Skip to main content
  • EN

Product Forums

Explore Netskope Community Forums: Dive Into Next Gen SWG, CASB, Security Posture, ZTNA & DLP Solutions

313 Topics
C
Netskope Partner
claudiochavesNetskope Partner
posted in CASB
File Moves Report

Hello, Can I generate a report containing file movements (eg Google Drive CASB API) and also display the full path of that file? In Netskope IT -> Application Events it only shows the objects (files). It does not show the full file path. Thanks!

00
msouza
Netskope Employee
F
Netskope Partner
FaizNetskope Partner
posted in Next Gen SWG
Internet slowness issue

Hello Members   Need a help.   if any user is facing internet Speed issue or slowness issue.  what might be cause..? Any specify troubleshooting for that..? .

00
S
Netskope Partner
A
Netskope Partner
AllenWuNetskope Partner
posted in CASB
Adobe App and Service Licensing bypass

Hi All, I would like to initate a discussion on better DLP for Adoble product lines, and I believe many Netskope users here in Technology or design industries may have similar concerns.According to this article, to make sure licensed Adobe fuction correctly, we may need to allow many domains.https://helpx.adobe.com/enterprise/kb/network-endpoints.htmlHowever, a possible data breach may happen through these domain as well if we bypass all the listed domains from steering traffic, since a few are not restricted for enterprised-used.Has anyone successfully configured DLP policies for Adoble solutions?Ideally we would like to find a way to allow these domains for Adobe certification executable only, while still monitor possible file sharing or sensitive design files leakage scenarios.-AW

00
A
Netskope Partner
E
Netskope Partner
embentilNetskope Partner
posted in Next Gen SWG
Client Affecting User Activities

 When the client is installed, the end user is unable to reach certain sites like cisco.com.Meanwhile, no policies have been applied to the user.I was going to ask them to check their firewall, but this issue occurs even at home without connecting VPN.

00
S
aramachandran
aramachandran
posted in Next Gen SWG
Google's new TLD Mayhem - SWG Policy Recommendations

A long time ago, Google applied for the .zip Top Level Domain(TLD) to ICANN and their application was granted. Recently, Google (Google Registry to be specific) announced that these TLDs will be available for use. These include domains like .Foo, .Zip, .Mov etc. Whilst they may seem innocuous on first glance, there is a big risk for malice when it comes to these top level domains. Let's say I write an email/blog/slack message that references a file abcd.zip. abcd.zip would never have been considered an 'internet bound link' back in the day.Of course, one ought to never blindly click on such links and ought to identify the 'linked' destination.<cough> Internet Security Awareness </cough>. But this is no longer the case with Google's announcement.  A threat actor could register the domain abcd.zip and point the file to a malsite abcd.zip, and subsequently, if a user were to click on such a link, trigger the auto download of a malicious file.This calls for enter

00
aramachandran
bruna
Netskope Partner
brunaNetskope Partner
posted in DLP
Creat policy binario .exe

Is it possible to create a policy to block whatsapp .exe download?I created but I didn't succeed in the test.

00
jforrest
M
mochi
posted in Next Gen SWG
bypassAppMgr Blocking UDP against Exception specified IP

Hi,Kindly advise me that we set "Exceptions" registration on certain IP,and the bypass setting seems working on TCP request, but UDP ones are blocked as below. [log said:]bypassAppMgrUDP.cpp:219 BypassAppMgr Blocking UDP connection from process: google chrome helper, dest IP:xx.xx.xx.xx(we set one on Exceptions) Do we need another setting on UDP? kindly advise me!

00
M
A
Netskope Partner
aatienzaNetskope Partner
posted in Next Gen SWG
Netskope Agent - pac file - explicit proxy over ipsec

Hi all,   I have a customer that uses pac file mandatory, for users with the agent installed and users who don't have agent, and can't differentiate between them, therefore all the pc's use pac file.   With non-Netskope explicit proxies over ipsec, this pac file configuration does everything works ok. addon-customer1.goskope.com -> proxy*.goskope.com -> direct   When the proxy is a Netskope explicit proxy over ipsec, the agent is disabled.   Is there a way to change the behavior so that the pac file can coexist with Netskope explicit proxy ipsec without the agent not being automatically disabled?   Thanks!!  

00
A
Netskope Partner
F
Netskope Partner
farhanNetskope Partner
posted in Next Gen SWG
SWG SSE and Netskope NGSWG

Hi Netskope team, Congratulations on the leadership in Magic Quadrant in SSE. Please help me with my below query. As Netskope offers NGSWG, can you let me know the features of NGSWG provided in detail?As I know this includes WebDLP, URL filtering, SSL inspection, Authentication, and In-line CASB Content filtering. It's the combination of DLP SWG and CASB. Can you please let me know the limitations of DLP and CASB in NGSWG and the traditional SSE SWG and Netskope NGSWG?  

00
S
S
stevan
asked in Next Gen SWG
Netskope Cloud Firewall Recommendations, Practical Advice, and Use Cases

A Security Practitioner's Perspective Netskope Cloud Firewall Recommendations, Practical Advice, and Use Cases Background This document provides recommendations, practical advice, and use cases for Cloud Firewall (CFW).  When enabled in a tenant and applied to a steering profile, it will steer all traffic regardless of type-HTTP, HTTPS, and non-web traffic types. The non-web traffic includes TCP, UDP, and ICMP traffic.   CFW provides advanced security and access controls without the cost, complexity, and performance limitations of traditional firewall appliances. It accomplishes this through an integrated cloud-hosted firewall solution with granular control over outbound non-web traffic visibility.   It provides network security on outbound traffic across all ports and protocols for users and/or groups based on policy controls including a 5-tuple, fully qualified domains and wildcards as destinations, and an application layer gateway for FTP; the 5-tuple includes source

00
A
Netskope Partner
M
Netskope Partner
MetgatzNKNetskope Partner
asked in Next Gen SWG
Client Mobile Android - Default do-not-decrypt Android traffic for versions Nougat and above

Hello community, how are you doing. I am running a test from my Netskope client, Mobile Android version. When I check the event logs of Page events, the following appears and I don't have any policy that generates bypass at SSL decrypt level or Real time rule.I'm testing and I don't see it blocking the sites that it does block in a rule with the client on a workstation, but from the Netskope Mobile Client on Android the following appears: Bypass Reason:Bypass_reasonSSL Do Not Decrypt Bypass Policy MatchedBypass Traffic:yesSrc Time:Tue Apr 18 20:22:00 2023Ssl Decrypt Policy:yesUser Generated:yesType:connectionPolicy Name:Default do-not-decrypt Android traffic for versions Nougat and above Are there any restrictions on client installation and use of Mobile Android ? Is there any extra step to do when installing the client on the mobile Android from the invitation ? The Android version I am using in the test is "11". According to the Netskope site it is supported.

00
S
O
Netskope Partner
oscarNetskope Partner
asked in Next Gen SWG
[DLP] ChatGPT DLP is not working properly (newline )

Hello all, I considered posting this here since my comment in the following post might be not seen:Netskope DLP use cases for ChatGPT - The Netskope Community We found the reason DLP is not working for chatGPT.ChatGPT input is sent as a HTTP POST, sending the message inside the JSON payload.The problem comes when the input text contains newline characters.Nweline characters are sent as ' ' and Netskope does not treat these as newline but as a literal '' and an 'n'.This means if I send for instance a list of card numbers or SSN numbers as follows:132412341234132412341234 What is being actually sent is "132412341234 132412341234".Netskope sets implicitly word boundaries to entities, this means word boundary characters (dot, coma, semicolon, whitespace, etc) must be found before and after the sensitive data to match. Considering the format the data is sent to chatgpt, what netskope sees is:"132412341234" and "n132412341234".Thus the second SSN numbers won't match beca

00
O
Netskope Partner
W
wilson
posted in Next Gen SWG
Epic Health care software and SWG - looking for commentary

I was looking for anyone with experiences with converting over to SWG that includes the Epic (www.Epic.com).  Lessons learned, SWG implementation schedule, really anything. 

00
L
A
Netskope Partner
AMARNetskope Partner
posted in DLP
Netskope integration with Unmanaged devices

Hello All, Looking for some help !! If we need to manage the traffic of unmanaged Devices like personal laptop , Tablets and mobile the usual proposed methodology is Reverse Proxy integration to map the control, But i wanted to check on the below mentioned point. If we have user authentication mapped with the Netskope proxy and user when logging in via personal devices and getting authenticated via Netskope Proxy in this case do we require the reverse proxy integration? Thanks in advance for your help !! Thanks & Regards Amar  

00
pvilarino
L
Lockdown
posted in Next Gen SWG
SWG Slow Download/Upload Speeds

Has anyone experienced slow download/upload speeds when implementing SWG? It appears to be with large image files. When the Netskope client is disabled, the download speeds are much faster.Thanks.

00
L
C
chrisisinclair
posted in CASB
Netskope Client Fails to AutoUpdate to V95

Currently we are facing an issue where a bunch of Windows 10 Netskope clients attempted to auto update from v94 to v95 based on the setting in the cloud console.  We had a large amount of upgrade failures where the person is then left with no Netskope client installed. We disabled the auto update functionality on our steering config once it started to become a major problem to prevent the rest of our users dealing with this.    We currently also use NPA for managing these machines remotely through SCCM and for access to internal resources and we require the Netskope client to be installed for any access to cloud resources. Essentially every user that this happened to is completely unable to work and fixing the issue after the fact becomes difficult as we were switching to relying on a VPN for remote access to Netskope.    Is anyone else facing this issue?

00
B
B
bongoozy
posted in CASB
Netskope client upgrade to v99 failing with 1603 error in STAUpdate.txt

Dear All,We have recently enabled cloud update from the console for version 99.0.0. with opt in dot upgrade. We have a fleet of 28K device. We are experiencing lot of broken client. As per the STAupdate.txt the client upgrade failed with 1603 exit code, rolled back but was left in a corrupted state.We have to uninstall the client and install the new version manually to resolve the issue. STAUpdate.txt file attached. Logged a support call with the managed service provider for Netskope and hopeful to get a prompt reply and solution. It has become a service desk nightmare. Is this a common issue for all netskope client versions? Any peer comment will be highly appreciated. 

00
B
M
Netskope Partner
MetgatzNKNetskope Partner
asked in Next Gen SWG
Sites with self-signed certificates - apply exceptions -not global

Good afternoon, thank you for your time and good vibes.I have the following situation:We know that by default at Global level, Netskope, is blocking sites with self signed certificates.In certain cases there are sites we say "known" somewhat controlled, where there are VPN access portals, sites or systems with self-signed certificates, etc..Now the idea is not to apply it globally, but by means of exceptions, so as not to allow all sites with self-signed certificates, but only some based on need and demand.Then I tried to apply a web policy, with action Bypass and it did not work, it still shows the blocking of sites with self signed certificate, as I did not intend to allow it globally, I added a policy, of SSL decrypt, to not make decrypt to a custom web category, that contains these sites, to omit or bypass the blocking. Well this worked, but with this I feel that we lose visibility and inspection to these sites, therefore, please clarify what is the position, recommendation, proced

00
R
C
Netskope Partner
corantobaNetskope Partner
posted in DLP
IRM integration to restrict attaching sensitive documents via Whatsapp

Is there the possibility of integrating IRM with Netskope and being able to restrict what types of documents can be sent through WhatsApp according to their label? I saw in the official documentation that Netskope supports the following cloud apps with MIP:Box, OneDrive, SharePoint, Google Drive. Thanks in advance for your help in this matter.

00
C
Netskope Partner
W
wilson
posted in Next Gen SWG
Asking for support on Cert-Pinned App enhancement request request to block specific URLs

With Cert Pinned Apps, one can can specify an application (Windows EXE, Mac Process, etc) and what domains to bypass.  While there is a block option, you cannot specify specific domains, it treats the field as a "*" regardless of what is placed in the field.    My use case is that I have an application that one can put APIs into.  This is very useful, but i would like to prevent OPENAI.COM.  However, as programmed by Netskope, despite specifically putting OPENAI.com in the URL list, it blocks all Internet access from the application, which is causing disruption. This is not not explained at all during the creation process and has a single line dedicated to it in a KB article. Blink and you will miss it!   “Block: The mode and other options are not applicable and the client blocks all the app traffic”(Reference:  https://docs.netskope.com/en/adding-exceptions.html)  I am asking for support.   Please tel

00
W
M
MM_NS
posted in CASB
API Protection Integration. Many-to-One?- Yes. One-to-Many? Caution!

This post is about API Protection (previously known as API Introspection) integration best practice:   Can I integrate multiple instances of the  same SaaS app (e.g. My company's Sharepoint dev and Sharepoint prod) to one Netskope tenant? -Sure you can. And most customers do. There is no problem as long as you are within your license quota. For licensing questions reach out to your Sales team. -Having multiple SaaS apps in one tenant is also not uncommon (e.g. Box, Webex, Zoom, O365 in one Netskope tenant). Again it is just the license you need to purchase for additional SaaS app.   I have more than 2 Netskope tenants but I have only one SaaS app tenant. Can I have the same instance of one SaaS app integrated to multiple Netskope tenants? Caution! Even though the integration may succeed (i.e. the instance grant process turns green on both Netskope tenants) few immediate side effects I would like to alert you about - You are essentially doubling your API usage becaus

00
M
A
Ankitdongre1
asked in CASB
Difference between App events, page events, and alerts in skope IT?

What is the difference between App events, page events, and alerts into skope IT?

00
W
A
Alam1
asked in CASB
Wants to block send Chats message/Text for WhatsApp Cloud App

Hello Everyone,  I am trying to block the upload and send chats for WhatsApp Cloud App. I have created the  cloud app policy for WhatsApp and selected the activity "upload" and set the action "block",when we tried to upload any file it gets blocked but we are not able to block send chats for same it is still allowing.I have also tried by creating "Chat, IM & other Communication" category and selected the activity upload, and set the action "block" but it did not worked as well. Please help on how we can block the send Chats for WhatsApp web. 

00
qyost
S
Netskope Partner
Sumeet666Netskope Partner
posted in CASB
Whatsapp Web activity control

Hello Team, We want to block chat activity on Whatsapp web and allow the upload activity. How can we achieve this? 

00
S
M
Netskope Partner
MetgatzNKNetskope Partner
posted in Next Gen SWG
Support for corporate applications from Mobile with Android and IOS Smartphones

Support for corporate applications from Mobile with Android and IOS Smartphones Hello good afternoon, thinking about SSL Pining, and applications that can not be decrypted their traffic. In environments with Android and IOS mobiles, in the following native applications not Web/Cloud: Onedrive, Outlook, Sharepoint, Office 365 Suite. Thinking about the full of features and the support of these features of the Netskope Suit ( CASB, SWG, DLP, Threat Protection, API Protection, etc ) what are the scopes, limitations with respect to mobile devices with Office 365 applications. Thanks for the collaboration, for your time and the good vibes. Best regards

00
Rohit_Bhaskar
Netskope Employee

Badge winners

  • Solutions - 10
    mkoyfmanhas earned the badge Solutions - 10
  • Solutions - 10
    sshifletthas earned the badge Solutions - 10
  • Solutions - 10
    VarunKhas earned the badge Solutions - 10
  • Solutions - 2
    mkoyfmanhas earned the badge Solutions - 2
  • Solutions - 2
    rosshas earned the badge Solutions - 2
View All

Not finding what you're looking for?

Don't be shy and let us know about your challenge.

Ask your question here!
Terms & ConditionsCookie settings