Netskope
Cloud Exchange

The Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.

Netskope Cloud Exchange

 

Netskope cloud exchange diagram

Cloud Exchange consumes valuable Netskope telemetry and external threat intelligence and risk scores, enabling improved policy implementation, automated service ticket creation, and exportation of log events from the Netskope Security Cloud.

 

Cloud Exchange

  • Docker platform that modules runs on
  • Linux-based
  • Module plugins, 30+ integrations
  • No charge to customers

Four modules with ready to use plug-ins

saas icon

Cloud Log Shipper

  • Export event/alert logs
  • Multi-threaded query engine
  • Near real-time polling
  • One or more destinations

Feed SOC and MDR/XDR services

risk based coaching icon

Cloud Ticket Orchestrator

  • Automate service tickets
  • Curated event details
  • Map tickets to workflows
  • Mute & De-duplication

 

Streamline investigations and response

threat protection icon

Cloud Threat Exchange

  • Automate IOC sharing
  • Bi-directional updates
  • File hashes (threat, DLP)
  • Malicious URLs

 

Improve attack neutralization

speed icon

Cloud Risk Exchange

  • Exchange risk scores
  • User and devices
  • Average/weight scores
  • Trigger CTO actions

 

Enable zero trust principles

Netskope Security Cloud

Vea nuestra plataforma →
Netskope Security Cloud

Visibilidad incomparable. Datos en tiempo real y protección frente a amenazas.

Netskope Security Cloud ofrece visibilidad incomparable, datos en tiempo real y protección frente a amenazas al acceder a servicios en la nube, sitios web y aplicaciones privadas desde cualquier lugar y en cualquier dispositivo. Solo Netskope comprende la nube y adopta un enfoque basado en los datos que ofrece a los equipos de seguridad la protección y la velocidad que necesitan para proteger su proceso de transformación digital.

Netskope Security Cloud

Fully integrate your security stack for these use cases

01

Share threat intelligence

Automate bidirectional IOC sharing between your defenses including Netskope, endpoints, email gateways, and SIEMs.

02

Automate service tickets

Improve workflows where Netskope alerts create service tickets in IT service management and collaboration tools.

03

Exchange risk scores

Normalize multiple risk scores and invoke investigations into or actions to reduce risk from significant changes in user or device risk scoring.

04

Export logs

Improve security operations with rich event and alert logs into your SIEM, data lake, or XDR/MDR service.

The path forward is a security overlay based on Zero Trust principles to protect sensitive data on the web and in the cloud.

Features and benefits

Cloud Log Shipper

Netskope Cloud Log Shipper (CLS) enables organizations to performantly export the rich event logs from Netskope inline and out-of-band security solutions into SIEMs, data lakes, and syslog formats. Security operations centers (SOCs) and XDR/MDR services can extend their depth of visibility and context with Netskope SSE, Next Gen SWG, CASB, ZTNA, CSPM/SSPM, and CFW solution logs.

Obtenga la ficha técnica
cloud log shipper diagram

Cloud Ticket Orchestrator

Netskope Cloud Ticket Orchestrator (CTO) enables your organization to programmatically and automatically open tickets on IT service management (ITSM) and collaboration systems based on which alert types and elements are noteworthy, streamlining how the tickets are managed and effectively mapping them to workflows in those systems.

cloud ticket orchestrator diagram

Cloud Threat Exchange

Netskope Cloud Threat Exchange (CTE) is a near real-time threat ingestion, curation, and sharing tool that enables Netskope customers and technology partners to bidirectionally exchange IOCs. Security teams can integrate up-to-the-minute intelligence feeds that contain malicious URLs and file hashes, plus DLP file hashes, into their security infrastructure products, such as endpoints, firewalls, secure web gateways, and cloud access security brokers.

cloud threat exchange diagram

Cloud Risk Exchange

Netskope Cloud Risk Exchange (CRE) creates a single view into multiple connected systems’ risk values for individual users and devices. As scores are consumed into the CRE database, they are mapped to a normalized value range and can be weighted as needed to create a single score per user, and a daily average across all users/devices. By leveraging business logic, security analysts can match individual scores, score combinations, or weighted scores as nested to trigger targeted actions in connected systems to reduce risk plus define triggers to send notifications via CTO plug-ins to ITSM and collaboration systems.

Obtenga la ficha técnica
cloud risk exchange diagram

About Cloud Exchange

Netskope Cloud Exchange (CE) platform and the four modules are provided at no charge to customers. One or more modules can be activated at a time. CE is deployed as a docker-based solution wherever Linux can be run and on systems that support docker. Cloud Exchange requires very little compute and storage resources to run—a minimum of two (2) vCPU, 20 GB of storage, and 4 GB of RAM—and has been tested on Ubuntu and CentOS. CE supports most identity services for local login or single sign-on, role-based access controls for the UI and API tokens, access is secured with TLS v1.3 with the option of customer-generated certificates and provides multi-instance/tenant support for more than one Netskope platform. CE includes automated checks for updated or newly published plug-ins and provides syslog messages to report platform functionality, audit logs, and system errors.

Cloud Log Shipper

Netskope Cloud Log Shipper (CLS) enables organizations to performantly export the rich event logs from Netskope inline and out-of-band security solutions into SIEMs, data lakes, and syslog formats. Security operations centers (SOCs) and XDR/MDR services can extend their depth of visibility and context with Netskope SSE, Next Gen SWG, CASB, ZTNA, CSPM/SSPM, and CFW solution logs.

Obtenga la ficha técnica
Cloud Ticket Orchestrator

Netskope Cloud Ticket Orchestrator (CTO) enables your organization to programmatically and automatically open tickets on IT service management (ITSM) and collaboration systems based on which alert types and elements are noteworthy, streamlining how the tickets are managed and effectively mapping them to workflows in those systems.

Cloud Threat Exchange

Netskope Cloud Threat Exchange (CTE) is a near real-time threat ingestion, curation, and sharing tool that enables Netskope customers and technology partners to bidirectionally exchange IOCs. Security teams can integrate up-to-the-minute intelligence feeds that contain malicious URLs and file hashes, plus DLP file hashes, into their security infrastructure products, such as endpoints, firewalls, secure web gateways, and cloud access security brokers.

Cloud Risk Exchange

Netskope Cloud Risk Exchange (CRE) creates a single view into multiple connected systems’ risk values for individual users and devices. As scores are consumed into the CRE database, they are mapped to a normalized value range and can be weighted as needed to create a single score per user, and a daily average across all users/devices. By leveraging business logic, security analysts can match individual scores, score combinations, or weighted scores as nested to trigger targeted actions in connected systems to reduce risk plus define triggers to send notifications via CTO plug-ins to ITSM and collaboration systems.

Obtenga la ficha técnica
About Cloud Exchange

Netskope Cloud Exchange (CE) platform and the four modules are provided at no charge to customers. One or more modules can be activated at a time. CE is deployed as a docker-based solution wherever Linux can be run and on systems that support docker. Cloud Exchange requires very little compute and storage resources to run—a minimum of two (2) vCPU, 20 GB of storage, and 4 GB of RAM—and has been tested on Ubuntu and CentOS. CE supports most identity services for local login or single sign-on, role-based access controls for the UI and API tokens, access is secured with TLS v1.3 with the option of customer-generated certificates and provides multi-instance/tenant support for more than one Netskope platform. CE includes automated checks for updated or newly published plug-ins and provides syslog messages to report platform functionality, audit logs, and system errors.

Recursos

Cloud Exchange demo

Cloud Exchange Demo

Netskope Cloud Log Shipper - Data sheet

Netskope Cloud Log Shipper

Cloud Ticket Orchestrator

Cloud Ticket Orchestrator

Cloud Threat Exchange de Netskope

Cloud Threat Exchange de Netskope

Netskope Cloud Risk Exchange- data sheet

Netskope Cloud Risk Exchange

Netskope Threat Protection - data sheet

Netskope Threat Protection

Plataforma Netskope Security Cloud

Plataforma Netskope Security Cloud

Acelere su estrategia de seguridad con el líder en SASE.