Article Number: 000125870
Release notes for version 74 of Netskope.
Affected Products:
Netskope
Affected Operating Systems:
Windows
Mac
iOS
Android
Not applicable.
This update of Netskope contains New Features and Enhancements, New Resource Types Supported in Continuous Security Assessment, Fixed Issues, and Known Issues. For more information, click the appropriate topic.
| Category | Feature | Detailed Description and Benefits |
|---|---|---|
| App Connector | New GitHub CLI and Desktop App Connector | Activities: Log in Attempt, Log in Successful, Log in Failed, Upload, Download Platform: CLI and desktop apps DLP: No
Note: From User, Instance ID, Object, and Object ID attributes are not be shown in Upload and Download activities for CLI and desktop apps because the data is encrypted.
|
| App Connector | Google Drive Connector | In this release, we have enhanced the Google Suite sharing dialog for Google Drive, Docs, Sheets, and Slides. Activities: Share and Unshare Platform: Browser |
| App Connector | Monday.com enhancements | Activity detection for the following and support for alert/block features are included with this release:
Platform: Browser |
| App Connector | Slack iOS enhancements | Activities: Post and Edit Platforms: iOS Native DLP: Yes |
| App Connector | Workshare enhancements | Activity detection For Create Folder and Create Group and support for alert/block features are included with this release. Activities: Create Platform: Browser DLP: No |
| App Connector | Windows Azure enhancements | Activities Supported: Create, Delete, Edit, Download, Upload, Start, Stop, Restart Supported Services: Azure Cosmos DB, Azure SQL, SQL databases, Azure Database for mySql Server, Azure Database for PostgreSQL servers, Azure Database for MariaDB servers, SQL servers, Azure Cache for Redis, Data factories, SQL managed instances, SQL virtual machines, SQL Serve registries, Network security groups, Network security groups (classic), App Services, HDInsight clusters, Data Lake Analytics |
| Directory Services | Netskope Adapters | The Netskope Adapter (NS Adapter) has been tested to ensure compatibility with the current cloud platform. Its version number has been updated to confirm this compatibility. No other changes have been made to the NS Adapter in this release. |
| DLP | Support for additional file types in DLP | In this release, we have added support for additional file types in DLP including several media file types and documents from Microsoft, Autodesk, and others. With this change Netskope can support over 1,400 different file types. |
| DLP | Refreshed DLP Data Identifiers | In this release, we have introduced a new interface for browsing and searching DLP data identifiers. All the DLP data identifiers have been given user-friendly names, descriptions have been added, and examples are included to provide a more user-friendly experience when building DLP rules. There is no change in the efficacy of existing rules and all predefined/custom rules are migrated to this new interface. |
| IaaS | API Support for New Bulk Setup | Netskope APIs have been updated to support the new Bulk Setup for AWS, so customers that prefer to use the Netskope APIs (not the UI) to configure Netskope can do so. |
| iOS | Federal iOS Certificate Support | This new feature enhancement supports the authentication of the tunnel by Subject Alternate name, where the client authenticating can pass the OU,EMAIL in the Subject alternate name. |
| Netskope for Web | New UI Category | With this release, the Security Risk category now has a new sub-category, DGA, to report on DGA domains. |
| Cloud Provider | Entity | Attribute Changes |
|---|---|---|
| AWS | None | The S3Bucket entity has the following new attributes:
|
| Azure | The Database category has the following new entities:
|
The ActivityLogProfile entity has the following new attributes:
|
| Category | Issue Number | Issue Description |
|---|---|---|
| App Connector | 102394 | In Google Drive during a share activity, we can make a link accessible to anyone in public or anyone on the web. We can now detect this as share activity. |
| App Connector | 97859 | Previewing a PDF file attached to a web Outlook email shows as download in SkopeIT. |
| Client | 102528 | The following log line is added for troubleshooting: "On-prem status check skipped, dynamic steering disabled or tunnel not connected" |
| Client | 102523 | The new logs that are mentioned below have been added to indicate the start and stop of network change threads for troubleshooting:
|
| Client | 100448 | The Netskope client stops responding if the port range includes 65535. The client can handle this port range now with this release. |
| Client | 100119 | Added proxy detection functionality when the default route is changed for the VPN connect/disconnect case. |
| Client | 99922 | With the macOS release 74, JAMF no longer supports the addon.goskope.com command-line parameter.Instead, addon-<tenant>.goskope.com must be passed in JAMF, per user and upn mode command-line parameters. |
| Client | 99136 | The Microsoft Edge browser process was not blocked for steering traffic when it uses the QUIC protocol. With this release, we now support this for Microsoft Edge.
Note: Chrome was already supported.
|
| DLP | 93127 | Corrected the regex dictionaries so case sensitivity works as expected for DLP entities and rules. |
| IaaS | 100422 | The first column field name has been changed for each CSP to reflect CSP-specific terms. |
| Netskope for Web | 91684 | Security Risk Categories applied to custom categories do not generate malsite alerts when hit. |
| Netskope for Web | 100791 | Mime type is not detected for Netskope for Web. |
| Web UI | 100197 | Changed the text of the page description for the Cloud Infrastructure page under API-Enabled Protection in settings. |
| Web UI | 100039 | Corrected a spelling error in the text field help. |
| Category | Issue Number | Issue Description |
|---|---|---|
| Anomaly Detection | 98608 | There are false positives for Anomaly detection > Shared Credentials. |
| App Connector | 102098 | The download activity is not detected for file download and as a result, not triggering the inline event. |
| App Connector | 101748 | Image upload is not detected correctly. |
| App Connector | 101568 | Upload activity using Syncplicity is not detected correctly. |
| App Connector | 99962 | Upload activities are incorrectly classified as Share activities. |
| App Connector | 99709 | Certain uses are blocked when trying to view, upload, and share in Dropbox. |
| App Connector | 99337 | Edit activity within OneDrive is not working correctly. |
| App Connector | 96721 | Bulk download anomaly is showing a thumbnail file. |
| App Connector | 95956 | Intermittently, InstanceID cannot be obtained for Google Drive. |
| App Connector | 95447 | Multiple API results observed for a single upload. |
| App Connector | 92625 | Upload activity is not correctly detected for Adobe Document Cloud (Acrobat Reader). |
| App Info DB Contents and Tools | 98540 | The Applications page query by category returns a wrong entry. |
| Config Service | 102636 | DLP Exact match dictionaries are not syncing in a timely manner. |
| DAPII | 96096 | Parsing error for upload activity when using the Adobe Document Cloud (Acrobat Reader) app. |
| DLP | 97710 | Inconsistent DLP rule hits for source codes. |
| DLP OCR and Rules | 99395 | When trying to upload and share .rtf and .jpg files with PII content, rule hits are not working correctly. |
| Email Notifications | 102702 | The collaborator consumer process is not working correctly. |
| Email Notifications | 100777 | Delay in email notifications after an inline policy is triggered. |
| IaaS | 84964 | The Introspection IaaS report for compliance is reporting on profiles that were enabled but have since been disabled. |
| IPSEC | 100121 | Tunnel from Palo Alto firewalls to Netskope is not working correctly during rekey. |
| Reverse Proxy | 101773 | Voice/Video calls in Microsoft Teams, through Reverse Proxy, are not working after disabling the Skype Token Encryption. |
| Reverse Proxy | 100133 | Unable to access a URL linked to ATP Safe Links without getting an error. |
| Web UI | 101865 | Unable to grant access to a Box instance. |
| Web UI | 102218 | The Inline and Introspection policies page keeps 'loading' indefinitely. |
| Web UI | 101460 | Seeing errors when searching for a user in SkopeIT. |
| Web UI | 101238 | Exporting Network Event Reports with 1000000+ rows does not work correctly. |
| Web UI | 101160 | Widget names are not being updated correctly for the Cloud Risk Assessment Summary. |
| Web UI | 100523 | Retrieving domain profiles is not working correctly when creating a new Introspection policy. |
| Web UI | 100165 | Unable to apply inline policy changes correctly. |
To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.
Netskope
20 Dec 2022
10
Solution