Zservices CASB Powered by Netskope
for any sanctioned cloud service
Whether you have sanctioned Office 365, Box, Amazon AWS, or any of the more than 20,000 cloud services available, an extra layer of security is critical to protecting you against sensitive data leakage, cloud threats, and risk associated with non-compliant behavior. Zservices CASB Powered by Netskope provides real-time, granular visibility and control of all of your sanctioned cloud services. Zservices CASB Powered by Netskope provides rich, contextual details around cloud usage including users, devices, activities, data, and more. Automated workflows include options for changing access permissions, quarantining sensitive or threatening files, or alerting users with customized coaching messages. With Zservices CASB Powered by Netskope, your organization can get the most out of the cloud while keeping you safe and compliant.
KEY FEATURES
ALL MODE ARCHITECTURE
The unique Zservices CASB Powered by Netskope all-mode architecture offers you an array of deployment options to gain visibility and control of your sanctioned cloud services, whether your users are on premises or remote, using a web browser, mobile app, or sync client. Options include out-of-band API introspection for selected cloud services, like Office 365 and Salesforce, as well as forward and reverse proxy modes for real-time policy controls for any cloud service.
-
API introspection provides direct, out-of-band connection into selected cloud services
-
Reverse proxy covers cloud service access from outside your network
-
Forward proxy covers any cloud service
-
Different modes can be combined to expand your coverage
ADVANCED CLOUD DLP
Zservices CASB Powered by Netskope Cloud DLP protects sensitive data in the cloud with accuracy and precision, with the ability to inspect all sanctioned and unsanctioned cloud services. Sensitive content is detected across 500+ file types and across structured and unstructured data, using 3,000+ data identifiers, metadata extraction, proximity analysis, fingerprinting, exact match, and more.
-
Control sensitive data in your sanctioned cloud services and en route to and from all cloud services
-
Get the highest degree of accuracy with fingerprinting and exact match
-
Further increase accuracy with keyword dictionaries, global data identifiers, and more
-
Target DLP policies using context like user, group, device, service, and activity
DATA ENCRYPTION
Zservices CASB Powered by Netskope enables organizations to protect their sensitive content as it leaves their perimeter and moves into your sanctioned cloud service, allowing them to retain full control of it. Zservices CASB Powered by Netskope provides strong encryption capabilities to enhance the security and confidentiality of content exposed to the cloud. Files can be selectively encrypted in flight or encrypted as they are stored in your sanctioned cloud service.
-
Uses AES-256 with a per-file key controlled by fault-tolerant, FIPS 140-2 Level 3 certified HSMs
-
Optionally integrate Zservices CASB Powered by Netskope Encryption with your on-premises, KMIP-compliant key management system to ensure that you retain control of the keys and their lifecycle
-
Real-time, in-flight protection as well as offline and retroactive, near real-time protection, ensuring 360° coverage
CONTEXT & CONTROL
Zservices CASB Powered by Netskope gives you granular visibility and control of your cloud services. Rather than take a coarse-grained approach by blocking services entirely, Zservices CASB Powered by Netskope gives you a deep understanding of your cloud service usage and allows you to define targeted security policies based on identity, service, activity, and data.
-
Policy actions include block, alert, encrypt, quarantine, and coach
-
Distinguish between different cloud service instances
-
Mitigate risk of inappropriate sharing and public links
-
Mix and match policy elements to carve out risk without blocking services
THREAT PROTECTION
Zservices CASB Powered by Netskope is the only CASB with complete threat defense for your sanctioned cloud services, combining unparalleled cloud visibility with multi-layered threat detection and integrated remediation workflows. Zservices CASB Powered by Netskope can quickly detect, prevent, and remediate the effects of cloud threats, which too often evade existing security solutions.
-
Threat protection with unique cloud vantage point
-
Detect anomalies that could indicate an active threat
-
Proprietary threat intelligence from Zservices CASB Powered by Netskope Threat Research Labs complemented by 40+ external sources
TOP USE CASES
Secure data
Detect sensitive content at rest in your sanctioned cloud services or en route to or from any cloud service with advanced, enterprise cloud DLP. Define granular policies – based on identity, service, activity and data – to automatically protect your data by blocking activities, restricting access, encrypting data, and more.
Control access
Detect all access to your sanctioned cloud services, regardless of where your users are located or what device they are using. Apply the appropriate access control policy based on the situation. For example, allow users on unmanaged devices to view content in your sanctioned cloud services but restrict other activities such as downloads and shares to protect sensitive data.
Stop threats
The cloud makes it easy to share, but this same capability makes cloud services an attractive target for malicious actors. Protect your organization from cloud threats such as malware and ransomware and also detect unusual data movement or user activity that could indicate the presence of an active threat in your environment.
Prevent data loss
Zservices CASB Powered by Netskope provides a unique vantage point across all of your cloud services to help you detect data movement that could signal a data exfiltration attempt by an insider. Zservices CASB Powered by Netskope anomaly detection combined with our DLP capabilities can correlate the download of sensitive data from a sanctioned cloud service with the upload of the same data to a personal cloud service.
Coach users
Make your users part of your security solution. Zservices CASB Powered by Netskope can provide your users with automated, customized coaching messages to address undesirable cloud activities. For example, you can coach them to use your sanctioned cloud service when they try to use an unauthorized cloud service, or warn them about sensitive data handling policies when they try to upload sensitive data to a risky cloud service.
Want to see the Zservices CASB Powered by Netskope Active Platform in action?
Request A Demo