Netskope for Salesforce

Gain granular visibility and build custom security controls to protect the sensitive data stored in your organization’s implementation of Salesforce.

Solution Brief

CRM security for your organization

Netskope for Salesforce protects your sensitive customer and business data without affecting the user experience. You can be productive while you maintain the visibility and security controls you need to protect sensitive data, prevent its loss. and ensure compliance with global regulations.

Top use cases

Secure data

Detect sensitive content in Salesforce and define granular policies to automatically protect your data by blocking activities, restricting access or encrypting data.

Control access

Detect all access to Salesforce, regardless of where your users are located or what device they are using. Apply the appropriate access control policy based on the situation.

Stop threats

Protect against cloud threats, such as malware and ransomware, and detect unusual data movement or user activity that could indicate the presence of an active threat.

Prevent data loss

Provides a single view across all cloud services to detect data exfiltration attempts – stops the download of sensitive data from Salesforce with the upload of the same data to a personal cloud service.

Top security concerns SOC teams are struggling with

Data privacy / confidentiality

Data loss / leakage

^{Source: Cloud Security Report – Cybersecurity Insiders}

Take control of your data

Support multiple deployments

Take advantage of an all-mode architecture to see all of your Salesforce activity, regardless of where your users are located or what device they are using.

The unique Netskope all-mode architecture offers you a full array of deployment options to gain visibility and control of Salesforce, whether your users are on-premises or remote, using a web browser, mobile app, or sync client. Options include out-of-band API Protection into Salesforce as well as forward and reverse proxy modes for real-time policy controls for Salesforce and its ecosystem.

Provide direct, out-of-band connection into Salesforce with Netskope’s API protection
Cover Salesforce access from outside your network with Netskope’s reverse proxy
Covers any cloud service, including Salesforce and its ecosystem, with Netskope’s forward proxy
Combine different modes to expand your coverage

Gain real-time visibility and control

Leverage a deep understanding of your Salesforce usage to create the right level of security policies that ensure your Salesforce deployment is safe.

Netskope gives you granular visibility and control over Salesforce. Rather than take a coarse-grained approach by blocking services entirely, Netskope gives you a deep understanding of your Salesforce usage and allows you to define targeted security policies based on identity, service, activity, and data.

Understand and enforce access and usage policies based on identity, service, activity, and data
Mitigate risks associated with inappropriate sharing and public links
Focus policies on specific risky activities
Choose from policy actions including block, alert, encrypt, quarantine, and coach
Protect sensitive data with Netskope data loss prevention (DLP)
Mix and match policy elements to carve out risk without blocking services

Protect sensitive data

Stop sensitive information from being exfiltrated from your Salesforce service, whether structured or unstructured data.

Netskope data loss prevention (DLP) protects sensitive data in the cloud with accuracy and precision, with the ability to inspect all sanctioned and unsanctioned cloud services as well as traffic to websites. Sensitive content is detected across 1000+ file types and across structured and unstructured data, using 3,000+ data identifiers, metadata extraction, proximity analysis, fingerprinting and exact match.

Control sensitive data in Salesforce and en route to and from all cloud services
Get the highest degree of accuracy with fingerprinting and exact match
Further increase accuracy with keyword dictionaries, global data identifiers, and more
Target DLP policies using context like user, group, device, service, and activity

Protect against threats

Provide complete threat protection to help thwart malicious malware from infecting your Salesforce environment.

Netskope is the only cloud access security broker (CASB) with complete threat defense for Salesforce, combining unparalleled cloud visibility with multi-layered threat detection and integrated remediation workflows. Netskope can quickly detect, prevent, and remediate the effects of cloud threats, which too often evade existing security solutions.

Deploy threat protection with unique cloud vantage point
Detect anomalies that could indicate an active threat
Use proprietary threat intelligence from Netskope Threat Research Labs complemented by 40+ external sources

Protect data privacy

Protect sensitive data by encrypting Salesforce content, in real-time, to ensure you always have full control.

Netskope protects your sensitive data with advanced encryption and key management technology.

Uses a KMS with a FIPS 140-2 Level 3 certified hardware security module (HSM) to ensure the confidentiality and privacy of your data in the cloud
Based on AES-256 strong encryption, with one key per file
Supports BYOK (Bring Your Own Key), so you can encrypt structured data and either store the key in your own on-premises HSM or use the Netskope-managed HSMs distributed throughout the Netskope cloud
Integrates with your KMIP-compliant KMS

Take advantage of an all-mode architecture to see all of your Salesforce activity, regardless of where your users are located or what device they are using.

Provide direct, out-of-band connection into Salesforce with Netskope’s API protection
Cover Salesforce access from outside your network with Netskope’s reverse proxy
Covers any cloud service, including Salesforce and its ecosystem, with Netskope’s forward proxy
Combine different modes to expand your coverage

Leverage a deep understanding of your Salesforce usage to create the right level of security policies that ensure your Salesforce deployment is safe.

Understand and enforce access and usage policies based on identity, service, activity, and data
Mitigate risks associated with inappropriate sharing and public links
Focus policies on specific risky activities
Choose from policy actions including block, alert, encrypt, quarantine, and coach
Protect sensitive data with Netskope data loss prevention (DLP)
Mix and match policy elements to carve out risk without blocking services

Stop sensitive information from being exfiltrated from your Salesforce service, whether structured or unstructured data.

Control sensitive data in Salesforce and en route to and from all cloud services
Get the highest degree of accuracy with fingerprinting and exact match
Further increase accuracy with keyword dictionaries, global data identifiers, and more
Target DLP policies using context like user, group, device, service, and activity

Provide complete threat protection to help thwart malicious malware from infecting your Salesforce environment.

Deploy threat protection with unique cloud vantage point
Detect anomalies that could indicate an active threat
Use proprietary threat intelligence from Netskope Threat Research Labs complemented by 40+ external sources

Protect sensitive data by encrypting Salesforce content, in real-time, to ensure you always have full control.

Netskope protects your sensitive data with advanced encryption and key management technology.

Uses a KMS with a FIPS 140-2 Level 3 certified hardware security module (HSM) to ensure the confidentiality and privacy of your data in the cloud
Based on AES-256 strong encryption, with one key per file
Supports BYOK (Bring Your Own Key), so you can encrypt structured data and either store the key in your own on-premises HSM or use the Netskope-managed HSMs distributed throughout the Netskope cloud
Integrates with your KMIP-compliant KMS

Salesforce is easily one of our most important SaaS services. With critical customer information, and revenue and forecast details, we needed to make sure we had the proper data protection in place. Netskope fit the bill, and then some.

CISO, Industry-leading Software Maker

Solve your SASE and zero trust
transformation challenges with one platform

Netskope One SSE is built on the Netskope One platform that provides unrivaled visibility and real-time data and threat protection when accessing cloud services, websites, and private apps from anywhere, on any device.

See our platform

Resources