Cloud Security (CASB)
The cloud is transforming your organization. It’s changing how you work as everything is becoming more intuitive, connected, open, and collaborative, and that change is rippling across SaaS, IaaS, and the web. This creates new challenges and risks that legacy security vendors can’t address. You need security that can.
Product Overview
Our Cloud Security platform helps the world’s largest organizations take full advantage of the cloud and web without sacrificing security. Netskope’s patented Cloud XD technology eliminates blind spots by going deeper than any other security provider to quickly target and control activities across thousands of cloud services and millions of websites. With full control from one cloud, our customers benefit from 360-degree data protection that guards data everywhere and advanced threat protection that stops elusive attacks.
Our Cloud Security platform can be deployed 100% in the cloud, as an on-premises appliance, or via a hybrid configuration that includes both. Cloud and web traffic is steered to Netskope for inspection using our patented all-mode traffic steering technology that provides several out-of-band and inline options ensuring that you get 100 percent coverage for users on premises, mobile, and remote. For users accessing cloud services, full coverage is provided whether a browser, mobile app, desktop app or sync client is used to access sanctioned or unsanctioned cloud services. TLS-encrypted cloud traffic is safely decrypted using the Netskope cloud-scale architecture as part of the traffic steering process.
Top Use Cases
- Discover SaaS, IaaS, and web use details and assess risk
- Secure your sanctioned cloud services such as Office 365, Box, and AWS
- Safely enable unsanctioned, business-led cloud services instead of being forced to block them
- Govern cloud and web use for users on premises, mobile, and remote
- Guard sensitive data with award-winning DLP
- Stop elusive cloud threats and malware
Unique Selling Points
- Eliminate blind spots
Cloud XD™ understands SaaS, IaaS, and web in extreme definition to eliminate blind spots - Guard data everywhere
360º data protection guards data everywhere through award-winning DLP and encryption - Stop elusive attacks
Advanced threat protection stops elusive attacks that traverse SaaS, IaaS, and web to inflict damage - Full control, one cloud
Full control of SaaS, IaaS, and web, from one cloud-native platform that scales automaticallyn protection.
Cloud Security Console
The industry’s only SaaS, IaaS, and web security platform built from the start in one cloud that’s easy-to-use. Unlike cobbled together tools, Netskope eliminates policy conflict through standardized categories across SaaS, IaaS and web. Save your security team’s time by avoiding redundant DLP and threat protection configuration steps and having to switch from one tool to the next. Built in the cloud from day one, our cloud security platform scales automatically to meet your needs.
Deployment Options
Deployment options support any use case, from an API-only deployment mode to several real-time options. Get complete visibility of all SaaS, IaaS, and web traffic, including from sync clients, mobile apps and TLS-encrypted traffic. Deploy 100% in the cloud, with an on-premises appliance, or a hybrid option.
CASB Cloud Security Features
| SAAS, IAAS, WEB DISCOVERY AND RISK ASSESSMENT | |
| Customisable Dashboard | A customizable view of all SaaS, IaaS, and web, activities, users, and devices. Granular enough to differentiate between instances of the same SaaS or IaaS service. |
| Netskope Cloud Confidence Index (CCI) |
The enterprise-readiness of SaaS and IaaS services based on 50+ criteria like security, auditability, and business continuity. Serves as a guidepost to mitigate risk, influence usage and reduce costs. |
| Forensic analysis | Deep visibility to understand user activities in SaaS, IaaS, and web. Drill down into granular details including identity, device, browser, time, location, activity (e.g., ‘share’), content, and more for a full audit trail. |
| Ad hoc queries and dynamic reports |
Perform ad-hoc queries for on-demand analytics and reports, save queries as custom search results, or generate detailed custom reports using natural language inputs and Boolean operators |
| GRANULAR VISIBILITY AND CONTROL OF SAAS, IAAS, AND WEB | |
| Netskope Cloud XD™ | Netskope Cloud XD understands all inputs in extreme definition (XD) and performs big data analytics to eliminate blind spots and make policy enforcement simple across all SaaS, IaaS, and web. |
| Real-time policies for all SaaS, IaaS, and web | Security and access policies in context (e.g., service, activity, device). Policies can block, alert, bypass, encrypt, quarantine, and coach. Works with web and sanctioned or unsanctioned SaaS and IaaS services. |
| Unified policies for SaaS, IaaS, and web security | Simplify deployment and ongoing management by orchestrating all SaaS, IaaS, and web policies from one interface. |
| Web classification and content filtering |
Govern web use with comprehensive web classification and content filtering. Best-in-class URL database covers 99.9% of the web, intelligence that comes from a dedicated in-house web and cloud application research team, and machine learning-based content analysis for classification of uncategorized URLs. |
| User and remediation workflows |
Use built-in workflows such as quarantine, legal hold, and user coaching with custom messages. Workflows are specific to policies and capabilities, like automatic tombstoning of malware. |
| ENCRYPTION AND TOKENIZATION | |
| Encrypt structured data | Encrypt structured data at rest or in real time in sanctioned services through native format-preserving encryption w/ AES-256 encryption and a FIPS 140-2 Level 3-certified KMS and the option of using your on-prem HSM. |
| Encrypt structured data via BYOK | Leverage pre-built integrations with CSP’s bring your own key (BYOK) capabilities with AES-256 encryption and a FIPS 140-2 Level 3-certified KMS and the option of using your on-premises HSM. |
| Encrypt unstructured data | Encrypt unstructured data at rest in sanctioned services or in real-time activities with AES-256 encryption and a FIPS 140-2 Level 3-certified KMS and the option of using your on-premises HSM. |
| AWARD-WINNING DLP | |
| Reduce false positives | Prevent data leakage from SaaS, IaaS, and web with accuracy and precision. Supports more than 1,000 file types, more than 3,000 data identifiers, proximity analysis, fingerprinting, exact match, OCR, and more, instrumented using a flexible and intuitive wizard-style interface. |
| Find and control sensitive data at rest | Find sensitive data resident in sanctioned services such as AWS, Microsoft Office 365 OneDrive, Box, Google Drive, Dropbox, and more. Take action on data that violates policy. |
| Closed-loop incident management |
Respond quickly and thoroughly to policy violations, with workflows to facilitate end-to-end incident management process, detailed forensics, and event-by-event incident history. |
| Compliance templates | Use dozens of pre-defined policy templates to identify sensitive data in accordance with regulations. Templates include (but are not limited to): AMRA, EC Directive, EU-GDPR, GLBA, HIPAA, PCI-DSS, PHI, PII, PHIPA, PIPEDA, SSN Confidentiality Act, US FTC Rules, etc. |
| Role-based access controls | Customizable role-based access controls, including predefined admin. and analyst roles. Additional privacy controls include data obfuscation and automatic filtering of certain kinds of traffic. |
| THREAT PROTECTION |
|
| Threat intelligence for malicious sites |
Identify malicious sites that your employees may be visiting and block them. Threat intelligence is updated dynamically using multiple sources. |
| Anomaly detection | Identify and remediate anomalous user behavior such as compromised credentials, data exfiltration, insider threats, privileged account access abuse, and more. |
| Cloud malware protection and remediation |
Detect and block or quarantine infected files and replace with tombstone files. Remediation options include blocking and quarantining as well as analysis and response workflows. Layered detection approach includes static and heuristic analysis, machine learning, and sandboxing. |
| ARCHITECTURAL ADVANTAGE |
|
| All-mode architecture | Supports all near real-time and real time modes. Industry’s only visibility and control for web as well as sanctioned and unsanctioned SaaS and IaaS. Modes are often deployed simultaneously to cover key use cases. |
| Cloud-scale infrastructure | Unlike traditional security tools limited by the compute, storage, and I/O available in a physical appliance, the Netskope platform has virtually infinite resources and scalability. |
As people become increasingly mobile, collaborate more freely, and shift more of their data to the cloud, enterprises need security that governs use and protects data everywhere. Instead, most IT teams are still struggling with legacy security products that simply can’t contend with this new way people work.Our platform enables enterprises to secure both sanctioned and unsanctioned cloud services, protect sensitive data across the cloud and web, and stop the most advanced online threats. Please contact us or call 0845 625 9025 to see our Cloud Security platform in action.
