Major New Features

Microsoft 365 Discovery and Classification

Netskope One DSPM now supports Discovery and Classification within SaaS applications, beginning with Microsoft 365. Attain unparalleled visibility into potential risks by scanning data across OneDrive, SharePoint Sites, and Teams attachments, better understanding the types of sensitive information being shared and its precise location within your organization. This knowledge equips users to proactively establish internal policies and alerts, enabling the implementation of automatic remediation measures and simplifying policy compliance. Read more about Microsoft 365 Infrastructure and connecting these data stores.

Snapshots for AWS RDS Data Store Connections

Netskope One DSPM now supports snapshot-based data classification for AWS RDS and Aurora data stores. Snapshots eliminate the need to create service accounts for data store connections, simplifying the onboarding process with zero performance impact. This non-intrusive method enables comprehensive risk analysis without disrupting operational efficiency.

Tag Ingestion for AWS

When connecting an AWS data store, Netskope One DSPM can now ingest all AWS database tags into the Data Tag catalog, expanding upon existing tag ingestion capability from GCP and Snowflake data stores. Any tags applied to AWS data stores are then available in the Data Store Inventory and can be used to drive policy conditions and outcomes. This unified metadata catalog facilitates more precise alerting and remediation across your organization. Please double-check your existing AWS infrastructure connections to ensure all necessary permissions are setup to use this feature. 

Improvements and Updates

Scan Activity Improvements

The Activity Logs page now has a Scan Activity tab consolidating your data store scan history. Each scan activity record displays date/time, scan type (scheduled or manual), sidecar pool name, sidecar name, description, and scan result (fail, complete, or aborted). As with other tabs, Scan Activity logs can be exported to CSV. This provides a unified location for understanding progress, outcomes, and issues with your scans.

The upgraded Sidecar Administration UI helps you understand your sidecar fleet state and makes debugging scan and connection issues easier. Sidecar name and data store counts link out to Scan Activity and Data Store Inventory, respectively, filtered for the specific sidecar. Instead of auto-removal, inactive sidecars are hidden, displaying when the hide/show icon is clicked. A dynamic upgrade indicator appears when an active sidecar is running a previous version, and attempting to delete a sidecar pool associated with a data store displays a new confirmation prompt. Finally, the Data Stores Open API has been updated to include all new values.

Built-in Classifiers for CUSIP and LEI

Legal Entity Identifier (LEI) and Committee on Uniform Securities Identification Procedures numbers (CUSIP) are now supported as built-in classifiers on the Sensitive Data Types page under Financial Information. This capability improves Netskope One DSPM's coverage of key classifiers for the Financial sector, helping our customers get better visibility into their data and inform corporate policies.

Unstructured Support Improvements

You'll now see exactly how many sensitive files, mapped usernames, open alerts, and open tasks will be removed from Netskope One DSPM when disconnecting an unstructured data store, demonstrating the impact of the disconnection.