Netskope One for Microsoft Purview DLP Troubleshooting and FAQ

Purview Integration is missing under Settings

Check if the following tab exists in Netskope admin console in Settings > Manage > Microsoft Purview Integration. If you still don’t see it, please get in touch with your Netskope account team.

Verifying a connection between Purview and Netskope

Once correctly configured, a green circle with a checkmark will show up in Settings > Manage > Microsoft Purview Integration.

Unable to see synced users in Netskope

Follow the guide on User Provisioning with Entra ID.

Synced users will show up in the Netskope admin console in Settings > Security Cloud Platform > Users. The sync can take 1 hour to happen.

Send the synced users an invitation to install Netskope Client. Once users install the Netskope Client, the email displayed in the Netskope Client will match up with Entra ID.

No traffic flowing into Purview

Token Expiry consideration: When the Netskope proxy sends content to Purview for the first time, the proxy does not have a valid token causing the request will fail. The proxy will request a token from UA during this first transaction meaning subsequent requests to Purview will go through.

Check if Purview Forwarding is enabled. Go to Policies > Real-time Protection > Purview Integration, toggle the button to Allow sending all traffic to Purview.

Release-125.0.0.x: Check if Purview Forwarding is enabled. Go to Policies > Real-time Protection > Purview Integration, toggle the button to Allow sending all traffic to Purview.
Release-127.0.0.x: Check if a RTP policy is defined with Action as “Forward to Purview-DLP”. Go to Policies > Real-time Protection.

Missing traffic types in Purview

See the terminology reference for Netskope Cloud App and App Connectors.

Support of online resources is limited to Netskope-supported cloud applications.

Most of the apps with app-specific connectors is supported.

Support for applications with universal connectors depends on the activities identified by the connectors.

Are all web activities supported with this integration?

Netskope identifies activities performed by the user through detailed application analysis. Activities such as upload, download, and POST are supported in this integration by default. Other Netskope activities support can be extended for this integration, but require backend configuration change on Netskope side. The three default activities should cover most scenarios.

Is it possible to forward traffic for cert pinned applications?

Certificate pinned applications are bypassed by Netskope by default and thus not supported for this integration.