Netskope will now only support Endpoint Detection and Response integrations with Netskope Threat Exchange. The in-tenant EDR integration will no longer be available after December 1, 2025. To learn more: Netskope Product EOL Announcements.
To take advantage of the EDR integration, a remediation profile needs to be created for use alongside a policy action. The remediation profile enables a reusable configuration of an EDR server to trigger actions, as well as provides actions to take following a Netskope threat detection. An EDR service must be integrated before creating a remediation profile.
To create a remediation profile:
- Go to Policies > Threat Protection > Remediation Profiles, and then click New Malware Remediation Profile.
- Select the EDR servers to connect to and the actions (Isolate, Alert, Add to Watchlist/Blocklist) to take. When finished, click Next.
- Name the profile and click Save Malware Remediation Profile.