Netskope Cloud Exchange

Netskope Cloud Log Shipper (CLS) enables organizations to performantly export the rich event logs from Netskope inline and out-of-band security solutions into SIEMs, data lakes, and syslog formats. Security operations centers (SOCs) and XDR/MDR services can extend their depth of visibility and context with Netskope SSE, Next Gen SWG, CASB, ZTNA, CSPM/SSPM, and CFW solution logs.

Netskope Cloud Ticket Orchestrator (CTO) enables your organization to programmatically and automatically open tickets on IT service management (ITSM) and collaboration systems based on which alert types and elements are noteworthy, streamlining how the tickets are managed and effectively mapping them to workflows in those systems.

Netskope Cloud Threat Exchange (CTE) is a near real-time threat ingestion, curation, and sharing tool that enables Netskope customers and technology partners to bidirectionally exchange IOCs. Security teams can integrate up-to-the-minute intelligence feeds that contain malicious URLs and file hashes, plus DLP file hashes, into their security infrastructure products, such as endpoints, email security, SIEMs, SOARs, and XDR solutions.

Netskope Cloud Risk Exchange (CRE) creates a single view into multiple connected systems’ risk values for individual users, devices and/or applications. As scores are consumed into the CRE database, they are mapped to a normalized value range and can be weighted as needed to create a single score per user/or application, and a daily average across all users, devices and/or applications. By leveraging business logic, security analysts can match individual scores, score combinations, or weighted scores as nested to trigger targeted actions in connected systems to reduce risk plus define triggers to send notifications via CTO plug-ins to ITSM and collaboration systems.