fermer
fermer
Le réseau de demain
Le réseau de demain
Planifiez votre chemin vers un réseau plus rapide, plus sûr et plus résilient, conçu pour les applications et les utilisateurs que vous prenez en charge.
          Essayez Netskope
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            Un leader sur SSE. Désormais leader en matière de SASE à fournisseur unique.
            Un leader sur SSE. Désormais leader en matière de SASE à fournisseur unique.
            Netskope fait ses débuts en tant que leader dans le Magic Quadrant™ de Gartner® pour le SASE à fournisseur unique.
              Sécuriser l’IA générative pour les nuls
              Sécuriser l’IA générative pour les nuls
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                La prévention moderne des pertes de données (DLP) pour les Nuls
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  Réseau SD-WAN moderne avec SASE pour les nuls
                  Modern SD-WAN for SASE Dummies
                  Cessez de rattraper votre retard en matière d'architecture de réseau
                    Identification des risques
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        Les 6 cas d'utilisation les plus convaincants pour le remplacement complet des anciens VPN
                        Les 6 cas d'utilisation les plus convaincants pour le remplacement complet des anciens VPN
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmolive protège sa "propriété intellectuelle" "grâce à une protection des données intelligente et adaptable
                          Colgate-Palmolive protège sa "propriété intellectuelle" "grâce à une protection des données intelligente et adaptable
                            Netskope GovCloud
                            Netskope obtient l'autorisation FedRAMP High Authorization
                            Choisissez Netskope GovCloud pour accélérer la transformation de votre agence.
                              Let's Do Great Things Together
                              La stratégie de commercialisation de Netskope privilégie ses partenaires, ce qui leur permet de maximiser leur croissance et leur rentabilité, tout en transformant la sécurité des entreprises.
                                Solutions Netskope
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Support technique de Netskope
                                  Support technique de Netskope
                                  Nos ingénieurs d'assistance qualifiés sont répartis dans le monde entier et possèdent des expériences diverses dans les domaines de la sécurité du cloud, des réseaux, de la virtualisation, de la diffusion de contenu et du développement de logiciels, afin de garantir une assistance technique rapide et de qualité
                                    Vidéo Netskope
                                    Formation Netskope
                                    Grâce à Netskope, devenez un expert de la sécurité du cloud. Nous sommes là pour vous aider à achever votre transformation digitale en toute sécurité, pour que vous puissiez profiter pleinement de vos applications cloud, Web et privées.

                                      Netskope and Google Chrome Enterprise: Driving Better Context for Securing Data

                                      May 26 2022

                                      When defining security policies, it is critical to know who the user is and what their privileges should be based on their role, and whether the device itself or the state of the device at the time of connection is in a known good state. Providing controls around what the user can perform once they are sending traffic to the internet is critical, but it’s easier said than done with traditional security solutions, as it is difficult to implement contextual controls with the desired granularity without introducing massive complexity. 

                                      In a previous blog, I wrote about an “out-of-the-box” experience for users, using the Netskope integration with Chrome, that was minimally invasive, yet provided deep contextual control to the administrator. The latest Netskope integration with Google Chrome Enterprise and Verified Access helps take this a step further. 

                                      To start, let’s examine what the “out-of-the-box” experience looks like here. First, the security administrator would set up an API connection between the Netskope Security Cloud and Google’s Verified Access. This only needs to be done once. This is transparent to the user, as the Google Admin will manage the users, as well as the deployment of the Netskope Chrome Extension on managed Chromebook devices. Now, when a student is given a Chromebook with an account on Google, they simply need to connect it to the network and log in with their Google credentials. At this point, the device is brought under management, the user is identified, the Netskope Extension is pushed to Chrome, and the state of the device is determined going forward. From the user’s perspective, they did nothing else but log into the Chromebook.

                                      Let’s look at a general use case that might be seen in a typical organization. One user is on the Finance team and is constantly working with partners and customers on financial matters. This role requires a potentially significant amount of risky behavior that should be allowed, but needs to be closely monitored at minimum. A second user is a software developer that has access to significant intellectual property but that information should only be shared inside the organization. By using Chrome on an issued Chromebook and leveraging integration with Verified Access, the security administrator can now define deeply rich contextual policies. 

                                      From an enforcement point of view, the Netskope Security Administrator can now define policies based on users or groups, proper use, and state of the device. When the finance user logs in, they require access to multiple file sharing services with the ability to log into those services with multiple private accounts and have relative open access to the Internet. The action of downloading content from a corporate instance of Google Drive and then uploading it to a different file sharing service with a different account is highly risky activity. In this example, this action needs to be allowed based on the role, but it needs to be closely monitored. In the case of the developer user, their work product should only reside inside the organization. This user should not be allowed to upload content to any unsanctioned corporate resource as part of their job function. Both of these requirements are easily met with Netskope Security Cloud and Google Chrome Enterprise.

                                      Since the user and device is being managed by the Google Administrator, those identities and roles are then leveraged for policy definition. Is this a known user, using a known good device that has passed boot verification? These questions are answered before any traffic is sent. Once the user starts to send traffic, it is forwarded to the Netskope Security Cloud that verifies the state of the device and role of the user with Verified Access. Once this has passed, traffic is allowed or denied based on policies defined in Netskope. These policies could be as simple as a block or the user could be presented with a coaching screen as to why the activity was blocked, or that it is considered dangerous but give them the option to proceed. 

                                      Netskope is excited to be an inaugural member and is now Google Chrome Enterprise recommended, and part of the Security and Trust solution track. This latest integration with Netskope and Google Chrome Enterprise, with Verified Access, goes a long way toward making the process of defining and applying these contextual controls simple for security leaders, and a hassle-free experience for users working “out-of-the-box” on their Chromebook, so their data is not at risk. Working together, Netskope and Google Chrome Enterprise are continuing the journey to make sure Chromebook users and their data are protected.

                                      Click here to learn more about the Netskope integration with Chrome OS and Chromebook. If you’re interested in other Netskope integrations with Google, check out our pages on Netskope for GCP and Netskope for Google Workspace.

                                      author image
                                      Rolf O’Grady
                                      Rolf has over 20 years in Data Networking and Security. Rolf’s experience has been built in customer-facing engineering roles in pre-sales and post-sales capacities.
                                      Rolf has over 20 years in Data Networking and Security. Rolf’s experience has been built in customer-facing engineering roles in pre-sales and post-sales capacities.

                                      Restez informé !

                                      Abonnez-vous pour recevoir les dernières nouvelles du blog de Netskope