Netskope Active

The IBM QRadar DSM for Netskope Active collects events from your Netskope Active servers.

Important: The IBM QRadar DSM for Netskope Active is deprecated.

To continue taking advantage of this integration, please download the Netskope Security Cloud DSM from the IBM Security App Exchange website (https://exchange.xforce.ibmcloud.com/hub/extension/ff97aaadc10ed96b0e05d1a1f24af2f7).

The following table identifies the specifications for the Netskope Active DSM:
Table 1. Netskope Active DSM specifications
Specification Value
Manufacturer Netskope
DSM name Netskope Active
RPM file name DSM-NetskopeActive-Qradar_version-build_number.noarch.rpm
Protocol Netskope Active REST API
Recorded event types Alert, All
Automatically discovered? No
Includes identity? Yes
More information Netskope Active website (www.netskope.com)

To integrate Netskope Active DSM with QRadar complete the following steps:

Note: If multiple DSM RPMs are required, the integration sequence must reflect the DSM RPM dependency.
  1. If automatic updates are not enabled, download and install the most recent version of the following DSMs from the IBM® Support Website onto your QRadar Console.
    • Netskope Active DSM RPM
    • Netskope Active REST API Protocol RPM
    • PROTOCOL-Common RPM
  2. Configure the required parameters, and use the following table for the Netskope Active log source specific parameters:
    Table 2. Netskope Active log source parameters
    Parameter Value
    Log Source type Netskope Active
    Protocol Configuration Netskope Active REST API