Blog Post

Microsoft Entra Blog
3 MIN READ

Microsoft and Netskope: Unified, identity-centric security

Reshmi Yandapalli's avatar
Nov 19, 2024

Microsoft and Netskope simplify security with a unified, all-in-one network solution.

As announced at Microsoft Ignite, Microsoft is partnering with Netskope to simplify network security management for today’s dynamic, distributed environment. By integrating Netskope’s Advanced Threat Protection (ATP) and Data Loss Prevention (DLP) directly into Microsoft Entra’s Security Service Edge (SSE) solution, we empower security teams with advanced security controls, streamlined configuration, enhanced reporting, and unified management experience— all within a single platform. This is now available in private preview, with a public preview set for early next year. 

Microsoft’s SSE solution integrates these capabilities by bringing essential security functions into a centralized view. Leveraging Microsoft Entra Conditional Access, this streamlined approach provides consistency and control across security operations, enabling teams to manage critical tasks with advanced identity and access management capabilities. 

 

Figure 1: Activate advanced security capabilities from Netskope in Microsoft’s Security Service Edge solution

Here, in more detail, are the key product integrations within Microsoft’s SSE solution: 

Advanced threat protection at scale 

Microsoft is augmenting its SSE solution through deep integrations with network security capabilities from other vendors to help you stay protected against sophisticated threats. This includes Netskope ATP’s Fast Scan for quick, real-time malware detection and Deep Scan for advanced file analysis, including de-obfuscation and sandboxing to counter sophisticated zero-day threats. Powered by Microsoft’s global private network infrastructure, this integration delivers high-speed, resilient security for globally distributed workforces, helping enforce security close to the user and minimizing latency.

 

Figure 2: Netskope Threat Protection policy

 

Streamlined Data Loss Prevention (DLP) 

Microsoft continues to enhance its SSE solution’s DLP capabilities by integrating Netskope’s DLP, strengthening our platform’s ability to identify and block potential data leaks in real-time, stopping them before any data is exposed. This integration introduces advanced content inspection and contextual analysis, ensuring your data remains secure, whether it’s being accessed, shared, or stored. Fully integrated with Microsoft’s SSE solution, this DLP functionality provides seamless, policy-driven protection, removing unnecessary complexity from your security environment. 

Simplified management with a unified front  

A key advantage of this functionality is the simplified management experience. Microsoft has integrated these systems so that security teams can oversee all tools from a single platform. Access policies, traffic logs, and threat profiles are centrally managed within the Microsoft Entra Admin center, significantly reducing the operational complexity of managing multiple solutions. 

 

Optimal productivity with optimized connectivity 

When advanced security controls are enabled and enforced, access to the internet remains optimized for users, as they continue to work remotely. Microsoft’s SSE solution supports deep threat scanning without compromising connectivity, allowing users to stay productive without sacrificing security performance. 

 

Figure 3: Link your policy to a Global Secure Access Security profileFigure 4: Global Secure Access snapshots, alerts, and notificationsFigure 5: Netskope threat alerts integrated inside Global Secure Access

Roadmap and future integrations 

Microsoft and Netskope remain committed to ongoing innovation, helping customers accelerate their journey to a Zero Trust security model. This partnership will continue to simplify the enablement of advanced network security controls, ensuring protection against sophisticated threats and safeguarding sensitive data. Built on Microsoft’s identity-centric, unified SASE platform, this solution seamlessly integrates with other network security providers for a comprehensive security experience. 

Looking ahead, the roadmap for Netskope integrations with Microsoft's SSE solution includes advanced file size support, enabling the scanning of larger and more complex file types. Additionally, new reporting features will be introduced, offering in-depth malware insights to enable teams to perform deeper threat analysis. 

Get started and learn more 

Get started with Microsoft’s SSE solution today and simply enable Netskope ATP capability. For more details, visit the ATP Private Preview. 

Have questions? Join our Tech Community Live – Ask Microsoft Anything event on December 3rd to dive deeper into our integration with Netskope! You can register here.

 

Reshmi Yandapalli, Principal Product Manager

 

Read more on this topic 

 

Learn more about Microsoft Entra  

Prevent identity attacks, ensure least privilege access, unify access controls, and improve the experience for users with comprehensive identity and network access solutions across on-premises and clouds. 

Updated Nov 18, 2024
Version 1.0
No CommentsBe the first to comment