Added

Core

UI

Netskope Cloud Threat Exchange (CTE) plugin now supports the Destination Profile that allows Netskope administrators to manage a configurable set of network targets (IP addresses, domains, URLs) used to define policy enforcement and scanning rules. This new feature is not a function of the CE version but a key new feature released at the same time.
Added support for Azure Key Vault. Extended Secrets Manager to support Azure Key Vault alongside the existing HashiCorp Key Vault, allowing user to store connector credentials in Azure supporting both Azure Client Secret and Certificate authentication flows.
Added Normalization options in the Risk Exchange Schema Editor to control field value transformation during data ingestion. This improves user entity matching and reporting accuracy by consolidating duplicate user records.
Added risk score/context stats in Risk Exchange Dashboard.
Added Bi-directional support for ticket creation and update workflows in the Netskope CTO plugin with the option to resolve incidents back to Netskope Tenant.
Added the functionality to filter the expired days of IoCs in CTE Module, in a relative format (days, hours, minutes). This helps in dynamically filtering out IoCs that will be expiring in the next n number of days/minutes/hours.
Added support for different delimiters in the EDM Module, like comma, pipe, semi-colon, and custom delimiter.
Added a retry mechanism for 429 in the EDM hash upload with 5 maximum retries and 5-second delays between attempts.
Added restrictions for enabling EDM and CFC modules in Cloud Exchange as VM, HA, and Medium stack deployments.
Added support for multiple special characters in the JWT Secret and Maintenance Password, along with encryption and decryption for secure storage.
Added support for regenerating the expired SSL certificates through the UI.
Added a feature to generate and download the diagnostic logs from the Cloud Exchange UI.
Added the Type field in the diagnostic file Cloud Exchange Platform logs.

Added search bar on the Log Shipper > Mappings page to filter mapping files by name or repository for improved user experience.

Changed

Core

UI

Upgraded MongoDB from version 8.0.17 to 8.0.18 to address known security vulnerabilities and improve database stability.
Updated the minimum required version for Cloud Exchange to Python 3.11.
Updated the EDM hash generation workflow with respect to SHA-based hashes. File IDs will now be 64 characters long.
Updated the handling of 200 and 204 responses separately in the EDM upload script. Enhanced the EDM polling task to properly clean up staging files from remote servers for both completed and failed statuses, preventing orphaned files and ensuring comprehensive resource management.
Changed plugin sync interval from 12 hours to 1 hour for improved EDM hash generation and updates to the Netskope tenant, and also reduced the EDM hash upload status polling interval from 1 hour to 10 minutes for faster status updates on uploaded EDM hashes displayed in EDM Sharing and upload management page.
Enhanced the Threat Exchange framework to allow patch-level control per action instead of globally at the plugin level, enabling more precise indicator sharing behavior.
Enhanced the plugin repository configuration feature by removing authentication requirements for public repositories, allowing you to add public repos without providing username and password credentials. This improves user experience for public repository access while maintaining security for private repositories that still require authentication.
Enhanced the ability to display promotional banners only to customers running specific Cloud Exchange versions, enabling targeted communications without requiring new software builds, while maintaining backward compatibility with existing banners.

None

Removed

Core

UI

Removed support for RHEL 8.x operating systems, making RHEL 9.5 the minimum supported version for Cloud Exchange deployments.

Removed hardcoded analytics secrets which are no longer in use to address the security vulnerabilities.

Removed non-functional Cloud Exchange container update mechanism from the settings, streamlining the interface to focus only on plugin repository updates.

Netskope Cloud Exchange Release Notes Version 6.1.0