Netskope API V2 collector
- Juan Tomás Alonso Nieto (Deactivated)
Overview
Netskope Cloud Access Security Broker (CASB) is a security solution designed to provide visibility, control, and protection for data and applications in cloud environments. CASBs address the security challenges posed by the increasing adoption of cloud services, offering a layer of security between cloud service users and cloud applications to enforce security policies.
Netskope CASB Collector requests logs from Netskope APIs and sends them to Devo.
Devo collector features
Feature | Details |
|---|---|
Allow parallel downloading ( |
|
Running environments |
|
Populated Devo events |
|
Data sources
The data is collected using a Devo collector that can be run on the Devo collector server or standalone in a Docker container. The data is sent and stored in the Devo platform in these tables:
Type | Event / Alert | Devo table |
|---|---|---|
Event |
|
|
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
Alert |
|
|
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
More information about the API calls can be found here.
For more information on how the events are parsed, visit our page.
Vendor setup
Netskope API collector works over the API to retrieve the data, so a token is required to get the data via API. Follow the steps here to get an API token.
Rate limiting
Rate-limiting must be factored in when using the Netskope REST APIs. A standard 429 Too Many Requests error will be returned if an excessive usage level is reached. To avoid this error, limit your REST API calls. The global rate limit can be checked at the top of the page.
In this example (4 req/s), limit the API calls to no more than 20 requests every 5 seconds. Four requests are processed in the first second, while 16 are queued and processed over the next four seconds.
Run the collector
Once the data source is configured, you can either send us the required information if you want us to host and manage the collector for you (Cloud collector), or deploy and host the collector in your own machine using a Docker image (On-premise collector).
Change log
Release | Released on | Release type | Details | Recommendations |
|---|---|---|---|---|
| May 30, 2024 | IMPROVEMENTS | Improvements:
|
|
| Sep 25, 2023 | IMPROVEMENTS | Improvements:
|
|
| Aug 29, 2023 | FEATURE | New features:
|
|