Skip to main content
  • EN

CASB

This is a discussion board on Netskope’s Cloud Access Security Broker (CASB) solution that enables rapid identification and management of cloud application usage, regardless of whether they are managed or unmanaged. Prevents sensitive data from being exfiltrated from your environment.

  • 92 Topics
  • 276 Replies
92 Topics
N
nduda
asked in CASB
Google Drive API Restrictions based on Label

Has anyone been able to look for a specific google drive label (metadata) with an API policy using a DLP profile and then restrict/change access to the file? I feel like this worked a long time ago but we can't seem to get it going now.Essentially, when a user applies a specific label on a Google document (corporate google drive configured with API Introspection) we want to detect that label when the document is shared externally. The action will be to remove the external share.

00
N
R
Netskope Partner
ramshiv98Netskope Partner
posted in CASB
User Login Failed - O365 Native apps on ipad

Hello folks, I hope you're all doing well with your schedules!I have one concern/issue with the o365 native iPad app.What is occurring here is that we have installed the Netskope client on the user's BYOD and the user is unable to login into their 0365 native apps on their iPad. When I checked Skope, it shows User Login FailedAnyone who has dealt with similar challenges or has suggestions about how to address them? Thank you in advance.

00
R
Netskope Partner
M
manishhtmedia
posted in CASB
Removal of proxy policies

Hi,We are facing some issues while we remove the user from the proxy group due to some exceptions. The policies applied on user is not getting reverted back.All restrictions are still getting applied. As a workaround we have to uninstall the client software and reinstall the same. Is there a better way to do this.

00
S
D
Dan_ZA
posted in CASB
Linux Installation in IDP mode

I am currently adding the Netskope agent install to our build script for Ubuntu 22.04When installing via the normal method detailed here: Netskope Client For Linux - Netskope Knowledge PortalThe agent installs fine but I am unable to get the agent to talk to our tenant, I enter our tenant name as both the name or the ns-auth version but this doesn't work I get the following error:Unable to verify Organization name Please verify and try again client - ERR_ORGID_NOT_FOUNDWhen trying to install the agent via the NSClient.run -i | --idp line the script fails returning " --idp command not found"I am not the best with linux by any means so would appreciate any insight into getting this to work in IDP mode so we can have staff members using Ubuntu just login with their SAML credentials instead of the tenant needing to be linked.Thanks

00
D
C
Curious
asked in CASB
Reporting on unsanctioned app usage

Hi Everyone,Am attempting to create a report of all unsanctioned application usage where corporate email addresses have been used, is this possible with standard reporting?Thank you

00
C
W
wdeguara
posted in CASB
How often is the CCI reassessed for web sites ?

I've recently seen some cases of web sites being blocked automatically due to low CCI which suddenly become allowed days (or even hours) later.Today's example was https://todoist.com/ which was being blocked due to low CCI in the morning, and by the afternoon was allowed.How often is the CCI reassessed for web sites ?

00
S
C
Curious
asked in CASB
Deny corporate email usage with unsanctioned apps

Hi Netskopers, is it possible to deny employees logging into unsanctioned apps using a corporate email account?  Can see it is possible to permit or deny other activities such as upload/download. Would like permit usage of unsanctioned apps using personal email addresses/accounts but not with corporate email addresses/accounts.Thank you  

00
C
Takashi_Ohmoto
Netskope Partner
Takashi_OhmotoNetskope Partner
posted in CASB
Does Compromised Credentials include credentials traded on the dark web?

What are the sources of the "Compromised Credentials" information?Does "Compromised Credentials" include credentials traded on the dark web?

00
S
J
josruiz
posted in CASB
Duplicated Netskope Client "Unique Device ID" when deploy Windows Images by Golden Image

I need deploy Netskope Client with a Windows Golden ImageMy support team have a golden image and install Netskope client. Close the Image and deploy this imageBut in Netskope report I an see that appear Duplicated "Unique Device ID"This Duplicated "Unique Device ID" can deleted? having a duplicate GUI for the NEtskope client affects or notWhat is the best method to distribute the netskope agent using a golden image?

00
S
A
akaridi
posted in CASB
Ability to block file uploads to Telegram web

I'm looking for a way to block file uploads using Telegram web. As Netskope is unable to detect "Uploads", it is not able to block uploads.  I tried blocking "Downloads" as this was an activity registered, when I tested, it failed.

00
aramachandran
F
Netskope Partner
farhanNetskope Partner
posted in CASB
Better understanding of Sanctioned and unsanctioned

Hi team, I have a doubt whenever i tried to understand i get stucked and got confused in that.Correct me as per my understanding.The sanctioned application are those who only manages by our organization like o365, Gsuite salesforce who having a Admin privileges.Unsanctioned apps are those who not control by our organization like zippyshare anydesk pinterest facebook whatsapp etc.Also i get confused over managed and unmanaged application is that the managed apps are sanctioned apps and unmanaged are unsanctioned apps.For example Sanctioned apps are those who used by dialy bases on organiztion like some org used Gsuite and chatgpt again gsuite i sanctioned and chatgpt is unmanaged apps but the used both one for mailing and other is for info learning. on the second scenerio same org the unsantioned apps are o365 coz they are using gsuite on org. Please help me with this confusion with user example.

00
F
Netskope Partner
D
Dbell
posted in CASB
Netskope Client disabled by User, how to enable via command line?

Migrated Content

00
mpray
J
jpark124
posted in CASB
v2 API documentation parity to v1 available endpoints

Hello, New to Netskope.  I was able to find the v1 API documentation https://docs.netskope.com/en/netskope-platform-rest-apis.html as well as the v2 API documentation https://<tenant>.goskope.com/apidocs/?include_beta_routes=0 We're looking to utilize the versatility of the v2 permission based token.  I didn't see the v1 API endpoints available in the v2 API documentationexample: https://docs.netskope.com/en/manage-quarantine-files.html for v1 wasn't in the v2Is there additional documentation that I'm missing?  or is there a roadmap/timeline to when the v1 endpoints will be available in v2? Thank you for your time and insight into this. -Han Park

00
qyost
M
MM_NS
posted in CASB
Next Gen APIs and a better way of doing Retro Scans

Context: Next Gen APIs and Retro Scans   If you haven't noticed yet Netskope is adding more and more apps to the Next Gen API Platform. One of the greatest advantage it comes with is - Decoupling of your ongoing scan policies from retro scans. New way to do retro scan is to create a Retro Scan Policy Group. Now you can add multiple API-Enabled Protection policies to a single retro scan policy set and scan entire group with click of a button. Definitely a better way to do the retro scans.   Retro scans are now separate from ongoing policies. In the classic version you need to select an existing policy and start Retro Scan for the respective supported SaaS app. This decoupling makes sipping through SkopeIT alerts more effective. You can start retro scans in set of policies instead of individually scanning API-Enabled Protection policies one by one.   Just keep in mind that you need to create that first time API-Enabled Protection policy and add to the next-g

00
M
C
Netskope Partner
claudiochavesNetskope Partner
posted in CASB
File Moves Report

Hello, Can I generate a report containing file movements (eg Google Drive CASB API) and also display the full path of that file? In Netskope IT -> Application Events it only shows the objects (files). It does not show the full file path. Thanks!

00
msouza
Netskope Employee
A
Netskope Partner
AllenWuNetskope Partner
posted in CASB
Adobe App and Service Licensing bypass

Hi All, I would like to initate a discussion on better DLP for Adoble product lines, and I believe many Netskope users here in Technology or design industries may have similar concerns.According to this article, to make sure licensed Adobe fuction correctly, we may need to allow many domains.https://helpx.adobe.com/enterprise/kb/network-endpoints.htmlHowever, a possible data breach may happen through these domain as well if we bypass all the listed domains from steering traffic, since a few are not restricted for enterprised-used.Has anyone successfully configured DLP policies for Adoble solutions?Ideally we would like to find a way to allow these domains for Adobe certification executable only, while still monitor possible file sharing or sensitive design files leakage scenarios.-AW

00
A
Netskope Partner
C
chrisisinclair
posted in CASB
Netskope Client Fails to AutoUpdate to V95

Currently we are facing an issue where a bunch of Windows 10 Netskope clients attempted to auto update from v94 to v95 based on the setting in the cloud console.  We had a large amount of upgrade failures where the person is then left with no Netskope client installed. We disabled the auto update functionality on our steering config once it started to become a major problem to prevent the rest of our users dealing with this.    We currently also use NPA for managing these machines remotely through SCCM and for access to internal resources and we require the Netskope client to be installed for any access to cloud resources. Essentially every user that this happened to is completely unable to work and fixing the issue after the fact becomes difficult as we were switching to relying on a VPN for remote access to Netskope.    Is anyone else facing this issue?

00
B
B
bongoozy
posted in CASB
Netskope client upgrade to v99 failing with 1603 error in STAUpdate.txt

Dear All,We have recently enabled cloud update from the console for version 99.0.0. with opt in dot upgrade. We have a fleet of 28K device. We are experiencing lot of broken client. As per the STAupdate.txt the client upgrade failed with 1603 exit code, rolled back but was left in a corrupted state.We have to uninstall the client and install the new version manually to resolve the issue. STAUpdate.txt file attached. Logged a support call with the managed service provider for Netskope and hopeful to get a prompt reply and solution. It has become a service desk nightmare. Is this a common issue for all netskope client versions? Any peer comment will be highly appreciated. 

00
B
M
MM_NS
posted in CASB
API Protection Integration. Many-to-One?- Yes. One-to-Many? Caution!

This post is about API Protection (previously known as API Introspection) integration best practice:   Can I integrate multiple instances of the  same SaaS app (e.g. My company's Sharepoint dev and Sharepoint prod) to one Netskope tenant? -Sure you can. And most customers do. There is no problem as long as you are within your license quota. For licensing questions reach out to your Sales team. -Having multiple SaaS apps in one tenant is also not uncommon (e.g. Box, Webex, Zoom, O365 in one Netskope tenant). Again it is just the license you need to purchase for additional SaaS app.   I have more than 2 Netskope tenants but I have only one SaaS app tenant. Can I have the same instance of one SaaS app integrated to multiple Netskope tenants? Caution! Even though the integration may succeed (i.e. the instance grant process turns green on both Netskope tenants) few immediate side effects I would like to alert you about - You are essentially doubling your API usage becaus

00
M
A
Ankitdongre1
asked in CASB
Difference between App events, page events, and alerts in skope IT?

What is the difference between App events, page events, and alerts into skope IT?

00
W
A
Alam1
asked in CASB
Wants to block send Chats message/Text for WhatsApp Cloud App

Hello Everyone,  I am trying to block the upload and send chats for WhatsApp Cloud App. I have created the  cloud app policy for WhatsApp and selected the activity "upload" and set the action "block",when we tried to upload any file it gets blocked but we are not able to block send chats for same it is still allowing.I have also tried by creating "Chat, IM & other Communication" category and selected the activity upload, and set the action "block" but it did not worked as well. Please help on how we can block the send Chats for WhatsApp web. 

00
qyost
S
Netskope Partner
Sumeet666Netskope Partner
posted in CASB
Whatsapp Web activity control

Hello Team, We want to block chat activity on Whatsapp web and allow the upload activity. How can we achieve this? 

00
S
M
Netskope Partner
MetgatzNKNetskope Partner
posted in CASB
Microsoft Office 365 Integrations - Privileges and Roles

Microsoft Office 365 Integrations - Privileges and Roles Hello good afternoon Netskope community. A doubt, to make SCIM integration with AzureAD for Users/Groups privisioning, with an Azure-AD user having the Application Administrator Role, he can manage enterprise applications for example SCIM and SSO usage for UI administration. Now I can't find the exact role, privilege and/or permissions or permissions that are required for an account to integrate with Onedrive, with Outlook, with Sharepoint, via API to be able to use API protection It speaks of "Global Administrator", please can you confirm me exactly the granular role that allows an account to perform this type of integration between Netskope and Office 365, I already tried with the same Role Application Administrator and does not allow me. Azure AD built-in roles:https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Thanks to all of you for your time, collaboration and good

00
S
S
srivara
posted in CASB
Query about upload in real time protection

Hello, I need to obtain information about the file extension included in the Documents option, within Netskope - Policies - Real time protection - Policy category survey solution -ACTIVITIES & CONSTRAINTS - Activities Upload - Documents.If there is any document with the other options, please also send it. Attached imageThank you

00
S
M
Melinda_Lee
asked in CASB
Can you enable Netskope Client via command line?

Hello, I am testing the install script of Netskope via command line.  Every time i install the client is disabled, can I enable the client via command line?

00
T

Badge winners

  • Solutions - 10
    mkoyfmanhas earned the badge Solutions - 10
  • Solutions - 10
    sshifletthas earned the badge Solutions - 10
  • Solutions - 10
    VarunKhas earned the badge Solutions - 10
  • Solutions - 2
    mkoyfmanhas earned the badge Solutions - 2
  • Solutions - 2
    rosshas earned the badge Solutions - 2
View All

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings