If you're having trouble at any stage please contact us at support@skyformation.com. 

Preface

The goal of this guide is to add a new SkyFormation for Netskope connector to your SkyFormation Platform.

Prerequisites

To add the Netskope connector to your SkyFormation app, you will need to have the following Netskope account's information at hand:

1. Tenant name
2. API Key 

Tenant name: the tenant name is the prefix of your netskope console URL, for example, if your netskope console URL is https://tenant1.goskope.com/ns#/dashboard then your tenant name is tenant1.

API key: to generate an API key, log into the netskope portal of your tenant and navigate to Settings > Tools > Rest API. From there you should generate the token.

Keep the Tenant name and the token for the next steps.

Filtering Alerts

(available starting version 2.5.234)

It is now optional filtering alerts via the UI, using "query" and "type" parameters. While adding the Netskope connector, under the "Token" field you will see two optional fields:

1. Alerts Query
2. Alerts Type Filter

Alerts Query: this acts as a filter for all the cloud app alerts in the events data base. If this field is being used the value should be a valid alert query as described in the link below, written in a readable format (not URL encoded).

Alerts Type Filter: filters alerts by the given type. If nothing is passed then it gets alerts of all types.

More information about alert types and valid query format can be found here: https://{tenant_name}.goskope.com/docs/Netskope_Help/en/get-alerts-data.html.

On-board SkyFormation for Netskope Enterprise connector - steps

   1. Logon to your SkyFormation Platform:

   2. Navigate via left navigation panel to "Settings" section

   3. Navigate via New Settings left navigation panel to "Accounts" section

   4. Click the "Add Account" bottom

5. At the "SELECT SERVICE TO ADD" choose "Netskope". You will see the following screen:

6. Fill in the following information:

    - Account Name
        Give the Netskope account a meaningful name for you. 
        This will become your cloud app connector name displayed in the application and the 
        events sent to external systems as SIEM/Log management. This is a mandatory field.

      e.g. "Corporate Netskope"     

    - Description
      Add a text that describes the Netskope service account for you.

     This is an optional field.

   -  Tenant

       The tenant name from the prerequisites section.

   - Token

     The token from the prerequisites section.  

At this point you can click on "TEST CONNECTION" to make sure the connection is setup successfully, or just click on "DONE".

Start the Netskope connector and make sure that the status becomes "OK" after a few seconds.

DONE!