Skip to main content
  • EN

DLP

Your one stop shop for all things Netskope Data Loss Protection.

  • 36 Topics
  • 58 Replies
36 Topics
M
MM_NS
posted in DLP
Credential detection and Netskope Predefined Identifiers.

  Netskope has various built-in (aka predefined) DLP identifiers to detect passwords, public keys, private keys and base64 encoded data.   While you can write a regex to detect passwords in your environment, I have highlighted some of the challenges here: Regexes can cause DoS and False positives (at a customer site who has a dedicated team to write regex their complain was email in a string being detected as passwords). There is no single password standard that would work for all the environments. The key sizes are varied length.   Best approach for a credential detection policy Use Exact Match capability to identify username of AD account exfiltration Use Netskope's built-in identifiers rather than writing complex regex. Use Custom Entity validator to validate your test data with a corresponding Netskope predefined identifier. Note: You do not have to create a custom entity. Just for the validation purpose call a predefined identifier under a custom entity.  

64
E
G
Giacomo
posted in DLP
netskope mobile with microsoft defender

Good morningI need to install on my enterprise mobile devices the Netskope client.On these devices the Microsoft Defender client is installed with VPN already active.I noticed from the logs that the netskope client fails to hook the Vpn because it sees the Defender VPN tunnel already activeCan any exceptions be set so that the two tunnels are active?Thanks

00
G
E
Netskope Partner
Edison_VaLbuenaNetskope Partner
posted in DLP
DLP Regex Dictionary

Hello,Does anyone have an example in a Dictionary csv file to add to Netskope with keywords that you want to analyze?Thank you so much.

00
E
Netskope Partner
W
wdlab
posted in DLP
possible to DLP block PII sent via OneDrive or Gdrive app?

Dear community,I am working with SWG and DLP to avoid users uploading sensitive content on corporate Onedrive.All the client has netskope client enabled and everybody run win10.I successfully managed to avoid users to upload on Onedrive via web a sensitive files, due to match with DLP policy, but the same user, while using Onedrive app just receives a warning.Basically, when the user upload the PII file is warned by the netskope client and it is also blocked,  when the same file is copy/pasted in the shared onedrive folder, it is only warned, but the action has success.Is that a limitation or are there some configuration part which I am missing?the client configuration is steering everything and the exception part is by default. Thanks.Walter

00
W
R
rfletcher
posted in DLP
EDM_automation.py

Has anyone used the edm automation script that was talked about in conjunction with DLP 2.0? I've seen it referenced but i can't seem to find how to execute it. I have a daily edm file that gets uploaded and i'm looking for the best method to automate the request-ppd upload process.

00
R
A
amityadav
posted in DLP
Endpoint DLP suporting WIFI Printer

Hi Friends- can we utilize endpoint dlp in netskope to inspect/allow WIFI printers .

00
jwilson
H
Netskope Partner
hhamzaNetskope Partner
posted in DLP
Telegram and Whatsapp for DLP Alerts

Hi,  We have a real time policy to trigger alerts for any DLP violations for Chat & Other IM Categories. We have however not been successful in getting any alerts with DLP profiles on. I would like to know if DLP works on Telegram and Whatsapp for users that's accessing these apps via browser. I have noticed from the CCI that some of the activities are not supported. Happy to hear your thoughts on the same if you had a similar use case. Thanks!

00
qyost
I
Netskope Partner
InduNetskope Partner
posted in DLP
DLP: PCI & PII tests failed on netskopesecuritycheck.com

Hi Team,We configured DLP for all categories with PCI and PII DLP. However, on netskopesecuritycheck.com, DLP PCI and PII block tests are failed. Has anyone had success with these tests? Can you please share the DLP policy configuration that has passed?  Thanks & Regards,Indu

00
T
R
rfletcher
asked in DLP
SMTP DLP

Anyone using the new SMTP DLP functionality? If you are, how are you doing your alerting to users about blocking/intercepting emails? 

10
R
A
Alan4Netskope
asked in DLP
YouTube In Bytes Uploaded

We are just getting started with the Advanced Analytics and one of the 1st reports we were asked to run is Top Uploads for the past 7 days.  Report ran great and is full of useful data.  One area I cannot figure out though is Uploads to YouTube.While I do not believe we have "content creators" uploading while at work, the data is still questionable.  Searching the web for info all leads back to uploading a video.  I did find YouTube does have tracking capabilities beyond cookies. Looking at just one user at our corporate office, showed only around 1Mb of data uploaded.   This is more inline with what I found online with the tracking.  The top user for the week was around 805Mb.  So not  “content creator” I would think, but makes me wonder just how much tracking is going on.This top user also had 60 hours of viewing time.  (To be addressed separately) But could the tracking account for 805Mb?Anyone else seeing this an

00
A
F
Netskope Partner
Felipe_PachonNetskope Partner
posted in DLP
DLP profiles for LATAM

Hello,We’re looking for some information regarding PII regulation profiles equivalent to GDPR but customized for the LATAM requirements or regulations.Do we have predefined profiles for this region?

00
A
aplaza
Netskope Employee
aplazaNetskope Employee
posted in DLP
Demo - Train Your Own Classifier

Chief Evangelist, Bob Gilbert, performs a live demo of Train Your Own Classifier, which is Netskope’s groundbreaking solution that puts the power of AI in the hands of customers. Anyone deployed on the Netskope platform with advanced data protection can now train AI/ML models using their own unique corpus of data.  

00
aplaza
Netskope Employee
M
Mmaroof
posted in DLP
Questions on MIP Labelleling for One Drive

I have a few questions related to Netksope MIP integration. I looked around but did not get any concrete answers. Does Netskope require the customer to provision an Azure subscription or similar services when applying MIP labels to OneDrive files?  From what i understand , we only need the M365 licence ? Is the timestamp of a OneDrive file altered when Netskope applies a label? - This is important for our org to ensure that we dont modify the file timestamp. Is Netskope's file labeling service charged separately, or is it included with the standard Office 365 protection license? - I'm guessing there is no extra charge. Are there any restrictions on the number of files that can be labeled within a specific period by Netskope? - This is something our security team is asking and would love to know if there are any known limitations 

00
M
F
freestlz
posted in DLP
We have been unable to deploy Endpoint DLP

We have been unable to deploy Endpoint DLP. Having the same issues with different versions and the newest 1408. A good number of Managed devices on reboot disable the usb devices like mouse, keyboard, and printers. Has anyone been able to successfully deploy Endpoint DLP protection?I currently don't have any device control policies but do have quite a few Content Control policies.Any help would be appreciated.

00
C
T
Netskope Partner
thomasmichaelNetskope Partner
posted in DLP
Netskope DLP when posting on ChatGPT

I have few alerts triggered for the policy that I have created for DLP related policy when user post on ChatGPT.However, I am unable to know the exact reason why the alert was flagged. Also, I cannot view the content/part of the content of the post that was considered as a DLP violation. How and where can I view these details? Regards,Thomas

00
S
V
vramnarayan
posted in DLP
DLP policy flow - Continue Policy Evaluation

Netskope's real-time protection provides a plethora of access-controls to enforce data security. Starting from R96, Netskope has standardized the function of "Alert and Continue policy evaluation" on all tenants. This feature would allow Netskope Cloud to continue evaluating Real-time policies for additional DLP violations, instead of terminating and exiting policy evaluation after a match.   This function would help influence the sequential processing of real-time protection policies based on specific configuration and thereby evaluating & matching against multiple DLP profiles and rules.Refer to the PDF document to know more about the policy flows and behavior.   https://docs.netskope.com/en/netskope-help/netskope-release-notes/netskope-cloud-release-notes/netskope-release-notes-hotfix-version-96-1-0/new-features-and-enhancements-in-hotfix-release-96-1-0/#UUID-76b0e39c-45b3-eb8c-0049-b6222ae411e5_section-idm4583494220057633155495922816 Document Authors - @vramnarayan &a

00
V
F
Netskope Partner
farhanNetskope Partner
posted in DLP
Email DLP flow

Hi Team I want to ask some Netskope question I just checked one configuration of Netskope SMTP proxy where we can see there are two connector connector 1 office 365 to partner and the second connector from your organization to O365. So why we required your organization in second connector. Also from MS team when they are tried to select Your organization they get and error of licensing but same licensing part is working for another please let us know.

00
F
Netskope Partner
I
Netskope Partner
InduNetskope Partner
asked in DLP
DLP is not working for CSV, TXT, JPG & PNG

Hi Community Team, A DLP policy with PCI-DSS profile is placed as top-rule to identify sensitive information in upload & download activities. It is working as expected only with DOCX files. This policy is not working with CSV, TXT, JPG & PNG files. When uploading CSV/TXT files, the policy is not even being hit. I would like enquire with Netskope community if anyone has noticed such issue and how they fixed it. Thanks.

135
R
I
Netskope Partner
InduNetskope Partner
posted in DLP
DLP with Facebook Messages IS NOT Working

Hi Community Team,Working Scenario: When we upload or download sensitive data (Credit card, CVV & email) with TXT, CSV & DOCX files to Facebook & LinkedIn, then Netskope DLP is alerting fine with PCI-DSS, DLP-PCI & DLP-PII profiles.Working Scenario: when we type & send sensitive data (Credit card, CVV & email) in LinkedIn Messages, then that message is being alerted (fine). LinkedIn Message DLP alert is showing Activity as POST and Object type as Message.Failed: However, When we type & send sensitive data (Credit card, CVV & email) in Facebook Messages, then it is not being blocked or alerted. We are expecting the action to be POST and activity should be Message or anything. However, Facebook Message sensitive data share action is not visible in Application Events, Alerts and Page Events.Below screenshot is the policy. Has anyone noticed this issue? If yes, please suggest the fix.Thanks. 

00
I
Netskope Partner
M
MM_NS
posted in DLP
Resolve Multiple DLP Incidents using Netskope Incident Dashboard

Did you know that you can use Netskope DLP Incident dashboard to manage up to 100 Incidents at a time?   -Incident Dashboard allows you to use SkopeIT query to find Incidents by status or date range or severity or even incident number. (Sample query at the bottom of this page)   -You can change status of all incidents displayed on the page at once (You can expand page size to up to 100 per page from the drop down at the bottom right of the dashboard) Steps to find and resolve multiple incidents:   1. In the incident dashboard menu click the "Filter Search" funnel icon. (this icon switches between normal and query mode)   2. Enter a query using the "in" operator as shown for 2 incidents below. You can also add a custom status for filter e.g. if you want to omit incidents with status 'Resolved - Policy Updated' from the search. Note that incident numbers are included in single quote separated by comma) SkopeIT query: (dlp_incident_id in ['863060765611108610','82034833

00
M
I
Netskope Partner
InduNetskope Partner
asked in DLP
SMTP Relay Backend Error On Verifying Email Domain

Hi Netskope Community,We are following below admin guide & KB (both are same) for configuring Netskope SMTP proxy with MS O365 exchange.https://support.netskope.com/s/article/Configure-Netskope-SMTP-Proxy-with-Microsoft-O365-Exchangehttps://docs.netskope.com/en/configure-netskope-smtp-proxy-with-microsoft-o365-exchange.htmlWe encountered a backend error and see the attachment for error message screenshot.1. Has anyone encountered the same issue?2. What is the root casue for this issue?3. What is the fix to get rid of the error message?Thanks & Regards,Indu

00
msouza
Netskope Employee
F
Fao55
posted in DLP
Netskope DLP Multi-language Detection

Hello All,I'm hoping someone can help me. I am just trying to find out if Netskope has a language pack (Spanish, French, etc...) or the capability to detect DLP incidents in various languages, similar to how Symantec/Broadcom can. If so, can someone point me in the right direction of the setting in the tool? If not, can someone tell me if this capability is on the Netskope roadmap for the future? Thanks in advance! 

00
msouza
Netskope Employee
K
kipbarnhill
posted in DLP
MIP Labeling Challenges

Hello everyone, My organization currently uses MIP to manually apply labels to Office files. We are looking to start using Netskope API Data Protection to automatically apply labels to files in SharePoint that contain sensitive data but I have a couple challenges I am not sure how to handle.  1. Microsoft Information Protection by default will not override any manual labels applied or override any label with a higher priority. We would like to keep this capability when using Netskope to apply labels but I cannot find any way to accomplish this.  2. We would like to build automated workflows to notify users when a file they own has had it's label upgraded because it contains sensitive data. This works great the first time the label is applied but a DLP alert will occur every single time the file is edited even if the file already has the upgraded label. I think a potential solution to challenge 1 would be to look for the manual label attribute in the files

00
K
M
MM_NS
posted in DLP
Github Binary Files Commit Alert

Context: You have some users uploading sensitive data to Github. These smart users are avoiding detection by using non-text formats e.g. XLSX or docx. How to get alerted for binary commits on Github?   Solution: Netskope next-gen Github API can detect and alert when a binary file is committed to Github. Create a very simple DLP rule that detects keywords for "Binary files". Call that into a profile and a Github ongoing policy. That's all that is needed.   Here are the required screenshots showing how to create a DLP rule using custom entity with case insensitive keyword.    

00
M
aramachandran
aramachandran
posted in DLP
Netskope Data Protection for Google Bard

As the AI wars heat up, Google is stepping up its game against OpenAI with the release of Bard. Google originally (early 2023) made it difficult for the average user to play around with Bard by introducing an invitation based system resulting in waitlists, again this was earlier this year when ChatGPT rocketed into the mainstream consciousness, but as it stands today, most, if not all Google account holders can access, play around, I mean, leverage Google Bard.   What are the risks involved for enterprises ? The reality is that it's not any different than the risk of using an unsanctioned app. I mean data exfiltration capabilities, privacy issues et al, makes Google Bard a veritable minefield for every security organization.   Google explicitly advertises Bard as way to make life simpler for software devs. This is the biggest risk I see for most enterprises when it comes to Bard and other similar platforms. The risk of devs copy/pasting sensitive code for debugging, and/or un

00
S

Badge winners

  • Solutions - 10
    mkoyfmanhas earned the badge Solutions - 10
  • Solutions - 10
    sshifletthas earned the badge Solutions - 10
  • Solutions - 10
    VarunKhas earned the badge Solutions - 10
  • Solutions - 2
    mkoyfmanhas earned the badge Solutions - 2
  • Solutions - 2
    rosshas earned the badge Solutions - 2
View All

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings