Product Forums

Hi there, One of my client doesn`t want to go other way of steering traffic from Windows Server 2016 to Netskope Cloud so he wanted to use Netskope Client to steer the traffic from the Windows Server 2016. We tried to install, client stays disabled and when checked logs it says the below.Initially we thought it would UPN and EMAIL ID are not matching, but we created separate the account with the same UPN and EMAIL ID, but client still fails to download config branding file and stays disabled. What you suggest next we should do? 2023/08/09 16:49:23.584 stAgentSvc pcb0 t17b4 error config.cpp:6234 Config Branding file downloaded failed for user: Removed the user ID2023/08/09 16:49:23.584 stAgentSvc pcb0 t17b4 error config.cpp:4571 Config Failed to download branding file using UPN2023/08/09 16:49:13.570 stAgentSvc pcb0 t17b4 error config.cpp:8173 Config failed to download UPN hashing config2023/08/09 16:4

Hi Community, I'm trying to understand how to allow certain users on a policy that has an Unsanctioned App. Basically, I don't want the whole organization to have access to it but only authorized users. Therefore, is there a way to allow this? I've tried to but I automatically get blocked even if there's a policy for the allowed users placed above the "Block Users to ___". Any suggestions would be great.

I am reviewing and I notice that when I use the WhatsApp app and attach an image it is not sent, I do not have associated blocking policies and additionally create a real-time policy where permission is granted to upload and download files.If I enter through a browser, if it allows me to attach all the images, I wanted to check whether netskope restricts the sending of attachments through the App?

Hello NS community!   Currently Netskope URL categorization product has 127 categories. Some categories are meant for legitimate traffic such as Financial News, Business, Educations, and some categories are security risk related such as, Security Risk - Botnets, Security Risk - Phishing/Fraud. There are also categories that may not be allowed for work environment such as Gambling, Tobacco or Adult contents. Each customer can create their own policies to allow or block each URL category. In order to test these policies, customer needs to know the URL samples in each category and then performs the test.   Attached you can see an example of these "hardcoded" categories for all our categories so you can test your policy in real-time. Be cautious as

Dear Team, We noticed that the internet is in working condition for every other user, however, it is showing an error of the internet not working on a that particular system.After analysis, we found the below logs, we need your assistance to understand the cause. fileUtil.cpp:45 nsUtils failed to open file for reading: C:ProgramData etskopestagent/eventcache.json, err:2t40a4 info fileUtil.cpp:82 nsUtils failed to open file for reading: C:UsersAppDataRoamingNetskopeSTAgent/data/authtoken.pem, err: 2t2afc error registry.cpp:158 registry RegOpenKeyEx failed, err: 2 Best Regards.

We can't be the only ones out there fighting these limitations with Google and Netskope.Google has Badge Labels (like most collaboration services) but they are pretty much focused around doing DLP inspection. Essentially, assign a label of "Confidential" and specific DLP detections are done (i.e. Credit Card). What we would love to do is use labels as a way to enforce access control. With the new R107 release of Google Badge Label support, there isn't really any meaningful actions that can be used (that Google doesn't natively do already). We would love to detect if a label is detected to enforce access control to that document. For example, if we assign a label called "Important People O

The requirement is :- User should able to access a corporate instance of Git-hub but not any other instance of git-hub. I have created app instance for a corporate instance of Git-hub and configured the policy to allow all activities.  2nd policy after that is to block all activities for the application Git-hub ( to match all other git-hub instances) with this, I am not getting an expected resultWhen user is accessing corporate instance, Netskope is showing Browsing activity and getting blocked in 2nd policy.I have checked the list of activities for app Git-hub but there is no Browsing activity mentioned Any expert comments and guidance here pls...  

IntroductionChatGPT and other AI chatbots have been getting a lot of attention lately.  They are extremely helpful in getting information, responding to custom queries, and can even be used to write code along with other common daily tasks.  They represent an exciting new digital frontier but from a security perspective, they also represent yet another place for your corporate data to go.  Netskope’s inline Next-gen Secure Web Gateway capabilities can block posting of sensitive data to collaboration tools such as Slack and Teams out of the box.  It got me to thinking that since ChatGPT is essentially a chat system, why can’t we use a similar capability to block posting sensitive information to ChatGPT?  As one quick tangent, I also want to give OpenAI some credit as they also warn the user that it’s not appropriate to put personal data into their platform:

We’re having an issue with our web server blocking Netskope IPs. Where can I find a list of IPs that I can whitelist?

Hello All,The following articles have come out re: Evasive Phishing that domain front-ends Google to protect potentially malicious or unintended traffic from being picked up by filtering or threat. The following articles address how this works:https://cofense.com/blog/google-amp-the-newest-of-evasive-phishing-tactic/https://www.malwarebytes.com/blog/news/2023/08/phishing-campaigns-found-to-be-using-amp-urls-to-avoid-detection This means if NGSWG can't categorize the URL is hiding in AMP then it will treat the site as categorized as safe (or likely safe) based on that it is hosted at google, not the real site of xxx.xxx (or whatever malic

We are looking to start using a knowledge sharing platform called notion.so. Does anyone have experience with setting up DLP on this platform?  I'm curious if I can just use the same web policies there.

I have a number- of applications where a corporate IP address allows access without authentication.  For the first 15 or so, we have been 100% successful in using the Forwarder back to corporate and then sending the traffic from here.  However, the most recent set, library resources works some days and don't work on other days.   Has anyone seen this behavior?  

Provisioning Users from AWS accounts (Customer manages AWS Amazon WorkMail, for their mail accounts - business mail service). Hello good afternoon, how are you doing? As always, thanks for your cooperation and support as always. I have a question, a customer X, has a mail service on AWS, no Azure AD, no local AD, no google apps. So he only has for his mail accounts AWS - Mail Account - Enterprise Service. Is Netskope compatible, for the moment I have not seen any document, do you know if it is compatible Netskope, to provision fianles users, users to Tenant, by SCIM, LDAP or IDP, against AWS, in order to provision users and groups ? Does anyone have any information, data or details regarding this scope of Netskope ? Thanks, I remain attentive Best regards

the way to see the Cloud exchange console is which? Should I open from any browser with the IP where the connector is located or do I have to do it on the client's server where the connector was installed?

I know it is not recommended to steer VoIP traffic to Netskope because it adds additional hops to reach the destination causing possible performance/audio drops.I tried bypassing MS Teams in the past in our environment and experienced slower speeds and conditional access issues. What would be the best way to bypass VoIP traffic on ports 3478-3481 to the authentication URL teams.microsoft.com with conditional access in mind?

This use case is about Generative AI, but I've run into this issue with other categories as well.  I create a Generative AI block and then I'm adding exceptions as needed by the business. The issue is that I have to create a URL list for those applications that do not show in "CloudApp" options. (ie. Grammarly).  What I don't understand is why is the app not available? I get that Netskope can't distinguish between activities within the app, but when I look at the Alerts and logs it's clearly categoring the URL to the application. I'm now forced to create a rather large URL list to allow Gram

Has anyone been able to look for a specific google drive label (metadata) with an API policy using a DLP profile and then restrict/change access to the file? I feel like this worked a long time ago but we can't seem to get it going now.Essentially, when a user applies a specific label on a Google document (corporate google drive configured with API Introspection) we want to detect that label when the document is shared externally. The action will be to remove the external share.

Hello folks, I hope you're all doing well with your schedules!I have one concern/issue with the o365 native iPad app.What is occurring here is that we have installed the Netskope client on the user's BYOD and the user is unable to login into their 0365 native apps on their iPad. When I checked Skope, it shows User Login FailedAnyone who has dealt with similar challenges or has suggestions about how to address them? Thank you in advance.

Hi Community Team, A DLP policy with PCI-DSS profile is placed as top-rule to identify sensitive information in upload & download activities. It is working as expected only with DOCX files. This policy is not working with CSV, TXT, JPG & PNG files. When uploading CSV/TXT files, the policy is not even being hit. I would like enquire with Netskope community if anyone has noticed such issue and how they fixed it. Thanks.

Hi Community Team,Working Scenario: When we upload or download sensitive data (Credit card, CVV & email) with TXT, CSV & DOCX files to Facebook & LinkedIn, then Netskope DLP is alerting fine with PCI-DSS, DLP-PCI & DLP-PII profiles.Working Scenario: when we type & send sensitive data (Credit card, CVV & email) in LinkedIn Messages, then that message is being alerted (fine). LinkedIn Message DLP alert is showing Activity as POST and Object type as Message.Failed: However, When we type & send sensitive data (Credit card, CVV & email) in Facebook Messages, then it is not being blocked or alerted. We are expecting the action to be POST and activity should be Message or anything. However, Facebook Message sensitive data share action is not visible in Application Events, Alerts and Page Events.Below screenshot is the policy. Has anyone noticed this issue? If yes, please suggest the fix.

Hi,We are facing some issues while we remove the user from the proxy group due to some exceptions. The policies applied on user is not getting reverted back.All restrictions are still getting applied. As a workaround we have to uninstall the client software and reinstall the same. Is there a better way to do this.

VMWare's Workspace ONE platform enables IT teams to manage any app on any device by integrating access control, application management, and unified endpoint management. In this guide you will learn how to perform a completely silent installation of the Netskope Client for supported MacOS versions.   High-Level Process From a high-level, the process is as follows: Configure Device Profile to deploy Pre-requisites Configure Workspace ONE Sensor to push pre-install file Push Netskope Client   Before you start, make sure to have Access to a Netskope t

Did you know that you can use Netskope DLP Incident dashboard to manage up to 100 Incidents at a time?   -Incident Dashboard allows you to use SkopeIT query to find Incidents by status or date range or severity or even incident number. (Sample query at the bottom of this page)   -You can change status of all incidents displayed on the page at once (You can expand page size to up to 100 per page from the drop down at the bottom right of the dashboard) Steps to find and resolve multiple incidents:   1. In the incident dashboard menu click the "Filter Search" funnel icon. (this icon switches between normal and query mode)   2. Enter a query using the "in" operator as shown for 2 incidents below. You can also add a custom status for filter e.g. if you want to omit incidents with status 'Resolved - Policy Updated' from the search. Note that incident numbers are included in single quote s

Hello, I am implementing a new proposal for Real Time Policies for Netskope, to follow best practices and reduce the number of polices to the minimum possible. Currently, I propose a structure similar to this (+ other specific policies of allow, block, dlp, threat protection etc..):Allow corporate App InstancesAllow "Sanctioned" AppsBlock not allowed CategoriesAllow allowed Categories But there are webpages that belong to a non-permitted category, but to which access must be allowed. The problem is they are webpages and not applications, I can't apply the "Sanctioned" tag. If I create a custom app with the URL of the webpage, it also does not allow adding the "Sanctioned" tag. What is the best practice recommendation to resolve the situation? I can only think of creating a new policy that is allow access to a custom URL List, but it doesn't seem like a maintainabl

Netskope Secure Web Gateway provides next generation secure web gateway (NG SWG) capabilities to prevent malware, detect advanced threats, filter websites by category, protect data, enable remote browser isolation, and control apps and cloud services for any user, location, or device. Netskope offers multiple traffic steering options to steer traffic to the Netskope Cloud: Netskope Client IPSec GRE Explicit Proxy Proxy Chaining For customers that want to leverage IPSec tunnels to steer traffic to the Netskope Cloud, Netskope strongly recommends the following:  Config