Major New Features
Onboarding Flow Updates
The onboarding flow has been updated to guide the first time user navigating through the Netskope One DSPM UI on the suggested next steps.
- Banner on Infrastructure Connection page when an account is added to take them to See Auto-Discovered Data Store or Connect a Data Store
- Banner on Data Store Inventory once the scan is complete to guide them to data classifications
New Dashboard and Reporting
We have updated our Dashboard with statistics from new features to answer the top questions asked by everyone when it comes to Data Security:
- What data security related issues have been raised that I should be triaging today?
- What sensitive data exists in my environment?
- Where is this sensitive data located?
- Who has access to this sensitive data? Are they misusing their privilege? Who is potentially misusing data?
To answer these questions – we have split our dashboard into 3 Tabs
- Alerts Tab:
- Provides statistics on Total Open Alerts and their distribution by Severity and a graph on how they have grown over time.
- It also provides a distribution of alerts by policy types, details on the Top 20 open alerts and the users who have been generating the most alerts.
- Sensitive Data Tab:
- The 1st half of this page provides statistics about the number of sensitive fields as of today and a graph on how they has grown over time.
- It also provides a distribution on Sensitive Data by Severity and which are the most common sensitive data types.
- The 2nd half of this page summarizes how many data stores have been discovered and how many of them are connected to Netskope One DSPM for data discovery and classification. It also shows how data stores have grown over time in your environment.
- It provides a list of the most sensitive data stores (sorted by Data Store Sensitivity Score) so you know which data stores could be the most impacted in the event of a breach. It also provides a distribution of data store by service type.
- Users Tab:
- Provides a view into number of users found by Netskope One DSPM across your connected data stores and how many of them have been determined to be risky, based on their behavior.
- It also provides a rollup view by Department if the Department information is provided in Employee Management by directory services integration. It provides a temporal view into how your risky users have grown over time.
The Executive Summary Report has been enhanced with this information as well.
New User Assessment Dashboard
User Assessment is a new Left Navigation option that provides a Summary View of all the Users sorted by their User Risk Rating. User Risk Rating is calculated based the Severity of Alerts generated by a User. Previously, this page used to be under Alerts → Alerts by User.
From the summary page, one can double click on any User/Employee to see his/her detail user profile. We have an Overview Tab that provides a summary risk assessment:
- What is his User Risk Rating?
- How many queries has he run?
- How many of them have generated Alert?
- How many data stores does he have access to?
- What is his Excessive Privilege Risk Score based on when he has last accessed these data stores?
There is also detailed tab to view his queries, alerts and privilege across all data stores that he has access to.
Okta Universal Directory Support
Previously, we only supported a CSV upload of the employee directory to map Data Store Users to actual employees. To keep Netskope One DSPM in sync with a changing employee directory, a new CSV file would need to be regularly uploaded.
We now support a direct integration with Okta Universal Directory, which will automatically keep employee metadata in Netskope One DSPM in sync with Okta Universal Directory. You will be able to:
- Provide Netskope One DSPM your Okta Universal Directory URL and token.
- Map Okta fields to Netskope One DSPM fields, including database user IDs.
- Use employee metadata in policy creation and reporting.
- Find “ghost” employees in Netskope One DSPM who aren’t successfully linked to an Okta user but are still accessing data stores.
Masked Field Classification Support
We now have the ability to classify masked phone number, SSN, and credit card number:
- xxxxxxxxxxx2028 will be classified as Credit Card (Masked)
- (xxx) xxx-1468 will be classified as Phone Number (Masked)
- xxx-xx-3456 will be classified as Social Security (Masked)
We have also added a flag for Masked fields in our Classification Table to enable filtering by Masked data types.