Purview Integration is missing under Settings
Check if the following tab exists in Netskope admin console in Settings > Manage > Microsoft Purview Integration. If you still don’t see it, please get in touch with your Netskope account team.
Verifying a connection between Purview and Netskope
Once correctly configured, a green circle with a checkmark will show up in Settings > Manage > Microsoft Purview Integration.
Unable to see synced users in Netskope
Follow the guide on User Provisioning with Entra ID.
Synced users will show up in the Netskope admin console in Settings > Security Cloud Platform > Users. The sync can take 1 hour to happen.
Send the synced users an invitation to install Netskope Client. Once users install the Netskope Client, the email displayed in the Netskope Client will match up with Entra ID.
No traffic flowing into Purview
Check if Purview Forwarding is enabled. Go to Policies > Real-time Protection > Purview Integration, toggle the button to Allow sending all traffic to Purview.
- Release-125.0.0.x: Check if Purview Forwarding is enabled. Go to Policies > Real-time Protection > Purview Integration, toggle the button to Allow sending all traffic to Purview.
- Release-127.0.0.x: Check if a RTP policy is defined with Action as “Forward to Purview-DLP”. Go to Policies > Real-time Protection.
Missing traffic types in Purview
See the terminology reference for Netskope Cloud App and App Connectors.
Support of online resources is limited to Netskope-supported cloud applications.
Most of the apps with app-specific connectors is supported.
Support for applications with universal connectors depends on the activities identified by the connectors.
Are all web activities supported with this integration?
Netskope identifies activities performed by the user through detailed application analysis. Activities such as upload, download, and POST are supported in this integration by default. Other Netskope activities support can be extended for this integration, but require backend configuration change on Netskope side. The three default activities should cover most scenarios.
Is it possible to forward traffic for cert pinned applications?
Certificate pinned applications are bypassed by Netskope by default and thus not supported for this integration.