Getting Started

Articles

• About the Admin Console
• Deployment Options
• Quick Start
  • Access the Admin Console
  • Create Local Administrators
  • Integrate an Identity Provider (IdP)
  • Check Firewall Policy
  • Bypass Netskope from your VPN
  • Configure a Steering Profile
  • Add Bypasses in Netskope
  • Configure Netskope Client Settings
  • Deploy the Netskope Client
  • Allowlist the Netskope Client
  • Validate Traffic Steering
  • Create and Validate a Security Policy
  • Next Steps
• Secure Tenant Configuration and Hardening
• Microlearning Video Library
• Netskope Security Cloud Features
  • SaaS, IaaS, Web Discovery, and Risk Assessment Features
  • Granular Visibility and Control of SaaS, IaaS, and Web Features
  • Encryption and Tokenization Features
  • Award-Winning DLP Features
  • Threat Protection Features
  • Architectural Advantage Features
  • Supported Integrations Features
• Netskope Success Resource Center
  • Vendor Risk Assessment
    • Understand the risk of cloud services utilization by leveraging CCI
    • Provide a risk assessment of a cloud service using CCI
    • Use CCI to understand cloud spending
  • Observe Cloud App Activities (OPLP) and Risk Insights
    • Visibility on data movements to and from cloud services
    • View top cloud categories by usage
    • View top apps, activities, and data by usage
    • View users access to cloud services geographically
    • View the number of sessions and users by category or app
  • CASB API Protection
    • Understanding API Protection
      • API Connectors
      • API Protection Dashboard
      • API Protection features
      • API Protection scans
      • API Protection (Managed App Activities) use cases
    • API (Observe for Managed App Activities)
      • Create a list of publicly accessible documents in an API-Protected service
      • Create a list of externally shared documents stored in an API-Protected service
      • Create a list of private documents stored in an API-Protected service
      • Create a list of executable or other files stored in an API-Protected service
      • Create a list of users with most public files stored in an API-protected service
      • Create a list of users with non-expiring links to files stored in an API-Protected service
      • Create reports on activity or incidents in an API-Protected service
    • API (Monitor for Managed App Activities)
      • Alert when a file is shared with large number of users (internal/external)
      • Alert when a file is shared with specific groups
      • Investigate specific external user activity to determine risk posture
      • Investigate specific internal user activity to determine risk posture
      • Identify and act on individual files or folders on a case by case basis
      • Alert when a file is made public
      • Alert when a file is externally shared
    • API (Protection for Managed App Activities)
      • Create a policy to allow sharing with approved external users
      • Create a policy to block sharing with identified external users
      • Create a policy to identify and modify internal and external sharing
    • DLP – Protect state for Managed App Activities
      • Create a DLP policy to search an entire data repository and apply predefined labels per Enterprise data classification rules
      • Create a policy to identify sensitive data in specific locations (public, external or non-approved groups)
      • Create a policy to alert or block sharing of sensitive data with external Teams
      • Create a policy to find encrypted or password protected files
      • Create and apply a legal hold policy if required
    • Threat Protection – Protect state for Managed App Activities
      • Identify Malware in data repositories and action per defined policy
  • Cloud Inline Protection
    • Inline monitoring for Cloud apps
      • Apply policies based on AD users, groups, or OU
      • Apply policies based on the source of traffic
      • Apply policies based on the source of traffic, trusted, or untrusted networks
      • Apply policies based on the source of traffic, forward, or reverse proxy
      • Apply policies based on the application instance
      • Apply policies based on the constraint profile
      • Apply policies to enforce step up authentication as required
      • Analyze user activity, such as uploads or posts, in cloud apps that create or shares content
      • Analyze and report on using corporate credentials on non-sanctioned apps
    • Inline protection of Cloud apps
      • Allow access to a sanctioned instance of a supported corporate app
      • Allow access to a sanctioned application based on app tag
      • Block risky activities to Unsanctioned/non-IT purchased apps
      • Block risky activities to Low / Poor CCL apps
      • Alert/block upon detection of password protected files
      • Coach users away from unsanctioned applications and allow justification of required use
  • Unmanaged Device Protection
    • Monitor – Unmanaged Device Protection
      • Monitor activity with reverse proxy as an access method
      • Report on all activity with reverse proxy as the access method
      • Alert on all activities accessing a managed service via reverse proxy
      • Create DLP policies for sensitive data for a specific OU from a user and provide user coaching
    • Protect – Unmanaged Device Protection
      • Block unmanaged devices from malicious files uploaded or downloaded from our sanctioned apps
  • IaaS
    • IaaS – Monitor
      • Public Cloud Overview
      • View all inventory for IaaS providers
      • Public Cloud Security Posture
      • CSPM Scans on AWS Accounts
      • CSPM Scans on Azure Accounts
      • CSPM Scans on GCP Accounts
      • DLP Scans on AWS Accounts
      • DLP Scans on Azure Accounts
      • DLP Scans on AWS, Azure, and GCP Accounts
      • Threat scan on IaaS Storage
    • IaaS – Protect
      • Remediate IaaS misconfigurations
      • Manual steps for remediation
      • Auto Remediation
      • Using Classic Reports
      • Using Advanced Analytics
  • SWG Web traffic
    • NGSWG Basic Policies
      • Blocking Online Ads Silently
      • Filtering Top Level Domains
      • HTTP Header Policies
      • Filtering Traffic to High-Risk Countries
      • Review Available Metrics and Confirm Reports
  • Advanced Threat Protection
    • Protect against unknown malicious websites
    • Protect against unknown web threats
    • Protect against viruses and malicious files
    • Protect against network-based attacks
    • Protection against Insider threats
    • Protect against Unmanaged S3 access
    • Shadow IT – Identifying unsanctioned AWS accounts using Skope IT
    • Shadow IT – Identifying unsanctioned AWS accounts using Advanced Analytics
    • Control AWS apps using Instance IDs