Skip to main content

Netskope Help

Validate the STIX/TAXII Plugin

In order to validate the integration, you must have Hashes in AlertVault. STIX/TAXII polling Intervals are defined during plugin configuration.

  1. From the Cloud Exchange Menu Select Threat IoCs

    image10.png
  2. In your Netskope tenant, click on Policies. Select File and Test (File Hash List Name of Netskope plugin). Then click File Hash.

    image11.png
  3. If data is not being brokered between the platforms, look at the audit logs in Cloud Exchange (menu item found in the left menu of Cloud Exchange).

    In Cloud Exchange, select Audit

    Look through the logs for errors. If unable to successfully troubleshoot, open a support ticket with Netskope.

    image12.png