Netskope named a Leader in the 2022 Gartner® Magic Quadrant™ for Security Service Edge. Get the Report.

  • Platform

    Unrivaled visibility and real-time data and threat protection on the world's largest security private cloud.

  • Products

    Netskope products are built on the Netskope Security Cloud.

Netskope delivers a modern cloud security stack, with unified capabilities for data and threat protection, plus secure private access.

Explore our platform
Birds eye view metropolitan city

Netskope Named a Leader in the 2022 Gartner Magic Quadrant™ for SSE Report

Get the report Go to Products Overview
Netskope gartner mq 2022 sse leader

Make the move to market-leading cloud security services with minimal latency and high reliability.

Learn more
Lighted highway through mountainside switchbacks

Prevent threats that often evade other security solutions using a single-pass SSE framework.

Learn more
Lighting storm over metropolitan area

Zero trust solutions for SSE and SASE deployments

Learn more
Boat driving through open sea

Netskope enables a safe, cloud-smart, and fast journey to adopt cloud services, apps, and public cloud infrastructure.

Learn more
Wind turbines along cliffside
  • Customer Success

    Secure your digital transformation journey and make the most of your cloud, web, and private applications.

  • Customer Support

    Proactive support and engagement to optimize your Netskope environment and accelerate your success.

  • Training and Certification

    Netskope training will help you become a cloud security expert.

Trust Netskope to help you address evolving threats, new risks, technology shifts, organizational and network changes, and new regulatory requirements.

Learn more
Woman smiling with glasses looking out window

We have qualified engineers worldwide, with diverse backgrounds in cloud security, networking, virtualization, content delivery, and software development, ready to give you timely, high-quality technical assistance.

Learn more
Bearded man wearing headset working on computer

Secure your digital transformation journey and make the most of your cloud, web, and private applications with Netskope training.

Learn more
Group of young professionals working
  • Resources

    Learn more about how Netskope can help you secure your journey to the cloud.

  • Blog

    Learn how Netskope enables security and networking transformation through security service edge (SSE).

  • Events & Workshops

    Stay ahead of the latest security trends and connect with your peers.

  • Security Defined

    Everything you need to know in our cybersecurity encyclopedia.

Security Visionaries Podcast

Bonus Episode: The Importance of Security Service Edge (SSE)

Play the podcast
Black man sitting in conference meeting

Read the latest on how Netskope can enable the Zero Trust and SASE journey through security service edge (SSE) capabilities.

Read the blog
Sunrise and cloudy sky

Netskope CSO speaking events

Meet the Netskope CSO team at one of our upcoming events.

Find an event
Netskope CSO Team

What is Security Service Edge?

Explore the security side of SASE, the future of network and protection in the cloud.

Learn more
Four-way roundabout
  • Company

    We help you stay ahead of cloud, data, and network security challenges.

  • Why Netskope

    Cloud transformation and work from anywhere have changed how security needs to work.

  • Leadership

    Our leadership team is fiercely committed to doing everything it takes to make our customers successful.

  • Partners

    We partner with security leaders to help you secure your journey to the cloud.

Netskope enables the future of work.

Find out more
Curvy road through wooded area

Netskope is redefining cloud, data, and network security to help organizations apply Zero Trust principles to protect data.

Learn more
Switchback road atop a cliffside

Thinkers, builders, dreamers, innovators. Together, we deliver cutting-edge cloud security solutions to help our customers protect their data and people.

Meet our team
Group of hikers scaling a snowy mountain

Netskope’s partner-centric go-to-market strategy enables our partners to maximize their growth and profitability while transforming enterprise security.

Learn more
Group of diverse young professionals smiling
Blog Platform, Product, & Services The Most Critical CASB Use Cases in the Market Today: Prevent Data Infiltration Involving New Employees
Jan 19 2017

The Most Critical CASB Use Cases in the Market Today: Prevent Data Infiltration Involving New Employees

We’ve all heard about data exfiltration, or the unsanctioned removal of data, especially sensitive data, from an enterprise. Most organizations that are considering investing in a cloud access security broker (CASB) put this use case at the top of their list as they know that an increasing amount of data is leaving their environment through unsanctioned cloud services, most of which enable data sharing.

But one thing we don’t hear as often is the use case of data infiltration. That said, for many data exfiltration situations, there is an infiltration on the other end, and sometimes this happens – gasp! – in our own organizations! We’re starting to hear more about this use case as IT and security professionals (unhappily) are finding their organizations on the receiving end of a new employee’s unsanctioned data exfiltration from their prior company.

Think of it this way: A new employee joins your ranks from a competitor. They bring their “stuff” with them – framed photos of their family, books for their bookshelf, maybe a plant for their desk, and perhaps a BYOD mobile device or laptop computer. What about a USB stick with some useful documents on it? Well, today it’s easier than ever to get that “stuff” into the new work environment because they no longer need a computer or even a USB, but simply a browser. They can go to their personal (or their prior company’s instance of) OneDrive, Box, Dropbox, or Google Drive – or any number of the hundreds of cloud storage services – to access those files. An infiltrated file may be a nostalgic photo of the new employee celebrating with old colleagues, an old memo template that they like to use, or…a proprietary contract. That’s where the line goes from completely benign to maybe risky to definitely not kosher!

There are several ways to skin this cat within a CASB, depending on how aggressive you want to be in your detections. You may need to detect the data as it’s coming into your environment from an unsanctioned service (or even unsanctioned instance of a sanctioned service, such as your competitor’s instance of Box, even if you have your own corporate-sanctioned version of Box), or you may only wish to detect it once it enters into the sanctioned instance of your cloud service.

Netskope customers have deployed our all-mode architecture (with nearly 90 percent of them going beyond a single mode) to achieve their most critical use cases. We have noted 15 of these use cases in our recent e-book, The 15 Critical CASB Use Cases, and we’re highlighting them and more (and we want to hear from you too!) in this blog.  

Here’s use case #1: Prevent data infiltration involving new employees.

How can a CASB enable this use case? A CASB sits in between the user and the cloud service provider and monitors usage, enforces policy, and guards against threats. In order to enforce a policy involving the infiltration of sensitive data, the CASB needs to see all possible traffic and be looking for specific content using a cloud data loss prevention (cloud DLP) policy. From a deployment architecture standpoint, the CASB must be configured as a forward proxy (with a thin agent or mobile profile for remote or mobile employees) in order to detect the download of this sensitive data from any unsanctioned service. If the goal is only to catch it once it’s uploaded to a sanctioned service (cautionary note: a smart employee may cleanse the document of sensitive content before it’s uploaded to your sanctioned instance), this use case can be achieved with a reverse proxy or even API-based Introspection deployment. Here are four critical functional requirements that are needed to achieve this use case:

  • Integrate “new employee” policy with enterprise directory
  • See and control usage in both sanctioned and unsanctioned services
  • Use advanced DLP features such as a custom keyword dictionary (maybe even in combination with other sensitive regular expressions) to delineate sensitive competitor documents
  • Decrypt SSL and decode the unpublished API to understand the transaction (for forward proxy)

How are you detecting the infiltration of sensitive data via cloud services? We want to hear from you.

Learn more about this and 14 additional most impactful use cases by downloading The 15 Critical CASB Use Cases.