Security Policies - Netskope Knowledge Portal

A security posture policy is a set of rules, designed to evaluate and enforce your SaaS app’s security posture.

The Policies page helps you define how your SaaS app configurations should be evaluated.

View Policies

To see the policies, follow:

Log in to your Netskope tenant UI.
Navigate to Policies > SaaS Security Posture Management.
Click the Policies tab. You will see a list of policies if you have created any.
Click on a policy to edit or view the details.

Understanding the Policies Page

The Metrics section at the top of the Policies page displays a summary of policies:

Enabled Policies: Actively enforced policies.
Disabled Policies: Policies not currently enforced.
Unapplied Policies: Policies not yet applied to reflect the change. You must apply pending changes for the policy updates to take effect.

Below the metrics, the page lists all available policies, with the following details:

Policy Name: The name of the policy
Instance: Name of instances the policy is applied to.
Rules: Total number of rules, i.e. directly assigned to the policy and indirectly included vis category selection.
Compliance Standard: Industry or organizational standards associated with the policy.
Domain: Security domain or category assigned to the policy.
MITRE ATT&CK: Displays mappings to relevant MITRE ATT&CK for SaaS techniques, if applicable.
Netskope Best Practices: Indicates if the policy assigns any Netskope’s recommended configurations. It is a collection of the all the pre-defined rules.

Actions on the Policy

Bulk action: Select one or more policies to Enable, Disable or Delete policies in bulk.
Individual action: Click on the … icon to the right of the policy for Edit, Disable, Clone and Delete options.

Filters in Policies

Search a policy by Policy Name ~ search filter.
Click + ADD FILTER to filter the rules based on App Suite, Instance, Rule or Compliance Standard, Domain, MITRE ATT&CK and Netskope Best Practices.

Create new Policies

To begin creating a new policy, click New Policy. Refer to the Creating a Security Policy procedure for more information.

Understanding the Policies Page

The Metrics section at the top of the Policies page displays a summary of policies:

Enabled Policies: Actively enforced policies.

Disabled Policies: Policies not currently enforced.

Unapplied Policies: Policies not yet applied to reflect the change. You must apply pending changes for the policy updates to take effect.

Below the metrics, the page lists all available policies, with the following details:

Policy Name: The name of the policy

Instance: Name of instances the policy is applied to.

Rules: Total number of rules, i.e. directly assigned to the policy and indirectly included vis category selection.

Compliance Standard: Industry or organizational standards associated with the policy.

Domain: Security domain or category assigned to the policy.

MITRE ATT&CK: Displays mappings to relevant MITRE ATT&CK for SaaS techniques, if applicable.

Netskope Best Practices: Indicates if the policy assigns any Netskope’s recommended configurations. It is a collection of the all the pre-defined rules.