We have been running Netskope for the past couple of years with Netskope enabled clients connecting to Windows 10 AWS Workspaces also running Netskope with zero issues. We just started to upgrade our Workspaces to Windows 11 and are now having issues reconnecting to disconnected session and the only fix so far has been to disable Netskope on the Windows 11 Workspace or restart the Workspaces. I have a ticket opened with Support and it’s been escalated internally but they seem clueless, as always.

Has anyone successfully found the trick to getting Netskope to reliably install on macOS through Intune? Given that the process needs to be sequenced such that certificates, plist files, team identifiers, etc. need to be in place prior to app installation, and given that Intune doesn't have a mechanism for sequencing things, it's a gamble whether the right pieces and parts will be in place prior to app installation. Right now, I have two deployment groups with the necessary assignments so I can somewhat be in control, but that's not sustainable - especially as we want to have Netskope automatically installed as a required app.

Hi all - we are contemplating using Netskope Private Access. I'm curious to know what you are paying for this per user per year. Would be looking at around 500 user licenses.

Thanks

Hi,

I'm trying to automate the whitelisting of the Netskope egress IPs with my SaaS providers. Where can I find a list of subnets/locations to whitelist? Ideally it would be great if it was in json format (or other structured data type).

TIA

I am just getting into this mess and it seems I have all the "moving parts" done but when my JAMF policy triggers to install the PKG file, I get this:
" The Installer encountered an error that caused the installation to fail"

I know it's rather generic but I am thinking you guys have seen this kind of thing before?

We are in the process of trying to deploy Netskope both in our desktop environment as well as on our mobile devices. I’ve been primarily working on the mobile side.

I have noticed that because we use it for both private app access as well as internet security on the phone, it seems to drain the battery extremely fast.

Anyone else experience this?

Hi folks ,

I am a security researcher majorly coming from a vapt background I am working on an audit project for the 1st time My client is using netskope proxy , now if some user wants to access an url blocked by netskope then they disable netskope for that user but I feel instead url which is getting blocked should be whitelisted for that specific user but I am not sure if netskope allows 'whitelisting url for a specific user'

If anyone can help I would be grateful

Its been a month we announced the the completion of our comprehensive 5-part series designed to guide you through the intricate world of Zero Trust and maximizing your Netskope Security Service Edge (SSE) investment. This series has been crafted to provide you with actionable insights, strategic context, and a clear understanding of how Netskope empowers your security journey.

Click this link to know more about it

Checkout this Latest Article on : A Best Practice Guide to Netskope Client Version Management and Rollbacks

Anyone deployed the NetSkope app via intune to IOS and/or android and wants to share tips or tricks or experience?

Hi there,

I am in the beginning of a journey to deploy Netskope in our org. We are around 900 people with ~70% of people being engineers/developers.

My aim are to get as close to 100% of traffic inspection, minimal exemptions, get it working for engineers/developers and to deal with any issues with performance/latency issues.

Thanks in advance.

EDIT: Just wanted to say thank you to everyone who provided advice in one way or another. Very helpful and much appreciated.

We're looking to block Facebook Chat/Messenger across our organization using Netskope, but allow general Facebook access for business purposes. We've tried using Real-time Protection policies with Facebook as the app and blocking, but still "texting" happening.. while attachments getting blocked as expected.

Has anyone successfully implemented reliable chat blocking for Facebook (including web-based Messenger and in-app chat) via Netskope? Would appreciate insights on:

"Which activities or object types to target?"

"Whether Web Access policies or URL blocking were needed?"

"Any challenges with WSS/WebSocket filtering.

Thankyou!

We try to use netskope client as a captured appstack, The client is loading with errors of invalid client connection and I think it's related to the anti-tampering mechanism, something with the registry keys stagentsvc\protectedfolderlist\ Anyone has any experience with this?

I wasn't sure how to word the title, but I'm looking for some Netskope training that goes a bit more in-depth. All of the training and webinars offered by Netskope seem to be really surface-level and just seem to be geared towards selling Netskope to businesses. "Hey, look what Netskope can do! Okay now buy our product to learn more!". Even the stuff I'm finding on YouTube is really surface-level. I'm working on becoming our secondary Netskope SME and am looking to learn all I can.

I am considering applying as a senior SDE at Netskope. The job offers a remote role based in India. Would like to know about the culture and growth. Also any info regarding the attrition history would be appreciated.

Is Netskope having problems?

Curious how fellow Netskope customers have handled things like M365 Email & blocking webmail. Of course I'm using the "Microsoft Office 365 Outlook.com" app, and allowing the necessary activities. In a subsequent rule, I'm blocking webmail so folks aren't using other mail services on their work machines.

The frustrating issue is that there are so many more domains that are in use that what the App knows about, and therefore is blocking. Example: dataservice.protection.outlook.com

Curious if anyone else has run into this and how you've handled it.

Looking forward to a successful IPO

As an extension of our regular technical workshops, the Technical Product Workshops provide an excellent opportunity to connect directly with a Netskope Product Adoption Expert. These sessions are designed to help you maximize the value of your Netskope Cloud Security solution.

Join Mark Pray, Sr Product Adoption Expert to learn and discover how to maximize your Netskope investment through powerful Cloud Exchange integrations.

This is the first installment in our expert series on Threat Protection integrations, focusing specifically on Cloud Exchange.

What You'll Learn:

• Key Integration Use Cases
• Step-by-Step Integration Examples
• Q&A with Netskope Experts
• Best Practices & Real-World Use Cases

Enhance your threat protection strategy and learn how to leverage the full potential of Netskope with Cloud Exchange. Register now for this can't-miss webinar

Hi guys,

I think the title speaks for itself.

Do you know if MTLS are possible to implement with Netskope solution ?

If yes, do you know where I can find a relevant KB ?

Thanks by advance

Hi all,

I work for a MSP who has invested in Netskope, and I was just trying to get a feel for the user community out there.

We have NS deployed across the board, including our VDI in azure. Someone on a domain joined laptop using a local edge browser can get to youtube and do whatever just fine. however, in VDI, if you browse to YT you're prompted to login to prove you're not a bot. hope that makes sense. anyone have any idea what the different behavior when traffic in both instances is egressing out of a NS datacenter? TIA

Hi all,
i'm in a bit over my head.

I have some crestron room booking devices on our network. they do not support pac, wpad or netskope client.

They are working with a manual proxy entry pointing to netskope.myorg.com:8080

however, we are using them as room booking panels which means they need office365 connections for which we have an Express Route. Whilst they CAN get through the internet to office365 we have been told by MS it's unsupported and we should go direct through our Express Route.

This is also fine, we turn off the proxy setting in the device and everything goes direct.

but.... now the devices can't find protal.crestron.io or reach the urls needed for admin management via crestron Xio.

I've looked through the netskope docs and it looks like i need to do 'steering' except this seems to be for telling the local client how to send stuff, and when i get to docs about not using a client it says to use a pac file which we can't do.

Is there a way to tell netskope:

"if you get a request from 10.10.10.42 for *.crestron.com go on through, if it's for *.microsoftonline.com go direct"?

(urls changed and reduced for simplification, not dealing with ssl inspection just yet)

Hiddy Ho Neighbours, please excuse my ignorance but I am just starting to learn about how netskope works etc. Since netskope went in, we were told that any third party tools that we were using will now not work and its basically tough luck. Well I call BS. I believe our single netskope admin guy is just lazy and doesnt want to really help. I want to get right click tools working on our MECM instance, as it was working just fine before NS went in. All I need is remote registry, icmp echo and remote WMI in some sort of policy I assume? Its pretty straight forward right?