Connect AWS FSx for Windows File Server to DSPM

Overview

Netskope DSPM enables you to scan unstructured data stored in AWS FSx for Windows File Server. The platform supports Discovery and Classification to detect sensitive information within your file shares.

Use this article to configure the connection between your FSx for Windows File Server and Netskope DSPM.

Prerequisites:

Before connecting the data store, ensure the following requirements are met:

• Infrastructure: Your FSx for Windows File Server file system must be created and joined to an AWS Managed Microsoft AD (or equivalent directory).
• Access: File shares must be configured and accessible to a directory user.
• Connectivity: A DSPM Sidecar must be deployed in the same VPC, subnet, and security group as the FSx file system. For supported AWS deployment options (CloudFormation, Terraform, Helm, etc.), see Amazon Web Services (AWS).
• Onboarding: Your AWS account must be onboarded in Netskope DSPM.
• Permissions:
  • If you used CloudFormation/Terraform for onboarding, permissions are automatically configured.
  • If you onboarded manually, ensure your IAM role includes:
    • fsx:DescribeFileSystems
    • fsx:DescribeStorageVirtualMachines

Connect Your Data Store

Step 1: Provide Credentials

Follow these steps to configure the connection:

1. Go to Data Stores > Data Store Inventory.

2. Click CONNECT A DATA STORE in the upper right.

   Tip: Alternatively, if the data store was already found by auto-discovery, go to the Discovered tab and click Connect in the Actions column.

   

3. In the Connect a Data Store window, click the data store icon you wish to connect.

4. In the Provide Credentials section, complete the following fields:

Step 2: Scanning Infrastructure

1. Click Next.
2. When the Select Capabilities tab appears, complete the following fields:
   • Assign a Data Owner (Optional): Select one or more users responsible for this data store.
   • Which databases should Netskope DSPM scan?: Select the specific data stores and schemas to monitor, if applicable.
   • Features: Select the features you want to enable.

Enabling Classification triggers file scanning based on your defined sampling rate. The following classification limits apply when using Advanced Scan. When Smart Scan is selected, file selection is automated by the clustering algorithm and these manual limits do not apply. For more details, see Data Store Smart Scan.

• Scan Limits: DSPM processes a maximum of 100,000 files per scan, regardless of the sampling rate. If you choose 100%, the system scans files in batches of 100,000 across subsequent scans until all files are covered. A maximum of 1,000,000 files will be scanned per data store.
• File Size Exclusions: The scanner skips files larger than 128 MB.
• Incremental Scanning: To optimize performance, DSPM only rescans files that have been modified since the last scan.
• File Type Filtering: You can optionally use a regular expression to restrict sampling to specific file types.

Step 3: Review and Save

1. Click Save.
   • When the Review tab appears, the system validates your configuration. If there are any issues, follow the on-screen instructions to fix them.
2. Click Save to finalize the connection.

Supported File Types for Unstructured Data Store Scanning

DSPM now supports all file types supported by the DLP appliance: