Netskope SASE Configuration Guide

The following article contains a summary of the Netskope SASE Configuration Guide. To see the full guide, go to Attachments on this article and download the associated PDF.

Netskope SASE Configuration Guide

NetWitness SASE, combined with Netskope, provides unprecedented visibility into behavior and communication among devices and services in remote and distributed networks across on-premises, hybrid, and cloud deployments.

What NetWitness SASE does:

• Streamline searches and investigations: Log into a single user interface to perform index searches, pivot through metadata, and reconstruct network sessions to receive results quickly.
  
  
• Leverage retained data: Empower analysts to perform forensic examinations on a triggered detection and threat hunt for unknown threats against retained raw network communications.
  
  
• Correlate disparate data sets: Enrich the context of investigations by correlating data from the actual network traffic of remote users with other access by those same users for a complete end-to-end story of what transpired.
  
  
• Minimize costs: Optimize storage and reduce operating costs using new compression algorithms, selective retention, and the ability to split network decoder components to limit what must run in the cloud.

In this document the following topics are discussed.

• Getting Started
  A quick discussion about what NetWitness SASE and Netskope does. It goes over deployment diagrams, scaling options, limitations, and configuring the Netskope integration.
  
  
• Deploy Netskope Integration using CCM
  This section discusses the prerequisites for setup and the different tasks required for the Centralized Content Management deployment of the integration.
  
  
• Deploy Netskope Integration using NWConsole
  This section discusses the prerequisites and tasks required to deploy the integration utilizing the built in NetWitness Platform NWConsole program.
  
  
• Remove Netskope Integration Plugin
  This section goes into how to remove the integration plugin if it is no longer required within the customer's NetWitness Platform environment.
  
  
• Netskope Container Setup without plugin support mode
  This section talks about how to manually deploy the Netskope Cloud-Tap Container on the NetWitness Platform Decoder cloud instance without the new Netskope plugin support.
  
  
• Plugin Stats
  This section provides instructions for how to review the statistics surrounding the Netskope plugin's performance.

The following article contains a summary of the Netskope SASE Configuration Guide. To see the full guide, go to Attachments on this article and download the associated PDF.