New Features And Enhancements In Release 115.0.0

Shared Credentials Anomaly Enhancement

Shared credentials anomaly is enhanced to aggregate information and alerts for users seen sharing a specific credential in a single detection alert.
For advanced UEBA, all the users seen in the anomaly detection will have the same deduction of UCI.
This enhancement reduces the number of alerts that need investigation for a specific shared credential, helping accelerate investigations.

The UEBA alert name in SkopeIT is changed to Shared Credentials and includes all users seen sharing a specific credential in past 24 hours. This replaces the prior alert name “user_shared_credentials” that was based on a combination pair of users seen sharing credentials.

TIP: Query “~user” to search these alerts by a specific user in the SkopeIT alerts page.

Instance Support for MS Copilot (Free)

MS Copilot now supports App instance monitoring and control via CASB Inline Real-time policy. The app instance detection will only work for post login scenarios and will be email domain based. NOTE: Post activity in Microsoft Copilot is supported only with DLP. The Post activity is not detected for non-DLP cases.

Activity Coverage for Grammarly

The inline activity coverage for Grammarly is now supported with Real-time protection. With this an admin can secure the enterprise data by adding policies around Upload, Download, Create, Delete and Login associated activities. In addition to this, the dedicated connector also supports file size and From user constraints that will empower the admin to create granular policies.

URL Recategorization Request 

App Categories were updated as part of the CCI Database updates. Refer to the Product Change Notification Portal to view updated category details.

Bandwidth Control Warning

Some of the UI workflows are modified to provide warnings to the user.

WinMagic SecureDoc Support

Endpoint DLP now supports device control and content control on USB drives that leverage WinMagic SecureDoc removable media encryption.

Bluetooth Device Control for Windows

Bluetooth Device Control is available for the Windows Endpoint DLP agent. This feature allows policy-based decisions to prevent data transfer using Bluetooth.

Local Broker for On-Premises ZTNA

Private Access now supports Local Broker for connecting on-prem users to on-premise apps, enforcing policies locally instead of routing traffic through Netskope Cloud.

NPA for FedRamp High

Netskope Private Access is now available in Netskope GovCloud (NGC) High.

Netskope Client for Linux

Private Access Client is now supported on Ubuntu versions 20 and 22.

Unique Device Identifier

Netskope client on Windows now uses unique device identifier across the services including Private Access.

Extended RBI Web Categories

Added support for the following Web Categories with the Extended RBI license.

• Finance/Accounting

• Financial Aid & Scholarships

• Financial News

• Food & Drink

• Government & Legal

• Health & Nutrition

• Insurance

• Kids

• News & Media

Popup message Isolation Indicators

RBI templates have added support for a complete customization of the Pop-up Message isolation indicator to improve it’s efficacy to communicate RBI related information tailored to their RBI end users. RBI admins modify the warning pop-up to facilitate the adoption of RBI:

• Pop-up box border color

• Pop-up message position

• Images as corporate logos (jpg, png and so on) with 3 fixed size options like Small, Medium and Large

• Custom text message with HTML tags (for example, hyperlinks like FAQ link, portal) and predefined variables support (URL accessed by user, RBI settings disabled)