Advanced Data Loss Prevention (DLP)

Gain full visibility of data and applications everywhere

• Discover sensitive data-at-rest in managed cloud services such as Office 365 and AWS using API-enabled controls.
• Continuously scan IaaS storage services like AWS for data movement or inadvertent exposure.
• Detect and monitor data-in-motion between thousands of cloud apps and services, including instances, using inline controls.
• See and control data propagation between cloud apps and instances and in the context of cloud app risk and user risk without relying on tenant restrictions.
• Gain visibility whether users are on premises or remote, using browsers, sync clients, or mobile apps.
• Go beyond content analysis by inspecting metadata, hidden fields, and comments.

Understand data context with Cloud XD™

• Decodes the modern language of the cloud (i.e. APIs, JSON, Protobuf) to identify sensitive data, threats and user activities in real-time across thousands of cloud applications.
• Enables the safe use and control of unmanaged applications to maintain productivity.
• Supports advanced DLP capabilities to uncover and stop risky activity, such as:
  • Compartilhamento público de arquivos a partir de aplicativos na nuvem
  • O envio de dados confidenciais para aplicações na nuvem não gerenciadas de “Shadow IT”
  • O download de dados confidenciais para dispositivos pessoais, não gerenciados
  • A exfiltração de dados confidenciais de um e-mail corporativo para uma conta de e-mail pessoal
• Enhances advanced threat protection (ATP) to prevent cloud-enabled threats, phishing attacks on SaaS, and detect malicious activity.

Enforce consistent policies across SaaS, IaaS, web and email

• Offers 40+ predefined regulatory and best practices compliance templates that are customizable
• Uses 3000+ language-independent data identifiers to inspect 1500+ file types
• Identifies and blocks user attempts to upload data to an unmanaged storage bucket or blob, whether via the cloud provider’s GUI or via copy and sync in the CLI
• Alimenta as políticas do Netskope Cloud Security com as informações baseadas em API, para execução inline
• Delivers advanced protection with metadata analysis, file and binary fingerprinting, exact data matching and Optical Character Recognition (OCR)
• Uses machine learning enhanced scanning and classification for high efficiency and accuracy, enabling sensitive data to be identified and blocked from exfiltration in documents (e.g. patents, tax forms) and images (e.g. screenshots, driver licenses, passports, whiteboard images) without relying on traditional regular expressions and pattern matching, which are prone to false positives and false negatives.
• Train Your Own Classifier (TYOC) enables customers to train machine learning models on data types of their choice to go beyond the defined document and image classifiers provided.

Effective Remediation

• Utilize closed-loop administrative and remediation workflows to secure content instantly on demand
• Customize incident workflows: assign incidents, change progress status & override severity levels
• View both violations and excerpts of original content
• Perform investigations and analysis with comprehensive, deep activity audit trails – assign owners, track progress, and mark as resolved
• Use flexible policy response actions for Block, Quarantine, Encrypt, Alert and Coach users
• Provide Coaching to alert and warn end users about risky activity
• Access detailed metadata for a comprehensive view of alerts
• Establish customizable role-based access controls (RBAC).

Encryption to ensure data privacy

Netskope enables you to protect your sensitive content as it leaves your organization’s perimeter and moves into cloud storage applications like Google Drive and Microsoft OneDrive, allowing you to retain full control of it.

• Netskope provides AES-256 strong encryption with a per-file key controlled by fault-tolerant, FIPS 140-2 Level 3 certified HSMs
• Files can be selectively encrypted in flight or encrypted as they are stored in the cloud storage application
• Optionally, you can integrate Netskope Encryption with your on-premises, KMIP-compliant key management system to ensure that you retain control of the keys and their lifecycle.

Dimensionamento e desempenho em todo o mundo com a NewEdge

Netskope NewEdge is a carrier-class global network that provides the foundation for all Netskope products and technologies.

• Netskope solutions like DLP, Next Gen SWG, ZTNA and ATP run on NewEdge to provide maximum performance and efficacy worldwide.
• Oferece uma nuvem altamente elástica e com super provisionamento, construída para escalar e projetada para a proteção de dados
• Não apresenta perda de desempenho, permitindo a implementação da segurança na borda onde e quando necessário
• Oferece uma rede unificada, acessível a todos os clientes, com todos os serviços de segurança disponíveis, sem sobretaxas regionais
• Evita a dependência da infraestrutura de nuvem pública
• Oferece computação completa em todos os pontos de serviço para processamento inline, em tempo real, sem pontos de presença virtuais (vPOPs)
• Utiliza grandes parcerias que representam mais de 300 adjacências de rede, incluindo o direct peering da Microsoft e do Google em todos os data centers
• Delivers a future-proof, SASE-ready architecture with breadth and depth at cloud scale.