Major New Features
New Information Architecture
- We have re-organized our navigation into 3 groups: Reporting, Management and Platform.
- Reporting includes Dashboard, Alerts and Reports.
- Management includes Data Stores, Classification, Policies, Users Identity and Administration.
- Platform includes Netskope One DSPM-related operations like Platform Users, Licensing and Support.
- The top panel contains Platform User Profile and System Notifications.
Alert by Policy Improvements
- We have added a unique Alert Identifier for each Alert.
- We have added which Sensitive Fields were associated with the triggering of an alert.
- Alerts for Field Classified and Data Modified were added.
Alerts by User Enhancements
- We can now assign a User Risk Rating for those users that are generating Alerts due to risky query interactions with sensitive data. This helps determine your top Risky Users and Departments.
Data Store Auto-Discovery
- Netskope One DSPM can now Auto-Discover Data Stores in the AWS and GCP Environments to monitor Data Store Sprawl. Netskope One DSPM needs additional IAM permissions to auto-discover data stores.
Data Store Connectivity
- We have added a capability to provide a TIME for Once Daily Scan frequency for each data store and to turn on/off Classification or Data-in-Use monitoring for each data store.
- Netskope One DSPM can ingest Custom Query Logs from S3 bucket in CSV/JSON format for each data store to do Data-In-Use Monitoring and Data Misuse Detection. Netskope One DSPM still needs to connect to the Data Store to discover the Schema changes to get full benefit of this feature.
- We have expanded our Connector Support for AWS RDS (Oracle & MariaDB) and Heroku-Postgres Data Store Service types.
Configuration Discovery and Misconfiguration Detection
- We provide visibility into data store configurations for Encryption, Backup and Public Accessibility and determine Misconfiguration Risks
Classification Improvements
- We have reorganized the Classification table and we now show additional metadata (data type) in the expansion for each field.
- We can also get samples for a field to help with Classification.
- Sensitivity Level (Low, Medium, High) have been separated from Tags and is now a system-defined field. You can still change the sensitivity level of each sensitive data type but you cannot define additional levels.
- We have a new Filter and Bulk Edit workflow to tune Classification.
Policy Enhancements
- We have added 2 new policy types:
- Field Classified: Generates an alert when a field is classified for the first time or reclassified.
- Data Modified: Generates an alert when an INSERT, UPDATE or DELETE operation was performed on a sensitive field(s)