedback

10 topics

Advanced Analytics

secproceoNew Member

Netskope and JAMF Plist Updates

I had a user change her last name which changed her email address. It appears the JAMF “plist” is not updating. I checked Netskope and her updated name and email address is synced with SCIM. I can manually send the Netskope client invite to the user and everything works as expected. When the Netskope client is deployment through JAMF it appears the “plist” has the users previous email address which will not work. It appears everything on the Netskope side is updated and correct. Has everyone experience this issue? Is there a JAMF “plist” reset? Thanks.

Ashwani pandeyNetskope Employee

Dashboard Gallery

SSL Traffic Insights

Check out this new SSL Traffic Insights dashboard that offers comprehensive visibility into all HTTP traffic. This dashboard displays whether traffic is encrypted or not and identifies the categories, applications, and hostnames that are not being decrypted, allowing you to focus your attention on those areas. The dashboard also includes a trendline feature. This will help you identify any sudden spikes or gradual decreases in traffic inspection, enabling you to review and address them proactively.

Aaron_ZhangNetskope Employee

June 2025 Office Hours Recap

Hello Folks, Below you can find a recap of the topics discussed during the September Advanced Analytics office hours and those sent in that we were not able to cover in the session. Feel free to comment and continue the discussion, as well as attend our future sessions that can be found from the Community Events Calendar! Q: How to monitor app instances using Advanced Analytics?A: There are 2 recommended dashboards for instance monitoring. The App Instance Overview Dashboard focuses on uncovering non-corporate instances in your environment. The dashboard helps you monitor and investigate non-corporate/personal/unauthenticated app instance usage and the corresponding data movement, policy violations, & actions taken. The other dashboard is the Tag Applications and Instances Dashboard that focuses on instance naming. Use this dashboard to identify unnamed app instances in your environment and name them through the Netskope UI. Q: How to generate an internet bandwidth utilization repo

Aaron_ZhangNetskope Employee

Dashboard Gallery

Enterprise Browser Usage Monitoring Dashboard

🚀 Netskope One Enterprise Browser is a game-changer! While enjoying the secure and seamless web browsing experience with Enterprise Browser, a common question is being asked by many users: “How is Enterprise Browser being used in my organization?” Our latest Enterprise Browser Usage Monitoring dashboard will help answer this question.The dashboard contains four sections that drill into Enterprise Browser usage from two aspects: operations and security. [Operations] Enterprise Browser Usage OverviewAs a starting point, this section allows you to monitor the deployment of Enterprise Browser by providing high-level visibility into user trend, traffic volume, and data movement.Use this section to understand:How users in your organization are being onboarded to Enterprise BrowserIf users in your organization are accessing Enterprise Browser from unexpected/unauthorized locations [Operations] Application Usage SummaryThis section allows you to drill into Enterprise Browser usage by providin

deepakkNew Member III

Many sites didn't load or take time to load When netskope enabled at several times

We’ve observed that several websites either take a long time to load or fail to load entirely when Netskope is enabled. However, the same sites work smoothly once Netskope is disabled. Since the issue is intermittent and not easily reproducible, identifying the root cause has been challenging.A recent example involved LinkedIn Sales Navigator, where some users reported the site not loading. Upon analyzing HAR logs, we noticed that the licdn.com domain was significantly delayed when Netskope was active.We tested a couple of solutions, both of which proved effective for different user sets: Implemented an SSL Do Not Decrypt (DND) rule for the licdn.com domain Assigned a client configuration policy with MTU set to 1494 for affected users We’ve encountered similar issues with other services such as AWS S3, MoveInSync, and Box Notes (for box we have identified boxcdn domain that is taking time).How can we systematically troubleshoot and resolve such issues where Netskope inspection inter

mgulledgeNetskope Employee

Level Up Your Cloud Security: Integrating Netskope and AWS Security Hub 2.0

Cloud security is a shared responsibility, and for organizations leveraging both Netskope and Amazon Web Services (AWS), the synergy between these platforms creates a robust defense. A significant advancement in this partnership lies in plans for Netskope to ingest OCSF-formatted, cloud security findings directly from AWS Security Hub. This integration is pivotal, as it allows Netskope to correlate its determination of user risk and access and the workloads they use to then unleash its inline protection capabilities when called for. By understanding the security posture of AWS environments through Security Hub's comprehensive insights, Netskope can dynamically adjust its enforcement, preventing access to compromised resources and ensuring that only secure interactions occur within the cloud. Netskope's Zero Trust Network Access (ZTNA) solution plays a critical role in this dynamic security model, providing a secure and adaptive way to connect users to workloads and services hosted in A

DanielViteriNetskope Partner

NSClient Reinstalltion withou tamperproof password

Hello,I’m having an issue with a Netskope Client on a windows machine and I would like to reinstall the agent but unfortunatelly I don’t remember the password configured for antitampering. As the NsClient is not connecting to the tenant changing the antitampering password is not an option. What else could I do to reinstall the NsClient on the user machine.

dazmacmainNew Member III

How Can I Improve Netskope's Performance?

I have just started a new company.We have brand new Cisco Cat 9500 and 9300 MGig switches. With Netskope installed on our computer have run a speed test and getting 100Mbps connected to the Internet with Netskope enabled. With Netskope disabled we are getting speeds of up to 700Mbps connected to the internet. Is there a reason why this is so slow, has it got to do with deep packet inspection? Can anything be done to speed this up? I am new to Netskope and our security team are in charge of this.

mgulledgeNetskope Employee

Sending Alerts and Events to Microsoft Sentinel using the Codeless Connector Platform

Seamless Log Shipping: Unlocking Netskope’s Native Integration with Microsoft SentinelIn today’s security landscape, visibility and real-time insights into your organization’s data are critical for effective threat hunting and incident management. To meet these needs, Netskope has developed a native integration with Microsoft Sentinel using the Codeless Connector Platform—allowing organizations to easily stream all CASB alerts, DLP incidents, and threat logs into Microsoft’s cloud-native SIEM. This blog explores how this new integration simplifies log shipping and delivers a scalable, cost-efficient way to leverage Microsoft Sentinel without deploying additional infrastructure like Cloud Exchange. Why This Matters for Security TeamsSecurity teams are constantly battling an increasing volume of threats while juggling multiple tools and platforms for managing data and incidents. Many enterprises use Microsoft Sentinel for incident response and threat hunting, but previously, getting comp

wilsonExplorer III

Combining private apps and Netskope Categories

Basically I want to write a report for the # of users of AI applications, including public Chat GPT vs the Corporate ChatGPT (which is only available via authentication but on the Internet) I have added it as an app in the Steering Configurations and it shows up separately as an App in SKOPEIT, but I can’t add it to the catalog category. Is the answer to add a custom web Category and generating enough traffic for page events?

Top Contributors

Upcoming Events

Events calendar

Dive into the Community

SASE Summit Solution Showcase

SASE Summit Solution Showcase

Join us for an expanded version of our global SASE Summit, where industry experts will provide an in-depth look at Netskope’s solutions with practical insights, live demos, and real-world strategies.

Need more help?

Product Documentation

Netskope Knowledge Portal is one-stop location for all admin and user guides

Netskope Support

Our qualified support engineers are located worldwide

Resources

Find Netskope cloud, data, and network security resources to help your organizat

Powered by Gainsight

Terms & Conditions Cookie settings

Explore

Why Netskope
Products
Solutions
What is SASE?
What is SSE?
What is Zero Trust?
What is a Next Gen SWG?
What is a CASB?

Resources

Blog
Netskope Community
Resource Library
Security Defined
Technical Support
Threat Labs
Trust Portal
URL Lookup

Company

About Netskope
Careers
Events
Executive Briefing Program
Newsroom
Our Customers
Partners
Partner portal

Contact

Contact Us
1-800-979-6988
2445 Augustine Dr. 3rd floor, Santa Clara, CA 95054

Privacy Policy
Vulnerability Disclosure Policy
Terms of Use
CCPA Compliance Statement

© 2025, All rights reserved.

Sign up

Already have an account? Login

Login with SSO

Employee Partner

or

Username *

E-mail address *

I am a... *

First Name *

Last Name *

Company Name *

Job Title *

Country Name *

State/Province *

Topics of Interest… *

Password *

By checking this box and creating your profile, you agree to our Netskope Terms of Use, Privacy Policy

loginBox.register.email_repeat

Login to the community

If you haven't already registered, now is a good time to do so. After you register, you can post to the community, receive email notifications, and lots more. It's quick and it's free! Create an account.

Login with SSO

Employee Partner

or

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK