Overview
This article details how to create a Netskope One DSPM instance within your own Google Cloud Platform (GCP) VPC. Once you have access to the Netskope One DSPM custom image, please follow the steps below to configure and launch your instance.
Prerequisites
Before beginning, the Netskope One DSPM application page needs to be shared with your organization. To request this, please contact your CSM and supply:
- Your GCP account number, which Netskope One DSPM will use to share a custom image; and
- Name & email address of an administrator user (or a Service Account) within the above account to whom we should grant access to that image.
Install Netskope One DSPM
- Click this link to log into your GCP VM Instances Console, which will navigate you to Compute Engine > VM Instances.
- If necessary, select the Project where you wish to install Netskope One DSPM.
- If prompted, enable the Compute Engine API.
- Click the CREATE INSTANCE button (circled below).
- On the next screen, complete the following fields:
- Name: any value; it is recommended to include "Netskope One DSPM" in the name, to make it easier to identify.
- Machine Configuration > Machine Type: select "e2-standard-8", unless your Netskope One DSPM Customer Success Manager has advised differently.
- Firewall > Allow HTTP Traffic: checked
- Under the Boot Disk section, click the CHANGE button.
- Select the CUSTOM IMAGES tab.
- Click the SELECT PROJECT button.
- In the modal, select the GCP Project where you wish to install Netskope One DSPM. The modal will dismiss, returning you to the slide-out dialog.
- Complete the following fields:
- Image: select the custom image shared with you by Netskope One DSPM
- Click the SELECT button.
- Click on NETWORKING, DISKS, SECURITY, MANAGEMENT, SOLE-TENANCY to expand its section
- Click on Management to expand its sub-section
- Complete the following fields:
- Automation: enter the following commands for the startup script
#! /bin/bash
# wait a few seconds in case the network finishes loading before postgres service does
sleep 15
export PATH=$PATH:/home/Netskope One DSPM/discovery/bin
sudo iptables -A PREROUTING -t nat -p tcp --dport 80 -j REDIRECT --to-port 8080
/home/Netskope One DSPM/discovery/bin/discovery start
- Click the CREATE button to create and start the Netskope One DSPM instance.
After starting the VM, shut it down, and then start it up again, as a part of the startup script doesn’t run from a completely fresh boot, but it does on the second and subsequent starts.
Next Steps
- Access your new Netskope One DSPM instance to validate its installation.
- Connect Netskope One DSPM to your GCP Projects so Data Store discovery & scanning can begin. To learn more, please visit our Onboarding GCP projects within Netskope One DSPM instances article.