UI/UX Enhancements

Enhanced UI/UX with improved navigation, filters, table views, log display, and UI buttons consistency.
Added a new guided tour for all modules, along with a tenant configuration tour.
Added page description, model headers, tooltip with markdown support, and clickable breadcrumbs across different pages.
Enhanced UI performance by performing UI build optimization that results in a reduced page loading time and improves user experience.
Enhanced modules dashboard will have clickable data that will redirect you to more details.
Added a dashboard to view CPU, RAM, disk usage per VM/node for HA + Standalone deployment, and pending task count in RabbitMQ, which helps you to identify Cloud Exchange backlog.

HA Improvements

Added UI-based High Availability (HA) deployment and management of Nodes which includes start/stop of node, restart of node and removal of node.
Enhanced storing of HA configuration details in the .env file which makes smooth manageability.
Added built-in GlusterFS with HA support for shared storage within Cloud Exchange nodes, removing the need for external shared storage (NFS, Other File shares). Shared storage (GlusterFS) installation and configuration is now managed by the server with built-in HA, reducing administrator effort.
- During Containerised HA deployment, the VM should have connectivity to the ubuntu PPA repository to download GlusterFS.
- Upgrade of Cloud Exchange using Debian package in Cloud Exchange as a VM will require you to install GlusterFS as part of the prerequisites.
Added support of migration from HA deployment to standalone deployment.

Cloud Exchange Improvements

Improved the Cloud Exchange Log Shipper Module performance. A Cloud Exchange v6.0 Medium instance will now support 200k EPM in the Log Shipper Module. Large instance performance will also increased.
Added a CPU/RAM/Disk Usage monitoring dashboard.

Analytics/Diagnostics

Added Cloud Exchange uptime details in the user-agent to track Cloud Exchange deployment uptime.
Added plugin parameters/configuration details in a diagnostic script to enhance troubleshooting.
Enhanced analytics to Module-based user-agent analytics to have move information.
Added platform details (slack, emails, etc) in analytics for plugins like Notifier, Webhook, etc.

Added

Core

UI

Added an Exact Data Match (EDM) Beta module that is designed to retrieve data files from configured sources at specified time intervals and securely share them with your Netskope Tenant for use with the EDM feature for creating custom Data Loss Prevention (DLP) rules. This module is only supports Standalone container-based deployment on RHEL and Ubuntu.
Added a Custom File Classification (CFC) Beta module that is designed to retrieve files from configured sources and train the custom classifier configured on the Netskope Tenant. This module is only supports Standalone container-based deployment on RHEL and Ubuntu.
Note that after upgrading to Cloud Exchange v6.0.0, Cloud Exchange users need to fetch plugin updates from the default repository in order to configure the EDM and CFC plugins.
Introduced a Cloud Exchange Management Server VM service, running on a host machine to facilitate VM resource monitoring, proxy updates, HA setup, and Management using TLS communication.
Added support of password-protected custom SSL certs that are used for the Cloud Exchange UI.
Added support for Cloud Exchange deployment on KVM through a QCOW2 Image.
Added Ticket Orchestrator Webhook support that updates tickets status, severity, and assignee back to Cloud Exchange using a dedicated plugin update. (Slack-Notifier Plugin)
Added a manual approval workflow for Ticket Orchestrator tickets creation.
Added custom status and severity support in the Ticket Orchestrator module, and simplified the mapping workflow in the Ticket Orchestrator module.
Added support of business rule filtering for Cloud Exchange logs.
Added Ubuntu 24 as a supported base OS for container-based deployment.
Added an automated source field value learning in value map type fields in the Risk Exchange schema editor that can be used by the end user to map target fields.

Added Total Events Queried Count and Recent Events details in the Ticket Orchestrator Dashboard.
Added support to migrate plugin configurations from the beta repo to GA through a UI button if the same or a higher version is available in the GA repo.
Added support to modify Cloud Exchange users password policy under Settings > Users Settings > Password Policy.
Added support for dynamic fields that render new input fields based on current field values.
Added a revert action workflow where you can choose multiple actions and revert them in the Risk Exchange Module. The latest Netskope Risk Exchange Plugin targets marking UCI impact action as an anomaly using this workflow.

Changed

Core

UI

Enhanced the Cloud Exchange setup workflow by reducing inputs and also introduce a cloudexchange.config file to simplify custom configuration inputs, such as UI port, protocol, maintenance password, etc. If the file is not present, the setup script now applies best-fit default values and auto-generates password configurations without asking for CLI inputs.
Enhanced the proxy configuration to be managed directly from the Cloud Exchange UI without requiring setup and stop/start scripts.
Added a Log Shipper Module warning log during ingestion of one batch if the ingestion time exceeds ideal time, which is 10 seconds.
Enhanced inter-container communication by upgrading it to TLS-based communication. Core container to the RabbitMQ and MongoDB connection will be over TLS.
Enhanced the Cloud Exchange Logging page by adding resolution steps that help you to resolve errors easily.
Enhanced the setup script to flag an error if the CPU doesn’t support AVX, since its prerequisite.
The Netskope Tenant plugin configuration will be mandatory to use any Cloud Exchange modules, and you will not be able to configure other plugins until the tenant plugin configuration is done successfully.
Enhanced the diagnostic script to add plugin configuration details, indicators/alerts/events counts per plugin, and log ingestion/pulling counts that helps with troubleshooting issues faster.
Introduced the cloudexchange.config file in order to provide custom inputs, like an SSL protected password, UI port, JWT secret, etc., during setup of Cloud Exchange.

Enhanced plugin updates to display only the relevant release notes between the current and newer versions.
Enhanced the value map type for string mapping support in Risk Exchange schema fields through which users can map string-to-string.

Plugins Updates

Netskope Threat Exchange Plugin workflow improvements based on updates to IoC severity and verdict from Netskope. The Threat Exchange plugin now integrates directly with the Netskope Retrohunt API. If an indicator is identified as a false positive, our system automatically uses the existing retraction workflow to pull/delete it from your active threat list.
The Risk Exchange plugin will allow the undo functionality for the Update UCI Impact action supporting Mark Anomaly as allowed.
Added UCI Reset and Delete App Tag actions support for Netskope Risk Exchange.

EDM and CFC Beta Modules New Features and Enhancements

The new Exact Data Match (EDM) and Custom File Classification (CFC) modules are currently in Beta.

Added

Core

UI

Plugins

EDM Module:

Added an RBAC for EDM module (Read and Write).
Added APIs for managing EDM Plugins, Sharing and Management screens.
Added a plugin configuration page along with step-wise validation to check the connectivity and pull sample data.
Added a manual Upload workflow.
Added support of Generating hashing for structured data using a Netskope hash generation script.
Added capabilities for uploading EDM hashes to the Netskope Tenant using a Netskope Uploader script.
Added Task to pull data from a configured source per the pull interval (Minimum 12 hrs).
Added a task for sharing the generated EDM Hashes to the Netskope Tenant upon completion of hash generation.
Added a task for polling the status of the uploaded EDM hashes to check the apply status and delete the staging file on success/failure.
Added a task for cleaning the generated EDM hashes upon expiry.

CFC Module:

Added an RBAC for CFC module (Read and Write).
Added APIs for managing CFC Plugins, File Metadata, Business Rules, Sharing, and Management screens.
Added a plugin configuration page along with step-wise validation to check the connectivity and validate the file filters and number of files.
Added a Manual Upload workflow with multiple files and folder selection.
Added support for hashing images/zip data using a Netskope Hashing script.
Added a task for executing plugin lifecycle to pull file metadata, pull image(s)/file(s) if required.
Added a task for hashing and sharing the pulled data based on the Sharing configuration, in which hashing depends on the selected Destination Tenant and Classifier.
Added a task for cleaning the File metadata upon expiry.

EDM Module:

Added an RBAC for EDM module (Read and Write).
Added a Plugins page to display configured EDM Plugins.
Added step-wise validation and validation errors on fields along with a message.
Added a sharing page to configure sharing between source and destination plugins.
Added Sharing and an Upload Management screen to check hash generation status and the upload process.
Added a manual Upload workflow page.
Added a Settings page for the EDM to cleanup the hashes.

CFC Module:

Added an RBAC for CFC module (Read and Write).
Added a Plugins page to display configured CFC Plugins.
Added step-wise validation and validation errors on fields along with a message.
Added a File Metadata page to check details on pulled file metadata along with filtering capabilities.
Added business rules to filter out files using files metadata.
Added a sharing page to configure sharing between source and destination plugins, along with file classifier and training type.
Added a Sharing and Upload Management page.
Added a Manual Upload workflow with multiple files/folder support for Hash generation, and Upload for the same to Netskope Tenant.
Added a Settings page for the CFC to cleanup the File Metadata.

3rd Party Plugins:

Microsoft Fileshare EDM Plugin
Microsoft SQL EDM Plugin
Linux Fileshare EDM Plugin
MySQL EDM Plugin
OracleDB EDM Plugin
Microsoft Fileshare CFC Plugin
Linux Fileshare CFC Plugin

Netskope Plugins:

Netskope Forwarder/Receiver EDM Plugin
Netskope EDM Plugin
Netskope CFC Plugin

EDM and CFC Beta Modules Changed

Core	UI
Enhanced the Setup script to mount the files-data folder under data folder to store and manage files temporary, and added the permission for the same. This can be used to store and manage files for EDM and CFC Modules.	Added a restriction in the settings as EDM and CFC modules can not be enabled with other Cloud Exchange modules. Enhanced filtering capabilities into the query builder to support custom functions and query transformation support, which can be used to filter out file size with options to select the unit as KB, MB, or GB.

Netskope Cloud Exchange Release Notes Version 6.0.0