Netskope Help

Netskope Cloud Exchange

The Netskope Cloud Exchange (CE) tool was created and delivered to customers to make it easier to use customer specific data to reduce the workload for security operators. CE does this by managing a limited set of automation actions against a small database or specific datasets, depending. CE is run as an extensible platform with core code and plugins that are installed inside a Linux Docker environment maintained by each customer.

CE is a modular api-broker designed to take data and metadata inputs, pulled from or pushed to it by 3rd-party systems, and execute a variety of actions based on the functions in each module and the configuration created by the administrator. Queries from CE to 3rd-party systems will continue to remain efficient, to minimize query counts, even asnew modules are added.

CE is supported by Netskope, though individual plug-ins leverage functionality provided by third partypartners. While CE comes at no cost to users, CE will only work if the attached system(s) is configuredwith entitlements that enable the applicable API queries and data flows. Each plug-in’s software andsubscription requirements are spelled out in each respective configuration guide.

A key aspect of Cloud Exchange is that it only moves data that has been originated in other systems - itdoes not manipulate or validate data it has received from plugged-in integrated solutions. Garbage in (toCE) will result in garbage out (from CE). The onus is on the Cloud Exchange operator to confirm thatinputs are ready to be used as outputs.

Cloud Exchange requires very little compute and storage resources to run, a minimum of two (2) vCPU,20 GB of storage, and 4GB of RAM. It has been tested to be installable and run on Ubuntu 18.04 or CentOS 8.