---
title: Netskope
description: Monitors Netskope security events and alerts
breadcrumbs: Docs > Integrations > Netskope
---

# Netskope
Supported OS marketplaceIntegration version2.1.1            Netskope - OverviewNetskope - AlertsNetskope - Application EventsNetskope - Audit EventsNetskope - Connection EventsNetskope - Incident EventsNetskope - Infrastructure EventsNetskope - Network Events
## Overview{% #overview %}

Netskope is a cloud security platform that provides security solutions to manage and secure cloud-based applications and data. Several features include cloud access security broker (CASB), data loss prevention (DLP), threat protection, and web security.

This integration monitors alerts triggered in Netskope as well as events generated for infrastructure, network, connection, audit, application, and incident. It also helps users visualize the alerts and events generated in Netskope by using various data-rich dashboards available out-of-the-box.

This integration includes the following [Datadog Cloud SIEM](https://docs.datadoghq.com/security/cloud_siem.md) detection rules for enhanced monitoring and security:

1. Netskope received DLP alerts for multiple blocked actions within one hour
1. Netskope observed large file transfer activity
1. Netskope detected low confidence cloud application interaction
1. Netskope detected multiple policy violations by a single user

**Note**: To use the out-of-the-box detection rules, the relevant integration must be installed in Datadog, and Cloud SIEM must be enabled.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **cds.netskope.application.bytes\_transferred.client\_bytes**(gauge) | Application bytes sent from client side.*Shown as byte*         |
| **cds.netskope.application.bytes\_transferred.server\_bytes**(gauge) | Application bytes received from server side.*Shown as byte*     |
| **cds.netskope.connection\_cci.cci**(gauge)                          | Cloud confidence index.*Shown as occurrence*                    |
| **cds.netskope.network.client\_bytes**(gauge)                        | Network bytes sent from client side.*Shown as byte*             |
| **cds.netskope.network.server\_bytes**(gauge)                        | Network bytes received from server side.*Shown as byte*         |
| **cds.netskope.network.client\_packets**(gauge)                      | Network packets sent from client side.*Shown as occurrence*     |
| **cds.netskope.network.server\_packets**(gauge)                      | Network packets received from server side.*Shown as occurrence* |
| **cds.netskope.network.session\_duration**(gauge)                    | User network session duration.*Shown as second*                 |

### Service Checks{% #service-checks %}

**cds.netskope.status**

Returns `CRITICAL` if the user configurations are invalid or server authentication fails. Returns `OK` otherwise.

*Statuses: ok, critical*

## Support{% #support %}

For support or feature requests, contact Crest Data through the following channels:

- Support Email: [datadog.integrations@crestdata.ai](mailto:datadog.integrations@crestdata.ai)
- Sales Email: [datadog-sales@crestdata.ai](mailto:datadog-sales@crestdata.ai)
- Website: [crestdata.ai](https://www.crestdata.ai/)
- FAQ: [Crest Data Datadog Marketplace Integrations FAQ](https://docs.crestdata.ai/datadog-integrations-readme/Crest_Data_Datadog_Integrations_FAQ.pdf)

This application is made available through the Marketplace and is supported by a Datadog Technology Partner. Click Here to purchase this application.