Skip to main content

Netskope Help

Configure the Netskope Plugin for Threat Exchange

You will need your Netskope tenant name and API token (V1, and optionally V2) to complete this configuration.

If you have not added a Netskope tenant in Cloud Exchange, go the Configure the Netskope Tenant Settings for Cloud Exchange section of Get Started with Cloud Exchange.

  1. Go to Settings > Plugins.

  2. Select the Netskope CTE box to open the plugin creation pages. Field descriptions are provided here.

    Enter and select the Basic Information on the first page:

    • Configuration Name: Enter a name appropriate for your integration.

    • Tenant: Choose the Tenant you added previously.

    • Aging Criteria: Adjust to your business needs. The default is 90 days for an indicator to be marked as inactive.

    • Override Reputation: Enter a value between 1-10. Reputation is a meta field that can be used for advanced sorting only.

  3. Click Next.

  4. Enter and select the Configuration Parameters on the second page:

    • Enable Polling: Leave the default of yes.

    • Type of Threat Data: Select the type of threat data you want to collect.

  5. Click Save in the top right. Go to Threat Exchange > Plugins to see your new Netskope plugin.

Threat Exchange Field Descriptions



Default Value

Configuration Name

Name of the Threat Exchange plugin.


Tenant Name

Netskope Tenant name. For <companyname>, enter <companyname>.


Aging Criteria

How long before the indicator is marked “inactive” and will no longer be sharable.


Override Reputation

All reputation indicators are honored when provided by plugged in alliance partners. If they are not provided, their reputation is set to 5. The native or assigned value can be overridden when setting this value.


Enable Polling

Enable/Disable polling data from Netskope.


Type of the Threat data to pull

Type of Threat data to pull. Allowed values are Malware, URL (For Malsite data) and Both.