Overview
Netskope One DSPM sidecars are deployed as part of sidecar pools, which are associated with a security token during their installation process. Depending on your sidecar deployment model, tokens are generated within the Netskope One DSPM application as you create & maintain sidecar pool registration records, or automatically maintained by the orchestration tool being used.
To learn more about sidecars, please visit one of the following deployment model-specific articles:
- Installing Netskope One DSPM sidecars via AWS CloudFormation
- Installing Netskope One DSPM sidecars via AWS Terraform
- Installing Netskope One DSPM sidecars via Azure Container Instances
- Installing Netskope One DSPM application and sidecars using AWS Helm
Registering a Sidecar Pool
Excerpt: Sidecar: Registration
Log into the Netskope One DSPM application. Navigate to the Administration > Sidecar Mana
To set up the relationship between your sidecars and Netskope One DSPM-hosted tenant, you will provide the sidecars with a unique authentication token generated within our Sidecar Administration UI.
If you already have an existing sidecar pool token to use, you can skip this section. Otherwise, follow these instructions to acquire a new token.
- Log into the Netskope One DSPM application.
- Navigate to the Platform Settings > Sidecar menu to display the Sidecar Administration screen.
- Click the Add Sidecar Pool button.
- The Add Sidecar Pool modal is displayed.
- On the Details tab, complete the following field:
Field | Value |
---|---|
Name | Any friendly value to describe the sidecar pool. |
- Click Save.
- Click Copy at the bottom of the Sidecar Authentication Token modal to save the generated token to your clipboard.

- Click the “x” button to exit the modal.
Since you haven't yet associated this token with a sidecar, the sidecar pool will appear only when you click the Show Inactive Sidecars icon in the upper right, with empty Version and Status columns for now.
The above-generated token will be used for each individual sidecar within the sidecar pool.
Editing Sidecar Pool Registrations
- Log into the Netskope One DSPM application.
- Navigate to the Administration > Sidecar Administration screen.
- For the sidecar pool registration you wish to edit, click the Edit icon.
- The Edit Sidecar Pool modal is displayed.
- After performing your edits, click the SAVE button.
SSL Proxy
Excerpt: Sidecar: SSL Proxy
If your organization uses an SSL proxy within your environment, you may need to take the following steps for your sidecar to properly communicate with Netskope One DSPM. Instructions will vary based on your deployment method.
Helm
- Open dasera_templates_sidecar.yaml.
- Edit SIDECAR_ALLOW_SELF_SIGNED_CERTIFICATES parameter.
- Redeploy Helm Chart.
EC2, including via CloudFormation or Terraform
For each instance:
- SSH into EC2 instance.
- Edit your ~/.bashrc to add the following line:
- Restart instance.
Azure Container
- Follow steps in Register Sidecar Pool to repeat ACI-based deployment and generate an authentication token.
- As part of the redeployment, add new parameter SIDECAR_ALLOW_SELF_SIGNED_CERTIFICATES.
- Restart container instances.