Article Number: 000190534
Release notes for version 88 of Netskope.
This update of Netskope contains New Features and Enhancements, Known Issues, and Fixed Issues. For more information, click the appropriate topic.
| Category | Feature | Detailed Description and Benefits |
|---|---|---|
| Behavior Analytics | REST API export UCI scores | With this release, the UCI score API is available for admins to retrieve a user's confidence score over a period of time. Contact support to enable it in your account. For more information, reference How to Get Support for Netskope. |
| CASB Inline Protection | Yandex app suite enhancement | Activities for the Yandex apps are detected under the app name 'Yandex App Suite'. A new app connector has been added to support the following activities:
|
| CASB Inline Protection | Connector development and automation | Inline CASB for AWS is enhanced to provide broader service coverage and enrichment of inline events with the account ID. |
| CASB Inline Protection | JIRA integration new coverage for Google Drive and Dropbox | With this release, JIRA integration is enhanced with added coverage for Google Drive and Dropbox. Admins can attach file links and remove links for the file from cloud storage. |
| Data Protection | New Entity UI for all accounts | The New Entity UI was previously enabled by default for all new accounts only. However, with this release it is now enabled for all accounts. The Entity UI is used for selecting entities when creating DLP rules. New Entity UI: The New Entity UI allows you to navigate the entire set of entities easily as they are now organized into an intuitive tree structure with eight (8) levels on the top. In addition to the ability for you to easily browse, we are also introducing an enhanced search capability. All entities have been updated to have a user-friendly display name, a succinct description, and sample data that matches the entity. Also included with the New Entity UI are new Source Code entities. Source Code Entities: The new Source Code entities are designed to provide more accurate detection of files containing source code or snippets of source code in various programming languages. Once the New Entity UI is enabled, the old Source Code entities are no longer available for use in any custom DLP rules. Any existing custom DLP rules continue to work but no edits to those rules are allowed. It is recommended that customers switch to using the new Source Code entities. To do so, any custom rules containing the old Source Code entities and data identifiers must be deleted and new custom rules must be created using the new Source Code entities. |
| Directory Services | Netskope Adapters | The Netskope Adapter (NS Adapter) has been tested to ensure compatibility with the current cloud platform. Its version number has been updated to confirm this compatibility. No other changes have been made to the NS Adapter in this release. |
| Netskope for IaaS | GCP CIS 1.2 update | CIS Google Cloud Platform Foundation Benchmark version 1.2.0 is now part of the Security Posture predefined profiles. This is the latest version of GCP CIS benchmarks. |
| Netskope for IaaS | AWS CIS 1.4 update | Security Posture now includes a predefined profile for the CIS Amazon Web Services Foundations v1.4.0 benchmark. |
| Netskope for IaaS | Security Assessment for AWS enhancements | Continuous Security Assessment for AWS now supports the following enhancements:
|
| Netskope for IaaS | Compliance Findings / Resource and Alerts enhancement | With this release, we have added Resource ID and Resource Group to Compliance, Alerts, and Client API. |
| NG SWG / CASB | Enhancements to URL List | URL list feature is enhanced to support exact match, regex, and IP/CIDR. In addition, API endpoint is enhanced with several new capabilities. Contact support to enable it in your account. For more information, reference How to Get Support for Netskope. |
| NG SWG / CASB | File size constraint enhancement | File size constraint can now be configured for download activity in inline policies for all categories and apps. |
| Steering | Support for domain name exception for UDP traffic | Netskope client now supports bypassing the UDP traffic for hostname or IP address-based exceptions. However, domain name exceptions for UDP traffic do not work on Big Sur. Contact support to enable it in your account. For more information, reference How to Get Support for Netskope. |
| Steering | Netskope client improved security | The Netskope client implemented the self-protection feature which prevents the termination of the Netskope service and UI processes by administrative privileged users. The self-protection also prevents the modification of the config files and the Netskope specific registry entries. This feature is supported in Windows 10+ operating system only. It is not supported on Windows 7/8, Windows 10, ARM64, and macOS. Contact support to enable it in your account. For more information, reference How to Get Support for Netskope. |
| Web UI | Widget library UI enhancements | The widget library provides new improved instructional text in the UI and cleaned up spacing between components and text. |
| Issue Number | Category | Feature | Issue Description |
|---|---|---|---|
| 111713 | NG SWG / CASB | URL list supported format | Currently, *.foo.com does not automatically include the foo.com domain. The recommended workaround is to include a separate entry for foo.com. For example, add two separate lines:
|
| 119849 | NG SWG / CASB | URL list standard ports | The regex custom lookup fails to match URLs when standard ports are explicitly mentioned in the URL list. |
| 113659 | NG SWG / CASB | Custom URL lookup | Currently, the custom URL lookup does not support DNS resolved IP match against exact destination IPs. |
| 134123 | NG SWG / CASB | Enhanced URL list using REST API v2 | When creating a new URL list, requests with only "name" in the payload leads to a 500 Internal Server Error. |
| 109675 | NG SWG / CASB | Honor XFF with EP in the cloud | X-Forwarded-For in HTTP CONNECT is not currently supported. When enabled, use X-Forwarded-For from HTTP request as the user IP. |
| Issue Number | Category | Feature | Issue Description |
|---|---|---|---|
| 131413 | Advanced Analytics | Sankey chart labels | Sankey labels are not appearing properly. Workaround: Edit the Sankey label type setting once, save, and the label will appear as intended. |
| 133217 | API Protection | API calls for Salesforce API integration | Fixed an issue relating to excessive API calls being made for the Salesforce API integration during policy processing. |
| 131196 | API Protection | Rate limits for remediation of quarantined files | Fixed an error while deleting the quarantined file after a restore action. Added an improvement to delete previous versions after a file is quarantined for Microsoft SharePoint. |
| 129302 | API Protection | OCR not detected for images | Fixed an issue with optical character recognition (OCR) not being detected for images embedded in the body of an email for Microsoft Outlook. |
| 113783 | API Protection | Incorrect file exposure | Fixed an issue which resulted in an incorrect exposure that is shown for a file after a policy action. |
| 133158 | CASB Inline Protection | Activity name change | The "Edit" activity is renamed to "View," the new name more accurately reflects the action. |
| 131203 | CASB Inline Protection | DLP data in email subject is not triggering the DLP policy | We have added DLP support for calendar events where information can be passed in the subject line. With this, customers can create a DLP policy over creating and editing the calendar events. |
| 131106 | NG SWG / CASB | Download file size policy | Inline policy with file size is now properly applied to the applicable flows for download activity. |
| 131703 | SSPM | Sorting by compliance for Microsoft 365 | The tables on the following pages now correctly support sorting by compliance for Microsoft 365:
|
| 132209 | SSPM | CCL and Category in Alert page | SSPM alerts for Microsoft 365 on the Skope IT > Alerts page now includes the correct app name and category so users can see the CCI and CCL on the alert detail panel. |
| 129237 | Steering | On-premises detection | Netskope Client keeps running on-premises checks even if dynamic steering is disabled. |
To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.
Netskope
27 Nov 2023
6
How To