cerrar
cerrar
Su red del mañana
Su red del mañana
Planifique su camino hacia una red más rápida, más segura y más resistente diseñada para las aplicaciones y los usuarios a los que da soporte.
          Descubra Netskope
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            Líder en SSE. Ahora es líder en SASE de un solo proveedor.
            Líder en SSE. Ahora es líder en SASE de un solo proveedor.
            Netskope debuta como Líder en el Cuadrante Mágico™ de Gartner® para Single-Vendor SASE
              Protección de la IA generativa para principiantes
              Protección de la IA generativa para principiantes
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                Prevención moderna de pérdida de datos (DLP) para Dummies
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  Libro SD-WAN moderno para principiantes de SASE
                  Modern SD-WAN for SASE Dummies
                  Deje de ponerse al día con su arquitectura de red
                    Entendiendo dónde está el riesgo
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        Los 6 casos de uso más convincentes para el reemplazo completo de VPN heredada
                        Los 6 casos de uso más convincentes para el reemplazo completo de VPN heredada
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmolive Salvaguarda su "Propiedad Intelectual" con Protección de Datos Inteligente y Adaptable
                          Colgate-Palmolive Salvaguarda su "Propiedad Intelectual" con Protección de Datos Inteligente y Adaptable
                            Netskope GovCloud
                            Netskope logra la alta autorización FedRAMP
                            Elija Netskope GovCloud para acelerar la transformación de su agencia.
                              Let's Do Great Things Together
                              La estrategia de venta centrada en el partner de Netskope permite a nuestros canales maximizar su expansión y rentabilidad y, al mismo tiempo, transformar la seguridad de su empresa.
                                Soluciones Netskope
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Soporte técnico Netskope
                                  Soporte técnico Netskope
                                  Nuestros ingenieros de soporte cualificados ubicados en todo el mundo y con distintos ámbitos de conocimiento sobre seguridad en la nube, redes, virtualización, entrega de contenidos y desarrollo de software, garantizan una asistencia técnica de calidad en todo momento
                                    Vídeo de Netskope
                                    Netskope Training
                                    La formación de Netskope le ayudará a convertirse en un experto en seguridad en la nube. Estamos aquí para ayudarle a proteger su proceso de transformación digital y aprovechar al máximo sus aplicaciones cloud, web y privadas.

                                      Netskope and Google Chrome Enterprise: Driving Better Context for Securing Data

                                      May 26 2022

                                      When defining security policies, it is critical to know who the user is and what their privileges should be based on their role, and whether the device itself or the state of the device at the time of connection is in a known good state. Providing controls around what the user can perform once they are sending traffic to the internet is critical, but it’s easier said than done with traditional security solutions, as it is difficult to implement contextual controls with the desired granularity without introducing massive complexity. 

                                      In a previous blog, I wrote about an “out-of-the-box” experience for users, using the Netskope integration with Chrome, that was minimally invasive, yet provided deep contextual control to the administrator. The latest Netskope integration with Google Chrome Enterprise and Verified Access helps take this a step further. 

                                      To start, let’s examine what the “out-of-the-box” experience looks like here. First, the security administrator would set up an API connection between the Netskope Security Cloud and Google’s Verified Access. This only needs to be done once. This is transparent to the user, as the Google Admin will manage the users, as well as the deployment of the Netskope Chrome Extension on managed Chromebook devices. Now, when a student is given a Chromebook with an account on Google, they simply need to connect it to the network and log in with their Google credentials. At this point, the device is brought under management, the user is identified, the Netskope Extension is pushed to Chrome, and the state of the device is determined going forward. From the user’s perspective, they did nothing else but log into the Chromebook.

                                      Let’s look at a general use case that might be seen in a typical organization. One user is on the Finance team and is constantly working with partners and customers on financial matters. This role requires a potentially significant amount of risky behavior that should be allowed, but needs to be closely monitored at minimum. A second user is a software developer that has access to significant intellectual property but that information should only be shared inside the organization. By using Chrome on an issued Chromebook and leveraging integration with Verified Access, the security administrator can now define deeply rich contextual policies. 

                                      From an enforcement point of view, the Netskope Security Administrator can now define policies based on users or groups, proper use, and state of the device. When the finance user logs in, they require access to multiple file sharing services with the ability to log into those services with multiple private accounts and have relative open access to the Internet. The action of downloading content from a corporate instance of Google Drive and then uploading it to a different file sharing service with a different account is highly risky activity. In this example, this action needs to be allowed based on the role, but it needs to be closely monitored. In the case of the developer user, their work product should only reside inside the organization. This user should not be allowed to upload content to any unsanctioned corporate resource as part of their job function. Both of these requirements are easily met with Netskope Security Cloud and Google Chrome Enterprise.

                                      Since the user and device is being managed by the Google Administrator, those identities and roles are then leveraged for policy definition. Is this a known user, using a known good device that has passed boot verification? These questions are answered before any traffic is sent. Once the user starts to send traffic, it is forwarded to the Netskope Security Cloud that verifies the state of the device and role of the user with Verified Access. Once this has passed, traffic is allowed or denied based on policies defined in Netskope. These policies could be as simple as a block or the user could be presented with a coaching screen as to why the activity was blocked, or that it is considered dangerous but give them the option to proceed. 

                                      Netskope is excited to be an inaugural member and is now Google Chrome Enterprise recommended, and part of the Security and Trust solution track. This latest integration with Netskope and Google Chrome Enterprise, with Verified Access, goes a long way toward making the process of defining and applying these contextual controls simple for security leaders, and a hassle-free experience for users working “out-of-the-box” on their Chromebook, so their data is not at risk. Working together, Netskope and Google Chrome Enterprise are continuing the journey to make sure Chromebook users and their data are protected.

                                      Click here to learn more about the Netskope integration with Chrome OS and Chromebook. If you’re interested in other Netskope integrations with Google, check out our pages on Netskope for GCP and Netskope for Google Workspace.

                                      author image
                                      Rolf O’Grady
                                      Rolf has over 20 years in Data Networking and Security. Rolf’s experience has been built in customer-facing engineering roles in pre-sales and post-sales capacities.
                                      Rolf has over 20 years in Data Networking and Security. Rolf’s experience has been built in customer-facing engineering roles in pre-sales and post-sales capacities.

                                      ¡Mantente informado!

                                      Suscríbase para recibir lo último del blog de Netskope