NETSKOPE FOR SAAS, IAAS, AND WEB:

REAL-TIME PROTECTION
AT A GLANCE
• Gain cloud and web visibility regardless of location, network,
or device
• Secure real-time activities across SaaS, IaaS, and web
• Place access controls, DLP policies, and threat protection to
protect data and users

Using the patented Netskope Cloud XD engine, the Netskope Security Cloud is able to decode traffic across
all SaaS, IaaS, and web services for granular visibility and control in real time. Through this detailed visibility,
security teams can place real-time policies on specific cloud and web activities instead of blocking them
outright and impeding employee productivity. With Netskope Real-time Protection, organizations can place
granular policies, access controls, DLP, and advanced threat protection immediately as employees access
cloud and web services.

PRODUCT OVERVIEW
Netskope Real-time Protection is deployed in a proxy-based architecture to decode activities across all SaaS, IaaS, and
web services in real-time so that security teams can place policies and controls to protect employees. Perform actions
like restrict uploads of sensitive data to unsanctioned cloud services (shadow IT), block download of malware-infected
files, or even limit access to various cloud services based on device status (i.e. managed versus unmanaged devices).
Available workflows include custom coaching messages to shape behavior and do things like direct employees to the
corporate-sanctioned cloud service when they upload sensitive information, quarantining of files, putting files on legal
hold, and more.
 NETSKOPE REAL-TIME
PROTECTION FEATURES

GRANULAR VISIBILITY AND CONTROL

Netskope can use the detailed information seen across all cloud and web transactions, like location, device status,
cloud service or website, activity being performed, and more to allow application of security policies. Apply policies like
“Restrict download of PII to personal devices” or implement granular access controls in real time.

DATA PROTECTION WITH DLP AND ENCRYPTION

Netskope inspects real-time activities across sanctioned and unsanctioned cloud services and websites such as
uploads, downloads, and shares. Secure sensitive content with 3,000+ data identifiers, support for 1,000+ file types,
custom regex, fingerprinting, exact data match and more. Use pre-defined profiles such as personally-identifiable
information (PII), protected health information (PHI), payment card industry (PCI) data, profanity, and source code, or
create a custom profile. Actions to remediate include putting files in legal hold, quarantine, or even encrypting the file
with AES-256. Do a first pass in the cloud and use ICAP integration to funnel down suspected violations to your on-premises
DLP solution as well. Admins can manage all of this directly from the Netskope incident management console,
which allows tracking of incidents from the beginning to the resolution.

ADVANCED THREAT PROTECTION

Netskope delivers comprehensive threat defense for all cloud and web services in real time, with multi-layered threat
detection and response capabilities. Multiple layers of threat detection include advanced malware inspection, machine
learning driven anomaly detection, heuristic analysis and sandbox analysis, which are all dynamically updated using
multiple threat intelligence sources. Remediation options include automated actions to quickly eliminate known threats
as well as workflows to further analyze and reverse the effects of new attacks, which too often evade existing security
solutions. Automatically reset compromised credentials as well when employees log into sanctioned cloud services like
Microsoft Office 365 or Google G Suite.

COMPREHENSIVE COVERAGE
The Netskope Security Cloud covers all deployment options for cloud services in real time and out-of-band. For
Netskope Real-time Protection, security teams can choose any of the comprehensive inline options available through
reverse and forward proxy models. Netskope allows for full coverage regardless of network, device, or location, and
even covers sync clients and native and mobile apps.
 NETSKOPE REAL-TIME
PROTECTION FEATURES

FEATURES BENEFITS
• Target risky actions instead of coarse allow versus block
approach
• Assess organizational risk of cloud and web use to inform
Real time visibility and control
policies
• Layer on protection from various factors like unmanaged
devices, location, insecure networks, and more
• Secure sensitive data across all SaaS, IaaS, and web
• Comply with various regulations with encryption and DLP
Data protection
controls
• Stop data exfiltration to unsanctioned cloud services
• Gain comprehensive protection against cloud and web threats
• Detect and remediate anomalous activities and accounts
Advanced threat protection
• Defend against malware and breaches, like ransomware or
zero-days
• Gain coverage for all sanctioned and unsanctioned
(shadow IT) cloud services and websites
Comprehensive deployment options in • Choose from inline options for cloud services: reverse proxy
real time or all theoretical forward proxy deployments
• Choose from GRE traffic steering or Netskope client for web
traffic

Netskope is the leader in cloud security. We help the world’s largest organizations take advantage of cloud and web without
sacrificing security. Our patented Cloud XD technology targets and controls activities across any cloud service or website and
customers get 360-degree data and threat protection that works everywhere. We call this smart cloud security.

©2019 Netskope, Inc. All rights reserved. Netskope is a registered trademark and Netskope Active, Netskope Cloud XD,
Netskope Discovery, Cloud Confidence Index, and SkopeSights are trademarks of Netskope, Inc. All other trademarks are
trademarks of their respective owners. 06/18 DS-223-1