Netskope

No entries match these filters. Clear filters

1. Netskope Cloud 142.0.0 Documentation Available Now! Oct 5, 2026 · issue 096

   Netskope R142.0.0 introduces a new Client Steering capability and a redesigned Netskope Client UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

2. Netskope Release Notes Version 142.0.0 Oct 5, 2026 · release notes

   Netskope v142 adds AI Risk badges, Agent Action Control, Global Client Attributes, Enterprise Browser Save-As control, RBI CDR, and Private Access Publisher repo.

   • Adds Risk badge with confidence indicator on AICC Overview and Inventory pages for AI Applications, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Servers, and Identities
   • Introduces Endpoint AI Discovery GA to discover AI assets on managed Windows/macOS endpoints via Netskope Client
   • Splits traffic visualization into distinct upload/download bars in AICC Overview
   • Shows blocked transaction counts instead of misleading data volumes for blocked apps in AICC app detail view
   • GA for AI Guardrails On Demand - Netskope Hosted as a standalone REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. and User Hosted as a VM

   +57 more show less

   • Adds Prompt Sandbox feature under Policies > AI Guardrails > Sandbox with 5,000 scans/tenant/month limit
   • Extends AI Red Teaming to 23 languages with code-switching evasion attacks and multi-language ASR comparison
   • GA of Agent Action Control with User Alert action for human-in-the-loophuman-in-the-loopHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. approval in Real-Time Protection policies
   • Extends Agent Action Control to 79 applications with configurable fallback actions and HTTP header-based overrides
   • Streams SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates./GenAI traffic at wire speed when no active DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. or AI Guardrails policy applies, removing buffering latency
   • Adds dedicated connector fallback to Universal Connector for missed GenAI traffic (behind feature flag)
   • Enables enhanced Outlook Web file attachment support via Netskope Reverse Proxy without configuration changes
   • Opens Advanced Feature Configuration Portal in UI for self-service CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. Inline feature flags
   • Separates MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. catalog from Cloud Apps CCI with dedicated Generative AI view
   • Consolidates DNS events to one per transaction in Cloud Firewall to reduce SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. ingestion costs
   • Adds source IP egress and Access Methods conditions to Cloud Firewall policies
   • Identifies HTTP/S traffic on non-standard ports for full web inspection (Beta)
   • Tracks endpoint file activity across rename/move/copy/upload/download in Data Lineage Windows Beta
   • Adds Endpoint Exceptions tab with path/process wildcards for Data Lineage
   • Upgrades DLP rule engine with improved NEAR operator proximity logic (Beta)
   • Changes Author and format metadata fields in document inspection due to engine maintenance
   • Enables Email AI Security Beta to scan inbox emails for indirect prompt injectionindirect prompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. threats
   • Adds Real-time Protection support for Email DLP via Classic Outlook Plugin on Windows (Beta)
   • GA of Windows Printer Content Control version 3 (PCCv3) with parallel content evaluation and no browser automation
   • Removes PCCv2 support in R142+
   • Enables Browser Application Control for file uploads on macOS browsers
   • Adds AirDrop Content Control for outbound transfers on macOS 14+
   • Supports Windows EPDLP Agent on ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. processors (Snapdragon/Apple M1 via VM)
   • GA of Enterprise Browser license sync with IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. via SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. for automated onboarding/offboarding
   • Adds Save As control in EB Protection Policy to block local saves of web content
   • Introduces Risk-Based Extension Governance with 8-pillar assessment and threshold-based blocking
   • Supports self-hosted Chrome extensions in Extension Governance via manifest URL
   • Restricts file uploads at browser level (pickers, drag-drop, CDPCDPCisco Discovery Protocol, a Cisco-proprietary Layer 2 protocol that advertises device identity, capabilities, and topology between directly connected Cisco gear, giving cyber tools a passive way to map network infrastructure.) in Enterprise Browser
   • Adds Profile Lock Beta with idle timeout and authentication factors for EB profiles
   • Binds EB profile creation to SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. authentication for identity validation
   • Integrates Workflow Automation to release O365 quarantined emails via admin console or email approval
   • Extends MIP sensitivity label detection to nested and embedded files in containers/emails (GA)
   • Adds support for macOS 27, iOS 27, Chrome OS 152, Debian 13 clients with minimum version requirements
   • Enables improved SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address.-based steering for overlapping domains in Netskope Client Beta
   • Adds Global Attributes configuration UI for Internet Security behavior via Settings > Security Cloud Platform > Client Configuration
   • GA of Cloud Firewall support for Android and ChromeOS devices
   • Redesigns Netskope Client UI into tabbed layout for Overview, Configuration, Internet Security, etc.
   • Supports UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. traffic tunneling for NPA on Android
   • Adds Private Access AIOpsAIOpsA practice that applies machine learning and data analytics to IT operations data—logs, metrics, events—so that cyber tools can automate anomaly detection, correlate alerts, and reduce noise at scale. Agent for generating app segments/policies and auditing segments
   • Introduces Secure Private Artifact Repository for NPA Publisher software delivery via authenticated HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. endpoints
   • Enables Publisher-first DNS validation for exact-match NPA policies
   • Aggregates private IP steering rules on macOS client to reduce memory overhead
   • Adds Paste Sites as a new predefined URL category in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions.
   • Modernizes Forward to Proxy architecture into Remote Proxy with REST API v2 and NG Web UI
   • Enables V2 API support for constraints management on user and storage profiles
   • Migrates SkopeIT Applications > Instances page to Next-Gen WebUI controlled by feature flag casbinline_enable_ngweb_appinstance
   • Enables does not match Group/OU and Source Country criteria by default in SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Decryption Policies for new tenants
   • Removes Quarantine action from Classic RTP policies; existing configs reset to Block on edit
   • Enables Advanced User Notification Variables by default for existing tenants
   • Adds Last Accessed Date field to Next Gen API Data Protection Inventory and retroactive scan filters
   • Adds Automated Incident Remediation Tracking toggle to auto-close DLP incidents in Next Gen API Data Protection
   • Improves RBI tab auto-refresh logic for expired tabs based on system focus and user actions
   • Decouples Isolation Indicators configuration from Read-Only action control in RBI Templates
   • Expands RBI infrastructure with Hyderabad, India cluster with Singapore fallback
   • Adds native OPSWAT MetaDefender Cloud CDR integration for RBI (Beta)
   • Extends SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime. file support to Atlassian Jira and adds 30 new predefined rules across AzureAD, Jira, M365, ServiceNow, Zoom
   • Makes Malware Retention available in FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. and PBMM tenants

   62 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The Quarantine action is removed from Classic Real-Time Protection policies; any existing policy configured with Quarantine resets to Block when opened for editing.
   • !PCCv2 is no longer supported or available with Netskope Client R142 or later; users requiring PCCv2 must continue using R141.1.
   • !In Private Access (NPA), DLP and Threat Protection policies no longer grant access to private apps starting in R142; access must be granted via separate Allow or authentication policies.
3. New Features and Enhancements September 30, 2026 Sep 30, 2026 · release notes

   Advanced Analytics pages redesigned with new Favorites feature

   • Adds Favorites capability in Advanced Analytics to mark reports and dashboards as favorites.
   • Redesigns the Advanced Analytics Personal page (Advanced Analytics > Personal).
   • Redesigns the Advanced Analytics Group page (Advanced Analytics > Group).

   3 details in Everything

4. announced seen Sep 16, 2026 · issue 076

   Netskope adds Agent Action Control to intercept and block risky AI agent actions before they execute⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

5. Netskope Release Notes Version 141.1.0 Sep 16, 2026 · release notes

   Netskope v141.1.0 adds Zendesk support to Next Gen API DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. with dashboard and dedicated UI pages.

   • Adds Zendesk as a supported cloud app in Next Generation API Data Protection for ongoing and retroactive scans of tickets, comments, attachments, and Help Center content
   • Introduces a dedicated Zendesk Dashboard page within the Next Generation API Data Protection UI
   • Extends Zendesk coverage to the Inventory page’s Users and User Groups tabs

   3 details in Everything

6. Netskope Cloud 141.0.0 Documentation Available Now! Sep 1, 2026 · issue 062

   Netskope R141 adds per-app-instance visibility controls for SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. findings.

   • Adds the ability to control visibility of SSPM findings scoped to individual app instances, enabling teams to restrict or expose findings by specific SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. app deployments.

   1 detail in Everything

7. Netskope Release Notes Version 141.0.0 Sep 1, 2026 · release notes

   Netskope v141 adds Cloud TAP PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. merge/upload flags, Enterprise Browser text suppression and extension risk governance, CCI AI agent, NPA vaults, and Network Location API v2

   • Adds --pcap-merge-by-flow, --pcap-merge-max-size, --pcap-upload-bucket, --pcap-upload-provider, --pcap-manifest, --user-filter, --site-filter, --start-time, --end-time, --duration, --tz, and --pcap-estimate flags to Cloud TAP Stitcher for merged exports, direct cloud upload, manifest generation, filtering, flexible time input, and pre-export resource estimation.
   • Adds Dedicated App Connector for Apidog covering Web and desktop (macOS, Windows) with DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest./TSS enforcement on spec create/import/export, request submission, API responses, file upload, test scenario execution, reports, documentation publish/share, AI-assisted generation, and delete operations.
   • Adds Dedicated App Connector for Claude Design (Generative AI/Design & Prototyping) covering Web/Browser interface with DLP/TSS enforcement on project create, prompt submission, file/project/code/Figma upload, AI-generated responses, share link, download, and send-to-other-apps; uses organization ID as instance ID.
   • Adds Dedicated App Connector for Humata AI (Generative AI / Document Intelligence) covering Web and Endpoint API with DLP/TSS enforcement on document/URL upload, prompt submission, AI-generated responses, chat sharing, and file downloads.
   • Adds CCI Insights Agent in the App Catalog > Cloud Apps view that replaces Ask ScopeAI with an AI-driven agent supporting natural-language search across 86,000+ applications, session awareness for follow-ups, and feedback loops on high-confidence answers.

   +30 more show less

   • Adds Inline Feature Flags Configuration Portal accessible from the Netskope UI to enable or disable specific CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. Inline feature flags without contacting support.
   • Adds OS Family based policy enforcement in Cloud Firewall (CFW) policies, enabling allow/block actions for non-web traffic matching OS Family.
   • Adds AI Gateway integration for Enterprise Browser allowing centralized governance, visibility, and DLP/TSS inspection of browser-originated LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. traffic with an emergency kill switch via gateway token revocation.
   • Adds File Upload Controls to Enterprise Browser intercepting drag-and-drop, file pickers, and CDPCDPCisco Discovery Protocol, a Cisco-proprietary Layer 2 protocol that advertises device identity, capabilities, and topology between directly connected Cisco gear, giving cyber tools a passive way to map network infrastructure. automation uploads, with policy-driven actions delivered via the x-netskope-browser-actions header.
   • Adds Risk-Based Extension Governance for Enterprise Browser evaluating extensions against an 8-pillar rubric using configurable Admin-Accepted Risk Score thresholds (0.0 to 10.0) and local verdict caching.
   • Adds Pending-First Policy Staging, visual validation, bulk policy actions, and RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. workflows for Extension Governance Policies accessible under Enterprise Browser > Extension Governance Policies.
   • Adds Screen Share Guard for Enterprise Browser applying a privacy overlay and warning dialog when sensitive content is detected on tabs during screen sharing.
   • Adds File Downloads Control – Restrict and Encrypt allowing Block, Allow, or Encrypt policies with automatic local encryption appending .eb extension and profile-bound decryption.
   • Adds Text Input Suppression GA to Enterprise Browser rendering sensitive pages read-only while suppressing paste, autofill, IME, voice dictation, and canvas text input.
   • Adds Next Gen Forensics support for Amazon S3 in AWS GovCloud regions and Google Cloud Platform as a forensic destination using a dedicated Netskope-managed GCP service account.
   • Adds Cloud Firewall (CFW) and DNS Security modes for Android and ChromeOS under All Traffic Steering Configuration with minimum supported client version 141.0.0.
   • Adds Support for ChromeOS 151 as a minimum supported client platform.
   • Records administrator email in Audit Logs when enabling, disabling, or updating client services from the Devices webUI.
   • Enhances Edge Proxy access methods with Granular Access Methods (PXC, CEP HTTP Trusted, CEP HTTP Roaming, Isolation) replacing generic Explicit Proxy in traffic logs and SkopeIT filters.
   • Adds Trigger for Scan field to Skope IT alerts and DLP incidents showing values like Resource Changed, Resource Permission Changed, Parent Permission Changed, Group Membership Changed, User Exposure Changed, Resynchronization, Error Recovery, Retroactive Scan, and Follow-up Action.
   • Introduces Migration Assist for moving Classic API Data Protection instances and policies to Next Generation API Data Protection with initiation, background migration, and review/cutover phases.
   • Adds Privileged Remote Access (PRA) Session Recording for clientless browser-based AnyApp RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. and SSH sessions downloadable from Network Events.
   • Adds Credential Injection for SSH and RDP Sessions supporting Netskope-managed vault and External vault (Delinea Secret Server) with just-in-time retrieval.
   • Adds Secure Private Artifact Repository for NPA Publishers to retrieve Ubuntu packages and container images from a Netskope-managed private repository.
   • Adds Dedicated Local Broker Hostname Per Steering Configuration allowing distinct LBR hostnames mapped to individual Traffic Steering configurations.
   • Supports DNS over TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. on iOS for truncated UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. response retries.
   • Increases NPA Local Broker aggregate throughput capacity to 1 Gbps.
   • Supports Display of Real-time Protection (RTP) User Coaching notifications directly within Remote Browser Isolation (RBI) sessions.
   • Enhances Network Location REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 with CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. operations, search, and name update capabilities for network location objects.
   • Adds Control Visibility to SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management Findings by App Instance via custom roles limiting SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. visibility to defined SaaS app instances.
   • Adds 30 new and updated Predefined SSPM rules: AzureAD (6 new, 7 updated), Jira (5 new), Microsoft365 (7 new, 4 updated), ServiceNow (7 new), Zoom (5 new, 1 updated).
   • Adds IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. HTML Smuggling Behavioral Detection Support for FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. and PBMM tenants.
   • Adds Tunnel Down Reason Codes NS_ALERT_SCHDCHEDULED_UPGRADE, NS_ALERT_EMERGENCY_UPGRADE, and NS_ALERT_RELEASE_DEPLOYMENT for IPSec & GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. sites.
   • Adds Diffie-Hellman Groups 19, 20, and 21 support for IPSec tunnels.
   • Enhances Real-time Internet Access Policies UI with infinite scroll, table of contents, bulk enable/disable actions, inline reference definition creation, and pending changes review.

   35 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Deprecated three legacy CASB API endpoints GET /api/v2/casbapi/apps/{app}/instances/{instance}/files/{id}, POST /api/v2/casbapi/entities/permissions, GET /api/v2/casbapi/apps/{app}/instances/{instance}/files/{id}/permissions, POST /api/v2/casbapi/entities/getversions, and GET /api/v2/casbapi/apps/{app}/instances/{instance}/files/{id}/versions replaced by POST /api/v2/casbapi/entities/getmetadata and their corresponding permissions/versions endpoints; reach end of life on 1 February 2027.
   • !Classic API Data Protection reaches end-of-life on June 1, 2027 requiring migration to Next Generation API Data Protection.
8. Netskope Private Access Release Notes Version 140.0 Aug 18, 2026 · release notes

   NPA v140 adds AI Agent for policy generation, KSA PoP opt-out, China GSLB zone selection, and remote Publisher log collection.

   └──▷ HOW TO FIND IT
   Contact support to enable the out-of-KSA PoP capability for eligible KSA tenants.
   📍Contact Netskope Support to enable this capability for your tenant.
   • Adds NPA AI Agent to generate narrow Application Segments and Real-time policies for least privileged access
   • Adds optional out-of-KSA PoP configuration for eligible KSA tenants to allow in-transit processing at non-KSA points of presence
   • Adds China GSLB zone selection based on user identity, allowing assignment of zones to specific user groups or organizational units
   • Adds Remote Collection of Publisher Logs from the Netskope Management interface

   4 details in Everything

9. Netskope Release Notes Version 140.1.0 Aug 17, 2026 · release notes

   Netskope v140.1.0 adds device deletion in Client Steering and real-time DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. enforcement for OneDrive native sync uploads

   • General availability of device deletion in Netskope Client Steering with automatic unenrollment

   1 detail in Everything

10. Netskope Cloud 119.0.0 Documentation Available Now! seen Aug 4, 2026 · issue 035

    Netskope R119 brings GA for Box, Cisco Webex, ServiceNow, and Slack Enterprise in Next-Gen API Data Protection, plus HTTP/2 RBI and a new URL Lookup API.

    • Adds Transaction Events Field - Format 4 (Beta) for Netskope Secure Web Gateway transaction event logging.
    • Adds Netskope URL Lookup API (Controlled GA) enabling programmatic URL classification queries.
    • General Availability of Next Generation API Data Protection for Box, Cisco Webex, ServiceNow, and Slack Enterprise.
    • Adds Automatic Classification of Files using Box Labels in Next Generation API Data Protection.
    • General Availability of Microsoft Purview Information Protection Write Capability Action in Next Generation API Data Protection.

    +4 more show less

    • Adds NGWeb migration for Netskope Private Access (NPA) Publishers.
    • Adds Private Access Tunnel Browser Access with URI Auth Bypass (Controlled GA) for NPA.
    • Adds support for Multiple IDPs with Browser Access (Beta) in NPA.
    • Adds HTTP/2 Enabled Tenant Compatibility with RBI (Beta) in Netskope Secure Web Gateway.

    9 details in Everything

11. Netskope Cloud 121.0.0 Documentation Available Now! seen Aug 4, 2026 · issue 035

    Netskope R121 brings Cloud TAP to general availability and adds multiple IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. support for NPA Browser Access.

    • Promotes Cloud TAP to general availability (GA).
    • Adds multiple IdP support for Netskope Private Access (NPA) Browser Access, enabling more than one identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. per deployment.

    2 details in Everything

12. Netskope Cloud 122.0.0 Documentation Available Now! seen Aug 4, 2026 · issue 035

    Netskope Cloud 122 adds Google Badged Label write support, ChatGPT Enterprise NPA, browser access, new SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. file constraints, and RBI SKU scope isolation.

    • Adds Browser Access for RUH1 in Netskope Private Access.
    • Adds new Inline File Constraints to the Netskope Secure Web Gateway (NG SWG).
    • Adds XRBI SKU Scope and isolation of third-party auth flows in Remote Browser Isolation (RBI).

    3 details in Everything

13. Netskope Cloud Exchange (CE) v5.1 is NOW GA seen Aug 4, 2026 · issue 035

    Netskope CE v5.1 adds Unified Cloud Risk Exchange, IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. labeling/retraction, full ticket lifecycle management, and endpoint event visibility.

    • Adds Unified Cloud Risk Exchange (CRE) providing user and application risk context for adaptive zero trust policy enforcement, with integrations for Microsoft Entra, CrowdStrike Identity Protect, CrowdStrike Cloud Security (CNAPPCNAPPA cloud-native application protection platform that combines checks across cloud configuration, workloads and development. It helps teams connect risks that separate tools might report apart.), Okta, and Wiz.
    • Adds IoC Source Labeling in Cloud Threat Exchange (CTE) to identify the origin of IoCs shared between Netskope and third-party Threat Intel Providers (TIPs) including CrowdStrike, SentinelOne, MISP, and Anomali.
    • Adds IoC Retraction in Cloud Threat Exchange (CTE) to remove or roll back IoCs shared between Netskope and third-party TIPs such as CrowdStrike, SentinelOne, MISP, and Anomali.
    • Upgrades Cloud Ticket Orchestrator (CTO) to support complete ticket/incident lifecycle management between Netskope and third-party ITSMITSMIT Service Management: a framework of practices for delivering and supporting IT services, covering ticketing, change control, and incident response. Cyber tools integrate with it to automate alert-to-ticket workflows. tools including ServiceNow and Jira (Ticket Orchestrator v2.0.0 Plugin).
    • Adds Endpoint (Device & Content) Events & Alerts visibility to Cloud Log Shipper (CLS) (Log Shipper v2.0.0 Plugin).

    +3 more show less

    • Introduces new Netskope Tenant Plugin for Cloud Exchange.
    • Introduces new WebTX v2.0.0 Plugin for Cloud Log Shipper.
    • CE v5.1 GA images are now available on AWS Marketplace (AMI), Azure Marketplace (VHDX), VMware OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles., and GitHub.

    8 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !CE v5.1 GA does NOT support the CE Small stack sizing; deployments using the Small stack must meet the new minimum system requirements before upgrading.
    • !Migration from CE v5.0.x (HA) to CE v5.1 (Standalone) deployment is NOT supported.
    • !CE v3.x reached EOL/EOS on 31 January 2024; CE v4.0.x and CE v4.1 reached EOL/EOS on 31 July 2024; CE v4.2 and CE v5.0.0 will reach EOL/EOS on 31 January 2025.
14. Netskope Cloud 140.0.0 Documentation Available Now! seen Aug 4, 2026 · issue 035

    Netskope R140 adds an AI agent for automatically generating NPA app segments and policies.

15. Netskope Release Notes Version 140.0.0 Aug 3, 2026 · release notes

    Netskope v140 adds AI Guardrails On Demand, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. embedded file inspection, and RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists./LBAC for DNSaaS

    • Adds AI Guardrails On Demand as a deployable VM for scanning AI prompts via REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services.
    • Adds Spike in printed data, Spike in files transferred to removable media, and other Endpoint DLP anomaly detections for Insider Threat UEBA
    • Adds Process Name and Parent Process Name as lookup criteria in Real-Time Protection (RTP) and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. policies
    • Adds Access Findings page under API-enabled Protection > CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. API (Next Gen) for Microsoft 365 SharePoint Access Reviews
    • Adds support for External Client Apps discovery in Salesforce SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications.

    5 details in Everything

16. AI Security Ops Release Notes Version - August 2026 Aug 2026 · release notes

    Netskope AISecOps vAugust2026 adds agent lifecycle management, Purview DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. ingestion, and EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. enrichment for insider threat investigations.

    • Agent Guidance now supports labeling, expiry dates, recommendations, and usage details for standing context.
    • The DLP agent ingests, triages, investigates, and provides recommendations for Microsoft Purview DLP alerts.
    • The Insider Threat AISecOps Agent enables daily high-risk user ranking, tenant-wide pattern surfacing, and one-click escalation to full cases.
    • The Insider Threat agent enriches investigations with read-only device risk data (scores, detections, hygiene) from existing EDR systems.

    4 details in Everything

17. Virtual Appliance Release Notes Version 139.0.0 Jul 31, 2026 · release notes

    Netskope VA v139 adds native HTTP Redirect policy action and increases SWAP size.

    • Policy Support for HTTP Redirect allows administrators to use a native HTTP Redirect policy action that routes users via HTTP 307 headers.
    • Increased SWAP size on the Virtual Appliance to align with general recommendations.

    2 details in Everything

18. Netskope Private Access Release Notes Version 139.0 Jul 16, 2026 · release notes

    Netskope Private Access v139 adds pattern matching for app hostnames, tenant-level DNS validation toggle, and dedicated LBR hostnames per steering config.

    • Pattern Matching Support in Application Definition enables admins to define private application hostnames using stable pattern segments (e.g., consumers.sandbox.internal) instead of listing every dynamically generated FQDN.
    • Enable Publisher DNS Records Validation tenant-level option preserves DNS aliasing structures (CNAMECNAMEA DNS record type that maps one hostname to another as a canonical alias, letting cyber tools track infrastructure by following chains of names to their true origin. chains) by resolving exact-match apps through the Publisher rather than returning an immediate stub IP.
    • Dedicated Local Broker Hostname Per Steering Configuration allows assigning a distinct FQDN to individual Traffic Steering configs for granular LBR selection and GSLB fallback.

    3 details in Everything

19. Enterprise Browser Release Notes July 15, 2026 Jul 15, 2026 · release notes

    Enterprise Browser v1.5.6 adds Screen Share Guard, Text Input Suppression, Save As and File Download controls, Data Masking, and macOS PKG MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. support.

    • Adds Screen Share Guard (Beta) which applies an opaque gray mask over browser tabs containing sensitive content during virtual meetings.
    • Adds Control Text Input (Beta) suppression to render pages read-only while preserving navigation and accessibility flows.
    • Adds Save As (Beta) control to block saving web content via UI, context menu, or keyboard shortcuts like Ctrl+S/Cmd+S.
    • Adds File Downloads Control – Restrict and Encrypt (Beta) that automatically appends the .eb extension to encrypted files saved in the renderer.
    • Adds Real-Time Data Masking (Beta) to redact sensitive info like credit card numbers within the browser renderer.

    +4 more show less

    • Adds native macOS MDM support via a standardized .pkg installer generated in CI/CD for zero-touch deployment.
    • Adds a new Policy button in the navigation bar that displays the rulename and specific blocked/enabled controls for the current site.
    • Adds General Configuration section to the profile popup showing status for Password Manager, Developer Tools, Notifications, Media Access, and Intelligent Tab Sharing.
    • Adds Sandboxed Clipboard Notification Infobar to explicitly notify users when clipboard operations are blocked by administrator policies.

    9 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Changes the default Downloads folder location for multi-profile users from /home/<user>/Downloads to /home/<user>/Downloads/<profile-name>.
20. Netskope Cloud 131.0.0 Documentation Available Now! seen Jul 13, 2026 · issue 014

    Netskope R131 adds Next-Gen SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. onboarding for M365/Salesforce, on-demand deep scanning, on-prem detection, and macOS/iOS 26 client support.

    └──▷ HOW TO FIND IT
    Onboard a Microsoft 365 tenant into Next-Gen SSPM to continuously assess your M365 security posture against benchmarks.
    📍In the Netskope console, go to SSPM › Next-Gen SSPM › Onboarding and select Microsoft 365, then follow the guided connector setup.
    • Adds pre-built Ubuntu 22.04 VM image for Hyper-V to simplify Netskope Private Access publisher deployments.
    • Supports onboarding Microsoft 365 in Next-Gen SSPM for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. security posture visibility.
    • Supports onboarding Salesforce in Next-Gen SSPM for SaaS security posture visibility.
    • New Deepscan On Demand capability for Threat Protection API enables targeted deep file inspection outside of inline policy.
    • New On-Prem Detection for Traffic Steering identifies and steers on-premises traffic.

    +4 more show less

    • New Web UI Modification option for Traffic Steering configuration.
    • Adds Windows 64-bit client support for SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. Tunnel mode.
    • Netskope Client now supports macOS 26 and iOS 26.
    • New Terminate Netskope Client Debug Mode control for managing client diagnostic sessions.

    9 details in Everything

21. Netskope Cloud 132.0.0 Documentation Available Now! seen Jul 13, 2026 · issue 014

    Netskope R132 adds Universal Reverse Proxy for CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic., Transaction Event visibility in Skope IT, and enhanced SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Findings UI.

    • Adds Universal Reverse Proxy support under CASB Real-time Protection.
    • New Transaction Event support in Skope IT for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility.
    • Enhanced Findings UI in SaaS Security Posture Management (SSPM).
    • New visibility for Modified and Deleted Rules in the SSPM Rules UI.

    4 details in Everything

22. Netskope Cloud 133.0.0 Documentation Available Now! seen Jul 13, 2026 · issue 014

    Netskope R133 adds AI Red Teaming, AI Security Guardrails, an AI Gateway, expanded ChatGPT Enterprise protection, and NPA source-IP egress controls.

    • New AI Red Teaming capability to test and evaluate AI model resilience against adversarial prompts and attacks.
    • New AI Security Guardrails to enforce policy-based controls on AI application usage and outputs.
    • New Netskope AI Gateway to provide a centralized security enforcement point for AI service traffic.
    • Expanded Next Generation API Data Protection for ChatGPT Enterprise, covering fine-tuning data and memory data.
    • Controlled GA of Windows 64-bit Client Support Mandate for the Netskope Client.

    +4 more show less

    • New Mandate Enrollment feature to enforce enrollment into the Netskope Client via steering policy.
    • New NPA Source IP Egress Criteria for Client, enabling source-IP-based routing decisions in Netskope Private Access.
    • Updated NPA Tunnel Re-auth Behavior with Periodic Authentication support in the Real-time Policy Framework.
    • New SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. visibility into connectivity between SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. app instances and the SSPM service.

    9 details in Everything

23. Netskope Cloud 134.0.0 Documentation Available Now! seen Jul 13, 2026 · issue 014

    Netskope R134 adds Enterprise Browser–NPA integration, GitHub 3rd-party app risk scoring, and a new Threat Hunting Module.

    • New Next Generation API Data Protection deferred policy action capability.
    • New Enterprise Browser and NPA (Network Private Access) integration.
    • New SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. capability to discover and risk-score third-party apps in GitHub.
    • New deep visibility into SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. users within SaaS Security Posture Management.
    • New Threat Hunting Module added to Threat Protection.

    5 details in Everything

24. Netskope Cloud 135.0.0 Documentation Available Now! seen Jul 13, 2026 · issue 014

    Netskope R135 adds AI Guardrails, AI Red Teaming, Agentic Broker, and new CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic./SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. integrations.

    • New AI Prompt and Response Guardrails for content moderation and protection from AI-based threats.
    • New AI Red Team product for adversarial testing of AI systems.
    • New Agentic Broker capability in CASB Real-time Protection.
    • General Availability of Smartsheet support in Next Generation API Data Protection.
    • New GitHub Activity Alerts and Dashboard support in Next Generation API Data Protection.

    +1 more show less

    • New SSPM capability to discover and risk-score third-party apps connected to Zoom.

    6 details in Everything

25. Netskope Cloud 138.0.0 Documentation Available Now! seen Jul 13, 2026 · issue 014

    Netskope R138.0.0 adds enhanced selection controls for Golden Monthly Releases in Client Steering.

26. Netskope Cloud 139.0.0 Documentation Available Now! seen Jul 13, 2026 · issue 014

    Netskope R139 adds FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments.-140-3 client steering, device deletion, and GA of AI Command Center.

    • Adds FIPS-140-3 compliance support for Netskope Client Steering traffic.
    • New ability to delete devices from the Netskope management console.
    • AI Command Center (AICC) reaches General Availability (GA).

    3 details in Everything

27. The Netskope Cloud Platform R137.0.0 documentation is here! seen Jul 13, 2026 · issue 014

    Netskope R137 adds SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Privileged User Visibility enhancements and a self-service UI for NPA AI Agent App Audit.

    • Adds Privileged User Visibility enhancements to SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM), surfacing elevated-access account risk in SaaS environments.
    • Introduces a self-service UI for the NPA AI Agent App Audit, enabling administrators to review and manage AI agent application access without requiring support intervention.

    2 details in Everything

28. Netskope Cloud 139.0.0 Documentation Available Now! Jul 6, 2026 · release notes

    Netskope Cloud R139 brings AI Command Center GA and Netskope Client Steering for FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments.-140-3

    • Introduces AI Command Center to General Availability (GA) as a new centralized management capability for AI governance.
    • Adds support for Netskope Client Steering with explicit compliance against FIPS-140-3 requirements.

    2 details in Everything

29. Netskope Release Notes Version 139.0.0 Jul 6, 2026 · release notes

    Netskope 139 adds AI Deepfake Detection API, On-Demand Isolation Portal, Destination Profile Evaluation API, and CFW Source IP/Access Method policy enforcement.

    • Adds Deepfake Detection On Demand API to submit audio, video, and image files for deepfake detection
    • Introduces the On-Demand Isolation (ODI) portal at https://ondemand.isolation.goskope.com for self-service URL isolation
    • Adds Destination Profile Evaluation API endpoint POST /api/v2/profiles/destinations/getevaluation to simulate policy matches
    • Enables Cloud Firewall policy enforcement based on Source IP Egress and Access Method criteria

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default reply-to address for RTP email notifications changes to do-not-reply@netskope.com when no From Email is specified.
30. DLP On Demand Appliance Release Notes Version - 139.0.0 Jul 6, 2026 · release notes

    DLPoD appliance automatically rescales pod CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. and memory limits on restart when hardware profile changes.

31. AI Security Ops Release Notes Version - July 2026 Jul 2026 · release notes

    AI Security Ops adds default auto-investigation, per-step expand/collapse in UI, browsing incident context, and revised Insight cron schedule.

    • Auto-investigation is now enabled by default for new tenants
    • Investigation trail allows for independent per-step expand/collapse
    • Cases surface Investigated by attribution showing user email or system label
    • Incidents from web browsing display Site name and URL in the side panel
    • Insight Generation cron rescheduled to daily at 2:30am PST

    5 details in Everything

32. Netskope Private Access Release Notes Version 138.0 Jun 16, 2026 · release notes

    Netskope Private Access 138 adds auto-reconnect publisher via GSLB latency threshold and KVMKVMA Linux kernel module that turns the kernel into a hypervisor, letting a process run fully isolated virtual machines using hardware virtualisation extensions. Cyber tools use it to sandbox execution environments at near-native speed. QCOW2 support

    • Adds Auto Reconnect Publisher feature that uses a Resolution Loop to monitor network latency and automatically shift connections to optimal PoPs when thresholds are exceeded (Beta)
    • Enables deployment of the NPA Publisher on KVM-based virtual environments using the new QCOW2 image format
    • Adds OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles., VHDX, and QCOW2 hosting for the Netskope Private Access Publisher on AliCloud

    3 details in Everything

33. New Features and Enhancements June 12, 2026 Jun 12, 2026 · release notes

    New MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Security Dashboard and 22 new data attributes for monitoring AI-agent activity

    • Adds the MCP Security Dashboard under Advanced Analytics → Netskope Library for monitoring AI-agent activity
    • Makes 22 new MCP data attributes available in application events and alerts schemas for custom dashboards and widgets

    2 details in Everything

34. Netskope Release Notes Version 138.0.0 Jun 8, 2026 · release notes

    Netskope 138 adds AI Guardrails On Demand VM, Enterprise Browser Screen Share Guard, and granular Access Methods for NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions..

    • Adds the AI Guardrails On Demand VM deployment option to scan AI prompts and responses via existing AI Gateways or Agents using an API.
    • Introduces Screen Share Guard in Enterprise Browser to detect sensitive content in real-time and apply an opaque gray privacy overlay during virtual meetings.
    • Replaces the generic Explicit Proxy label with granular Access Methods (PXC, CEP HTTP Trusted/Roaming, Isolation) in traffic events and security policies.
    • Adds a new transaction event field x-cs-access-proxy to capture Access Proxy object matches for auditability in NPA/SWG contexts.
    • Expands Next Generation API Data Protection to Anthropic Claude Enterprise with Skope IT audit events, threat protection scanning, and retroactive scans (90-day default window).

    +4 more show less

    • Adds a delete remediation action for Next Generation API Data Protection policies on ChatGPT Enterprise files and Microsoft Viva Engage chat messages.
    • Introduces Created By attribute on the Next Generation API Data Protection Inventory page to show ownership of content objects (e.g., file, email, wiki).
    • Adds Netskope Private Access Publisher.qcow2 image support for deploying NPA Publishers on KVMKVMA Linux kernel module that turns the kernel into a hypervisor, letting a process run fully isolated virtual machines using hardware virtualisation extensions. Cyber tools use it to sandbox execution environments at near-native speed.-based virtual environments like Nutanix AHVAHVAcropolis Hypervisor, Nutanix's built-in bare-metal hypervisor for running VMs on their hyper-converged infrastructure, giving cyber tools a tightly integrated compute and storage layer without a separate hypervisor license. and OpenStack.
    • Enables Dynamic URL Classification by default for all new tenants via a backend feature flag in NG SWG.

    9 details in Everything

35. Netskope Digital Experience Management Release Notes for June 2026 Jun 2026 · release notes

    Netskope DEM adds Aggregated Traceroute with three new views for unified network path and latency analysis.

    • Aggregated Traceroute gives a unified view of the network path between a user’s device and the Netskope cloud across time, aggregating probe data over a selected window to show path and latency evolution, identify consistently problematic hops, and correlate issues with user location
    • New End-to-End Underlay Latency view provides a time-series chart of round-trip time from client to POP
    • New Hop-by-Hop Path View displays an aggregated network graph showing every hop, link latency, and probe distribution
    • New Time Slider with Location Awareness contextual filter ties network behavior to where the user was

    4 details in Everything

36. Netskope Release Notes Version 137.1.0 May 18, 2026 · release notes

    Netskope v137.1.0 adds Anthropic Claude Enterprise support and API Data Protection to Compliance Logs

    • Adds Next Generation API Data Protection support for Anthropic Claude Enterprise, enabling policy creation, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., ongoing scan, and alerts.
    • Migrates Next Generation API Data Protection for ChatGPT Enterprise to the Compliance Logs Platform.
    • Deprecates the GET /api/v2/nsbrowser/configpolicies and related /configpolicies endpoints effective May 5, 2026.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The GET /api/v2/nsbrowser/configpolicies, POST /api/v2/nsbrowser/configpolicies, GET /api/v2/nsbrowser/configpolicies/{id}, PUT /api/v2/nsbrowser/configpolicies/{id}, and DELETE /api/v2/nsbrowser/configpolicies/{id} endpoints are deprecated effective May 5, 2026, and will be removed by November 5, 2026.
37. Netskope Private Access Release Notes Version 137.0 May 14, 2026 · release notes

    Netskope Private Access 137.0 adds AIOpsAIOpsA practice that applies machine learning and data analytics to IT operations data—logs, metrics, events—so that cyber tools can automate anomaly detection, correlate alerts, and reduce noise at scale. App Audit UI, policy schedules, dual-stack DNS interception, steering exception bypasses, and URL rewrites for redirects.

    • Adds a Private Access AIOps Agent self-service UI to audit existing Private App Segments and create new segments and Real-time Policies
    • Adds Policy Schedules to Real-time Protection policies for Private App Segments to restrict access by day, date, and time
    • Enables dual-stack (IPv4 + IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only.) DNS interception on NPA Client for Windows and macOS without disabling IPv6
    • Supports URL rewriting for HTTP 30X Redirects in NPA Browser Access using public or custom hostnames
    • Adds Service & Destination Profile exception type under Settings > Security Cloud Platform > Traffic Steering > Steering Configuration to bypass NPA tunneling for specific destinations

    5 details in Everything

38. Streaming Client Release Notes May 7, 2026 May 7, 2026 · release notes

    Netskope Streaming Client C.2026.5.1 adds Syslog TLS support without certificate validation

    └──▷ BREAKING ON UPGRADE

    • !Event Streaming Client version C.2026.5.1 is mandatory if Syslog TLS is configured; any older version will fail to send events.
39. The Netskope Cloud Platform R137.0.0 documentation is here! May 5, 2026 · release notes

    R137.0.0 adds NPA AI Agent for App Audit self-service UI and SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. privileged user visibility enhancements.

    • Enhances SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM) with increased visibility into privileged users

    1 detail in Everything

40. Netskope Release Notes Version 137.0.0 May 4, 2026 · release notes

    Netskope R137 adds AI Gateway dashboard, NPA steering bypasses, PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key exchange, deepfake API, and SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. privileged user visibility.

    • Adds the AI Gateway Dashboard in Advanced Analytics to monitor traffic for AI agents and LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. through deployed AI Gateways.
    • Provides a Deepfake Detection On-Demand API to submit audio, video, or image files for deepfake detection based on voice and facial features.
    • Enables NPA Steering Configuration exceptions via the new Service & Destination Profile exception type under Settings > Security Cloud Platform > Traffic Steering > Steering Configuration.
    • Adds X25519MLKEM768 post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key-exchange support in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions., managed via feature flags ssl-server-pqc-key-exchange-alg and ssl-client-pqc-key-exchange-alg.
    • Introduces privileged user identification in SSPM with new filters on the Users page and updated metrics on the Apps page.

    +3 more show less

    • Supports multi-file and folder uploads in Remote Browser Isolation (RBI) with a real-time progress File Transfer Info Bar.
    • Adds Enterprise Browser Sandboxed Clipboard mode selection (Full Sandbox, Read System Clipboard, Write System Clipboard) via UI controls and API.
    • Adds tenant-level Enterprise Browser version management via the ReleaseChannel browser configuration policy.

    8 details in Everything

41. Netskope Release Notes Hotfix Version 137.0.1 May 4, 2026 · release notes

    Netskope Hotfix 137.0.1 adds external browser auth on Windows, iOS log collection, Device Tags for macOS/Linux/Android, ChromeOS 147 support, DEMAgent service with BETA flag,

    • Adds External Browser authentication option in Netskope Client for Windows to use the default system browser instead of WebView2
    • Adds iOS log collection feature letting administrators export diagnostic logs directly from the app during enrollment failures or config delays
    • Adds User Coaching notifications on Netskope Client for iOS, allowing real-time policy actions (Allow/Block/Report) via in-app prompts
    • Extends Device Tags support to macOS, Linux, and Android platforms, enabling tag-based steering policies and device classification rules
    • Adds ChromeOS 147 support in Netskope Client version 137.0.1

    +2 more show less

    • Installs the DEMAgent service on Windows when the DEMAgent BETA flag is active
    • Introduces the stAgentSvcMon service monitor to automatically restart the stAgentSVC agent service every 60 seconds if it stops

    7 details in Everything

42. Netskope Digital Experience Management Release Notes for May 2026 May 2026 · release notes

    DEM adds User Experience RCA for any score from 0-100 and fixes zoom on collapsed sections

    • Users can now run User Experience RCA for any score from 0–100, improving analysis flexibility in the User Details experience.
    • The zoom in feature now correctly expands and renders all sections regardless of their collapsed state in the DEM User Details page.

    2 details in Everything

43. Netskope Cloud Exchange Release Notes Version 6.1.0 Apr 28, 2026 · release notes

    Netskope Cloud Exchange 6.1 adds Azure Key Vault support, CTE Destination Profiles, risk stats, and EDM IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. filtering.

    • Adds Azure Key Vault as a supported secrets manager alongside HashiCorp Key Vault for connector credential storage
    • Adds Destination Profile support to the Netskope Cloud Threat Exchange (CTE) plugin for managing configurable network targets
    • Adds Normalization options in the Risk Exchange Schema Editor to control field value transformation during ingestion
    • Adds risk score/context statistics display in the Risk Exchange Dashboard
    • Adds bi-directional ticket creation and update workflows in the Netskope CTO plugin with incident resolution back to the Netskope tenant

    +6 more show less

    • Adds relative format filtering (days, hours, minutes) for expired IoCs in the CTE Module
    • Adds support for custom delimiters (comma, pipe, semi-colon) in the EDM Module
    • Adds a retry mechanism for 429 errors in EDM hash upload with up to 5 retries and 5-second delays
    • Adds UI functionality to regenerate expired SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. certificates
    • Adds ability to generate and download diagnostic logs from the Cloud Exchange UI
    • Adds Type field to diagnostic file Cloud Exchange Platform logs

    11 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed support for RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 8.x operating systems, making RHEL 9.5 the minimum supported version for Cloud Exchange deployments.
44. New Features and Enhancements April 23, 2026 Apr 23, 2026 · release notes

    Netskope adds AI Gateway Analytics dashboard and AI Gateway Events data collection for governing LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. traffic.

    • Adds the AI Gateway Dashboard under Advanced Analytics to provide visibility into traffic to AI agents and LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. through deployed AI Gateways.
    • Makes AI Gateway Events data collection available for building and customizing dashboards via Advanced Analytics > Netskope Library.

    2 details in Everything

45. Netskope Release Notes Version 136.1.0 Apr 20, 2026 · release notes

    Netskope v136.1.0 introduces AI Security Ops Agent, Next Gen API DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Owner support for Jira/GitHub, and NewEdge Express Connect.

    • Adds Netskope AI Security Ops Agent to automate case creation, investigation, and response workflows for DLP incidents
    • Enables Owner attribute policy definition for Atlassian Jira and GitHub in Next Generation API Data Protection
    • Releases NewEdge Express Connect as a licensed capability to steer up to 10 Gbps over dedicated physical circuits

    3 details in Everything

46. Netskope Private Access Release Notes Version 136.0 Apr 17, 2026 · release notes

    Netskope Private Access 136.0 adds threat protection, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., geo-fencing, multi-CA prelogon, and real-time policy updates

    • Adds support for applying Intrusion Prevention System (IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection.) and Threat Protection Service (TSS) profiles to NPA policies for web traffic on ports 80 and 443
    • Enables Data Loss Prevention (DLP) profile application directly to NPA policies for web applications accessed via the Netskope Client
    • Introduces source country as a policy criteria for NPA, allowing access restriction based on user geolocation resolved from Egress IP
    • Supports uploading multiple Certificate Authorities within a single client configuration for NPA Prelogon tunnels

    4 details in Everything

47. New Features and Enhancements April 17, 2026 Apr 17, 2026 · release notes

    Netskope Advanced Analytics adds AI Guardrails dashboard and new alert schema fields for generative AI monitoring

    • Adds the AI Guardrails out-of-the-box dashboard to the Advanced Analytics library for monitoring generative AI activity, policy enforcement, and threat detection.
    • Adds new data attributes to the AI Guardrails alert schema in Advanced Analytics: Profile Name, Matched Category Name, Matched Category Level, Matched Prompt/Response, Matched Prompt/Response Level, Matched Keyword, OWASP Top 10 LLM, MITRE ATLASMITRE ATLASA MITRE-maintained knowledge base of adversarial tactics and techniques targeting AI and machine learning systems, modelled on ATT&CK, giving cyber tools a structured taxonomy for AI-specific threat modelling., and Matched Content.

    2 details in Everything

48. Virtual Appliance Release Notes Version 135.0.0 Mar 31, 2026 · release notes

    Netskope Virtual Appliance 135.0.0 adds HTTP redirect policy action and increases syslog/swap limits

    └──▷ USE IT
    Verify Large File Scanning status in the dataplane via CLI.
    shell copy

    nsshell
    configure
    show dataplane lfs

    • Adds redirect policy action to automatically forward users via standard HTTP 307 headers with dynamic URL construction.
    • Increases the maximum concurrent Syslog connections for OPLP to 1,024.

    2 details in Everything

49. DLP On Demand Appliance Release Notes Version - 135.0.0 Mar 30, 2026 · release notes

    DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. On Demand Appliance 135 adds authenticated explicit proxy support for DRM and GCP Image Sharing via UI.

    • Adds authenticated explicit proxy support for DRM requests, allowing them to pass through an authenticated explicit proxy
    • Adds GCP Machine Image assignment capability to the management UI

    2 details in Everything

50. New Features and Enhancements March 19, 2026 Mar 19, 2026 · release notes

    New Enterprise Browser usage dashboards and enhanced Device Client data collection with steering/config fields

    • Adds Enterprise Browser Usage Monitoring dashboard to Netskope Library for visibility into user onboarding, app count, and traffic volume
    • Adds Enterprise Browser Usage Monitoring – Risk & Control dashboard to Netskope Library for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. alerts, cloud threats, and suspicious behavior in Enterprise Browser
    • Adds Steering Configuration field to the Device Client Overview dashboard widget showing how traffic is steered to Netskope
    • Adds Client Configuration field to the Device Client Overview dashboard widget showing operational parameters for the Steering Client

    4 details in Everything

51. Netskope Private Access Release Notes Version 135.0 Mar 11, 2026 · release notes

    Netskope Private Access v135 adds Steering Exception Bypasses and improves Local Broker selection.

    └──▷ TRY IT
    Manually launch the publisher configuration wizard when auto-start is suppressed on new deployments.
    copy

    $ sudo ./npa_publisher_wizard

    • Adds Steering Exception Bypasses for Private Apps to configure granular routing exceptions for specific IPs, subnets, domains, and hostnames
    • Improves Local Broker Selection with optimal low-latency auto-reconnection support

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Publisher wizard no longer automatically executes after SSH login for newly deployed Publishers; administrators must run sudo ./npa_publisher_wizard manually
    • !The change to manual Publisher wizard execution also applies to all existing publishers in v135 that are below v133
52. New Features and Enhancements March 5, 2026 Mar 5, 2026 · release notes

    Netskope REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 adds Service Account auth, Library access for new users, and default row limits.

    • Adds Service Account token support to REST API v2 endpoints for Advanced Analytics and Enhanced Reports
    • Allows users with no prior Netskope Advanced Analytics or Enhanced Reports usage to fetch data from the Netskope Library or group folders via REST API v2
    • Sets the customer number of rows parameter default to 5000 and maximum to 10000 for REST API v2 Reporting Endpoints

    3 details in Everything

53. Netskope Release Notes Version 135.0.0 Mar 2, 2026 · release notes

    New Netskope 135.0 features: Agentic Broker (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.), AI Guardrails/Red Teaming, Dest Profiles API, RBI v2 API, Owner attrs, Steganography DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest.

    • Agentic Broker delivers visibility, audit logs, and header-based detection/blocking for Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP) communications.
    • AI Guardrails provides prompt and response content moderation and protection against AI threats like prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and jailbreaking.
    • New AI Red Teaming product enables adversarial attack simulation against LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. to identify safety gaps.
    • Behavior Analytics adds Insider Threat detections for command-and-control callbacks using the Advanced UEBA ML engine.
    • Adds new REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 GET endpoints for Application Instances (/api/v2/profiles/app-instances) and Constraint Profiles (/api/v2/profiles/constraint-profiles).

    +20 more show less

    • Generative AI risk attributes are now computed in the Cloud Confidence Index (CCI) score for cloud apps.
    • Introduces Steganography detection via ML classification to identify images containing hidden payloads in DLP.
    • Adds India TAN, UAN, and Voter ID as new predefined entities for Data Loss Prevention.
    • Enterprise Browser supports granular site-specific configuration for 8 features with up to 128 URL pattern exceptions per setting.
    • Enterprise Browser Security Configuration Policies support targeting by User, User Groups, or Organizational Units (OUs) via Move Tool priority logic.
    • New API v2 endpoints for Enterprise Browser policy management: /configurationpolicies and /api/v2/nsbrowser/configurationpolicies.
    • Netskope Client Steering supports real-time protection policies using Enterprise Browser as an access method with Device Classification criteria.
    • Endpoint DLP (EPDLP) can force Microsoft Edge/Google Chrome PrintPreview by default, configurable via tenant settings ForceChromePrintPreview and ForceEdgePrintPreview.
    • Forensics adds a Manager Approval Workflow for out-of-band DLP incidents with instant email notifications.
    • Log Streaming introduces granular data collection type filters to selectively stream Alerts, Events, or Incidents.
    • New Destination Profile Object replaces URL Lists in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions./CFW policies with flexible matching options.
    • Adds SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Do Not Decrypt (DND) policy evaluation for UCI scores using the feature flag ssl_dnd_evaluate_uci.
    • Next Generation API Data Protection adds support for Smartsheet, dedicated GitHub activity alerts/dashboard, and Purview Data Classification Insights in the M365 Copilot dashboard.
    • Next Gen API Data Protection Owner attribute policy support extends to Atlassian Confluence, Box, Cisco Webex, Dropbox, Microsoft Copilot, M365 Teams, Slack Enterprise, Smartsheet, Workday, and Zoom.
    • Netskope Client Steering supports Zone Selection based on User Identity for the China Elite zone.
    • NG SWG adds support for PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key-exchange algorithms including X25519MLKEM768 for quantum-resistantquantum-resistantCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. encrypted traffic.
    • Remote Browser Isolation (RBI) introduces v2 REST API templates, enhanced clipboard with image copy/paste support, and HTML-based branded notifications using dynamic variables like {{USER_URL}}.
    • SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. adds discovery and risk scoring for third-party apps in Zoom.
    • Threat Protection introduces network traffic-based beacon detection for new/unknown malware without signatures.
    • User Management UI revamp consolidates user management into a unified page with customizable columns and direct group membership management.

    25 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The addonman SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. API endpoints are deprecated starting in release 135.0; requests to these v1 endpoints will return error code 500.
54. Netskope Digital Experience Management Release Notes for March 2026 Mar 2026 · release notes

    New DEM Insights page, DEM Data Intelligence Agent with conversational AI, BETA Enterprise API, and expanded alert configurations.

    • Adds the new DEM Data Intelligence Agent which integrates LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. to transform telemetry into actionable insights via a conversational interface
    • Introduces the new Insights page providing a unified 360-degree view of digital health with a Global Insights Map, Comprehensive Filtering, and targeted widgets
    • Enables RBAC Support for the Insights page, configurable under Settings > Administration > Roles within Digital Experience Management
    • Adds new TTFB alert options (2000ms, 2500ms, 3000ms, 3500ms, 4000ms) for site-based application performance alerts
    • Increases the site selection limit for DEM site-based alert configurations from 10 to 100 sites

    +2 more show less

    • Launches DEM Enterprise API (BETA) providing programmatic access to critical DEM data
    • Expands User Experience Score alert conditions to support additional configuration options for score, number of impacted users, and time duration

    7 details in Everything

55. AI Security Ops Release Notes Version - March 2026 Mar 2026 · release notes

    Launch of Netskope AI Security Ops Agent for automated DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. incident triaging and response

    • New Netskope AI Security Ops Agent service that automates creation of high-priority Cases and grouped Views from DLP incidents to shift focus to investigation
    • Assisted Investigation capability that automatically gathers, enriches, and ties together context from the Netskope platform and external systems to provide verdicts and recommendations
    • End-to-End Response Workflows with Triage, Investigate, and Respond stages, including agent-triggered response actions to reduce Mean Time to Resolution

    3 details in Everything

56. AI Gateway Release Notes Version - 1.2 Mar 2026 · release notes

    Netskope AI Gateway v1.2 introduces custom rate limit API responses and multi-tenant license enforcement.

    • Allows defining specific response behaviors when a rate limit threshold is reached via the AI Gateway MP API
    • Introduces License Management that enforces maximum gateway count based on purchased licenses
    • Sets default capacity of 10,000 API calls per gateway; exceeding this disables policy evaluation and bypasses traffic

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Netskope no longer supports 36-CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. / 72GB appliance deployments
    • !Renamed Configure AI Services to Configure Content Inspection Services in the Configuration Wizard UI
    • !Renamed LLM Guardrails Service to AI Guardrails Service in the Configuration Wizard UI
57. Netskope Adapter Release Notes 215.254.18.1 Feb 25, 2026 · release notes

    Netskope Adapter 215.254.18.1 adds AD invocationID verification and 0x4 flag for stale membership correction

    • Adds verification of the invocationID in the Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. importer with logging on failure to ensure correct incremental sync state
    • Introduces the 0x4 flag to remove stale group references from datastore_v2.json detected during AD V2 incremental queries
    • Changes default log level for a subset of ADImporterV2 logs to WARNING, reducing verbosity without requiring Debug mode

    3 details in Everything

58. Netskope Release Notes Hotfix Version 134.0.5 Feb 15, 2026 · release notes

    Netskope Hotfix 134.0.5 adds device tag-based steering/config rules and x86_64 ChromeOS client support

    • Adds device tags to steering policies and device classification rules for Windows and iOS clients.

    1 detail in Everything

59. Netskope Cloud 134.0.0 Documentation Available Now! Feb 4, 2026 · release notes

    Netskope R134 adds SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Discover & Risk Score for 3rd-party apps, deferred policy actions, and a threat hunting module.

    └──▷ HOW TO FIND IT
    Use SSPM to identify risky third-party applications connected to GitHub repositories.
    📍In the Netskope portal, navigate to SaaS Security Posture Management (SSPM) › Discover and review the Risk Score for 3rd-Party Apps in GitHub.
    Allow users to continue work while policy enforcement for sensitive data is evaluated asynchronously.
    📍Configure a policy rule with the Deferred Policy Action option to enable Next Generation API Data Protection without immediate blocking.
    Proactively search for malicious activity patterns across SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. environments.
    📍Access the new Threat Hunting Module in Netskope's Threat Protection dashboard to run queries against SaaS user activity logs.
    • Adds SSPM Discover with Risk Score capability to evaluate third-party apps in GitHub
    • Introduces Deferred Policy Action feature within Next Generation API Data Protection for Enterprise Browser
    • Includes new Threat Hunting Module for SaaS Threat Protection

    3 details in Everything

60. Virtual Appliance Release Notes Version 132.0.1 Feb 4, 2026 · release notes

    Version 132.0.1 of Netskope Virtual Appliance introduces a new CLI command for DNS cache configuration and deprecates EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. support while fixing several upgrade and status reporting issues.

61. Netskope Release Notes Version 134.0.0 Feb 2, 2026 · release notes

    Netskope 134.0.0 adds API v2, RBI Cloud Storage APIs, CFW Service Objects, SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. rules, and more

    • Adds x-netskope-generate-incidents and x-netskope-generate-alerts request headers to /inspections/jobs and /inspections APIs to control incident generation for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. On Demand.
    • Adds GET /cloudstorage, PATCH /cloudstorage, POST /cloudstorage/default, and POST /cloudstorage/invalidate REST endpoints for programmatic management of RBI Cloud Storage.
    • Introduces Service Objects and Destination Profiles as the new model for Cloud Firewall policy configuration, decoupling protocols/ports from destinations.
    • Adds 41 new SSPM predefined rules covering AzureAD, GitHub, Microsoft 365, Salesforce, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior., and Security Domains categories.
    • Adds {{cs-host}} and {{x-cs-uri-path}} dynamic variables for constructing native HTTP 307 redirect destination URLs in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. policies.

    +3 more show less

    • Enables Owner attribute support in Next Generation API Data Protection policy definitions for Microsoft 365 OneDrive files.
    • Adds --azure-log-level CLI option to Cloud TAP Stitcher for controlling Azure SDK log verbosity.
    • Enables discovery and risk scoring of 3rd Party Apps in monitored GitHub instances within SSPM.

    8 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Existing API v1 endpoints for Custom Categories are blocked for new tenants and existing tenants that completed the migration, returning an error instead.
62. Netskope Digital Experience Management Release Notes for February 2026 Feb 2026 · release notes

    DEM Alerting adds Google Chat webhook support; alerting workflow UI moves to contextual side panels.

    • Adds Google Chat as a Webhook receiver for Alert notifications in DEM Alerting.
    • Moves resource configuration workflows (Create and Edit) from standalone pages to contextual side panels.

    2 details in Everything

63. AI Gateway Release Notes Version - 1.1 Feb 2026 · release notes

    AI Gateway v1.1 drops mandatory tenant ID header, adds custom rate limit responses via MP API and hides advanced TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. options post-enrollment.

    • Removes the mandatory x-ns-tenant-id HTTP header requirement; requests now only need x-ns-aig-apikey
    • Adds customizable rate-limited response status codes and messages via the AI Gateway Management Plane (MP) API
    • Dynamically hides advanced configuration sections in the AIG-CLI TUI until enrollment is complete

    3 details in Everything

64. Netskope Release Notes Hotfix Version 133.1.0 Jan 15, 2026 · release notes

    Enterprise Browser disables Google AI by default; Patient Zero notifications add multilingual support

    • Sets the default Enterprise Browser policy to disable Google AI features, tightening privacy and security out-of-the-box.
    • Adds German, Spanish, French, Italian, Japanese, Chinese, Korean, Portuguese, and Brazilian language support for Patient Zero user notifications in Netskope Secure Web Gateway.

    2 details in Everything

65. New Features and Enhancements December 18, 2025 Dec 18, 2025 · release notes

    Adds Malsite Severity attribute to Alerts data collection for Advanced Analytics consistency

    └──▷ BREAKING ON UPGRADE

    • !The previous alert attribute is renamed to Malsite Severity (Deprecated) and will be retired, requiring manual replacement in Personal or Group dashboards.
66. Netskope Private Access Release Notes Version 133.0 Dec 10, 2025 · release notes

    NPA 133 adds source IP egress policy criteria, per-app periodic re-auth, and mixed content handling in Enterprise Browser

    • pop_name field now appears in Network Events generated from Local Broker to identify the Point of Presence.
    • Private App settings gain a per-application control for Mixed Content rendering in Enterprise Browser.
    • Policy engine now accepts Source IP (Egress IP) as a criteria for NPA applications steered via the Client access method.
    • New Per-App Authentication capability allows defining timer-based re-authentication requirements based on source and destination criteria.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The tenant user interface now restricts changes to the Local Broker name after the initial configuration save.
67. New Features and Enhancements December 5, 2025 Dec 5, 2025 · release notes

    Updates to AI Usage Dashboard filtering logic and widget configuration.

    • The Category dashboard filter now uses the Category field directly instead of the Other Category field.
    • Widgets Percentage of Users Accessing AI Apps and Percentage of Users Querying AI Apps now support custom dimensions via the AI Users dimension for targeted filtering.

    2 details in Everything

68. Netskope Cloud 133.0.0 Documentation Available Now! Dec 2, 2025 · release notes

    Netskope R133 adds AI Red Teaming, Guardrails, SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. instance connectivity visibility, and Windows 64-bit client steering.

    • Adds AI Red Teaming capability for adversarial testing of AI models.
    • Adds AI Security Guardrails to enforce safety policies on AI interactions.
    • Adds Netskope AI Gateway as a new integration point for securing AI traffic.
    • Provides visibility into connectivity between SaaS App Instance and SSPM.

    4 details in Everything

69. Netskope Release Notes Version 133.0.0 Dec 2, 2025 · release notes

    Netskope v133 adds AI Gateway Red Teaming/Guardrails, Enterprise Browser Extension Governance API, NG API DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Owner/ChatGPT controls, and NPA Source IP policy criteria.

    • Adds AI Gateway beta for intercepting app-to-AI model traffic with LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. authentication, rate limiting, and DLP
    • Adds AI Red Teaming beta to simulate adversarial attacks against LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.
    • Adds AI Security Guardrails beta inline module for prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools./jailbreak detection using MITRE ATLASMITRE ATLASA MITRE-maintained knowledge base of adversarial tactics and techniques targeting AI and machine learning systems, modelled on ATT&CK, giving cyber tools a structured taxonomy for AI-specific threat modelling./OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 LLM mapping
    • Adds New MCP Server Category for identifying public MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Servers in Real-time Protection policies
    • Adds Owner attribute support in Next Generation API Data Protection policy definitions for Google Drive and Microsoft 365 SharePoint files

    +24 more show less

    • Adds Rows row-range selection (From/To) for Next Generation inventory CSV export to handle multi-million record sets
    • Adds Last Acting User and Last Modifier options to Next Generation API Data Protection notifications for targeted alerts on file activity
    • Adds Generative AI scan content type criterion with fine tuning data and memory options for ChatGPT Enterprise protection
    • Adds Multi-Geo Support for OneDrive and SharePoint in Next Generation API Data Protection with new Region field on Inventory page
    • Adds Enterprise Browser Extension Governance via API endpoint [API-GW Host]/configpolicies to control extensions by User Group or OU
    • Adds Service Objects API at /api/v2/profiles/serviceobjects for granular port-based SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. policies in controlled GA
    • Adds match_context field (e.g., layer7) to POST /api/v2/nsiq/urllookup responses
    • Adds hidePopup MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. setting for Netskope Chrome Extension to suppress notification pop-ups
    • Adds Source IP (Egress IP) as a policy criteria for NPA applications steered via Client
    • Adds Per-App Authentication timer configuration for Real-time Policy Framework in NPA
    • Adds Enforce Enrollment Beta feature to mandate Netskope Client installation before web access
    • Adds Controlled GA of Windows 64-bit Client Support with UI toggle for 32/64-bit architecture during upgrade or invitation
    • Adds Google Advertising ID (GAID) display on Devices page for Android devices
    • Adds Support for ChromeOS 142 in Netskope Client
    • Adds General Availability of Support for Omnissa Horizon for Persistent VDIVDIVirtual Desktop Infrastructure: a model where desktop operating systems run as VMs on a central server and stream to thin clients, giving cyber tools a single managed environment to monitor or scan. environments
    • Adds CRL Check Validation Beta support for macOS device classification
    • Adds Enhanced Reports (New Experience) General Availability for FedRAMP HighFedRAMP HighA US federal authorization tier for cloud services, managed by GSA, certifying that a provider meets the strictest NIST 800-53 controls required to handle the most sensitive unclassified government data./PBMM environments
    • Adds RBI and Enterprise Browser Interoperability allowing EB as an Access Method in Isolate Policy rules
    • Adds Visibility of Connectivity Between SaaS App Instance and SSPM with real-time status badges and error messages
    • Adds Status Changed Since timestamp in SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Findings Report exports for failed findings
    • Adds 15 new SSPM Predefined Rules covering AzureAD, GitHub, M365, Slack, Workday, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior., and Security Domains
    • Adds 1 new SSPM Predefined Template for Salesforce
    • Adds Cloud Explicit Proxy (CEP) HTTPS steering method available via API
    • Adds Netskope Personnel Tenant Access UI for granting explicit, time-limited support access to tenants

    29 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The POST /results/gethistory, GET /results/stats/byappsuite, POST /results/resources/export/getdata, POST /results/rules/export/getdata, and POST /results/thirdpartyapps/export/getdata SSPM API endpoints are removed.
    • !Configuration via the deprecated Browser Configurations endpoint /api/v1/browserconfigs must be migrated; it will stop being managed in WebUI after May 1st, 2026.
70. Netskope Digital Experience Management Release Notes for December 2025 Dec 2025 · release notes

    New DEM licensing page and updated Disk Score criteria for Device Score

    • Adds a dedicated DEM Licensing page to view activated users, monitored applications, and active enterprise stations
    • Updates the Disk Score component of the Device Score to lower scores for devices with >500,000 KB disk or <10% disk availability

    2 details in Everything

71. Netskope Release Notes Version 132.0.0 Nov 5, 2025 · release notes

    Netskope R132 adds URP for unmanaged devices, EB license sync via IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., transaction event streaming client, and NG API DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. for Slack Canvas.

    • Universal Reverse Proxy (URP) extends reverse proxy to Microsoft and Google Suite applications, enforcing inline constraints on unmanaged devices with granular access control.
    • Enterprise Browser now synchronizes license status automatically with IdP group membership via SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave., enabling instant security offboarding and automated onboarding.
    • New Event Streaming Client (a Docker component) allows streaming Transaction Events to SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. via syslog configuration.
    • Next Generation API Data Protection for Slack Enterprise now supports DLP and threat protection scanning for attachments within Slack Canvas.
    • New Browser Configuration Policies allow defining a tenant-wide baseline security posture for Enterprise Browser users, covering Developer Tools, Incognito Mode, Local Password Manager, Notifications, Pop-ups, and Audio/Video Input.

    +11 more show less

    • Enterprise Browser for Private Apps (EB + NPA Integration) allows accessing private apps via internal hostnames/IPs without DNS complexity and applies browser-level DLP controls to those sessions.
    • Custom Categories REST API V2 endpoint api/v2/profiles/customcategories is now available for new tenants, supporting the migration from legacy MariaDB profiles.
    • User notification templates now support additional variables including source IP, destination IP, groups, OU, POP locations, Malware Name, Transaction ID, HTTP Referer, URI Path, and URI Port.
    • Real-time Protection policies for Any Web Traffic can now be created without source criteria or profiles, with support for Upload/Download activities when threat protection is enabled.
    • Seven new granular URL categorization subcategories are available for Generative AI: Tools and Stores, Platform, Content and Multimedia, Conversation, Meeting, Code, and Writing.
    • Primary Category variable {{x-category}} is now available in user notification templates, replacing or augmenting the existing {{NS_CATEGORY}}.
    • Netskope Private Access (NPA) supports source IP (Egress IP) as a criterion in policies for applications steered via the Client access method.
    • Enhanced SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Findings UI provides better user experience and accessibility, including visibility into rules created/modified/deleted in the last 30 days and rule change history for up to 2 years.
    • Ten new predefined SSPM rules are added covering GitHub, Slack Enterprise, Workday, Salesforce, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. categories, and various security domains.
    • Traffic Steering pages for IPSec and GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. Sites now display release deployment day for Primary and Failover POPs to aid in resilience planning.
    • Netskope Client supports Red Hat Enterprise Linux 9.4, Omnissa Horizon (Beta), ChromeOS 141, and Embedded Mini-browser Support for Captive Portal Authentication on Windows.

    16 details in Everything

72. Netskope Cloud Exchange Release Notes Version 6.0.0 Oct 30, 2025 · release notes

    Netskope Cloud Exchange 6.0 adds EDM/CFC Beta modules, HA via UI/GlusterFS, and cloudexchange.config file.

    • Adds Exact Data Match (EDM) Beta module to retrieve data files for custom DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. rules
    • Adds Custom File Classification (CFC) Beta module to train custom classifiers on Netskope Tenant
    • Adds UI-based High Availability deployment and node management
    • Adds built-in GlusterFS shared storage to remove NFS requirement
    • Adds cloudexchange.config file for simplified setup inputs

    +5 more show less

    • Adds support for password-protected custom SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. certs
    • Adds KVMKVMA Linux kernel module that turns the kernel into a hypervisor, letting a process run fully isolated virtual machines using hardware virtualisation extensions. Cyber tools use it to sandbox execution environments at near-native speed. QCOW2 Image deployment support
    • Adds Ticket Orchestrator Webhook support with manual approval workflow
    • Adds business rule filtering for Cloud Exchange logs
    • Adds Ubuntu 24 as a supported base OS

    10 details in Everything

73. Inline App Connector Release AC-131.0.0 Oct 19, 2025 · release notes

    New Google NotebookLM and Photos app connectors, Perplexity AI visibility controls, and expanded DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. for Amazon Bedrock and GitHub.

    • Adds Google NotebookLM (PLUS) App Connector with support for Create, Edit, Delete, Rename, Generate, Upload, Download, Share, Post, Response activities, including DLP and instance_id support.
    • Adds Google Photos App Connector with support for Create, Share, Post, Delete, Archive, Edit, Move, Upload, Download activities, including DLP and instance_id for browser traffic.
    • Enables granular policy control for Perplexity AI, allowing visibility into enterprise usage and limiting capabilities to sanctioned instances via Generative AI category policies.
    • Adds Response activity support with DLP for Amazon Bedrock LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. interactions.
    • Adds Upload activity detection for saving files from Google Colab to GitHub.

    +4 more show less

    • Adds SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login support for AWS sandbox.
    • Enhances DLP capability for GitHub Upload activity via API for data exceeding 64k bytes.
    • Adds Download activity detection with content inspection for Google Cloud BigQuery Data Transfer API.
    • Adds new load balancer support for Amazon Elastic Load Balancing including the from_user field.

    9 details in Everything

74. Netskope Private Access Release Notes Version 131.0.0 Oct 16, 2025 · release notes

    Netskope Private Access 131 adds multi-tenant macOS clients, dynamic latency-based reconnection, Hyper-V Ubuntu 22.04 brokers, and AnyApp RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely./SSH enhancements.

    • Adds support for accessing private applications across up to 20 Netskope tenants on macOS without uninstalling the client
    • Enables Dynamic Reconnection Based on Relative Latency in the Publisher Wizard to switch Points of Presence
    • Supports a pre-built Ubuntu 22.04 VM Hyper-V image (VHDX) for Local Brokers
    • Adds clipboard controls for AnyApp RDP/SSH sessions allowing Full or No access configuration
    • Introduces Daily Time Window configuration for the Auto-reconnect feature

    5 details in Everything

75. Netskope Cloud 131.0.0 Documentation Available Now! Oct 8, 2025 · release notes

    Netskope Cloud R131 adds SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. for M365/Salesforce, API Traffic Steering, Windows 64-bit SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. client, and NPA Hyper-V support.

    • Adds pre-built Ubuntu 22.04 VM Image for Netskope Private Access (NPA) on Hyper-V
    • Adds Microsoft 365 support in Next-Gen SSPM
    • Adds Salesforce support in Next-Gen SSPM

    3 details in Everything

76. Netskope Release Notes Version 131.0.0 Oct 8, 2025 · release notes

    Netskope R131 introduces API Data Protection for Salesforce, DNSaaS egress IP policies, Access Proxy, RBI push mode, and new REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services..

    • Adds doh.dns.apple.com to DNS Over HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. providers in Cloud Confidence Index (CCI).
    • Enables Egress IP-based DNS security policies for DNS-as-a-Service (DNSaaS) traffic in Cloud Firewall.
    • Adds CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. support for DNS profiles via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 endpoints.
    • Makes Fingerprint 2.0 multimodalmultimodalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats., adding image detection and bulk upload exclusions for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest..
    • Allows tenant identification in Email DLP using custom SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. headers instead of domain matching alone.

    +25 more show less

    • Increases SMTP proxy DLP scanning limits to 64MB file size and 120-second timeout.
    • Enables Salesforce File Exposure scanning in Next-Generation API Data Protection via Policies > API Data Protection > Next Gen > New Policy.
    • Adds quarantine tombstone support for Google Drive file types (.docx, .xlsx.xlsxThe file format used by Microsoft Excel for spreadsheets, based on the Open XML standard. Cyber tools use it to ingest or export structured tabular data in a format analysts already work with., .pptx, etc.) in Next-Gen API DLP.
    • Introduces Access Proxy objects to segment traffic by destination IP:Port in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions..
    • Exposes Access Proxy management via the REST API endpoint /api/v2/profiles/accessproxies.
    • Provides full CRUD for Custom Categories via the new REST API endpoint api/v2/profiles/customcategories (new tenants only).
    • Enables default alert suppression for Block actions in Real-time Protection policies to reduce SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. noise.
    • Adds Netskope One for Microsoft Purview DLP integration agent for real-time policy enforcement via Purview.
    • Allows macOS users to switch between multiple NPA tenants without reinstalling the client.
    • Supports pre-built Ubuntu 22.04 VM Hyper-V images for NPA Local Brokers.
    • Enables dynamic reconnection based on relative latency in the NPA Publisher Wizard.
    • Introduces a new RBI template management interface at /ns#/rbi-templates with full CRUD and REST APIs.
    • Switches RBI internal communication to a push content model for smoother interaction.
    • Adds French language support for all standard RBI messages and pop-ups.
    • Moves Microsoft 365 onboarding to Next-Gen SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. (discontinued in Classic).
    • Ships 2 new SSPM predefined rules for Azure AD and Workday, plus 5 Salesforce templates.
    • Adds Deepscan On Demand via REST API supporting files up to 128 MB for Threat Protection.
    • Supports Netskope Client on macOS Tahoe (v26) and iOS v26.
    • Enables automatic termination of Netskope Client Debug Mode using the -t [duration] parameter.
    • Relocates On-Prem Detection setting to Traffic Steering > Steering Configuration in the WebUI.
    • Upgrades Netskope Client architecture to 64-bit Windows for improved performance.
    • Makes One-Time Password client disable GA for macOS under Settings > Security Cloud Platform > Client Configuration > Tamperproof.
    • Makes Block Private IP in Fail-Close GA (request-enabled).
    • Integrates Gainsight PX telemetry into the Management Console for admin guidance.
    • Removes Google’s servers from default DNS Over HTTPS providers in Enterprise Browser.

    30 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Cloud TAP Stitcher no longer accepts the --user-id option; it is now automatically added by the system.
77. Netskope Adapter Release Notes 214.253.15.10 Oct 7, 2025 · release notes

    Adapter 214.253.15.10 improves Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. v1 to v2 migration with clean resync and out-of-scope cleanup

78. Netskope Digital Experience Management Release Notes for October 2025 Oct 2025 · release notes

    DEM adds browser extension performance monitoring for steered/bypassed apps and NPA network path visualization.

    • Adds Error column to the Tunnel Status widget in Network Steering section showing technical error reasons for IPSEC/GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. tunnel down states
    • Enhances DEM tunnel status and tunnel flapping alerts to include the Error field in alert details, email templates, and webhook payloads
    • Introduces real user monitoring at transaction level for steered and bypassed browser-based applications via the Browser Extension without requiring the Netskope client
    • Adds Apps dependencies automated discovery (CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server. providers, 3rd-party infra) within Browser Extension monitoring
    • Adds Page load and API calls performance telemetry collection from end users’ browsers in the Browser Extension

    +7 more show less

    • Adds Local connectivity and network path impact metrics in the Browser Extension
    • Adds App server performance metrics in the Browser Extension
    • Adds Data transfer and transactional error tracking in the Browser Extension
    • Adds Network Path Visualization for private apps mapping all paths between users and applications to identify routing gaps and bottlenecks
    • Integrates NPA performance monitoring into root cause analysis to identify degradations from network and application issues
    • Adds Other Impacted Users metric in NPA to highlight users experiencing similar degradations across the network
    • Standardizes custom webhook payloads for Tunnel Status Alerts to include detailed information previously available only in Slack and email

    12 details in Everything

79. Inline App Connector Release AC-130.0.0 Sep 24, 2025 · release notes

    AC-130.0.0 adds activity detection for new domains and AI/DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. features in Google Gemini, Microsoft 365 Copilot, and Yammer.

    • Adds translate.google.ca domain support for Google Translate application detection
    • Adds hubspotlinks.com domain support for HubSpot application detection
    • Adds ccmdls.adobe.com domain support for Adobe Creative Cloud detection
    • Adds svc.webex.com domain support for Cisco Spark Message and Meet detection
    • Adds app.smartsheet.eu domain support for Smartsheet detection

    +10 more show less

    • Adds file Upload and Download activity coverage in the WhatsApp channel
    • Adds new activity support for Google Gemini AI Assistant integrated with other Google apps
    • Enables AI Response with DLP support
    • Enables AI Post with DLP support
    • Improves DeepL instance_id logic to identify non-logged-in user setup file downloads as public
    • Adds image file upload support with DLP protection in Microsoft 365 Copilot
    • Adds Download Installer activity detection for Microsoft Office 365 Suite to detect Microsoft Edge installer file downloads
    • Supports new navigation options in Yammer: scheduling live events, exporting group data, and posting messages directly from Teams
    • Enables upload/conversion actions without logging in to be treated as Upload activity in Adobe Document Cloud
    • Detects to_user as Everyone except external users for Microsoft Office 365 OneDrive for Business files shared with the entire organization

    15 details in Everything

80. Netskope Release Notes Hotfix Version 130.1.0 Sep 23, 2025 · release notes

    Netskope R130.1 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server catalog, EEEU policy exposure for OneDrive/SharePoint, Android EnterpriseAndroid EnterpriseA Google program that gives organizations APIs and management modes to enroll, configure, and enforce policy on Android devices through an EMM platform. Browser, and DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. file classification

    • Adds public MCP servers catalog in the App Catalog for discovery and confidence-based risk assessment of generative AI tools
    • Introduces Everyone Except External Users (EEEU) policy exposure and remediation actions for Microsoft 365 OneDrive and SharePoint via Next Generation API Data Protection
    • Enables Enterprise Browser support for Android and Chrome OS devices with centralized policy management
    • Adds AI File Classification using LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. to DLP for enhanced file type detection with reduced false positives
    • Expands Fingerprint 2.0 to support multimodalmultimodalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. images and bulk training data upload via a standalone microservice

    +3 more show less

    • DLP On Demand now supports structured columnar database classification on customer-managed public cloud (AWS, Azure, GCP) and on-premises (ESX)
    • Adds Extension Management Phase 1 allowing tenant-level policies to default block/allow or force-install Chrome Web Store extensions by ID
    • Adds Created Date, Entity Created, and Last Modified timestamp fields to Skope IT Alerts and Incidents for supported SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. apps

    8 details in Everything

81. New Features and Enhancements September 5, 2025 Sep 5, 2025 · release notes

    Adds Application Category Dashboard to Netskope Library for visibility into app category usage, risk, and policy triggers

    • Application Category Dashboard added to the Netskope Library (available via Reports > New Experience portal) providing top used applications (managed/unmanaged), risky applications/traffic/data movement, and policies/alerts per application category.
    • Ability to save a copy of the new dashboard to personal or Group folder for customization.

    2 details in Everything

82. Netskope Cloud 130.0.0 Documentation Available Now! Sep 2, 2025 · release notes

    Netskope Cloud R130 adds Enterprise Browser notifications, Copilot GA, SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. custom app onboarding, and NPA DNS record support.

    • Adds enhanced user notifications in the Enterprise Browser feature to improve visibility into browser-based activities
    • General Availability (GA) of Microsoft Copilot integration within Netskope Cloud for policy enforcement and data protection
    • New General API Data Protection capability for securing data accessed via APIs across SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. applications
    • Supports DNS Record Type configuration for additional records in Netskope Private Access (NPA)
    • Enables onboarding of custom SaaS applications into the SaaS Security Posture Management (SSPM) module

    5 details in Everything

83. Netskope Adapter Release Notes 214.253.15.1 Sep 2, 2025 · release notes

    Adapter 214.253.15.1 adds LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory./Dynamic Group subsets, pagination, manageability aborts, and Win Server 2025 support for AD V2

    • Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. V2 mode supports importing a subset of users/groups via LDAP Query filters.
    • Active Directory V2 mode supports importing subsets using Dynamic Groups.
    • Active Directory V2 Manageability option in Advanced Settings allows sync abort and admin email notification when thresholds are exceeded.
    • Active Directory V2 Page Size option enables pagination for LDAP requests (default: 1000).

    4 details in Everything

84. Netskope Release Notes Version 130.0.0 Sep 2, 2025 · release notes

    Netskope R130 adds FTP TSS, steganography DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., API copilot GA, deferred actions, PCCv2, and egress IP detection

    • Cloud Firewall (CFW) now applies Threat Security Policies to FTP traffic with incident generation.
    • Endpoint DLP introduces Printer Content Control v2 (PCCv2) for Windows, improving matching without OCROCROptical character recognition, converting text in an image or scanned document into machine-readable characters. It lets software search or process text that was stored as pixels. and preserving original file formats.
    • DLP service adds Steganography detection for BMP and PNG images in the ML Classification service.
    • Next Generation API Data Protection adds support for Microsoft Copilot with policy creation, DLP, and threat protection.
    • Next Generation API Data Protection introduces Deferred Policy Action to transition from alert-only to enforcement with a configurable grace period.

    +20 more show less

    • Endpoint DLP supports Application Control for browser processes on Windows to evaluate files before they are opened.
    • Endpoint DLP adds Large File Sampling (default 80MB segment, max 2GB) for Windows and macOS.
    • Endpoint DLP adds Network File Share Content Control for files written via SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments./CIFS on Windows.
    • Cloud TAP Stitcher CLI adds the --origin-filter-regex option for regex-based POP selection.
    • Cloud TAP Stitcher adds Multi-NDRNDRNetwork detection and response, analyzing network activity to find threats and support investigation. It focuses on communication patterns and suspicious traffic across systems. Traffic Exporting to distribute traffic to multiple NDR endpoints.
    • NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. Real-time Protection policies now support File Profiles and Negation for Custom Attributes.
    • NG SWG Real-time Protection adds the ability to suppress alerts for block actions via checkbox.
    • NG SWG inline policy constraints add file name, extension, type, and size for browse activity.
    • Netskope Private Access (NPA) adds support for PTR, MX, TXT, NS, SOA, and CERT DNS record types on Windows and macOS clients version 130.0.0+.
    • SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. adds Onboard Custom SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Apps via Bring Your Own App (BYOA), enhanced Predefined Rules including GitHub coverage, and ServiceNow onboarding in Next-Gen SSPM.
    • Threat Protection Deepscan adds an On Demand REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. supporting files up to 16 MB and a large scan option for 128 MB.
    • Traffic Steering adds Embedded Mini-browser (WebView2) support for Captive Portal Authentication on Windows clients version 130.0.0+.
    • Traffic Steering allows blocking RFC-1918 IP addresses/subnets in Fail-Close mode by removing the Local IP address range steering exception in Destination Location.
    • Traffic Steering adds On-Premises Detection using Egress IP address via a new option in Tunnel Settings > On-premises Detection in Client Configuration UI.
    • Netskope Client for MacOS adds One-Time Password-Based Client Disable support, configurable in Settings > Security Cloud Platform > Client Configuration > Tamperproof > Allow disabling of Internet Security.
    • Support for Debian 12 (Bookworm) extends Netskope Client for Linux compatibility.
    • Netskope Client UI for Windows now respects the system's Windows display language setting under Settings > Time & Language > Language.
    • Device Classification feature is generally available for all tenants (previously Controlled GA in v129).
    • Netskope Client for iOS adds the TerminateOnSleepThreshold VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. profile option (integer seconds) to terminate the client after sleep exceeds the threshold.
    • Netskope Client for Android adds App Persistence to automatically restart the app within 15 minutes if killed by battery optimization or crash.

    25 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. error message NS_ALERT_UNKNOWN_IDENTITY is renamed to NS_ALERT_INFO_NOT_AVAILABLE.
85. Netskope Digital Experience Management Release Notes for September 2025 Sep 2025 · release notes

    Netskope DEM adds real-user transaction monitoring for steered/bypassed browsers and NPA root cause analysis with path visualization.

    • Adds native performance telemetry collection from end users' browsers for both steered and bypassed applications
    • Adds app dependencies automated discovery including CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server. providers and third-party infrastructure
    • Adds page load and API calls performance telemetry capture
    • Adds local connectivity and network path impact metrics
    • Adds app server performance monitoring data

    +5 more show less

    • Adds data transfer and transactional error tracking
    • Adds Network Path Visualization in DEM NPA to map paths between users and private applications
    • Adds Root Cause Analysis with NPA Metrics integration for identifying network and application degradations
    • Adds Other Impacted Users metric to highlight systemic degradations across the network
    • Enhances Tunnel Status Alert webhook payload to include detailed information previously available only in Slack and email

    10 details in Everything

86. Netskope Release Notes Hotfix Version 129.1.0 Aug 18, 2025 · release notes

    Email DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. Proxy now processes multiple outbound emails in a single session.

87. Inline App Connector Release AC-129.0.0 Aug 17, 2025 · release notes

    Netskope Inline App Connector AC-129.0.0 adds DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. for Teams Scheduled Messages and Azure Azcopy file upload detection.

    • Adds Microsoft Teams DLP support for Scheduled Messages as Post activity
    • Adds support for Microsoft Azure Azcopy connector to detect file uploads exceeding 8MB
    • Adds Postman block policy enforcement for Create and Edit activities using websockets
    • Adds upload activity detection and Instance ID support for Google Firebase Storage back-end storage (requires account team enablement)
    • Adds Yahoo App Suite phone one-time-password (OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets.) based login support

    +1 more show less

    • Adds Google Translate activity detection for the translate.google.com.tw domain

    6 details in Everything

88. Netskope Private Access Publisher Release Notes Version 129.0.0.10054 Aug 12, 2025 · release notes

    Publisher 129 adds GSLB auto-reconnect, RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. domain field, and deprecates auto-upgrade for pre-R125 versions.

    • Adds GSLB auto-reconnect capability to automatically reconnect the Publisher when latency increases beyond a threshold
    • Separates the AD Domain field on the RDP Login Page for explicit domain entry

    2 details in Everything

89. Virtual Appliance Release Notes Version 128.0.0 Aug 5, 2025 · release notes

    Netskope Virtual Appliance 128 introduces Destination Profiles and Service Objects with new APIs for granular policy enforcement.

    • Introduces Destination Profile as a new object type replacing URL Lists, enabling case-insensitive matching and mixed IP/domain entries for SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. and Cloud Firewall policies
    • Adds support for matching network traffic by destination port via the new Service Objects feature, allowing Real-time Protection rules on TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. ports/ranges and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. decryption exclusions by port

    2 details in Everything

90. Netskope Cloud 129.0.0 Documentation Available Now! Aug 4, 2025 · release notes

    Netskope Cloud 129.0.0 introduces RBI transparent isolation for third-party auth and GA device classification with certificate check.

    • Remote Browser Isolation (RBI) Transparent Isolation of Third-Party Authentication Flows
    • Controlled General Availability of Device Classification Feature Improvements
    • Certificate Check – User Private Key Verification Improvement

    3 details in Everything

91. Netskope Release Notes Version 129.0.0 Aug 4, 2025 · release notes

    Netskope 129 adds RBI background tabs, Transparent Isolation for social logins, OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. Forward Proxy auth, retroactive scan reporting and Android 16 support.

    • configurable relative latency threshold (0.0 to 1.0) enables Dynamic Reconnection in NPA Publisher based on latency improvement percentage
    • --password flag added to nsdiag -t disable command to accept master password as an argument
    • New Accept-Language parameter transport to RBI isolated pages for correct browser language detection
    • microsoft_purview_acknowledged and microsoft_purview_processing_status fields replace sent_to_microsoft_purview in Skope IT Events attributes
    • New Netskope Activity boolean field in Next Generation API Data Protection Application Events to distinguish real user vs automated activity

    +4 more show less

    • Data Scanned tab with UI columns Entitlement Metric, Platform, Total GB Scanned, and Unit added for retroactive scan usage reporting in CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. API Usage
    • New alert type Tombstone Failed and disabled Restore/Block actions for SharePoint quarantine failures due to Require Check Out
    • nsdiag -t disable --password <master password> new option to disable Netskope Client via CLI with master password argument
    • OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. (OIDC) support for Forward Proxy Auth enrollment methods (NS Client, IPsecIPsecA suite of IETF protocols that authenticate and encrypt IP packets at the network layer, giving cyber tools a standards-based way to build VPNs or secure host-to-host tunnels without modifying applications./GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation., Enterprise Browser, CEP)

    9 details in Everything

92. Netskope Digital Experience Management Release Notes for August 2025 Aug 2025 · release notes

    DEM August 2025 adds site-based performance/availability alerting and bulk CSV/JSON/YAML import/export for sites and gateways.

    • Adds three new Site-Based Alert types: Site-to-POP Performance, Site-to-Application Performance, and Site-to-Application Availability to trigger notifications based on latency or availability thresholds for designated Sites.
    • Adds bulk import and export capabilities for Sites and Gateways objects via the DEM settings UI, supporting CSV, JSON, and YAML formats with a native compare feature for change verification prior to overwrite.

    2 details in Everything

93. Netskope Release Notes Hotfix Version 128.1.0 Jul 21, 2025 · release notes

    Adds continuous and retroactive API scans for Atlassian Jira with DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest./threat protection support

    • Adds the ability to configure Ongoing Policy Scans directly from the Policies > API Data Protection page in the Netskope UI to proactively monitor Atlassian Jira data.
    • Adds the Retroactive Scans page under Policies > API Data Protection for one-time scanning of historical Atlassian Jira data.
    • Enables DLP and Threat Protection policies for Atlassian Jira within Next Generation API Data Protection.

    3 details in Everything

94. Netskope Private Access Publisher Release Notes Version 128.0.0.9857 Jul 15, 2025 · release notes

    Publisher R128 adds Source IP, Port, PoP name, and relocates CN attribute to Network Events.

    • New kernel versions for OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles. (5.15.0-138-generic), VHDX (6.8.0-1027-azure), AMI (6.5.0-1024-aws), and VHD (6.8.0-1027-azure)
    • Enhanced Network Event Attributes now include Publisher Source Port, Publisher Source IP, and Publisher PoP Name in event data
    • Network Events CN attribute relocated from the Session section to the Destination section

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Network Events CN attribute location changed: it is no longer in the Session section but now appears in the Destination section
95. Inline App Connector Release AC-128.0.0 Jul 14, 2025 · release notes

    AC-128 adds GitLab CLI upload detection, new domains for ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure./Chime/HeyGen/Mailchimp/Timestream/GT/Rediffmail, and enhanced Forms/Asana/Cisco event handling.

    • Gitlab enhancement now supports git push activity detection via the Gitlab CLI Upload feature
    • New domain dkr.ecr.us-west-2.amazonaws.com added for Amazon Elastic Container Registry application detection
    • New domain ice.z2.ue2.m.chime.aws added for Amazon Chime application detection
    • New domain heygen.ai added for HeyGen application detection
    • New domain mailchi.mp added for MailChimp application detection

    +6 more show less

    • New domains added for Amazon Timestream application activity detection
    • New domains translate.google.ai, translate.google.tn, and translate.google.tw added for Google Translate application detection
    • New domain f4mail.rediff.com added for Rediffmail application detection
    • Microsoft Forms enhancement now supports detecting file uploads through the Quick Import feature
    • Asana enhancement adds upload support to detect importing a CSV as a task into a Project
    • Enhanced event generation in backend for Cisco Spark Message and Meet Invite User activity, with moderator addition included in Edit activity

    11 details in Everything

96. Netskope Cloud Exchange (CE) v5.1.2 is now GA Jul 9, 2025 · release notes

    Netskope CE v5.1.2 adds new integrations for Infoblox SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. Insights/TIDE, StealthMole, ManageEngine, and log streaming via AWS/Azure S3.

    • Adds the Infoblox SOC Insights plugin (CRE workflow) to fetch devices from Infoblox SOC Insights for real-time security policy enforcement at Netskope
    • Adds the Infoblox TIDE plugin (CTE workflow) to support fetching and sharing of indicators (Host, IPv4, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only., URL, Hash MD5/SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data.) with retraction support
    • Adds the StealthMole plugin (CRE workflow) to fetch compromised user accounts based on searched domains for UCI-based real-time security policy enforcement
    • Adds the CLS plugin for Netskope Log Streaming via AWS S3 to extract Alerts, Events, and WebTx logs from AWS SQS queue enabled S3 Buckets
    • Adds the CLS support for NLS via Azure Blob to extract Alerts, Events, and WebTx logs from Azure Storage Account queues

    +1 more show less

    • Adds the ManageEngine ServiceDesk Plus plugin (CTO workflow) to create tasks in Service Desk Plus projects with status sync support

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !CE v4.2 and v5.0.0 reached EOL; CE v5.0.1 will reach EOL in January 2026
97. Netskope Release Notes Version 128.0.0 Jul 8, 2025 · release notes

    Netskope 128 adds DNSaaS, Destinations API, RBI Push Mode, RBACv3 global labels, and new DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest./CCI analytics fields.

    • Adds DNS-as-a-Service (DNSaaS) Phase 1 allowing routing of DNS queries through Netskope-managed IPs for security policy application.
    • Adds /api/v2/profiles/destinations API endpoint with GET, PATCH, and PUT verbs to programmatically manage Destination Profiles.
    • Introduces Service Objects API at /api/v2/profiles/serviceobjects to create policies based on destination ports in SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions./CFW.
    • Enables RBI Push Mode Communication for faster content updates in Remote Browser Isolation.
    • Adds Object level control for RBACv3 (Global Labels) allowing fine-grained authorization for Destination Profiles, Real-time Policies, and Private Apps.

    +15 more show less

    • Adds new Advanced Analytics fields for Microsoft Purview: Encryption Status, Sensitivity Label Vendor, Sensitivity Label Instance, Sensitivity Label, Sensitivity Label ID, Previous Sensitivity Label, and Previous Sensitivity Label ID.
    • Adds Remove Recipients action to Email Outbound DLP policies to strip restricted recipients before delivery.
    • Enables Extension Management Policies in Enterprise Browser for defining default actions, allow lists, and force-installs.
    • Adds netskope://crashes debug page in Enterprise Browser for listing local crashes and locating minidumps.
    • Introduces Time Zone Support picker in Next Generation API Data Protection retroactive scans for configuring date filters and running hours.
    • Requires customer-owned Azure app registration for Microsoft Teams integration with Next Generation API Data Protection.
    • Launches SpeedTest portal to replace notscope.com for troubleshooting.
    • Enables alert suppression for block policies in Real-time Protection and mute settings for per-user notification templates.
    • Replaces URL Lists functionality with Destination Profiles supporting case sensitivity and mixed IP/domain entries.
    • Adds Outer Packet Capture toggle button in iOS Netskope Client UI for capturing tunneled and LWIP bypassed traffic.
    • Enables Remote log collection for Android Netskope Client via Settings > Secure Cloud Platform > Devices.
    • Adds multi-group/OU and OS match support in Traffic Steering webUI options (Controlled GA).
    • Enables Rest APIv2 for Device Status Page operations including fetching OTPs.
    • Enables Email Invitation Secure Enrollment with Secure Configuration option on iOS Netskope Client.
    • Adds troubleshooting errors for GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. tunnels to explain why a tunnel is down in the UI/APIs.

    20 details in Everything

98. New Features and Enhancements July 3, 2025 Jul 3, 2025 · release notes

    Device Client Overview Dashboard gains conditional color coding for Client Supported Status.

99. New Features and Enhancements June 30, 2025 Jun 30, 2025 · release notes

    Netskope adds NPA Unique User Count – Last 90 Days dashboard to the Reports Template Library

100. New Features and Enhancements June 20, 2025 Jun 20, 2025 · release notes

     Adds explore from here and edit icons for dashboard widgets via new UI menu options.

     • Adds an additional icon for the explore from here menu option for widgets on a dashboard.
     • Adds an additional icon for the edit menu option for widgets when a dashboard is in edit mode.

     2 details in Everything

101. Inline App Connector Release AC-127.0.0 Jun 10, 2025 · release notes

     Netskope Inline App Connector AC-127 supports Google Gemini Business/Enterprise Gems activities and WeTransfer file names

     • Adds Google Gemini app connector support for creating, editing, and deleting Google Gemini Gems with OpenAI API integration and instance ID differentiation
     • Adds Object/File name extraction support for single file uploads in WeTransfer applications

     2 details in Everything

102. New Features and Enhancements June 5, 2025 Jun 5, 2025 · release notes

     Release adds the AI Risk Assessment Dashboard to monitor AI traffic visibility and policy enforcement within the Netskope Library.

103. Netskope Release Notes Version 127.0.0 Jun 3, 2025 · release notes

     Netskope v127 adds CFW SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy, Enterprise Browser watermarking/screenshot blocking, SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Box support, and new Device Classification capabilities.

     • Adds TCP SOCKS Proxy Support for Cloud Firewall (CFW), allowing TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. traffic to be routed through a Netskope SOCKS5 proxy.
     • Enables Screenshot and Screen Sharing Browser Protection Policies in the Enterprise Browser to block capture of sensitive content.
     • Introduces Watermarking as a new Enterprise Browser Protection control to deter unauthorized screen captures.
     • Adds Box Support to SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM) with new predefined rules and resource types.
     • Enables Define Running Hours for Next Generation API Data Protection retroactive scans to limit operational impact.

     +3 more show less

     • Extends Device Classification to check for Non-Exportable Private Key in certificates on Windows and macOS.
     • Adds REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. support for Device Classification objects.
     • Allows AND/OR logical operators between criteria in Device Classification rules within the web UI.

     8 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The app_category field is deprecated from all SSPM REST API v2 requests and responses starting July 10, 2025.
     • !Azure AD Identity entities (Application, ServicePrincipal, User, Group) are deprecated in CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps.; no new data will be ingested for them after June 30, 2025.
104. Virtual Appliance Release Notes Version 124.0.0.125 May 27, 2025 · release notes

     Netskope Virtual Appliance 124.0.0.125 adds time-based policies, password age query, and Ubuntu 22.04 support

     • Enables time-based policies for traffic policy enforcement on DPoPDPoPAn IETF standard that binds an OAuth access token to a specific client's cryptographic key pair, so a stolen token cannot be replayed by an attacker who lacks the matching private key. appliances using UTC timezone
     • Supports Ubuntu 22.04 as the guest operating system for the Virtual Appliance

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Appliance password policy now requires password changes every 90 days from installation or upgrade date
105. Netskope Release Notes Version 126.0.0 May 12, 2025 · release notes

     Netskope 126 adds HTML smuggling detection, API Data Protection REST v2 endpoints, and MacOS Enterprise Browser

     • Adds AI-based real-time detection and blocking for HTML smuggling malware with alert name Gen.DetectBy.NetskopeAI.HTML_Smuggling.
     • Adds REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 endpoints for Next Generation API Data Protection domain profiles: GET/POST /api/v2/profiles/domains, GET/PUT/DELETE /api/v2/profiles/domains/{id}, PATCH /api/v2/profiles/domains/{id}/data, and POST /api/v2/profiles/domains/deploy.
     • Adds MacOS support for the Netskope Enterprise Browser application.

     3 details in Everything

106. Netskope Adapter Release Notes 213.252.10.11 May 12, 2025 · release notes

     Netskope Adapter 213.252.10.11 adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. V2 OU/Group include filters and custom attribute mapping.

     • groups filter now supports Only Include in Active Directory V2 mode
     • ou filter now supports Only Include in Active Directory V2 mode
     • Custom attribute mapping for user enterprise_accounts.upn, _id (E-Mail) and group canonical name _id allows changing default bindings

     3 details in Everything

107. Netskope Private Access Publisher Release Notes Version 126.0.0.9487 May 12, 2025 · release notes

     Automated host OS upgrade to Ubuntu 22 LTS and ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. image fallback for Netskope Private Access Publisher v126

     • Adds automated host OS upgrade to Ubuntu 22.04 LTS when upgrading from Publisher R125 in version 126.0.0.9487
     • Enables publishers to download images from ECR as a fallback when Docker Hub rate limiting is encountered

     2 details in Everything

108. Netskope Private Access Publisher Release Notes Version 125.0.0.9474 Apr 24, 2025 · release notes

     Netskope Publisher 125 auto-upgrades host OS to Ubuntu 22.04; R125 is last for Ubuntu 20

     • Adds automatic host OS upgrade from Ubuntu 20 to 22 when upgrading Publisher from version 125 to 126
     • Marks version 125.0.0.9474 as the final supported release for Ubuntu 20.04 base images

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Direct upgrades from versions older than R125 (<R125) to versions newer than R125 (such as R126) are not supported; must upgrade to R125 first
109. Netskope Release Notes Hotfix Version 125.1.0 Apr 16, 2025 · release notes

     Adds edge proxy support for SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. group membership retrieval in Netskope NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. (Beta)

110. Netskope Cloud Exchange Release Notes Version 5.1.1 Apr 7, 2025 · release notes

     Netskope Cloud Exchange 5.1.1 adds Ubuntu 22.04 VM support and Business Rule field data types

     • Cloud Exchange as a VM (OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles., AMI, Azure Image, VHDX) is now built on Ubuntu 22.04, enabling direct upgrades from versions 5.0.1 and 5.1.0.
     • Business Rule fields now support specific data types for more precise logic construction.
     • Field learning capabilities detect field data types (string, number, boolean) automatically.

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Installing Cloud Exchange using Helm Chart on K8s/OpenShift is no longer supported.
     • !Installing Cloud Exchange using AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. Fargate is no longer supported.
111. Netskope Release Notes Version 125.0.0 Apr 1, 2025 · release notes

     Netskope v125 adds App Catalog, multi-tenant NPA, CFW DNS/FTP DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. V3 service accounts and new APIs.

     • Adds app field in the /api/v2/nsiq/urllookup response to identify CCI app traffic
     • Adds REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 support for CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. operations on DNS profiles
     • Supports Ubuntu 22.04 LTS for Netskope Private Access (NPA) Publisher version R125+
     • Allows switching between up to 20 tenant contexts in the Netskope Client UI without reinstalling
     • Increases publisher limit per Private App definition from 16 to 64 via Supported Minimum Client Version

     +11 more show less

     • Adds support for service accounts in RBAC V3, excluding web UI access for automation
     • Enables Custom Posture Score calculation in SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. by including/excluding Approved 3rd Party Apps and Risk Accepted findings
     • Supports new AI Post activity detection in Atlassian Confluence and Jira
     • Adds Bluetooth Content Control for Windows Endpoint DLP to inspect files before transfer
     • Adds DEM dashboard for Email-DLP service health and performance visibility
     • Adds support for CISA M365 SCuBA 1.0 benchmarks (e.g., SCuBA-EntraID_1.0) in SSPM, deprecating 0.1
     • Supports URL Lookup API category type parameter with options CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic., SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions., or CASB and SWG
     • Allows header injection in WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. connections via the Netskope Chrome Extension
     • Adds user notification configuration support in Netskope Chrome Extension v125.0.0
     • Enables Explicit Proxy Configuration on NPA Publishers via Publisher Wizard or token for version R125+
     • Supports bypassing IPs/Subnets/IP Ranges using exclude routes in Android 13+ Netskope App

     16 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The App Category field is deprecated and removed from filters, table columns, and CSV exports on the Inventory and Findings pages.
     • !Classic reports are replaced by Reports (New Experience) with a 90-day migration period; legacy historical runs must be downloaded locally before the period ends.
112. Netskope Digital Experience Management Release Notes for April 2025 Apr 2025 · release notes

     DEM adds interactive traceroute map with shift+mouse zoom and standalone Docker Compose for enterprise stations

     • Adds new Interactive Traceroute Map visualization in the DEM UI showing node details, IP addresses on zoom (shift + mouse wheel), legend, and settings
     • Shortens Path Performance Dashboard widgets to display traceroute map without scrolling
     • Provides downloadable Docker Compose file for deploying Enterprise Station on self-managed virtual machines

     3 details in Everything

113. Netskope Private Access Publisher Release Notes Version 124.0.0.9304 Mar 14, 2025 · release notes

     Publisher R124 adds manual HostOS upgrade path from Ubuntu 20.04 to 22.04 LTS.

114. Netskope Release Notes Version 124.0.0 Mar 5, 2025 · release notes

     Netskope v124 adds MacOS Enterprise Browser, Amazon S3 forensic destination, Google Calendar API DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., and granular steering match criteria

     └──▷ TRY IT
     Use nsdiag on MacOS to rotate secure tokens from the CLI.
     copy

     $ nsdiag -e

     • Enterprise Browser for MacOS (Beta) enables consistent browsing on macOS.
     • Supports Amazon S3 as a new forensic destination for Next Gen Forensics.
     • Next Generation API Data Protection adds support for Google Calendar, including DLP, threat protection, and alerts.
     • New API data protection policy action: Apply Sensitivity Label (Write) for Google Drive to apply label badges.
     • Steering Configuration WebUI adds Match Criteria options for OS Family and multi-select User Group/Ou.

     +6 more show less

     • nsdiag -e command available on MacOS to update enrollment and encryption tokens.
     • Device Classification now supports Check CRL, Check UPN, and Check Smart Card (GA).
     • Endpoint DLP adds No Notification (Mute) template option for silent blocking.
     • Endpoint DLP captures source PDF for Chrome/Edge printing and supports Custom Device Classification.
     • New category Banking and Payments available for NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. policies.
     • RBI now isolates 3rd party authentication flows transparently without sidecar categories.

     11 details in Everything

115. Netskope Private Access Publisher Release Notes Version 123.0.0.9194 Feb 10, 2025 · release notes

     Netskope Private Access Publisher 123.0.0.9194 now supports Ubuntu 22-based container images and AliCloud hosting.

     • Provides an OVA/VHDX Hosting on the Alicloud with downloadable publisher images for OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles. and VHDX formats from AliCloud OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees..

     1 detail in Everything

116. Netskope Private Access Publisher Release Notes Version 134.0 Feb 10, 2025 · release notes

     NPA Publisher v134 adds Global Attributes UI, prelogon multi-CA cert check, and dynamic PoP reconnection via GSLB.

     • Adds a Global Attributes button in Settings > Security Cloud Platform > Publishers to toggle supported NPA feature flags directly from the Tenant UI.
     • Enables Private Access Pre-logon validation of device certificates against multiple Certificate Authorities (CAs) within a single Client configuration.
     • Introduces Dynamic Reconnection based on relative latency, using the GSLB API service to steer traffic away from Publishers during maintenance or outages.

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The manual auto-reconnect feature has been deprecated; publishers now rely on GSLB-managed thresholds instead of customer-configured manual settings.
117. New Features and Enhancements February 6, 2025 Feb 6, 2025 · release notes

     Adds Shared Credential User field to Alerts data collection for Shared Credentials UEBA policy

118. Netskope Adapter Release Notes 212.251.11 Feb 3, 2025 · release notes

     Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. V2 support for additional user attribute imports in Netskope Adapter 212.251.11.

     • Adds Active Directory V2 mode to the Directory Importer for importing additional user attributes

     1 detail in Everything

119. Netskope Release Notes Version 123.0.0 Feb 3, 2025 · release notes

     Netskope 123.0 adds Next Gen API protection for ChatGPT Enterprise, SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. NGL where expressions, and OS family criteria in Real-Time Policies.

     • Adds where expression support in Netskope Governance Language (NGL) for SSPM rules to target specific resources more efficiently.
     • Enables manual remediation actions (Quarantine, Delete, Restrict Access) directly from the DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Incident page in Next Generation API Data Protection.
     • Extends Next Generation API Data Protection to ChatGPT Enterprise, supporting policy creation, DLP, and threat protection for this app.
     • Allows real-time protection policies to use custom Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. attributes synced via the directory importer as policy criteria.
     • Adds Source IP as a valid policy criterion for NPA Browser Access applications.

     +7 more show less

     • Enables DLP policy application for NPA Browser Access method through real-time policies.
     • Expands RBI isolation scope to allow admin-defined isolate policies for any web destination without error/warning prompts.
     • Allows exporting Muted By, Muted Until, and Muted Justification fields from the SSPM Findings page.
     • Adds a DEM Dashboard for Email DLP service health visibility (Controlled GA).
     • Supports SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. memberof values to auto-populate group memberships, create pre-defined groups, or map friendly names in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions..
     • Introduces the nsdiag -e command option with return code support (0 for success) and error messaging for secure enrollment troubleshooting.
     • Provides a new Device Status Page Read Operation via APIv2 for devices.

     12 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Deprecated OS criteria in Real-Time Policies will be eventually removed; admins must migrate to OS family manually.
     • !Dedicated Real-time policies for Microsoft Docs.com, GCC Docs.com, Sway, StaffHub, Skype for Business, GCC Skype, Office 365lync Online, GCC Yammer, and GCC Office Delve will not function from R124.
120. New Features and Enhancements January 31, 2025 Jan 31, 2025 · release notes

     Netskope expands its reporting capabilities by introducing a pre-configured dashboard template for analyzing authenticated user activity across SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. and CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. inline deployments.

121. Netskope Release Notes Hotfix Version 122.1.0 Jan 13, 2025 · release notes

     Netskope 122.1.0 adds Slack/MS Teams SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications., device cert checks, and pinned app decryption

     • SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management now supports monitoring for Slack Enterprise with new predefined rules and entities
     • SaaS Security Posture Management now supports monitoring for MS Teams with new predefined rules and entities
     • Device Classification Certificate check option now supports Check UPN to compare UserPrincipalName against certificate fields
     • Device Classification Certificate check option now supports Check Smart Card to validate certs on the card and Smart Card PIN
     • Device Classification Certificate check option now supports Check CRL to fail posture checks for revoked certificates

     +2 more show less

     • New steering exception Steer and Decrypt at Netskope Cloud allows decryption of certificate-pinned app traffic (initially Google Drive on Windows Intel)
     • SSPM Reports dashboard in NAA now includes ability to filter Findings by SSPM Policy

     7 details in Everything

122. New Features and Enhancements January 9, 2025 Jan 9, 2025 · release notes

     Netskope adds CCI Gen AI Attributes to Application Events, Alerts, and Incidents data streams for AI risk visibility.

     • Uses GenAI, Disable GenAI, Customer data for learning, Data sharing with GenAI vendor, Tenant isolation or private instances for GenAI, AI risk regulations and compliance, GenAI usage policy, and Security assessment of GenAI vendor fields are now available in Application Events, Page Events, Alerts, and Incidents data collections.

     1 detail in Everything

123. New Features and Enhancements December 12, 2024 Dec 12, 2024 · release notes

     Adds Policy filter to SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Dashboard, AND/OR logic in Data Explorer filters, and Map (legacy) widget migration.

     • Adds a Policy filter for the SaaS Security Posture Dashboard allowing filtering by custom or predefined rules.
     • Adds Custom expression and New group filter options to Data Explorer with AND/OR logic support between filter groups.

     2 details in Everything

124. Virtual Appliance Release Notes Version 121.0.0 Dec 9, 2024 · release notes

     Virtual Appliance 121.0.0 adds multi-port DPOP support, KMIP auth, and TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. keepalives

     • Adds ability to configure a username and password for the KMIP server
     • DPOP now supports listening for traffic on multiple ports instead of a single port
     • Introduced the ability to increase TCP keepalives from the NS proxy to the web server for specific domains

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !DNS proxy mode is no longer supported for DPOP
125. Netskope Private Access Publisher Release Notes Version 122.0.0.9124 Dec 9, 2024 · release notes

     Netskope Private Access Publisher v122 adds AliCloud OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles. hosting and removes SSH RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. support.

     • New images hosted on Alicloud at npa-ova.oss-cn-shenzhen.aliyuncs.com/latest/ for OVA and VHDX formats
     • Removal of ssh-rsa configurations from sshd settings in Publisher images

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Publisher images remove the ssh-rsa related configurations from sshd configurations, which may break clients relying on SSH-RSA key exchange.
126. Netskope Release Notes Version 122.0.0 Dec 3, 2024 · release notes

     Netskope 122 adds OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. auth, Gemini/DeepSeek AI connectors, RBI isolation of 3rd party auth flows, and Box centralized ownership support.

     • Adds OAuth2 authentication support for the Netskope REST API service
     • Adds a dedicated app connector for DeepSeek to enforce real-time policies with mapped application activities
     • Adds Google Gemini API endpoint support through the Google Gemini app connector for Post activity detection
     • Enables isolation of 3rd party auth flows in Remote Browser Isitation (RBI) without requiring admins to add sidecar categories or cloud apps to isolate policies
     • Adds opt-in feature to ensure seamless and scalable API Data Protection in Box environments utilizing the centralized ownership model

     +1 more show less

     • Adds ability to configure two token sets (authentication and encryption tokens) for Secure Enrollment with independent validity periods

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Netskope will no longer support classic Google Drive as forensic destinations; new customers cannot use Google Drive as forensic destination
127. Netskope Release Notes Hotfix Version 121.0.7 Nov 20, 2024 · release notes

     Netskope 121.0.7 adds HTTP GET auth, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. non-web blocking on macOS, and GSLB fallback in China

     • GET Method Authentication Support added to allow IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. enrollments to bypass Safari's redundant WebAuth.html dialog
     • Protect Client configuration and resources enabled as the default option in Client Configuration for new tenants
     • Block IPv6 non-web traffic in Cloud Firewall mode now supported on macOS (previously Windows only)

     3 details in Everything

128. Netskope Cloud Exchange Release Notes Version 5.1.0 Nov 5, 2024 · release notes

     Netskope Cloud Exchange 5.1.0 introduces CRE V2 unified risk exchange, Docker Compose support, and Quorum queue migration.

     • Adds Docker-Compose support for deployment with strict CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware./RAMRAMWorking memory that holds programs and data while a computer is running. Its contents usually disappear when power is removed./disk profile checks (medium or large) on RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 8/9 and Ubuntu 20.04/22.04
     • Introduces CRE V2 unifying URE and ARE modules with Schema Editor, Records page, Actions page, and calculated fields for risk scores
     • Adds Action to update UCI scores and allows sending user risk updates to Okta when Netskope score bucket classification changes
     • Adds Tag Application action in CRE V2 allowing users to tag applications on Netskope with support for List type fields for filtering
     • Adds initial_range parameter support in CLS, CTE, CTO, and CRE plugins to control historical data fetching (0 disables pulling)

     +5 more show less

     • Adds UTF-8 encoding switch in Log shipper settings page for CLS data export to resolve invalid character issues
     • Adds IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. retraction functionality in CTE with configurable retraction interval, source labeling, and button to mark indicators as retracted
     • Adds CTO support for Endpoint and Incidents events with updated queue configuration validation and autocomplete features
     • Adds tenant configuration via Tenant plugin instead of Settings > Tenants > Add Tenant, moving alert configs to individual plugins
     • Updates SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. to support password-less authentication methods like Push notification and MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. for Netskope tenants

     10 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !RabbitMQ data migration from Classic queue to Quorum queue is not supported; users must reconfigure or migrate data manually
     • !Deprecated v1 API usages (like /api/v1/alerts) and SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. v1 api usage are removed
129. Netskope Release Notes Version 121.0.0 Nov 4, 2024 · release notes

     Netskope v121 adds Cloud TAP GA, Multi-IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. Browser Access, Swagger API v2 for Quarantine/Legal Hold, and Okta SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. API Token auth

     • Cloud TAP is now Generally Available, capturing traffic from managed endpoints/branch offices to customer AWS, Azure, or GCP object stores with session keys for decryption.
     • Netskope Private Access (NPA) Browser Access supports multiple SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. IdPs (up to 10) for domain-based authentication selection.
     • Quarantine and Legal Hold actions are now available via REST API v2 endpoints for Next Generation API Data Protection.
     • Cloud Explicit Proxy HTTPS is a new Beta steering method available via API that encapsulates HTTP Proxy flow into a TLS tunnel.
     • x-c-timezone field added to Transaction Event Format 4 to display GMT offsets during GEOinfo and policy evaluation.

     +2 more show less

     • Okta SSPM integration now uses API Token authentication instead of OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs., eliminating the 90-day refresh requirement.
     • Netskope URL Lookup API allows retrieving categorization for one or multiple URLs including custom categories and list matches.

     7 details in Everything

130. Netskope Release Notes Hotfix Version 120.1.0 Oct 17, 2024 · release notes

     Adds real-time DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. controls for MS Teams Approval/Praise apps and secure enrollment enforcement options.

     • Adds activity detection and DLP support for real-time control of Approval and Praise apps in Microsoft Teams
     • Adds the new Enforce feature and web UI Enforce Token(s) option to manage secure enrollment token policies
     • Okta SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. categorization now excludes Single Sign-On (SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.) apps from 3rd Party Apps category

     3 details in Everything

131. Netskope Release Notes Version 120.0.0 Oct 3, 2024 · release notes

     Netskope R120 adds SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. Alternate User ID, FTP real-time policy with DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., UCI REST reset API, and GPT-4o ChatGPT Attach activity.

     • Adds Alternate User ID field to Private Apps SAML Reverse Proxy configuration for identity mapping.
     • Enables Real-Time Policy for FTP (Firewall Application) with DLP Profiles and file size constraints (controlled GA).
     • Updates Transaction Event Format-4 with 35 new fields in Identity, Device, Threat Protection, and Connection categories (beta).
     • Adds Attach activity detection for ChatGPT connector via GPT-4o LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. support to monitor files attached from Google Drive or Microsoft OneDrive.
     • Adds eight GenAI-specific Cloud Confidence Index (CCI) attributes for informational tracking of enterprise data usage and AI regulation compliance.

     +16 more show less

     • Allows resetting User Confidence Index (UCI) value to 1000 via the new UCI Reset REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoint.
     • Expands Netskope Reporting platform with interactive visualizations, centralized schedule management, improved sharing, and expanded template library (New Experience).
     • Adds Box as a forensic destination for Next Gen Forensics.
     • Displays Microsoft Purview Information Protection sensitivity labels on the Inventory side panel for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. apps.
     • Enables downloading multiple quarantine and legal hold files as a compressed .zip from the Incidents page Next Gen tab.
     • Extends inventory side panel data to Box, Dropbox, Egnyte, Google Drive, Salesforce (Sharing & Links), and Microsoft 365 OneDrive/SharePoint/Salesforce (File Versions).
     • Allows scheduling PDF reports for storage apps via PDF REPORT > Schedule in the Advanced Analytics Dashboard.
     • Supports CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. GitHub 1.0 Benchmark compliance standard in SaaS Security Posture Management (SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications.).
     • Makes SaaS Security Posture Management and SSPM Compliance dashboards generally available in the Netskope Advanced Analytics Library.
     • Adds support for RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. and SSH access via Browser Access without requiring the Netskope Client.
     • Enables Forward to proxy action for all SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. bypassed traffic to next hop proxies (controlled GA).
     • Separates Custom categories, URL Lists, and URL Lookup into distinct sections in the Web profiles UI.
     • Increases concurrent isolated browser tab limits in Remote Browser Isolation (RBI) to remove predefined thresholds, binding only on resource consumption limits.
     • Implements RBI content encoding improvements yielding ~56% bandwidth savings.
     • Adds support for Windows 365, MAC 15.0 (Sequoia), iOS 18, and ChromeOS 128 in the Netskope Client.
     • Makes Top Level Domain support for steering configurations generally available.

     21 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Deprecated DNS Connector is no longer available for installation in NSAdaptors.msi.
132. New Features and Enhancements September 19, 2024 Sep 19, 2024 · release notes

     Netskope adds True Object Type attribute to Incidents data collection

133. Netskope Release Notes Hotfix Version 119.1.0 Sep 16, 2024 · release notes

     Adds PDF report download/email for API Protection Dashboard; adds Link Expiration Date action for Box SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. policies

     • Adds ability to download or email a PDF dashboard report from the API-enabled Protection > SAAS (NEXT GEN) > Dashboard page for storage apps
     • Adds Set Link Expiration Date restrict access policy action for Next Generation API Data Protection on Box

     2 details in Everything

134. New Features and Enhancements September 3, 2024 Sep 3, 2024 · release notes

     Adds MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. and Domain filters and widgets to the Netskope SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. dashboard.

     • Adds MITRE ATT&CK and Domain dashboard filters to the SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management Dashboard
     • Adds #Failed Findings by Domain and #Failed Findings by MITRE ATT&CK widgets to the SaaS Security Posture Management Dashboard
     • Adds MITRE ATT&CK and Domain columns to the Posture Findings widget in the SaaS Security Posture Management Dashboard

     3 details in Everything

135. Netskope Release Notes Version 119.0.0 Sep 3, 2024 · release notes

     Netskope 119 adds Box/Webex/ServiceNow/Slack API protection, USB encryption detection, and new DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. file types.

     • General Availability (GA) of Next Generation API Data Protection for Box, Cisco Webex, ServiceNow, and Slack Enterprise
     • Support Automatic Classification of Files using Box Labels with the Apply Sensitivity Label policy action
     • General Availability (GA) of Microsoft Purview Information Protection Write Capability Action (Apply Sensitivity Label)
     • New Scan Content Type criteria for Ticketing Apps (Custom Objects, Default Objects) and Messaging Apps (Direct Message, Private Channel, Public Channel)
     • Ability to exclude Microsoft 365 SharePoint Sites by site name or site ID in NG API policies

     +19 more show less

     • Export Inventory Data as CSV via new Export button on the Inventory page (max 500,000 rows)
     • New restrict access policy actions: Restrict Access to Owner’s Domain, Specific Domains, Specific Users, Revoke Access from Specific Users, Disable Print & Download, Restrict Sharing to View
     • Automatically optimize port ranges for Private Apps in Publishers UI
     • Authentication bypass support for specific URIs in NPA Browser Access
     • Multiple IDPs with Browser Access (up to 10 SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. accounts)
     • Enable/disable Private Access tunnel independently on Windows and macOS via Netskope Client
     • Transaction Events log Format 4 with 35 new fields in Identity, Device, Threat Protection, and Connection categories
     • Netskope URL Lookup API with rate limiting support
     • Separation of Custom Categories, URL Lists, and URL Lookup into distinct sections in Web profiles UI
     • API option to remove IP surrogate for IPsecIPsecA suite of IETF protocols that authenticate and encrypt IP packets at the network layer, giving cyber tools a standards-based way to build VPNs or secure host-to-host tunnels without modifying applications., GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation., and EPoT deployments via Forward Proxy Global Settings
     • Real-time device classification evaluation for non-decrypted traffic
     • 40 additional file types supported in real-time policy activity constraints
     • HTTP/2 account compatibility with Remote Browser Isolation (automatic downgrade to HTTP1.1)
     • File Retention profile option for detected malware uploads to IaaS
     • Linux OS check rule in Device Classification for Traffic Steering
     • Migration of client log data from AWS S3 to Google Cloud Storage (GCS)
     • Block IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. non-web traffic on Windows devices via Netskope Client
     • New License Information and Renewal Notices page in the management console
     • Display of Resource Id on the 3rd Party Apps page for SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications.

     24 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Microsoft 365 SSPM instance configuration requires new permissions due to deprecation of Azure ACS onboarding; existing instances will stop monitoring if ACS is disabled and require re-granting access on the Configure App Access page.
136. Netskope Digital Experience Management Release Notes for September 2024 Sep 2024 · release notes

     Netskope DEM adds App Probe telemetry, Enterprise Station monitoring, new dashboards, and User Experience Score RCA.

     • Adds App Probe synthetic testing capability for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. application availability and performance monitoring
     • Enables monitoring of custom web-based applications beyond the 80,000+ predefined apps
     • Supports connectivity performance monitoring from corporate sites using the new Enterprise Station component
     • Introduces Sites Overview, Site Details, Path Performance, Applications Overview, and Application Details dashboards
     • Adds DEM User Experience Score RCA feature to identify root causes for degraded user experience scores (<=70)

     5 details in Everything

137. New Features and Enhancements August 23, 2024 Aug 23, 2024 · release notes

     Netskope adds descriptions to Library dashboards and updates Device Client widget versions.

     • Adds dashboard descriptions for all Netskope Library dashboards, accessible via the Details option in the dashboard dropdown menu
     • Updates the Devices by Current Version widget table to show the latest supported version and golden release version

     2 details in Everything

138. Netskope Private Access Publisher Release Notes Version 118.0.0.8741 Aug 19, 2024 · release notes

     Netskope Private Access Publisher v118 adds AliCloud hosting and updates kernel versions.

     • Adds support for OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles. and VHDX hosting on AliCloud.
     • Updates kernel versions for OVA, VHDX, AMI, and VHD platforms.

     2 details in Everything

139. Netskope Release Notes Version 118.0.0 Aug 5, 2024 · release notes

     Netskope 118 adds Cloud TAP GA, Egnyte NG API protection, SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. policy actions, and time-based SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. bypass rules.

     • Enables Cloud TAP controlled GA to capture endpoint/branch traffic and forward it to AWS, Azure, or GCP object stores with session keys for decryption.
     • Adds Egnyte support to Next Generation API Data Protection for policy creation, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., and threat protection.
     • Adds the Apply Sensitivity Label policy action in Next Generation API Data Protection to apply Microsoft Purview labels on OneDrive, SharePoint, and Google Drive files.
     • Introduces the Scan Content Type criteria under Policies > API Data Protection > SAAS > Next Gen > New Policy > Object to filter by Personal/Team Drive or Direct message/Private/Public channels.
     • Adds upload activity detection for the Google Gemini application in CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. Real-time Protection.

     +16 more show less

     • Adds the domain drive.fife.usercontent.google.com as a new entity for Google Drive application detection.
     • Adds support for IPv4 and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. DNS over TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. in Netskope Private Access (NPA) without requiring Publisher DNS to be enabled.
     • Adds a Browser Access User Portal allowing end-users to view and launch authorized ZTNAZTNAZero Trust Network Access, a framework that grants users access to specific applications only after continuously verifying identity and device posture, replacing broad VPN-style network access with least-privilege connections. Browser Access applications.
     • Supports time-based real-time policies for traffic that matches an SSL bypass rule, enforcing block/alert/bypass actions based on policy schedules.
     • Enables creation of real-time protection policies using custom user attributes synced from the directory importer.
     • Extends DLP Original file access to Endpoint DLP via a download icon in the Incident Detail section, storing files in a Forensics folder defined by the Forensic Profile.
     • Adds Network File Share Device Control for the macOS Endpoint DLP agent upon request.
     • Updates SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. GET /Groups/{id} to support query parameters attributes and excludedAttributes for group membership.
     • Requires adding the Browser source criteria to all new or edited RBI Isolate policies to prevent non-browser traffic from matching.
     • Limits duplicate IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. alerts per signature to 30 alerts every 5 minutes via Event Thresholding.
     • Allows submission of false positive cases for malware files seen in Incidents > Malware table via the tenant UI.
     • Adds a Malware Retention profile option in real-time Threat Protection policies to retain malicious files in a designated IaaS folder.
     • Changes the minimum value for Periodic Device Classification in Client Configuration from 5 minutes to 1 minute.
     • Introduces Master Password support for Netskope Client on macOS devices via Client Configuration.
     • Adds One-Time Password-based client disable option for SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. services on Windows, configured under Settings > Security Cloud Platform > Client Configuration > Tamperproof.
     • Makes OS Version Check and AV check (CrowdStrike, SentinelOne, Carbon Black, Microsoft Defender) generally available for Windows and macOS devices.

     21 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The API v2 endpoint /api/v2/spm/rules/cs/{cs_id} is deprecated; you must use /api/v2/spm/rules/categories/cs/subcategories/{id} to get compliance standard information.
140. Netskope Digital Experience Management Release Notes for August 2024 Aug 2024 · release notes

     New DEM Service Settings allow selective enablement/exclusion of DEM by user/group/OS/device, plus UI zoom and time zone switching.

     • Adds controls in the DEM Service Settings window to Enable DEM for Selected Users or Exclude Users by Individual User, Organizational Units (OU), User Groups, Device Classification, or Operating System (OS)
     • Adds a Query Visualization feature in DEM Service Settings to view selection criteria in a human-readable format
     • Adds time zone switching between local and end-user time zones on the user details page top right section
     • Adds Focus Mode zoom feature that syncs zoom across all charts on the User Details page

     4 details in Everything

141. Netskope Release Notes Hotfix Version 117.1.0 Jul 17, 2024 · release notes

     Netskope SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. 3.1 for Microsoft 365 and extends inventory API with new timestamps

     • /api/v2/spm/inventory/getresources now returns creation_time and last_updated_time fields in its response.
     • SSPM introduces support for the Center for Internet Security (CIS) 3.1 compliance standard for Microsoft 365.

     2 details in Everything

142. New Features and Enhancements July 11, 2024 Jul 11, 2024 · release notes

     Netskope SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. adds Domain and MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. dimensions to Category field and new AI Usage Dashboard widgets

     • Adds Domain dimension (e.g., Auditing & Logging, Authentication) to the SSPM Category field group for data-related compliance requirements
     • Adds MITRE ATT&CK dimension to the SSPM Category field group to define adversary tactical goals like Credential Access or Defense Evasion
     • Adds Top Instances Detected: App/Instance/Activity widget to the AI Usage Dashboard
     • Adds Instance Details table widget to the AI Usage Dashboard

     4 details in Everything

143. Netskope Release Notes Version 117.0.0 Jul 1, 2024 · release notes

     Netskope R117 adds Next Gen API DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. for Dropbox/Teams/Salesforce, severity-based remediation, and new Threat Protection scan/alert capabilities.

     • General Availability of Next Generation API Data Protection for Dropbox
     • General Availability of Next Generation API Data Protection for Microsoft 365 Teams (Commercial)
     • General Availability of Next Generation API Data Protection for Salesforce
     • Support for new Revoke Users Added at the File Level and Revoke Public Sharing restrict access actions in Next Gen API Data Protection
     • Introduction of Legal Hold as a policy action destination for Microsoft 365 OneDrive, SharePoint, and Google Drive

     +17 more show less

     • Severity-based remediation actions (low, medium, high) for threat protection in Next Generation API Data Protection
     • New Threat Protection capability to scan cloud email bodies and alert on malicious links via API connectors
     • Addition of APRA CPS 234 compliance standard in SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications.
     • SSPM visibility and risk profiling for 3rd party apps in Okta instances
     • New Workday rule template in SSPM
     • HTTP-Auto Detect capability to identify and inspect HTTP(s) traffic on non-standard ports in Cloud Firewall
     • Google Gemini instance ID detection support in Google App Suite
     • Microsoft Copilot Upload activity support via app connector
     • Support for Google Drive as a forensic destination in Next Gen Forensics
     • New Netskope Client UI indicators for NPA Internet Security and Private Access tunnel statuses on system tray icon and one-click menu
     • Netskope REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services. to configure domain fronting exceptions using wildcard or full-domain matches
     • RBI Fallback Action setting for non-isolable requests (block vs proxy)
     • RBI browser source criteria requirement for all new/edit isolate policies
     • RBI popup message isolation indicator customization (border color, position, images, custom text with HTML tags)
     • Optional description field for Endpoint DLP device constraints
     • Preview images and extracted text in DLP incidents with sub-file download options
     • New with-decrypted Geneve option in Netskope stitcher tool CLI

     22 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Classic Azure Blob Storage is no longer supported as a forensic destination for new instances; the UI checkbox is removed and cannot be re-enabled if disabled.
144. Netskope Digital Experience Management Release Notes for July 2024 Jul 2024 · release notes

     Netskope DEM adds tunnel status/flapping, service redirect, and resource utilization alerts with email/Slack/webhook notifications.

     • Adds Tunnel Status alert type to monitor tunnel availability via P-DEM UI
     • Adds Tunnel Flapping alert type to monitor tunnel stability via P-DEM UI
     • Adds Service Redirects alert type to monitor Netskope service status via P-DEM UI
     • Adds Publisher Resource Utilization alert type for NPA customers to monitor publisher resources via P-DEM UI
     • Adds Email, Slack Webhooks, and Custom Webhooks as notification options for DEM alerts

     5 details in Everything

145. New Features and Enhancements June 27, 2024 Jun 27, 2024 · release notes

     New SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Scan Results measures and drilldown views for failed/passed findings with severity sorting.

     • Adds Failed Findings and Passed Findings measures to the SSPM Scan Results data collection
     • Adds drilldown table views for Findings, Failed Findings, and Passed Findings showing Application Name, Instance Name, Rule Name, and Severity
     • Sorts the Failed Findings by App and Severity widget by severity in descending order (Critical, High, Medium, Low)

     3 details in Everything

146. New Features and Enhancements June 6, 2024 Jun 6, 2024 · release notes

     Netskope adds Gateway field to Page Events, Application Events, and Alerts data collections for targeted searching

147. Netskope Release Notes Version 116.0.0 Jun 3, 2024 · release notes

     Netskope 116 introduces Cloud Tap beta, OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. URL Lookup API, CCI tagging UI, and RFB fallback action.

     • Adds Cloud Tap beta to mirror/copy packets from Netskope infrastructure for third-party ingestion
     • Adds URL Category Look-up APIs allowing search for up to 100 URLs per request with rate limiting
     • Adds new CCI Tag Management User Interface for defining dynamic tag rules based on multiple CCI attributes
     • Adds support for Microsoft 365 OneDrive GCC, Outlook GCC, and SharePoint GCC in Next Generation API Data Protection
     • Adds quarantine tombstone support for .docx, .xlsx.xlsxThe file format used by Microsoft Excel for spreadsheets, based on the Open XML standard. Cyber tools use it to ingest or export structured tabular data in a format analysts already work with., and .pptx file types in Next Generation API Data Protection

     +7 more show less

     • Adds search and filter options (App Instance, Application, Action, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Profile, Policy Name) to the policy wizard page in Next Generation API Data Protection
     • Adds DNS response time viewing and filtering capability in the Network Events page for SkopeIT
     • Adds CORSCORSA browser mechanism that lets a server declare which foreign origins may read its HTTP responses, enforced by the browser to block unauthorized cross-site requests from JavaScript. OPTIONS request support via Browser Access for Netskope Private Access
     • Adds 'proxy to next hop' fallback action modification for non-isolable requests in Remote Browser Isolation (RBI)
     • Adds Clone Rule feature in SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. to build custom rules by cloning existing ones
     • Adds 7 new predefined templates for Microsoft 365 in SSPM rule creation
     • Adds support for Windows 10 Enterprise N LTSC, Windows 11 Enterprise LTSC, and Windows 11 Enterprise N LTSC in OS Check

     12 details in Everything

148. Netskope Release Notes Hotfix Version 115.1.1 May 23, 2024 · release notes

     New AV and OS checks in Windows Device Classification, localization for user notifications and client UI.

     • Adds separate Antivirus (AV) and Operating System (OS) version compliance checks in Device Classification for Windows devices
     • Enables localization of User Notification templates to German or French for user justification on Windows
     • Supports German and French language options in the Netskope Client UI on Windows

     3 details in Everything

149. New Features and Enhancements May 16, 2024 May 16, 2024 · release notes

     Updated Devices by Current Version widget in the Device Client Dashboard.

     • Updates the Devices by Current Version widget table to reflect the latest supported version and golden release version.

     1 detail in Everything

150. Netskope Release Notes Version 115.0.0 May 6, 2024 · release notes

     Netskope 115 adds Local Broker for on-prem ZTNAZTNAZero Trust Network Access, a framework that grants users access to specific applications only after continuously verifying identity and device posture, replacing broad VPN-style network access with least-privilege connections., Grammarly real-time protection, and Windows Bluetooth DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest..

     • Private Access now supports Local Broker for connecting on-prem users to on-premise apps, enforcing policies locally instead of routing traffic through Netskope Cloud.
     • Inline activity coverage for Grammarly is now supported with Real-time protection, allowing admins to create granular policies around Upload, Download, Create, Delete and Login activities.
     • Windows Endpoint DLP agent now supports Bluetooth Device Control for policy-based decisions to prevent data transfer using Bluetooth.
     • Endpoint DLP now supports device control and content control on USB drives that leverage WinMagic SecureDoc removable media encryption.
     • MS Copilot now supports App instance monitoring and control via CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. Inline Real-time policy for post login scenarios.

     +1 more show less

     • RBI templates have added support for customization of the Pop-up Message isolation indicator, including border color, position, corporate logo images (jpg, png), and custom text with HTML tags.

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The Service Monitoring page under Settings > General is removed; use Configure App Access > Classic > IaaS to view public cloud instance status.
151. Netskope Release Notes Version 114.0.0 Apr 18, 2024 · release notes

     Netskope R114 adds Microsoft Copilot connector, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. file classifier thresholds, API email notifications for Confluence/GitHub/Yammer/Zoom, and RBI Extended license categories

     • Adds Microsoft Co-pilot (Free) Generative AI Connector supported for granular policy control via CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. Real-time Protection
     • Enhances ChatGPT connector to support anonymous application usage via Real-time Protection policies without requiring policy changes for non-instance/user based policies
     • Adds SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Posture Score field under the Attack Surface Management section in Netskope CCI for apps supported and onboarded through Netskope SSPM
     • Introduces HTTPs Traffic Auto-detection in Cloud Firewall to identify HTTP(s) traffic on non-standard ports without specifying custom ports in steering configuration
     • Adds 'Block the identified HTTP on non-standard port' toggle in Identify HTTP Traffic On Non-standard Port configuration and shows block status in Realtime protection pages

     +30 more show less

     • Supports over 88 additional file types via DLP file filter including Python Wheel/WHL, Altium Circuit files, HARHARAn HTTP Archive file, a JSON-format log of all network requests and responses captured by a browser's developer tools, used by cyber tools to replay, inspect, or analyze web traffic without re-running a live session. files, Windows Clipboard files, Android App Bundle, Android XAPK installer, Planetary Data System data version 2/3/4, and ConceptDraw fileformats
     • Allows DLP administrators to customize predefined file classifiers by adjusting threshold levels and uploading false-positive images/documents (controlled GA)
     • Enables Email Subject line recording for Email DLP (SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure.) to seek consent and make subject available for search across Events, Alerts, Incidents and Notifications (controlled GA)
     • Supports encrypting forensic content in Incident Management System when uploading to SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. or IaaS destinations and decrypting on view/download
     • Enables Network File Share Device Control for Windows Endpoint DLP agent upon request (controlled GA)
     • Provides access to internal applications via PQDN with Multi Search Domains for Wildcard Application Access on Windows and macOS clients
     • Adds Filter and Export option for Private Application definitions on Web UI, enabled by default
     • Enhanced Netskope Client on Windows shares Private Access tunnel status (Enabled/Disabled, Re-authentication Time, Grace period warning, Error due to re-authentication) via Client icon, Mouse hover, and Menu
     • Netskope Private Access APIs now support CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. operations and version control for real-time policies
     • Selects Publisher based on Latency from configured Publishers pool (controlled GA)
     • Extended email notification support in Next Generation API Data Protection Policy Wizard for Atlassian Confluence, GitHub, Microsoft Yammer, and Zoom
     • Adds Delete action support in Incidents > DLP page for Microsoft 365 OneDrive, Microsoft 365 SharePoint, and Google Drive
     • Qualifies Next Generation API Data Protection for Microsoft 365 Outlook as GA with policy creation, DLP, threat protection, alerts, and ongoing scan capabilities
     • Enables case insensitive matching for incoming URLs against custom URL lists via toggle in Settings > Security Cloud Platform > Configuration
     • Introduces SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Decryption policies based on specific Access Methods and OS, with OS Family and Access Method filtering capabilities added to the SSL Decryption Page
     • Introduces an API to withdraw IP surrogacy entry of an end device for IPsecIPsecA suite of IETF protocols that authenticate and encrypt IP packets at the network layer, giving cyber tools a standards-based way to build VPNs or secure host-to-host tunnels without modifying applications., GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. and EPoT deployments (Beta feature)
     • Extended limit of unique user groups/OU’s that can be used from 1024 to 4096 in Real-Time policies and SSL decryption policies
     • Adds RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. support for account homepage dashboards with dynamic widget visibility based on data permission
     • Extends Extended RBI license to cover additional categories: Alcohol, Arts, Automotive, E-Commerce Tools, Fashion, Generative AI, Technology, Web Hosting
     • RBI isolated chromium browser now updates page titles and history entries seamlessly to reflect target webpage title or URL-derived title
     • Adds 15 new predefined rules for SSPM covering Microsoft Entra (4), Microsoft 365 (11), MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. ATT&CKS Initial Access (4), Authentication (4), Email Security (11)
     • Supports 3rd Party App feature for Workday and ServiceNow apps in SaaS Security Posture Management
     • Logs all intentional or accidental changes to Netskope Client Configuration and Steering Configuration including Create/Clone/Edit/Delete, Disable/Enable, Reorder, Switch OU/Group, and exceptions via Audit Log Enhancements
     • Improved support to save log bundle to wide character file path
     • Enhances Certificate Pinned Application tab under Settings > Security Cloud Platform > App Definition to enable direct assignment of Steering Configurations, manage exceptions via new modal, and display configured applications
     • Netskope Client uses P-DEM Netskope Client Configuration Service (CCS) for P-DEM Professional users to control network/device health information collection granularity (OU, group, individual user)
     • Introduced Master Password option for 'Allow disabling of all Client Services together' under Settings > Security Cloud Platform > Client Configuration > Tamperproof (Beta feature)
     • On IPSec/GRE table listing page, Primary and Failover POPs visible by default; Status column renamed to Tunnel Status; Site filter renamed to Site Status with Mixed option added
     • Updated tooltip message for status on IPSec/GRE table listing page to use Tunnel instead of Site
     • Device Client Data Collection now GA providing organization-wide client status overview dashboards

     35 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !User Alert action is no longer supported for real-time policy combinations where category begins with Security Risk and no profile is selected, or for Category based policies with threat profile; existing policies default to Alert upon edit.
     • !Removed coverage for Rename page activity in Google Calendar as it cannot be supported due to change in application traffic.
152. New Features and Enhancements March 28, 2024 Mar 28, 2024 · release notes

     Advanced Analytics Training Resources dashboard now available in Netskope Library for self-service onboarding

153. New Features and Enhancements March 19, 2024 Mar 19, 2024 · release notes

     Netskope adds Beta Advanced Analytics Device Client Data collection for client status and version management

     • Provides visibility into which client versions are in use and how many devices are on unsupported, supported, or Golden release versions.
     • Enables tracking of user/device client disable events and history for troubleshooting.

     2 details in Everything

154. Netskope Cloud Exchange Release Notes Version 5.0.1 Mar 12, 2024 · release notes

     Netskope Cloud Exchange 5.0.1 adds private app sharing, granular IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. types, optional GitHub upload, and secure OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles. hardening.

     • Adds Add to private app action in Threat Exchange module to share URLs with tags to Netskope tenant
     • Adds Malware Type and Malware Name fields as comments for Threat IoCs in Threat Exchange module
     • Adds granular URL types (Host, IPv4, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only., URL, Domain) for Threat IoCs in Threat Exchange module
     • Adds Enable Tagging configuration option (Yes/No) in Threat Exchange module configuration
     • Adds Allow Empty Values configuration option (Yes/No) in Log Shipper WebTx Plugin configuration

     +3 more show less

     • Adds support for sending null values in WebTx Log Shipper JSON output and default values in CEFCEFCommon Event Format, an ArcSight (Micro Focus) log standard that defines a fixed header plus extensible key-value pairs so cyber tools can emit and ingest alerts in a predictable, parseable structure. format
     • Adds debug application logs sharing capability via Syslog for CE plugin
     • Makes GitHub Connectivity optional by allowing manual upload of plugins from UI in .zip or .tar formats

     8 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Customers cannot deploy CE v5.0.1 on AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. Fargate; must use CE v5.0.1 AWS AMI instead
     • !Small instance type support is removed from Netskope Cloud Exchange
     • !CentOS operating system support is removed because CentOS announced End of life
155. Netskope Release Notes Version 113.0.0 Mar 4, 2024 · release notes

     Netskope 113 adds WSLv2 traffic steering, SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. rule templates, Google Drive DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. quarantine, and more new detections.

     • Added support for WSLv2 (Windows Sub-System for Linux 2) in Traffic Steering as a beta feature, allowing policy enforcement via the WSLv2 CLI interface.
     • Introduced User Watchlists for Advanced UEBA, enabling selection and monitoring of specific users with their own UCI threshold alert levels.
     • Added an Instagram connector supporting Login Attempt, Login Failed, Login Successful, Logout, View, Comment, Delete, Upload, Like, Create, and Edit activities.
     • Added Network File Share Device Control for the Windows Endpoint DLP agent to allow policy-based decisions on file share usage.
     • Added Printer Content Control for the Windows Endpoint DLP agent to control what data is allowed to be printed.

     +13 more show less

     • Introduced Restore and Block actions for quarantined incidents on the Incidents > DLP page, with a Notify User option to alert Custodian, Owner, Admin, Collaborators, or Selected Users.
     • Extended Next Generation API Data Protection to support DLP quarantine for Google Drive, including retroactive scans and custom tombstone text/file options.
     • Added support for multiple certificate hierarchies in SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Decryption via the SSL Certificate and Force SSL Certificate on NS Client controls.
     • Enabled FIDO2FIDO2The open standard behind passkeys and hardware security keys, where a website checks a signature from the user's device instead of a password. Because the key is bound to the site, phishing pages cannot use it. authentication for Netskope Private Access Client on macOS devices through external browser support.
     • Enhanced the Netskope Client icon colors and status tooltips to show Internet Security and Private Access tunnel statuses.
     • Extended RBI Supported Categories under Remote Browser Isolation to include File Converter and Pay to Surf categories.
     • Added RBI Policy Recommendations banner to assist admins creating isolate policies for Cloud Apps requiring sidecar applications.
     • Added 6 new predefined rules in SSPM for Microsoft Entra, Microsoft 365, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior., Device Security, and IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access..
     • Introduced templates to create new SSPM rules with predefined rule definitions, remediation steps, and descriptions for Microsoft Entra, Okta, Salesforce, and Workday.
     • Added a Patient Zero Protection Policy Hit alert in Skope IT indicating when a patient zero protection policy is hit.
     • Added support for MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. App Profile based enrollment on iOS with the same keys as VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. Profiles based enrollment.
     • Added a new Dump Log Level on the Netskope Client UI and Client Configuration tenant UI to suppress debug level logs.
     • Added Tunnel Mode option on the webUI for Android Cert-Pinned App exception to tunnel traffic while bypassing the Netskope proxy.

     18 details in Everything

156. Netskope Release Notes Version 112.0.0 Feb 8, 2024 · release notes

     Netskope 112 adds file-based DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. alerts for GitHub, Email Outbound Alert and Continue, GCP inline RBI support, and new policy actions/fields in API Data Protection.

     • Adds file-level DLP alert details (specific file and code block) for GitHub commits
     • Enables Alert and Continue policy evaluation for Email Outbound policies to find additional DLP violations
     • Extends GCP inline browser real-time protection to Kubernetes Engine API, Service Networking, and Cloud Functions
     • Adds Remove inherited collaborators from parent folder in team drive checkbox to Google Drive Policy Wizard under Restrict Access
     • Makes the Action (browser criteria) field mandatory for RBI isolate policies

     +9 more show less

     • Adds Delete policy action for Next Generation API Data Protection on Google Drive, OneDrive, and SharePoint
     • Adds Sharing and Links sections to the Inventory page details panel for OneDrive and SharePoint files
     • Allows SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Decryption policies to filter by OS Family and Access Method on the SSL Decryption Page
     • Extends the limit of unique user groups/OUs in Real-Time and SSL decryption policies from 1024 to 4096
     • Adds filtering capability for MIP (Microsoft Information Protection) alerts and incidents in SkopeIt
     • Includes Useragent string values in Malware and IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. alerts displayed in SkopeIt
     • Displays Steering Configuration details used by the Client on the Devices page
     • Shows MAC addressesMAC addressesA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. of physical network interfaces on the Devices webUI
     • Allows configuring Client event posting frequency to 2, 3, 4, or 5 minutes

     14 details in Everything

157. Netskope Release Notes Hotfix Version 111.1.0 Jan 11, 2024 · release notes

     Netskope 111.1.0 adds HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. auto-detection on non-standard ports and a flag to disable Firefox restart prompts

     • Adds HTTPS traffic auto detection on non-standard ports so the firewall can identify HTTP(s) traffic without specifying custom ports in steering configuration.
     • Adds the disableFirefoxPopup feature flag to allow users to disable the NS Client Firefox browser restart UI pop up.

     2 details in Everything

158. New Features and Enhancements December 14, 2023 Dec 14, 2023 · release notes

     Netskope enhances its cyber tooling by introducing a new CCI Application Category field across key data types to improve application categorization and analytics capabilities.

159. Netskope Release Notes Version 111.0.0 Dec 4, 2023 · release notes

     Netskope v111 adds API token expiry alerts, MIP label integration across all DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. planes, RBI Threat/DLP support, and new SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. findings export.

     • API Data Protection sends in-product banners and daily emails to the instance admin when Salesforce or ServiceNow API tokens expire
     • Slack Enterprise DLP scanning extends into Slack Canvas direct messages, channels, threads, and replies
     • Sensitivity Label Integration for MIP/Purview allows Native reading of MIP labels in Real-time Protection, Endpoint DLP, and API Data Protection policies
     • Behavior Analytics Incident page adds active user timeline filters for 7, 30, or 60 days
     • OpenAI connector supports POST activity visibility via Postman and Visual Studio traffic in Real-time Protection

     +17 more show less

     • Github Copilot support enables visibility into all POST activities diverted to Github copilot via the existing Github connector
     • Microsoft Planner gains Download detection coverage in Real-time Protection
     • GCP Inline Browser support expands real-time protection for Compute, IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., Firestore, Bigtable, Pub/Sub, Network Services, SQL, BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data., Spanner, and Filestore
     • Azure DevOps connector detects new upload navigation activities
     • ChatGPT (GPT-4) support adds Upload, Download, and Copy activity visibility in Real-time Protection policies
     • OpenAI dedicated connector supports Login Failed, Login Successful, and Login Attempt activities for Real-time Protection
     • Data Loss Protection adds VAT number entities for all 27 EU member states, UK, Northern Ireland, and Switzerland
     • Endpoint DLP adds support for WinMagic SecureDoc removable media encryption
     • IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. Settings allows enabling Intrusion Prevention System independently for web, non-web, and cloud app traffic types
     • Next Generation API Data Protection introduces file sharing exposure options: Owner, Internal, All Internal Users, External, and Anonymous
     • Next Generation API Data Protection adds DLP quarantine capabilities for Microsoft OneDrive and SharePoint files
     • Next Generation API Data Protection allows Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. user groups as collaborators in policy wizard pages via SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. integration
     • NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. supports splitting Source IP conditions by User Source IP and Egress Source IP simultaneously in Real-time and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Decryption policies
     • Policy-based Dedicated Egress IP (DEIP) allows selective routing of traffic to a dedicated egress IP based on source/destination criteria
     • SSL Decryption policies can be restricted by specific Access Method and OS types
     • SSPM adds 144 new predefined rules for Microsoft Entra, M365, Salesforce, Google Workspace, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior., and Security Domains
     • SSPM findings export feature allows downloading Raw Findings details in CSV format from the Findings > Raw Findings page

     22 details in Everything

160. Netskope Private Access Publisher Release Notes Version 111.0.0.8350 Dec 2023 · release notes

     Netskope Private Access Publisher 111 adds NewEdge Traffic Management and PRC availability.

     • Publishers now use Netskope Traffic Management to find the optimal datacenter for tunnel establishment.
     • Netskope Private Access is now available in China (PRC).

     2 details in Everything

161. Netskope Release Notes Version 110.0.0 Nov 6, 2023 · release notes

     Netskope v110.0.0 adds Base64 DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. detection, Gmail Next Gen API support, Extended RBI license, and STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. malware reports.

     • Adds DLP detection for files containing Base64-encoded data in the first 4096 characters per RFC 4648
     • Adds Incident ID field to Skope IT Alert Details for IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. events
     • Adds support for Gmail app on the Next Generation API Data Protection platform under Configure App Access > Next Gen > CASB API
     • Adds new dedicated dashboard page and clickable widgets for Gmail visibility under API-enabled Protection > SAAS (NEXT GEN) > Dashboard
     • Allows specifying email parts (headers, subject, body, attachments) for DLP inspection in Email DLP policies

     +7 more show less

     • Introduces Device Classification as a policy element in Endpoint DLP Policies
     • Adds Extended RBI license to isolate up to 25% of web traffic for personal browsing and unmanaged cloud apps (limit 1.5GB/user/month)
     • Adds REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoint to retrieve Malware Details reports in STIX JSON format using file MD5 hash
     • Adds per-tenant domain fronting exception configuration via REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services. in SIN2 for wildcard or full-domain matches
     • Adds ability to save, reuse, and share filters in API-enabled Protection > Findings(SaaS) and Inventory(SaaS) pages
     • Adds support for Workday instance onboarding via Settings > Configure App Access > Next Gen > Security Posture
     • Adds 36 new predefined SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. rules covering Google Workspace, Microsoft Entra, Okta, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior., Device Security, IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., and Authentication categories

     12 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The Gmail app is migrated from Configure App Access > Classic > SaaS to Configure App Access > Next Gen > CASB API; it will no longer appear under the Classic path.
     • !Workday instance configuration has moved from Settings > Configure App Access > Classic > SaaS to Settings > Configure App Access > Next Gen > Security Posture.
162. Netskope Cloud Exchange Release Notes Version 5.0.0 Nov 3, 2023 · release notes

     Netskope Cloud Exchange 5.0 adds active-active HA clustering, VM deployment support (OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles./VMDK/AMI/VHDX), and diagnostic analytics integration

     • Enabled High Availability with Active-Active clustering in Cloud Exchange, allowing deployment with a minimum of 3 nodes
     • Introduced Cloud Exchange deployment as a virtual machine, supporting various formats including OVA, VMDK, AMI and VHDX
     • Added Netskope Analytics details into Diagnostic script which will be helpful for troubleshooting

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The Total WebTx Sent to External Receiver field on the CLS Dashboard is renamed to Total WebTx Sent to Storage Buckets
     • !The Page size settings in CLS Module Settings have been removed
163. New Features and Enhancements November 2, 2023 Nov 2, 2023 · release notes

     Netskope adds fixed name, ID, and company fields to application metadata and updates DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. field definitions.

     • Adds Application Fixed Name, Application ID, and Application Company Name fields available on Page Events, App Events, and Alerts for querying cloud application metadata
     • Updates the definition of the DLP Failed Reason field in Application Events to explicitly surface specific scan failure causes like file-size limits

     2 details in Everything

164. Netskope Private Access Publisher Release Notes Version 110.0.0.8301 Nov 2023 · release notes

     Netskope Private Access Publisher 110.0.0.8301 increases default storage to 16GB and enables unattended kernel upgrades for OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles..

     • Increases the default storage capacity for new OVA/VHDX publisher images to 16GB
     • Enables unattended kernel upgrades on fresh OVA installs via the included linux-image-generic package

     2 details in Everything

165. New Features and Enhancements October 18, 2023 Oct 18, 2023 · release notes

     Netskope adds User Agent field to Application Events data collection under the User field group for advanced analytics.

166. Netskope Release Notes Hotfix Version 108.1.2 Oct 18, 2023 · release notes

     Netskope adds Traffic Steering support for macOS Sonoma v14.

167. Netskope Release Notes Hotfix Version 109.1.0 Oct 16, 2023 · release notes

     Netskope Client for macOS now supports Sonoma v14.

     • Support for macOS Sonoma v14

     1 detail in Everything

168. Netskope Release Notes Version 109.0.0 Oct 5, 2023 · release notes

     Netskope 109 adds Endpoint DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Printer Control, Next Gen API DLP email notifications, and SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Okta support

     • Adds Printer Device Control for Endpoint DLP on Windows and macOS to restrict or allow printer access based on attributes
     • Adds Email Notification option in Next Generation API Data Protection policy wizard under Profile & Action
     • Adds Okta app support in SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM) with predefined rules
     • Adds Restrict Access to Internal Collaborators remediation action for GitHub incidents in Next Gen API Data Protection
     • Adds support for Like and Unlike activities in LinkedIn Real-time Protection

     +8 more show less

     • Adds OneDrive DLP support for files ≤128MB uploaded to the root folder via multipart upload
     • Adds Facebook Ads Manager multi-part support for chunked file upload policies
     • Updates CCI categories for Google Keep, Microsoft Sway, and various GCP services
     • Adds FIDO2FIDO2The open standard behind passkeys and hardware security keys, where a website checks a signature from the user's device instead of a password. Because the key is bound to the site, phishing pages cannot use it. authentication support via external browser based IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. mode in Netskope Client
     • Enables IPSec steering method generally availability in China DC (PVG1, PVG2, PEK1, SZX1)
     • Adds SAML Authentication Refresh Interval setting to allow intervals less than a day in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions.
     • Adds ability to create Real-time Protection and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Decryption policies based on Source IP (Egress) and Source IP (User) simultaneously
     • Disables longest prefix match for custom URL lookup in NG-SWG via new configuration option

     13 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The Exclude Users and Exclude User Profile options under Classic API Data Protection Policy for GitHub are no longer displayed or functional due to UI correction
169. New Features and Enhancements September 7, 2023 Sep 7, 2023 · release notes

     Netskope adds UBA dashboard and enhances DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. dashboards with hour-resolution widgets

     • Adds User Behavior Analytics Dashboard to the Netskope Library for monitoring UBA alerts and refining policies
     • Enhances Activity in Non-Corporate Instances and DLP Violations per App Instance dashboards to display top ten results only
     • Changes Average Time to Close and DLP Incidents – Resolution Time widgets to use hours instead of days for precise resolution time readings

     3 details in Everything

170. Netskope Release Notes Version 108.0.0 Sep 5, 2023 · release notes

     Netskope 108 adds GenAI constraints, AODocs RaaS, NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. file type detection, and SkopeIT Instances tab.

     • Adds instance detection and from user constraints to ChatGPT, Beautiful.ai, Jasper AI, and Google Bard CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. inline connectors for granular policy control
     • Adds dedicated AODocs app connector with create, copy, delete, edit (DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest.), share, move, and login activity visibility
     • Adds Reverse Proxy as a Service (RaaS) for AODocs to control usage by unmanaged devices
     • Introduces Instances tab in SkopeIT > Applications > Instances for consolidated app instance discovery and tagging
     • Adds custom DNS server configuration in Cloud Firewall DNS Profile to override or fallback DNS servers

     +10 more show less

     • Supports per-user STAgent installs for Endpoint DLP multi-user environments
     • Generates alerts when severity thresholds are not met in EPDLP
     • Adds Critical risk level to Risk and Permissions section in Inventory menu under Resources tab
     • Forces macOS clients using Private Access to fall back on regular DNS resolution regardless of DNS-over-TLSDNS-over-TLSA protocol that wraps DNS queries inside a TLS connection on port 853, preventing eavesdroppers from reading or tampering with hostname lookups. Cyber tools use it to keep reconnaissance and C2 traffic from leaking in plaintext. capability
     • Updates Windows Client registry to report Private Access tunnel status
     • Removes API Enabled Protection (Next Gen) action button from DLP > Incidents Actions, grouping classic and next-gen actions under Restrict Access
     • Introduces new dashboard for Microsoft 365 OneDrive and SharePoint in API-enabled Protection > SAAS (NEXT GEN) > Dashboard showing file exposure and DLP violations
     • Adds enhanced inline File Type Detection to NG SWG policies allowing allow/block by file category (e.g., binary, executable) or type with default size up to 256 MB (400 MB if large file feature enabled)
     • Increases maximum file size criteria in inline policies from 1.9 GB to 1024 GB
     • Adds group_filter and user_filter options to Directory Importer for Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. V2

     15 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !API-enabled Protection > Security Posture (Next Gen) is renamed to Security Posture SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. in navigation and header; Policies > Security Posture > Next Gen tab is now SaaS tab.
     • !API-enabled Protection > Security Posture (Classic) is renamed to Security Posture IaaS in navigation and header; Policies > Security Posture > Classic tab is now IaaS tab.
     • !SaaS Security Posture Management v1 is deprecated and no longer supported.
     • !Object value field for file name in Google Drive Edit activity is deprecated.
171. Netskope Release Notes Hotfix Version 107.1.0 Aug 17, 2023 · release notes

     Netskope 107.1.0 adds Endpoint SD-WANSD-WANSoftware-defined wide-area networking: an approach that decouples WAN routing logic from physical hardware, letting operators centrally control traffic paths across MPLS, broadband, and LTE links to reduce cost and improve resilience., RBI threat/DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. integration, custom image classifiers, NG-SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. for Confluence/Jira/Workspace, and IP traffic IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection..

     • Endpoint SD-WAN integration with Netskope Client enables unified SASESASEA network architecture model combining wide-area networking and network security functions into a single cloud-delivered service, letting cyber tools enforce consistent policy regardless of where users or workloads sit. client deployment for remote users on Windows
     • Bandwidth Control Service allows rate limiting bandwidth-intensive applications for web traffic on IPSec/GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. tunnels
     • Intrusion Prevention Support (IPS) for non-web traffic within Cloud Firewall
     • Custom Image Classifier in DLP Profiles allows uploading image files to train ML-based detection and adjusting thresholds
     • Next Generation SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management adds support for Atlassian Confluence, Atlassian Jira, and Google Workspace

     +4 more show less

     • 3rd-party Connected Apps Risk Profiling in NG-SSPM Overview page widget categorizes connected apps by risk level
     • RBI supports DLP and Threat Protection policies for file upload/download traffic through Remote Browser Isolation
     • Configurable File Uploads and Downloads settings in RBI templates allow control over isolated browsing sessions
     • RBI Template Enhancements reorganize settings into Isolation Indicators and Isolation Settings groups

     9 details in Everything

172. Netskope Release Notes Version 107.0.0 Aug 3, 2023 · release notes

     Netskope 107.0.0 adds 140+ GCP app connectors, flexible dynamic steering, multiple IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management., and new DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. entities for Mexico and India.

     • Adds support for over 140 Google Cloud Platform (GCP) app connectors covering API and CLI traffic to GCP services.
     • Enables Flexible Dynamic Steering with a new steering traffic mode of None that establishes a tunnel without steering traffic.
     • Introduces multiple SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. Identity Provider (IdP) support for forward proxy authentication and Single Sign-On (SSO) to the management console.
     • Adds DLP entities for Mexican bank account numbers (Deposit Account Numbers (MX) / Bank Account Terms (MX)).
     • Supports detection of International Bank Account Numbers (IBANs) for 18 new countries including Angola, Russia, and Sudan.

     +23 more show less

     • Adds support for India PAN tax IDs with entities: Taxpayer ID Numbers (IN; PAN), Corporate Tax ID Numbers (IN; PAN), and Corporate Tax ID Numbers (IN; STRN).
     • Introduces a new Connected App Risk Assessment Catalogue in CCI for OAuth apps in Google Workspace and Microsoft App Source.
     • Adds Global Risk Weight Customisation for bulk CCI attribute weightage via the Global Risk Weight setting on the CCI page.
     • Adds support for Multipart Upload inspection for Adobe Creative Cloud applications.
     • Enables GCP Storage constraints for the Copy activity to restrict file movement to allowlisted storage buckets.
     • Adds reverse proxy as a service (RaaS) capabilities for Appsheet management by un-managed devices.
     • Introduces Generative AI connectors for HeyGen, Jasper, Notion AI, and Bing AI with monitoring for Post, Upload, and Download activities.
     • Adds support for ChatGPT Share and Preview activities in CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. Real-time Protection.
     • Enhances Gmail DLP to inspect the create draft activity when more than 100 bytes of data is added/pasted.
     • Supports Restrict Access to Internal Collaborators remediation action for GitHub in Next Generation API Data Protection.
     • Enables reading Google badged labels in Google Drive by granting new OAuth scopes: https://www.googleapis.com/auth/drive.labels and https://www.googleapis.com/auth/drive.admin.labels.
     • Extends PCI-DSSPCI-DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. v4.0 support for Microsoft 365 in Next Generation SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management.
     • Provides user visibility for Zoom and ServiceNow apps in Next Generation SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications..
     • Adds report customization options to skip passed findings and generate reports at a per App suite basis in SSPM.
     • Displays connected app risk scores and permissions via the Risk & Permissions section in the Resource Details panel of the Inventory.
     • Introduces Extended RBI license supporting up to 25% web traffic isolation for unmanaged websites and cloud apps.
     • Allows Bogon IP inclusion in steering configuration exceptions by searching Bogon in Source/Destination Locations search bar.
     • Implements Unique Device ID indexing on the Device Status page to ensure single-user records per device.
     • Moves Client Configuration UI navigation from Settings > Devices to Settings > Security Cloud Platform > Netskope Client > Client Configuration.
     • Enables IPSec/GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. CSV import with additional optional fields beyond mandatory ones.
     • Allows setting dedicated Egress IP policies based on user, user groups, organizational units, source/destination locations, domains, apps, app suites, and categories.
     • Adds Generic List and Domain Fronting Profile REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services. for wildcard or full-domain match to domain fronting protection.
     • Fills x-ssl-policy-name and x-policy-name separately in Transaction Events when SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. policy hits access control realtime policy.

     28 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The UI navigation path Settings > API-enabled Protection has changed to Settings > Configure App Access.
     • !The Data Source feature in Settings > General > Data Source is deprecated.
173. Netskope Digital Experience Management Release Notes for August 2023 Aug 2023 · release notes

     Netskope DEM adds Alerts framework for subscribing to key events and a User Overview dashboard for troubleshooting user experiences.

     • Adds the Alerts framework, enabling subscription to key Network, Platform, and Private Application events sent to configurable destinations

     1 detail in Everything

174. Netskope Private Access Publisher Release Notes Version 107.0.0.8134 Aug 2023 · release notes

     Netskope Private Access Publisher enforces TLS 1.2 for artifact downloads

     • publisher package artifact downloads now use TLS 1.2 only security

     1 detail in Everything

175. New Features and Enhancements July 13, 2023 Jul 13, 2023 · release notes

     Netskope Insider Threat Dashboard removes Trend lines; Threat Protection widget filter now includes CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. API Connector traffic

     • Removes the Trend line from widgets in the Insider Threat Dashboard (Uploads to Non-Corporate instances, Bulk Upload/Download Alerts, Shared Credentials, User Coaching Page Proceed Responses, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Violations, Malicious Site Alerts, Compromised Credentials Alerts)
     • Modifies the widget-level filter access method in Threat Protection Dashboard widgets to include all CASB API Connector traffic (Malware detections in managed apps, Top 10 Users with Malware in Managed Apps, Top 10 Managed Apps Containing Malware, Malware in Managed Apps Details)

     2 details in Everything

176. Netskope Release Notes Version 106.0.0 Jul 6, 2023 · release notes

     Netskope 106 adds UCI threshold alerts, per-app UEBA exclusion, new GenAI connectors, and API DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. remediation actions.

     • Adds User Confidence Index (UCI) threshold alerting under Incidents > Behavior Analytics to trigger UEBA alerts when user confidence drops below a configurable value.
     • Supports app exclusion in Application Filter for predefined and custom UEBA policies to exclude specific applications from evaluation.
     • Dedicated Inline Connector for Generative AI Apps now supports Beautiful.ai, Perplexity AI, and Chat sonic, Claude, chatspot.ai (Hubspot), d-id.com, Dreamstudio, leonardo.ai, Cohere, Copy.ai.
     • Supports granular instance detection for the ChatGPT dedicated CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. inline connector to create instance-based policies mapped to login domains.
     • Extends manual remediation actions on the Incidents > DLP page for Next Generation API Data Protection, including Change owner, Restrict access, and Revoke sharing actions.

     +5 more show less

     • Shows a summary of 3rd-party connected apps in the Overview page widget under API-enabled Protection > SECURITY POSTURE (NEXT GEN).
     • Adds support for categorizing SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. rules and findings on MITRE ATT&CK for SaaS and Security Domains within the Next Generation SSPM policy wizard.
     • Supports TLS1.3 for Endpoint DLP client communication with datacenter APIs.
     • Allows disabling longest prefix match in NG-SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. when matching incoming URLs against URL lists via a feature flag.
     • Adds Entity Obfuscation support for custom entities created on the Entities tab, storing obfuscated content in the forensic folder.

     10 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The App Tag criteria for Real-time Protection was renamed to CCI App Tag. A similar change was made for Skope IT, where the Tag filter was renamed to CCI App Tag.
177. Netskope Digital Experience Management Release Notes for July 2023 Jul 2023 · release notes

     New dashboard feature providing visibility into bandwidth consumption metrics.

     • Adds the Bandwidth Consumption dashboard to visualize bandwidth usage across source IPs, users, Netskope POPs, and access methods.

     1 detail in Everything

178. Netskope Private Access Publisher Release Notes Version 106.0.0.8102 Jul 2023 · release notes

     Netskope Private Access Publisher adds support for feature flags to enable/disable features without re-enrollment

179. New Features and Enhancements June 30, 2023 Jun 30, 2023 · release notes

     Adds RBI Dashboard and Traffic Type filter to Private Application Overview for enhanced visibility.

     • Introduces a new Remote Browser Isolation (RBI) Dashboard in the Netskope Library to monitor isolated web traffic usage and refine RBI policies
     • Enables filtering by Traffic Type in the Private Application Overview dashboard to distinguish between Netskope Private Access (NPA) and Cloud Firewall (CFW) events

     2 details in Everything

180. New Features and Enhancements June 15, 2023 Jun 15, 2023 · release notes

     Netskope adds AI Usage dashboard and new organization/user group filters to existing dashboards.

     • Adds the AI Usage dashboard for visibility into AI app access counts, user activities, and related traffic controls
     • Adds Organization Unit filter to the DATA GOVERNANCE & PRIVACY DASHBOARD
     • Adds User Group filter to the DATA GOVERNANCE & PRIVACY DASHBOARD

     3 details in Everything

181. Netskope Cloud Exchange Release Notes Version 4.2.0 May 24, 2023 · release notes

     Netskope Cloud Exchange 4.2.0 adds secret manager support, CTEP alert ingestion, is empty filter, and horizontal scaling for worker containers.

     • Added support for HashiCorp Vault to store API tokens and passwords via secrets_manager configuration in General Settings
     • Added is empty operator to all filter query construction for filtering null values
     • Added support for horizontal scaling of worker containers in OpenShift and Kubernetes deployments
     • Added CTEP alert type ingestion into Cloud Log Shipper and Cloud Ticket Orchestrator modules
     • Added NetSkoPEsso endpoint for Support and service team SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login workflow

     5 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Removed the unused watchtower service from docker-compose.yml for on-premise deployments
182. New Features and Enhancements May 18, 2023 May 18, 2023 · release notes

     Adds User Investigation Dashboard with user stitching, Netskope Library widget tags, and QBR dashboard updates

     • Introduces the User Investigation Dashboard which utilizes User stitching to tie together multiple user identifiers for a complete view of user behavior and data flow.
     • Adds tags to Netskope Library widgets to help search and filter widgets when building dashboards.
     • Changes the default time range for Insights dashboards on the Overview page to Last 7 Days and defaults filters to Collapsed.
     • Updates the Cloud Risk Assessment – QBR dashboard to use Pivot Rank for widgets below and modifies the Managed/Sanctioned Apps (Yes/No) filter to a single value filter type.

     4 details in Everything

183. New Features and Enhancements April 20, 2023 Apr 20, 2023 · release notes

     Adds JA3JA3A method for fingerprinting TLS clients by hashing fields from the ClientHello message, producing a short string that identifies the TLS library or application making a connection regardless of IP or port./JA3S fields to Application Events and Alerts data collection in Netskope Library.

184. Netskope Library Dashboard Updates April 12, 2023 Apr 12, 2023 · release notes

     Dashboard UX enhancements include timezone defaults, unit changes, and filter updates across Cloud Risk Assessment and SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Visibility dashboards

     • Adds access_method field to the DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. policy details widget in the Cloud Risk Assessment dashboard
     • Changes default time range for all Netskope Library dashboards to last 7 days to improve loading performance

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Changes unit from GB to MB for Trend of Uploads Over Time by CCL, Top Non Enterprise-Ready Cloud Categories by Uploads, and Top Non Enterprise-Ready Apps by Uploads widgets
     • !Renames Private Application Discovery dashboard title to Private Application Overview
185. New Features and Enhancements March 30, 2023 Mar 30, 2023 · release notes

     DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Incident Monitoring dashboard improvements including new fields and aggregation logic

     • DLP Incidents Monitoring Dashboard now aggregates DLP violation counts by the Object_id field for consistency with the admin console UI.
     • DLP Incidents Monitoring Dashboard trend visualization now includes count of users and objects in addition to incident counts by creation date.
     • DLP Incidents – Resolution Time table adds Acting User and Assignee fields to the visible columns.

     3 details in Everything

186. New Features And Enhancements for March 3, 2023 Mar 3, 2023 · release notes

     Netskope Advanced Analytics introduces forecasting visualizations, Google Maps integration, dashboard tile controls, and enhanced table chart options.

     • Enables forecasting within Visualizations to predict future trends
     • Integrates Google Maps for geospatial data visualization in Visualizations
     • Adds ability to drill into individual data points within Visualizations
     • Allows adding new tiles to an existing dashboard
     • Permits moving dashboard tiles to the top or bottom position

     +5 more show less

     • Enables rearranging and resizing tiles on dashboards
     • Changes Radio filter options to show any value at the top of the list
     • Supports chart column resizing in Table Charts
     • Adds column header tooltips for additional context in Table Charts
     • Uses data bars to create table calculations

     10 details in Everything

187. Netskope Digital Experience Management Release Notes for March 2023 Mar 2023 · release notes

     Network Steering widgets add time-series IPSec/GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. tunnel health monitoring to DEM UI

188. Netskope Private Access Publisher Release Notes Version 102.0.0.7784 Mar 2023 · release notes

     Netskope Private Access 102.0.0.7784 adds support for enabling and disabling publisher-specific feature flags.

     • feature flags mechanism added to enable or disable Publisher specific features

     1 detail in Everything

189. Netskope Cloud Exchange Release Notes Version 4.1.0 Feb 14, 2023 · release notes

     Cloud Exchange 4.1.0 adds module-level RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists., Risk Exchange user/host purging, and K8s/Openshift HELM chart support.

     • Added introduction of RBAC for user access control at the module level
     • Added support for purging Risk Exchange users and hosts
     • Added support for Openshift container platform and Kubernetes container orchestration platform using HELM charts
     • Added tenant-level filtering by alert type for incoming alerts
     • Added prefiltering support for Ticket Orchestrator alerts

     +1 more show less

     • Changed Netskope Tenant configuration to have the V2 API Token as a mandatory input

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Renamed the module Cloud Risk Exchange to User Risk Exchange.
190. Netskope Private Access Publisher Release Notes Version 101.0.0.7619 Feb 2023 · release notes

     Adds PUBLISHER_USER env var for script-based install user assignment in Netskope Private Access Publisher v101.0.0.7619

     • Adds PUBLISHER_USER environment variable support to the script-based installation, allowing users to assign a desired username during deployment

     1 detail in Everything

191. Netskope Digital Experience Management Release Notes for February 2023 Feb 2023 · release notes

     Adds IPSec and GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. throughput time-series widgets to Network Steering section.

192. Netskope Cloud Exchange Release Notes Version 4.0.0 Oct 18, 2022 · release notes

     Netskope Cloud Exchange 4.0 adds ARE module, dataexport APIv2 support, and tag manipulation via CLI only

     • Adds Application Risk Exchange (ARE) module for calculating risk exchange scores.
     • Adds support for dataexport (aka Iterator) APIv2 log retrieval endpoints.
     • Adds functionality to append new tags during POST or PATCH API calls to CTE Indicators.
     • Enables sending raw data without transformation to SIEMsSIEMsSecurity Information and Event Management platforms that collect, normalize, and correlate log data across an infrastructure so cyber tools can detect threats and trigger alerts from a central point. via Log Shipper.

     4 details in Everything

193. Netskope Private Access Publisher Release Notes Version 99.0.0.7505 Oct 2022 · release notes

     Netskope Private Access Publisher now verifies minimum disk space before software upgrades to prevent failed updates

     • Adds pre-upgrade disk space verification for NPA Publisher software updates with Admin UI and email notifications

     1 detail in Everything

194. On-Premises Appliance Release Notes Version 93.0.0 Oct 2022 · release notes

     Netskope On-Premises Appliance v93.0 adds SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. auth for DPoPDPoPAn IETF standard that binds an OAuth access token to a specific client's cryptographic key pair, so a stolen token cannot be replayed by an attacker who lacks the matching private key. explicit proxy, upstream proxy credentials for OPLP/CDPP, and HTTP2/DPoP feature parity.

     └──▷ USE IT
     Enable SAML login for users accessing the explicit proxy on a DPoP appliance
     shell copy

     configure
     set dataplane proxy-mode explicit saml-auth enable true

     • Adds set dataplane proxy-mode explicit saml-auth enable true CLI command to enable SAML authentication on a DPoP appliance configured in explicit proxy mode
     • Adds set management-plane upstream-proxy-server username <user-name> and set management-plane upstream-proxy-server password <password> CLI commands to configure basic upstream proxy authentication for appliances in OPLP and CDPP modes
     • Extends support for HTTP2, enhanced custom URL lists, SAML forward proxy auth, HTTP header policies, SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. decryption by apps/app suites, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. timeout on exceptions, TSS on browse, policy lookup based on telemetry app/referrer, and non-standard ports to appliances configured in DPoP mode

     3 details in Everything

195. Virtual Appliance Release Notes Version 93.0.0 Oct 2022 · release notes

     Virtual Appliance 93.0.0 adds SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. auth and upstream proxy settings to CLI, extends 8 cloud features to DPoPDPoPAn IETF standard that binds an OAuth access token to a specific client's cryptographic key pair, so a stolen token cannot be replayed by an attacker who lacks the matching private key..

     └──▷ TRY IT
     Enable SAML login for a DPoP explicit proxy appliance using your existing IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
     copy

     $ configure
     set dataplane proxy-mode explicit saml-auth enable true

     • Adds set dataplane proxy-mode explicit saml-auth enable true command to enable SAML authentication on DPoP appliances in explicit proxy mode
     • Adds set management-plane upstream-proxy-server username <user-name> and set management-plane upstream-proxy-server password <password> commands for upstream proxy basic auth in OPLP and CDPP modes
     • Extends support for Enhanced Custom URL list, HTTP2, policy lookup based on telemetry app and referrer, non-standard port, SAML forward proxy auth, HTTP header policies, SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. decryption by apps/app suites, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. timeout on exceptions, and TSS on browse to DPoP appliances

     3 details in Everything

196. Netskope Private Access Publisher Release Notes Version 98.0.0.7378 Sep 2022 · release notes

     Netskope Private Access Publisher 98.0.0.7378 adds Ubuntu audit log rotation and systemd-resolved bypass for .local DNS.

     • Adds support for *.local DNS requests on Ubuntu-based publishers by bypassing the default systemd-resolved service

     1 detail in Everything

197. Netskope Private Access Publisher Release Notes Version 97.0.0.7294 Aug 2022 · release notes

     Netskope Private Access Publisher 97.0.0.7294 adds Azure Marketplace availability and new system metrics.

     • Publisher is now available in the Azure marketplace for deployment
     • Publisher collects Host OS version, Kernel version, Docker kernel version, File Descriptor (FD) count, Network state, TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. Connections/UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. flows, and load average metrics
     • Publisher supports peak throughput of 500 Mbps

     3 details in Everything

198. Netskope Cloud Exchange Release Notes Version 3.4.0 Jul 26, 2022 · release notes

     Netskope Cloud Exchange 3.4.0 adds Syslog Service Plugin, nested Business Rules folders, and Ubuntu 20.04 LTS support

     • Adds Syslog Service Plugin for exporting Cloud Exchange logs
     • Adds Nested folder view for Business Rules to enable users to better organize complex rule sets
     • Adds Formal support for Ubuntu 20.04 LTS
     • Adds new Plugins: AlienVault, Arcsight, LogRhythm, Solarwinds (Log Shipper); CrowdStrike (Risk Exchange)

     4 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Upgrading from versions older than 3.3.3 requires using the CLI setup script; upgrading via UI leaves global environmental variables unset, breaking proxy communication with docker and github
199. Netskope Cloud Exchange Release Notes Version 3.3.3 Jul 5, 2022 · release notes

     Netskope Cloud Exchange 3.3.3 adds container-wide proxy config, TLS v1.2 support, and Mandiant/Digital Shadows integrations.

     • Added container wide proxy configuration support via the updated setup script, allowing proxy settings to propagate to all containers
     • Added Error Code column and verbose log details on the Logging page for troubleshooting
     • Added support for TLS v1.2 communication with Cloud Exchange
     • Added new plugin Mandiant for Threat Exchange supporting URL, MD5, FQDN, IPv4, and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. indicators
     • Added new plugin ThreatConnect for Threat Exchange enabling bilateral indicator sharing

     +1 more show less

     • Added new plugin Digital Shadows for Threat Exchange pulling URL indicators into CE

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Port 5672 is no longer exposed externally but is only used for RabbitMQ to core container communications.
200. Netskope Cloud Exchange Release Notes Version 3.3.1 May 16, 2022 · release notes

     Netskope Cloud Exchange 3.3.1 adds deduped ticket counts, business rule search/copy UI, date between filter, and sortable columns

     • Added Admin is prompted for an option email address while initial installation to collect admin contact during setup.
     • CTO business rules Test now displays the count of deduped tickets, providing immediate feedback on rule impact.
     • Added search functionality for business rules to locate specific configurations quickly.
     • Added additional columns to the business rule tables for more granular visibility.
     • Added button for copying business rules to streamline configuration duplication.

     +2 more show less

     • Added between filter operator for easier filtering between two dates.
     • Most columns are now sortable, allowing users to organize business rule data.

     7 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Renamed Polling Interval to Synchronize Interval.
201. Netskope Cloud Exchange Release Notes Version 3.3.0 Apr 18, 2022 · release notes

     Netskope Cloud Exchange 3.3.0 adds Risk Exchange score support in Ticket Orchestrator and WebTx v2 for Syslog plugins.

     • Enables use of the Risk Exchange aggregate score in Ticket Orchestrator custom messages via business rules
     • Adds configuration field to the Ticket Orchestrator query builder
     • Supports WebTx v2 for Syslog plugins (generic Syslog, Rapid7, LogRhythm plugins)
     • Red Hat Enterprise Linux 8.x support on hosts with Podman fully installed
     • Adds Task Completion Time column on the Tasks page

     +1 more show less

     • Adds auto-refresh option for Cloud Exchange logs in the UI

     6 details in Everything

202. Netskope Private Access Publisher Release Notes Version 94.0.0.6867 Apr 2022 · release notes

     Adds Ubuntu 20.04 as a supported platform for Netskope Private Access Publisher deployments.

     • Deploys NPA Publishers on Ubuntu 20.04 with feature parity to CentOS-based publishers.

     1 detail in Everything

203. Netskope Private Access Publisher Release Notes Version 1.4.6526 Dec 2021 · release notes

     Netskope Private Access Publisher 1.4.6526 adds NAT mode support and an Upgrade menu to the Wizard.

     • Adds NAT mode transmission of traffic to Private Apps in the publisher configuration, reducing port consumption

     1 detail in Everything

204. Netskope Private Access Publisher Release Notes Version 1.4.6431 Oct 2021 · release notes

     NPA Publisher v1.4.6431 adds Cloud Stitcher IP display in wizard for troubleshooting

     • Netskope NPA Publisher Wizard now displays the currently connected Netskope Cloud Stitcher IP address

     1 detail in Everything