Unanswered questions

Dear Netskope Team,As I understand it, AI Post and AI Response activities should be generated when a user interacts with an AI assistant in a SaaS application such as Microsoft 365 Copilot.However, when testing M365 Copilot, I can only see Post and Response activities in Application Events and do not see any AI Post activity.Is this expected behavior, or should AI Post activity also be generated for M365 Copilot?Thank you in advance.

Hi We have bypassed outlook.com and created a cert pinned app - wbxcoiex.exe,searchprotocolhost.exe,msedgewebview2.exe,winword.exe,outlook.exethese are the URLS we have added: outlook.com, outlook.office365.com, office365.com, outlook.office.com, groupsapi-prod.outlookgroups.ms, groupsapi2-prod.outlookgroups.ms, groupsapi3-prod.outlookgroups.ms, groupsapi4-prod.outlookgroups.ms, outlookgroups.ms, outlook.office365.de, outlook.office.de, outlook.de, office365.de, attachment.outlook.office365-net.de, attachment.outlook.office.de, attachments.office.net, attachments.office365.net, graph.microsoft.com  However, users on Netskope get a popup asking for their password throughout the day.  We are in the middle of a rollout and its only Netskope users that have this issue. See below popup   Are there any recommendations on how to handle outlook exceptions as we assume that something is getting inspected and Microsoft doesn’t like that. 

Hi Team, We needed to export the list of Certificate Pinned applications (including custom)and steering configuration list where these are part of exception. There is no option available . Please suggest where to export such details.

Hi,When we publish applications using classic authentication, we do not encounter any issues. However, when we publish applications that are federated with our Identity Provider (IdP), after the authentication process completes and then the user is redirected back to the application's original URL, the browser displays an access error: ERR_NAME_NOT_RESOLVED Does anyone know if any additional configuration is required for this type of access to work? Thx 

Hello,we currently have 2 publishers at our site. They frequently connect to different NetSkope datacenters (A and B) with similar RTT, which is working as designed. However, the majority of our users are routed to datacenter C, and here we are noticing a discrepancy. Around 80% of the traffic is being routed through only one publisher because it is the only one falling within the (Latency range: 0-31 ms). It seems that even a minimal difference in latency - if it unluckily falls near the threshold of this range - causes the traffic to skew heavily toward a single publisher. Do you have any recommended solutions or workarounds for this behavior?

Hi Team,I do not believe "Fallback Action" is available as a standalone filter in Netskope reporting/search. Based on Netskope documentation, a fallback action is triggered when the content inspection engine cannot complete analysis (for example, file size limit exceeded, scan timeout, or internal scanning error), and the system applies the configured fallback action (Allow/Alert/Block). If the goal is to determine how many fallback actions occurred historically, we may need to look for the resulting events/actions rather than filter directly on "Fallback Action." I have not found evidence that Netskope provides a dedicated Fallback Action filter in the UI. As an alternative, it may be possible to identify these events through SkopeIT/Event exports or log analysis by looking for scan failures, timeout conditions, file size limit exceedances, or other fallback-related indicators if those fields are logged in our environment.Has anyone identified a field in SkopeIT, Reporting, or exporte

Hello I would be very interested by all localisation of the “stichers” in NETSKOPE worldWe have subsidarie in US (Philadelphia)We have local Publisher on Philadelphia Experience with NPA is not goodThe network path is : User (near Philadephia) > US-PHIL1 (GW) > US-DEN1 (Sticher) > Publisher (Philadelphia) > local ressource26+43+51Minimum 120 RTT time up to Publisher !!! FromHow having better time ?Eric  

We have the AI Security features turned on for our tenant, but the only people who can see these features are tenant admins.  Many of our team are in the Security Admin role, and the only feature they can see is the AI Red Teaming section (No AI Command Center, AI Sec Ops, etc).  This feels like a misconfiguration.  While I could go in and clone our Security Admin role and add the features in ad hoc, there are two problems with this;We’ve never had to do anything like this in the past for things like DEM, IPS or other add on features.  The ability to at least view these new items was there for everyone to see. There is no “AI Security” feature I can just check a box for and add the visibility to the Security Admin role without a bunch of trial and error.  I would have to go through the 3 pages of potential check boxes and determine what is giving them the access and what isn’t.  Not efficient or convenient.Is there any way to have the AI Security features turned on from the Netskope si

Has anyone faced any problem related to email DLP where any code can be leaked via email if it is tagged between HTML tags?

Under what categories should a Custom Cloud App fall under ? Does the categorization rely on the domains that we provide when defining the application?

Hi Team, Can you please help to allow login to Codex Enterprise application only and block rest? I tried using the Header insertion but it's not working.