close
close
Your Network of Tomorrow
Your Network of Tomorrow
Plan your path toward a faster, more secure, and more resilient network designed for the applications and users that you support.
          Experience Netskope
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            A Leader in SSE. Now a Leader in Single-Vendor SASE.
            A Leader in SSE. Now a Leader in Single-Vendor SASE.
            Netskope debuts as a Leader in the Gartner® Magic Quadrant™ for Single-Vendor SASE
              Securing Generative AI for Dummies
              Securing Generative AI for Dummies
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                Modern Data Loss Prevention (DLP) for Dummies
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  Modern SD-WAN for SASE Dummies Book
                  Modern SD-WAN for SASE Dummies
                  Stop playing catch up with your networking architecture
                    Understanding where the risk lies
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        The 6 Most Compelling Use Cases for Complete Legacy VPN Replacement
                        The 6 Most Compelling Use Cases for Complete Legacy VPN Replacement
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmolive Safeguards its "Intellectual Property” with Smart and Adaptable Data Protection
                          Colgate-Palmolive Safeguards its "Intellectual Property” with Smart and Adaptable Data Protection
                            Netskope GovCloud
                            Netskope achieves FedRAMP High Authorization
                            Choose Netskope GovCloud to accelerate your agency’s transformation.
                              Let's Do Great Things Together
                              Netskope’s partner-centric go-to-market strategy enables our partners to maximize their growth and profitability while transforming enterprise security.
                                Netskope solutions
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Netskope Technical Support
                                  Netskope Technical Support
                                  Our qualified support engineers are located worldwide and have diverse backgrounds in cloud security, networking, virtualization, content delivery, and software development, ensuring timely and quality technical assistance
                                    Netskope video
                                    Netskope Training
                                    Netskope training will help you become a cloud security expert. We are here to help you secure your digital transformation journey and make the most of your cloud, web, and private applications.

                                      The Most Critical CASB Use Cases in the Market Today: Detect Anomalies Such as Excessive Downloads, Uploads, or Sharing Within Both Sanctioned and Unsanctioned Cloud Services

                                      Oct 27 2016
                                      Tags
                                      CASB
                                      Cloud Best Practices
                                      Cloud Security
                                      Tools and Tips

                                      As enterprises adopt cloud services and seek out a cloud access security broker (CASB), their use cases are maturing. They are moving beyond log-based discovery, and even beyond just their sanctioned cloud services, and looking to govern usage, secure data, and protect against cloud threats across all services.

                                      Netskope customers have deployed our ALL-MODE architecture (with nearly three-quarters of them going beyond a single mode) to achieve their most critical use cases. We have noted 15 of these use cases in our recent e-book, The 15 Critical CASB Use Cases, and we’re highlighting them and more (and we want to hear from you too!) in this blog series.  

                                      Here’s use case #13: Detect anomalies such as excessive downloads, uploads, or sharing within both sanctioned and unsanctioned cloud services.

                                      Usage anomalies can signal things like risky or non-compliant behavior, data exfiltration, or even the presence of malware. It’s useful to see (and be alerted to) users’ behavior against a baseline of normal activity. Netskope uses both supervised and unsupervised machine learning, as well as rules, to identify and alert on anomalies.

                                      One critical difference between Netskope and most other CASBs is that we enable our customers to see this activity across both sanctioned AND unsanctioned cloud services. In one case, this led to a manufacturing company easily identifying data exfiltration of a sensitive product design file from the organization’s corporate-sanctioned Box to a user’s unsanctioned Dropbox account, and in another, it led to an oil and gas company being alerted to command and control activity from a small, under-the-radar cloud service through frequent, small uploads. In either case, an organization that only focuses on sanctioned apps would have missed the anomaly.

                                      To achieve the above-described use cases, the enterprise must deploy in an inline, forward proxy mode. To detect anomalies within a sanctioned app only, the enterprise can deploy in API or reverse proxy mode. Here are three critical functional requirements needed to achieve this use case:

                                      • Be aware of context, including who did what, when, from where, on what device, and with whom, and what the activity was, e.g., “upload,” “share,” “download,” etc.
                                      • See and control usage in not just sanctioned, but also unsanctioned cloud services
                                      • Understand what normal activity is, and alert on anomalies from that baseline
                                      • In the case of a forward proxy deployment, decrypt SSL traffic and decode the API

                                      How are you detecting anomalies in sanctioned and unsanctioned cloud services? We want to hear from you.

                                      Learn more about this and 14 additional most impactful use cases by downloading The 15 Critical CASB Use Cases.

                                      author image
                                      Netskope Staff
                                      Browse recent articles by Netskope Staff. Discover the latest trends and updates within the cloud and network space.
                                      Browse recent articles by Netskope Staff. Discover the latest trends and updates within the cloud and network space.

                                      Stay informed!

                                      Subscribe for the latest from the Netskope Blog