脅威交換プラグイン

2.6.0 (Required minimum CE version for this is 7.0.0)

Added

• 送信先プロファイルへの共有時に、CIDR IoC と RANGE IoC のプレフィックス付与のサポートを追加しました。
• プライベートアプリおよびURLリストへの共有時に、ipv4 CIDR IoCのサポートが追加されました。

Updated

• サポートされていないタイプが原因でスキップされた IoC の数を含めるように、プライベートアプリ共有ロガーを更新しました。
• プライベートアプリ共有用の複数のラベルを持つホスト名をサポートするように、FQDN検証正規表現を更新しました。
• skipped_iocs の追跡による共有アクションの強化により、サポートされていない IoC がリトラクトおよびリトラクト解除のサイクル後も正しい [Sharing Result] ステータスを保持するようにします。
• 共有に失敗したすべてのIoCが、共有アクション全体で一貫してUnsharedとマークされるように、Unsharedタギングが改善されました。

Fixed

• 他のアクションによってデータが上書きされるのを防ぐため、プライベートアプリおよびファイルハッシュリストの固有の送信先キーマッピングを追加しました。

2.5.0

Added

• DNSプロファイルの共有とプッシュ通知の取り消しに対応しました。(最小)必要なCEバージョン：6.1.0）
• プライベートアプリ共有アクションにおいて、30文字を超えるタグをスキップするロジックを追加しました。

2.4.0

Added

• 宛先プロファイルの共有と削除取り消し機能のサポートを追加しました。(最小)必要なCEバージョン：6.1.0）
• URLリストの削除取り消し機能を追加しました。
• エラーログの解決方法を追加しました。

Changed

• URLリストの共有機能を更新し、変更されたインジケーターのみを共有するようにしました。(最小)必要なCEバージョン：6.1.0）
• 重複するファイルハッシュが共有された場合、エラーログを情報ログに更新しました。
• 設定で選択したインジデントの指標タイプに関係なく、共有動作を更新しました。

2.3.0

Added

• Retrohunt APIへのクエリを有効/無効にする設定オプションを追加しました。

Fixed

• 共有時のインジケーターのタグ付けに関する問題を修正しました。

2.2.0

Added

• IoCタイプがファイルハッシュの場合、誤検出の取り消しをサポートする機能を追加しました。(最小)必要なCEバージョン：5.1.0）
• 「プライベートアプリターゲットに追加」機能でポート範囲のサポートを追加しました。
• URL IoCにおける深刻度のサポートを追加しました。

Changed

• 悪意のあるファイルのハッシュIoCのみを取得 Retrohunt。
• URLリストの容量制限を8MBから7MBに更新しました。

2.1.3

Changed

• Bug fixes.

2.1.2

Added

• マルウェアアラートから、SHA256およびMD5フィールド、ならびにローカルSHA256およびローカルMD5からインジケーターを作成する機能を追加しました。

2.1.1

Changed

• V1トークンの認証情報を更新しました。

2.1.0

Added

• 取り下げられたIoCの取り下げをサポートする機能を追加しました。Netskopeテナントから取り消されたインジケーターを取得する機能はサポートされていません。

2.0.0

Changed

• Netskope CTEプラグインが再構築され、現在はデフォルトリポジトリで利用可能です。

1.0.0

Added

• 初回リリース。

使うAPI一覧

Pull the Malware alerts from Netskope tenant

API Endpoint: https://<tenant-url>/api/v2/events/dataexport/alerts/マルウェア

Method: 得る

Request Headers

Sample API Response

{
    "ok": 1,
    "result": [
        {
            "TSS-scan": "v2",
            "_id": "ca2cd2413493f18eeb65b2",
            "access_method": "API Connector",
            "acked": "false",
            "action": "Detection",
            "activity": "Introspection Scan",
            "alert": "yes",
            "alert_name": "VBA.Heur.EmotetDldr.1.3CBCEF4D.Gen:94075",
            "alert_type": "Malware",
            "app": "Dropbox",
            "app_name": "Dropbox",
            "app_session_id": 97439093538764,
            "appcategory": "Cloud Storage",
            "category": "Cloud Storage",
            "cci": 81,
            "ccl": "high",
            "connection_id": 115689096495576,
            "count": 1,
            "created_date": 1751544554,
            "detection_engine": "Netskope Advanced Heuristic Analysis",
            "detection_type": "Virus",
            "device": "Other",
            "dst_country": "US",
            "dst_geoip_src": 2,
            "dst_latitude": 37.77,
            "dst_location": "San Francisco",
            "dst_longitude": -122.4,
            "dst_region": "California",
            "dst_zipcode": "94107",
            "dstip": "162.125.8.18",
            "file_id": "id:RqCtsmy9paAAAAAAAAP9LA",
            "file_name": "testpdv_5e673d7973900c3c1ed399_66b8e7b2e881b711aca1b98d91d5ce3b_1751544269_office_clafier.doc",
            "file_path": "/tss-sanity-1751a0b8/testpdv_5e67ccdec797303d7973900c3c1ed399_66b8e7b2e881b711aca1b98d91d5ce3b_1751544269_office_classifier.doc",
            "file_size": 156874,
            "file_type": "application/ms-word",
            "filename": "testpdv_5e67ccde0c3c1ed399_66b8e7b2e881b711aca1b98d91d5ce3b_1751544269_office_classifier.doc",
            "incident_id": 1000362732176413775,
            "instance": "TEST Netskope MW 1",
            "local_md5": "66e881b711aca1b98d91d5ce3b",
            "local_sha256": "6712afc5119e5303a6dedcb4b61cf2f1ee525cd2c9d4da31d21",
            "malware_id": "6c2e227369044356354b84add6456611",
            "malware_name": "VBA.Heur.EtDldr.1.3CBCEF4D.Gen:94075",
            "malware_severity": "high",
            "malware_type": "Virus",
            "md5": "66b8e7b2e8aca1b98d91d5ce3b",
            "mime_type": "application/msword",
            "modified_date": 1751544429,
            "object": "testpdv_5e973900c3c1ed399_66b8e7b2e881b711aca1b98d91d5ce3b_1751544269_office_classifier.doc",
            "object_id": "id:RqCtsmyAAAP9LA",
            "object_type": "File",
            "organization_unit": "",
            "policy": "2214472052546912863",
            "request_id": 0,
            "scan_time": 1751544554,
            "scan_type": "ongoing",
            "scanner_result": "malicious",
            "severity": "high",
            "severity_id": 3,
            "sha1": "c66724a30cf9a0e0558ec3028d",
            "sha256": "6712afc5119e507259dcb4b61cf2f1ee525cd2c9d4da31d21",
            "shared_type": "private",
            "site": "Dropbox",
            "timestamp": 1751544733,
            "title": "testpdv_5e67ccd399_66b8e7b2e881b711aca1b98d91d5ce3b_1751544269_office_classifier.doc",
            "traffic_type": "CloudApp",
            "transaction_id": 1000362732176413775,
            "true_filetype": "None",
            "tss_license": "True",
            "tss_mode": "introspection",
            "type": "nspolicy",
            "ur_normalized": "ali+nsmtp@netskope.com",
            "url": "https://www.dropbox.com/work/tss-sanity-17515441674e95a0b8?preview=testpdv_5e67ccdec797303d7911aca1b98d91d5ce3b_1751544269_office_classifier.doc",
            "user": "alitp@netskope.com",
            "user_id": "dbmi1Dimthhx2TJyIhxpudwxGmM",
            "record_type": "alert",
            "file_category": "",
            "usr_title": "",
            "src_latitude": 0.0,
            "managementID": "",
            "userCountry": "",
            "department": "",
            "browser": "",
            "userip": "",
            "page": "",
            "from_user": "",
            "appsuite": "",
            "os": "",
            "shared_with": [],
            "sanctioned_instance": "",
            "os_version": "",
            "company": "",
            "usr_udf_supervisorname": "",
            "dst_timezone": "",
            "user_confidence_index": 0,
            "browser_session_id": 0,
            "src_geoip_src": 0,
            "usr_udf_companyname": "",
            "srcip": "",
            "usr_udf_supervisorid": "",
            "src_zipcode": "",
            "hostname": "",
            "manager": "",
            "usr_udf_businesssegmentlevel1": "",
            "protocol": "",
            "usr_udf_businesssegmentlevel3": "",
            "custom_attr": {},
            "usr_status": "",
            "usr_udf_businesssegmentlevel2": "",
            "usr_udf_businesssegmentlevel4": "",
            "src_country": "",
            "parent_id": "",
            "src_location": "",
            "src_region": "",
            "device_classification": "",
            "instance_id": "",
            "malware_profile": "",
            "tss_fail_reason": "",
            "browser_version": "",
            "usr_udf_primarydomain": "",
            "usr_udf_employeeid": "",
            "src_timezone": "",
            "policy_id": "",
            "usr_display_name": "",
            "managed_app": "",
            "tss_scan_failed": "",
            "src_time": "",
            "fastscan_results": "",
            "referer": "",
            "ml_detection": "",
            "nsdeviceuid": "",
            "userPrincipalName": "",
            "src_longitude": 0.0,
            "page_site": ""
        }
    ],
    "wait_time": 5,
    "timestamp_hwm": 1751544743
}

Pull the Malsite alerts from Netskope tenant

API Endpoint: https://<tenant-url>/api/v2/events/dataexport/alerts/malsite

Method: 得る

Request Headers

Sample API Response

{
    "ok": 1,
    "result": [
        {
            "_id": "96e20f6e73d2867d1865d",
            "access_method": "Client",
            "acked": "false",
            "action": "block",
            "alert": "yes",
            "alert_name": "ww25.cleansix.xyz",
            "alert_type": "malsite",
            "app": "",
            "app_session_id": 8130338485448244761,
            "appcategory": "Security Risk - Cosed/malicious sites",
            "browser_session_id": 5158615776615133890,
            "category": "Security Risk - Comised/malicious sites",
            "cci": 0,
            "ccl": "unknown",
            "connection_id": 0,
            "count": 1,
            "device": "Linux Device",
            "device_classification": "not configured",
            "dst_country": "US",
            "dst_latitude": 27.947519302368164,
            "dst_location": "Tampa",
            "dst_longitude": -82.45842742919922,
            "dst_region": "Florida",
            "dst_timezone": "America/New_York",
            "dst_zipcode": "N/A",
            "dstip": "199.59.243.228",
            "dstport": 80,
            "hostname": "ip-172-31-29-12",
            "incident_id": 374545097297887,
            "ja3": "NotAvailable",
            "ja3s": "NotAvailable",
            "malicious": "yes",
            "malsite_category": [
                "Malicious Site"
            ],
            "malsite_country": "US",
            "malsite_id": "94c0d6c6de81b144a968",
            "malsite_ip_host": "199.59.43.228",
            "malsite_latitude": 27.9479302368164,
            "malsite_longitude": -82.458422919922,
            "malsite_region": "Florida",
            "managed_app": "no",
            "notify_template": "sileblock.html",
            "organization_unit": "",
            "os": "Linux",
            "os_version": "Linux 22.04.4",
            "other_categories": [
                "Security Risk",
                "Security Risk - Compromised/malicious sites"
            ],
            "page": "ww25.cl.xyz/?subid1=20250627-2139f4956fa",
            "page_site": "cleansix",
            "policy": "MalsiteCategoryTestPolicy",
            "policy_id": "21BDBAE80 2025-05-28 11:59:16.009444",
            "protocol": "HTTPS/1.1",
            "request_id": 3745126345097297887,
            "severity": "high",
            "severity_level": "med",
            "severity_level_id": 1,
            "site": "cleansix",
            "src_country": "US",
            "src_latitude": 39.0469,
            "src_location": "Ashburn",
            "src_longitude": -77.4903,
            "src_region": "Virginia",
            "src_time": "Fri Jun 27 07:32:58 2025",
            "src_timezone": "America/New_York",
            "src_zipcode": "20149",
            "srcip": "52.23.214.14",
            "telemetry_app": "",
            "threat_match_field": "domain",
            "threat_match_value": "ww25.cleansix.xyz",
            "threat_source_id": 1,
            "timestamp": 1751023978,
            "traffic_type": "Web",
            "transaction_id": 3745097297887,
            "type": "malsite",
            "ur_normalized": "nijani@crestdatasys.com",
            "url": "ww25.clix.xyz/",
            "user": "nijlani@crestdatasys.com",
            "useragent": "Python/3.10 aiohttp/3.10.5",
            "userip": "172.31.29.12",
            "record_type": "alert",
            "malsite_confidence": 0,
            "object": "",
            "referer": "",
            "sAMAccountName": "",
            "malsite_hostility": "",
            "fromlogs": "",
            "malsite_first_seen": 0,
            "custom_attr": {},
            "object_type": "",
            "conn_duration": 0,
            "universal_connector": "",
            "dsthost": "",
            "malsite_last_seen": 0,
            "suppression_end_time": 0,
            "co": "",
            "malsite_active": "",
            "retro_scan_name": "",
            "from_user": "",
            "aggregated_user": "",
            "division": "",
            "req_cnt": 0,
            "resp_cnt": 0,
            "org": "",
            "log_file_name": "",
            "browser_version": "",
            "department": "",
            "browser": "",
            "dst_geoip_src": 0,
            "gateway": "",
            "server_bytes": 0,
            "malsite_consecutive": "",
            "numbytes": 0,
            "malsite_reputation": "",
            "appsuite": "",
            "serial": "",
            "client_bytes": 0,
            "src_geoip_src": 0,
            "suppression_start_time": 0,
            "sfwder": ""
        }
    ],
    "wait_time": 5,
    "timestamp_hwm": 1751023980
}

ファイルハッシュをNetskopeテナントにプッシュする

API Endpoint: https://<tenant-url>/api/v1/updateFileHashList

Method: 役職

Body:

{
  "name": "<Name of FileHash List>",
  "list": "<MD5 and SHA256 values comma separated>",
  "token": <Netskope Tenant V1 Token>,
}

URLリストを取得する

API Endpoint: https://<tenant-url>/api/v2/policy/urllist

Method: 得る

Request Headers

Parameters

Sample API Response

[
    {
        "id": 1,
        "name": "test"
    }
]

Create URL List

API Endpoint: https://<tenant-url>/api/v2/policy/urllist

Method: 役職

Headers

Body

{
  "data": {
    "type": "exact",
    "urls": [
      "www.test.com"
    ]
  },
  "name": "string"
}

Sample API Response

[
  {
    "data": {
      "type": "exact",
      "urls": [
        "www.test.com"
      ]
    },
    "id": 0,
    "modify_by": "Netskope API",
    "modify_time": "1997-01-01 00:00:00",
    "modify_type": "Created",
    "name": "string",
    "pending": 0
  }
]

NetskopeにURLをプッシュする

API Endpoint: https://<tenant-url>/api/v2/policy/urllist/<urllist_id>/append

Method: パッチ

Headers

Body

{
    "data": {
        "urls": [
            "https://example.com/resource/product-000001"
        ],
        "type": "exact"
    }
}

Sample API Response

{
  "data": {
    "type": "exact",
    "urls": [
      "https://example.com/resource/product-000001"
    ]
  },
  "id": 0,
  "modify_by": "Netskope API",
  "modify_time": "2025-01-01 00:00:00",
  "modify_type": "Edited",
  "name": "string",
  "pending": 0
}

Netskope URLリストへの変更の展開

API Endpoint: https://<tenant-url>/api/v2/policy/urllist/deploy

Method: 役職

Headers

Sample API Response

[
  {
    "data": {
      "type": "exact",
      "urls": [
        "www.test.com"
      ]
    },
    "id": 0,
    "modify_by": "Netskope API",
    "modify_time": "1997-01-01 00:00:00",
    "modify_type": "Created",
    "name": "string",
    "pending": 0
  }
]

Netskopeテナントのプライベートアプリの一覧を表示

API Endpoint: https://<tenant-url>/api/v2/steering/apps/private

Method: 得る

Headers

Parameters

Sample API Response

{
  "data": {
    "private_apps": [
      {
        "app_id": 51,
        "app_name": "[<private_app_name>]",
      },
      ….
    ]
  },
  "status": "success",
  "total": 2
}

プライベートアプリのリストパブリッシャー

API Endpoint: https://<tenant-url>/api/v2/infrastructure/publishers

Method: 得る

Headers

Parameters

Sample API Response

{
  "data": {
    "publishers": [
      {
        "publisher_id": 3,
        "publisher_name": "<publisher_name>"
      },
      ….
    ]
  },
  "status": "success",
  "total": 5
}

Netskopeテナントにプライベートアプリをプッシュする

API Endpoint: https://<tenant-url>/api/v2/steering/apps/private/<app_id>

Method: パッチ

Headers

Body

{
    "host": "1.1.1.1,3.2.14.4",
    "protocols": [
        {
            "port": "23",
            "type": "TCP"
        }
    ],
    "publishers": [
        {
            "publisher_id": "3",
            "publisher_name": "<publisher_name>"
        }
    ],
    "tags": [
        {
            "tag_name": "test"
        }
    ]
}

Sample API Response

{
  "data": {
    "allow_unauthenticated_cors": false,
    "allow_uri_bypass": false,
    "app_id": 51,
    "app_name": "[<app_name>]",
    "app_option": {},
    "bypass_uris": [],
    "clientless_access": false,
    "host": "1.1.1.1,3.2.14.4",
    "id": 51,
    "is_user_portal_app": false,
    "modified_by": "apigw",
    "modify_time": "2025-04-01 04:03:31",
    "name": "[Risk Exchange Demo]",
    "policies": [],
    "private_app_protocol": "",
    "protocols": [
      {
        "created_at": "2025-04-01T04:03:31.659Z",
        "id": 270,
        "port": "23",
        "service_id": 3,
        "transport": "tcp",
        "updated_at": "2025-04-01T04:03:31.659Z"
      }
    ],
    "public_host": "",
    "reachability": {
      "reachable": false
    },
    "real_host": "",
    "service_publisher_assignments": [
      {
        "primary": null,
        "publisher_id": 3,
        "publisher_name": "<publisher_name>",
        "reachability": null,
        "service_id": 51
      }
    ],
    "steering_configs": [
      "Default tenant config"
    ],
    "supplement_dns_for_osx": false,
    "tags": [
      {
        "tag_id": 153,
        "tag_name": "test"
      }
    ],
    "trust_self_signed_certs": false,
    "uribypass_header_value": "",
    "use_publisher_dns": false
  },
  "status": "success"
}

フェッチの偽陽性とレトロハントの深刻度

API Endpoint: https://<tenant-url>/api/v2/nsiq/retrohunt/ioc/getinfo

Method: 役職

Headers

Body

{
    "hash": [
        "e0b060152606988664368bd658cbec4b"
    ]
}

Sample API Response

{
    "status": "OK",
    "result": {
        "e0b060152606988664368bd658cbec4b": {
            "seen": true,
            "verdict": "malicious",
            "severity": 3,
            "md5": "e0b060152606988664368bd658cbec4b",
            "sha256": "263689ec92f357b573206c06d27ae957bf17be7ff2b90f917543432b01e3be10",
            "malware_name": "Backdoor",
            "latest_detection_date": 1750150278,
            "verdict_updated": "clean",
            "severity_updated": 0
        }
    }
}

削除取り消しのためにURLをNetskopeにプッシュしてください

API Endpoint: https://<tenant-url>/api/v2/policy/urllist/<urllist_id>/replace

Method: パッチ

Headers

Body

{
    "data": {
        "urls": [
            "https://example.com/resource/product-000001"
        ],
        "type": "exact"
    }
}

Sample API Response

{
  "data": {
    "type": "exact",
    "urls": [
      "https://example.com/resource/product-000001"
    ]
  },
  "id": 0,
  "modify_by": "Netskope API",
  "modify_time": "2025-01-01 00:00:00",
  "modify_type": "Edited",
  "name": "string",
  "pending": 1
}

目的地プロファイルを取得する

API Endpoint: https://<tenant-url>/api/v2/profiles/destinations

Method: 得る

Request Headers

Parameters

Sample API Response

{
    "elements": [
        {
            "id": "dfbd59ab-xxxx-xxxx-xxxx-81b7bc805f47",
            "name": "CTE Destination Profile",
            "type": "insensitive",
            "values_count": 100000
        }
    ],
    "total_count": 1
}

目的地プロファイルを作成する

API Endpoint: https://<tenant-url>/api/v2/profiles/destinations

Method: 役職

Headers

Body

{
    "description": "my destination description",
    "name": "CTE Destination Profile",
    "type": "insensitive",
    "values": [
        "example.com/resource/product-000001"
    ]
}

Sample API Response

{
    "id": "dfbd59ab-xxxx-xxxx-xxxx-81b7bc805f47",
    "name": "CTE Destination Profile",
    "description": "my destination description",
    "type": "insensitive",
    "values": [
        "example.com/resource/product-000001"
    ],
    "values_count": 1,
    "status": "applied",
    "create_by": "NetskopeCE",
    "create_time": "2026-04-01T08:48:50.284153069Z",
    "modify_by": "NetskopeCE-Dev",
    "modify_time": "2026-04-01T08:48:50.284153069Z",
    "label_ids": []
}

宛先プロファイル値のプッシュまたは削除

API Endpoint: https://<tenant-url>/api/v2/profiles/destinations/<destination-profile-id>/values

Method: 役職

Headers

Body

{
    "operation": {
        "op": "append",
        "values": [
            "www.example.com/mypath1",
            "www.example.com/mypath2"
        ]
    }
}

OR

{
    "operation": {
        "op": "remove",
        "values": [
            "www.example.com/mypath1",
            "www.example.com/mypath2"
        ]
    }
}

Sample API Response

{
    "id": "dfbd59ab-xxxx-xxxx-xxxx-81b7bc805f47",
    "name": "CTE Destination Profile",
    "description": "my destination description",
    "type": "insensitive",
    "values": [
        "example.com/resource/product-000001",
        "www.example.com/mypath1",
        "www.example.com/mypath2"
    ],
    "values_count": 3,
    "status": "applied",
    "create_by": "NetskopeCE",
    "create_time": "2026-04-01T08:43:21.661Z",
    "modify_by": "NetskopeCE",
    "modify_time": "2026-04-01T08:43:53.825Z",
    "label_ids": []
}

Remove for Delete Retraction

{
    "id": "dfbd59ab-xxxx-xxxx-xxxx-81b7bc805f47",
    "name": "CTE Destination Profile",
    "description": "my destination description",
    "type": "insensitive",
    "values": [
        "example.com/resource/product-000001"
    ],
    "values_count": 1,
    "status": "applied",
    "create_by": "NetskopeCE",
    "create_time": "2026-04-01T08:43:21.661Z",
    "modify_by": "NetskopeCE",
    "modify_time": "2026-04-01T08:50:12.81Z",
    "label_ids": []
}

宛先プロファイルに対する保留中の変更を適用する

API Endpoint: https://<tenant-url>/api/v2/profiles/destinations/deploy

Method: 役職

Headers

Body

{
  "ids": [
    "dfbd59ab-xxxx-xxxx-xxxx-81b7bc805f47"
  ]
}

Sample API Response

{
    "applied": [
        "dfbd59ab-xxxx-xxxx-xxxx-81b7bc805f47"
    ]
}

DNSプロファイルを取得する

API Endpoint: https://<tenant-url>/api/v2/profiles/dns

Method: 得る

Headers

Query Parameters

Sample Response

{
    "profiles": [
        {
            "id": "43b69ef8-47b1-11f1-b64b-86231e291fcc",
            "name": "Netskope DNS Profile 1"
        },
        {
            "id": "783e8454-4d26-11f1-a0bb-0e3351bf9dec",
            "name": "Netskope DNS Profile 2"
        }
    ],
    "total": 2
}

DNSプロファイルを作成する

API Endpoint: https://<tenant-url>/api/v2/profiles/dns

Method: 役職

Headers

Request Body

{
    "name": "My Profile",
    "log_traffic": "Blocked DNS",
    "domain_config": {
        "security_categories": [
            {
                "name": "Newly Registered Domain",
                "action": "Sinkhole"
            }
        ],
        "allow_list": [
            {
                "record_types": [
                    "All Record Types"
                ],
                "domain_names": [
                    "abc.com"
                ]
            }
        ],
        "block_list": [
            {
                "record_types": [
                    "All Record Types"
                ],
                "domain_names": [
                    "xyz.com"
                ]
            }
        ],
        "sinkhole_ip": "1.2.3.4",
        "block_all_except_allow_list": false
    }
}

Sample Response

{
    "applied_time": "2026-05-15 10:41:26",
    "create_by": "RBACv3",
    "create_time": "Fri, 15 May 2026 10:41:26 GMT",
    "custom_config": {
        "bypass_original_dns": false,
        "enable": false,
        "fallback_to_netskope_dns": true,
        "server_ip": []
    },
    "description": "",
    "domain_config": {
        "allow_list": [
            {
                "destination_profiles": [],
                "domain_names": [
                    "abc.com"
                ],
                "record_types": [
                    "All Record Types"
                ]
            }
        ],
        "block_all_except_allow_list": false,
        "block_list": [
            {
                "destination_profiles": [],
                "domain_names": [
                    "xyz.com"
                ],
                "record_types": [
                    "All Record Types"
                ]
            }
        ],
        "security_categories": [
            {
                "action": "Sinkhole",
                "name": "Newly Registered Domain"
            }
        ],
        "sinkhole_ip": "1.2.3.4"
    },
    "id": "9ffaa12c-504a-11f1-bd75-6ae4e2669381",
    "log_traffic": "Blocked DNS",
    "modify_by": "RBACv3",
    "modify_time": "Fri, 15 May 2026 10:41:26 GMT",
    "name": "My Profile",
    "status": "Applied",
    "tunnel_config": {
        "allow_list": [],
        "enable": false
    }
}

DNSプロファイルを更新する

API Endpoint: https://<tenant-url>/api/v2/profiles/dns/{profile_id}

Method: パッチ

Headers

Path Parameter

Request Body

{
    "domain_config": {
        "security_categories": [
            {
                "name": "Newly Registered Domain",
                "action": "Sinkhole"
            }
        ],
        "allow_list": [
            {
                "record_types": [
                    "All Record Types"
                ],
                "domain_names": [
                    "abc.com"
                ]
            }
        ],
        "block_list": [
            {
                "record_types": [
                    "All Record Types"
                ],
                "domain_names": [
                    "xyz.com"
                ]
            }
        ],
        "sinkhole_ip": "1.2.3.4",
        "block_all_except_allow_list": false
    }
}

Sample Response

{
    "applied_time": "2026-05-15 10:41:26",
    "create_by": "RBACv3",
    "create_time": "Fri, 15 May 2026 10:41:26 GMT",
    "custom_config": {
        "bypass_original_dns": false,
        "enable": false,
        "fallback_to_netskope_dns": true,
        "server_ip": []
    },
    "description": "",
    "domain_config": {
        "allow_list": [
            {
                "destination_profiles": [],
                "domain_names": [
                    "abc.com"
                ],
                "record_types": [
                    "All Record Types"
                ]
            }
        ],
        "block_all_except_allow_list": false,
        "block_list": [
            {
                "destination_profiles": [],
                "domain_names": [
                    "xyz.com"
                ],
                "record_types": [
                    "All Record Types"
                ]
            }
        ],
        "security_categories": [
            {
                "action": "Sinkhole",
                "name": "Newly Registered Domain"
            }
        ],
        "sinkhole_ip": "1.2.3.4"
    },
    "id": "9ffaa12c-504a-11f1-bd75-6ae4e2669381",
    "log_traffic": "Blocked DNS",
    "modify_by": "RBACv3",
    "modify_time": "Fri, 15 May 2026 10:41:26 GMT",
    "name": "My Profile",
    "status": "Applied",
    "tunnel_config": {
        "allow_list": [],
        "enable": false
    }
}

DNSカテゴリを取得する

API Endpoint: https://<tenant-url>/api/v2/profiles/dns/domaincategories

Method: 得る

Headers

Query Parameters

Sample Response

{
    "domaincategories": [
        {
            "category_type": "Security",
            "id": "575",
            "name": "Newly Observed Domain"
        },
        {
            "category_type": "Security",
            "id": "574",
            "name": "Newly Registered Domain"
        },
        {
            "category_type": "Security",
            "id": "583",
            "name": "Security Risk - Ad Fraud"
        },
        {
            "category_type": "Security",
            "id": "588",
            "name": "Security Risk - Attack"
        },
        {
            "category_type": "Security",
            "id": "578",
            "name": "Security Risk - Botnets"
        },
        {
            "category_type": "Security",
            "id": "579",
            "name": "Security Risk - Command and Control server"
        },
        {
            "category_type": "Security",
            "id": "580",
            "name": "Security Risk - Compromised/malicious sites"
        },
        {
            "category_type": "Security",
            "id": "589",
            "name": "Security Risk - Cryptocurrency Mining"
        },
        {
            "category_type": "Security",
            "id": "594",
            "name": "Security Risk - DGA"
        },
        {
            "category_type": "Security",
            "id": "584",
            "name": "Security Risk - Hacking"
        }
    ],
    "total": 15
}

DNSレコードタイプを取得する

API Endpoint: https:// <tenant-url> /api/v2/profiles/dns/recordtypes

Method: 得る

Headers

Query Parameters

Sample Response

{
    "recordtypes": [
        {
            "id": "13",
            "name": "A"
        },
        {
            "id": "62",
            "name": "AAAA"
        },
        {
            "id": "83",
            "name": "ANY"
        },
        {
            "id": "6",
            "name": "All Record Types"
        },
        {
            "id": "76",
            "name": "CERT"
        },
        {
            "id": "27",
            "name": "CNAME"
        },
        {
            "id": "48",
            "name": "MX"
        },
        {
            "id": "20",
            "name": "NS"
        },
        {
            "id": "41",
            "name": "PTR"
        },
        {
            "id": "34",
            "name": "SOA"
        }
    ],
    "total": 12
}