Netskope Help

Netskope Cloud Exchange

The Netskope Cloud Exchange (CE) platform was created to make it easier to use customer-specific data to reduce the workload for security operators. CE does this by managing a limited set of automation actions against a small database or specific datasets, depending. CE is run as an extensible platform with core code and plugins that are installed inside a Linux Docker environment maintained by each customer.

CE is a modular API-broker designed to take data and metadata inputs, pulled from or pushed to it by 3rd-party systems, and execute a variety of actions based on the functions in each module and the configuration created by the administrator. Queries from CE to 3rd-party systems will continue to remain efficient, to minimize query counts, even as new modules are added.

CE is supported by Netskope, though individual plug-ins leverage functionality provided by third party partners. While CE comes at no cost to users, CE will only work if the attached system(s) is configured with entitlements that enable the applicable API queries and data flows. Each plugin’s software and subscription requirements are spelled out in each respective configuration guide.

A key aspect of Cloud Exchange is that it only moves data that has been originated in other systems, it does not manipulate or validate data it has received from plugged-in integrated solutions. Garbage in (to CE) will result in garbage out (from CE). The onus is on the Cloud Exchange operator to confirm that inputs are ready to be used as outputs.

Cloud Exchange requires very little compute and storage resources to run, a minimum of two (2) vCPU, 20 GB of storage, and 4 GB of RAM. It has been tested to be installable and run on Ubuntu 18.04 or CentOS 8.

To learn about the Cloud Exchange release updates, go to Netskope Cloud Exchange Release Notes.