Skip to main content

Cloud ConnectorsExabeam Cloud Connectors Configuration Guide

Netskope Cloud Connector

Prerequisites to Configure the Netskope Cloud Connector

Before you configure the Netskope Cloud Connector you must complete the following prerequisites:

  • Note the tenant name. The tenant name is the prefix in your Netskope console URL. For example, in the URL https://tenant1.goskope.com/ns#/dashboard, the tenant name is tenant1.

  • Create a new REST API token on the Netskope Cloud Security Platform by following the instructions in the Netskope documentation. Record the token to use the token while configuring the Netskope Connector on the Exabeam Cloud Connector platform.

Configure the Netskope Cloud Connector

The Netskope cloud security provides visibility, real-time data security, and threat protection while accessing cloud services, websites, and private apps from anywhere, on any device. Netskope helps organizations to respond to incidents and protect data and associated threats for cloud applications, cloud infrastructure, and the web. For more information, see the Netskope Documentation.

The following table displays audit source API and security events supported by the connector.

Audit Source: API

Service/Module Covered

Events Included

Alerts

Any

All

Events

Audit, page, application, infrastructure

All

Table 19. Audit source API and security events supported by the connector


To configure the Netskope connector to import data into the Exabeam Cloud Connectors platform:

  1. Complete the Prerequisites to Configure the Netskope Cloud Connector.

  2. Log in to the Exabeam Cloud Connectors platform with your registered credentials.

  3. Navigate to Settings > Accounts > Add Account.

  4. Click Select Service to Add, then select Netskope from the list.

  5. In the Accounts section, enter the required information. Required fields are indicated with a red bar.

    Netskope_Connector_configuration_-_Copy.png

    1. Tenant – Select a tenant to attach to the connector if you are using a multi-tenant edition of Exabeam. Otherwise, select default.

    2. Account Name – Specify a name for the connector. For example, Netskope_cloud_security.

    3. (Optional) Description – Describe the Netskope Cloud Connector. For example, Netskope cloud security to control online activities, protect data, stop threats, and respond to incidents.

    4. Tenant – Enter the tenant name that you obtained while completing prerequisites.

    5. Token – Enter the value for API token that you obtained while completing prerequisites.

    6. (Optional) Alerts Query – Enter a valid alert query. For more information see https://{tenant_name}.goskope.com/docs/Netskope_Help/en/get-alerts-data.html.

    7. (Optional) Alerts Type Filter – Select a type to filter alerts. For more information see https://{tenant_name}.goskope.com/docs/Netskope_Help/en/get-alerts-data.html.

      Note

      The Alerts Query and Alerts Type Filter fields are available for the Exabeam Cloud Connector version 2.5.235 and later.

    8. API Version – Select the V2 (API version 2) because Netskope is going to deprecate API version 1.

  6. To confirm that the Exabeam Cloud Connector platform communicates with the service, click Test Connection.

  7. Click Done to save your changes. The cloud connector is now set up on the Exabeam Cloud Connector platform.

  8. To ensure that the connector is ready to send and collect data, Start the connector and check that the status shows OK.