Netskope Help

File Type Detection

Note

If you do not see this option in our account, contact Support to enable this feature.

The File Type Detection capability allows admins to configure policies to allow or block files based on a specific category (e.g. binary or executable) or file type (e.g. Android Package Kit). Optionally, admins can send files for deep analysis using DLP Profiles or create Real-time Protection policies to ensure the content of files are checked to avoid data exfiltration.

Add a File Type Criteria and Constraint

Use the file type criteria and constraint in a policy to restrict upload or download of various types of files or category of files. 

ActivitiesConstraints_1.jpg
ActivitiesConstraints5.jpg
  1. Create a Real-time Protection policy or edit an existing policy. For learn more: Real-time Protection Policies

  2. Click Add Criteria & Constraints > File Type.

  3. Select Matches or Does not Match the condition specified.

    ActivitiesConstraints2.jpg
  4. Click Select File Type to make file category or file type selections.

    ActivitiesConstraints3.jpg
  5. The Select File Type window displays. You can select a category or click the magnifier to view the file types within the category.

    ActivitiesConstraints4.jpg
  6. Optionally, click Categories to return to the Category list without making any changes.

    ActivitiesConstraints7.jpg
  7. Optionally, select the File Type Not Detected category if your file category is an unknown file type or doesn’t fall into an existing categorization. Scroll to the bottom of the list to view this category.

    ActivitiesConstraints8.jpg
  8. Add Profile and Action.

  9. Add a policy name.

  10. Click Save.

View generated alerts in the Skope IT application event details.

Add a File Size Criteria and Constraint

Use the file size criteria and constraint in a policy to restrict the size of various types of files or categories of files that users can upload or download.

  1. Create a Real-time Protection policy or edit an existing policy. For learn more: Real-time Protection Policies

  2. Click Add Criteria & Constraints > File Size.

    ActivitiesConstraints9.jpg
  3. Select Matches or Does not Match the condition specified.

    ActivitiesConstraints2.jpg
  4. Select a File Size Operator.

    ActivitiesConstraints10.jpg
  5. Enter a File Size and select the unit of measure. The current file size for beta is limited to 1.999 GB.

    ActivitiesConstraints11.jpg
  6. Add Profile and Action.

  7. Add a policy name.

  8. Click Save.

Skope IT Application Event Details

Navigate to Skope IT > Application Events to view alert details.

Real-time Protection Policy Migration

Admins must migrate any existing policies to the new file type options for more comprehensive detection. 

All of your existing policies that need to be migrated have been automatically updated by Netskope.

Navigate to Polices > Real-time Protection > click Review Suggestions. A wizard will guide you through the migration suggestions. You can accept the suggestions or make new file type choices.

migrate_policy.jpg

Note

Admins must verify the migration suggestions (wizard) before applying to ensure accuracy.