Install and configure the Netskope DLP integration for Data Loss Prevention

Install and configure the Netskope DLP integration from   ServiceNow Store   ServiceNow AI Platform instance. You can start investigating DLP incidents using the  Netskope DLP incident data.

Before you begin

Role required: sn_dlir.admin

Procedure

1. Download the  Netskope DLP integration from the ServiceNow Store and install it.
2. Navigate to  Security Operations  > Integrations  > Integration Configurations
3. Search for  DLP Incident Response Integration with Netskope tile, and click  Configure.
4. On the form, fill in the fields.
   Note:

   Make sure your Netskope API v2 Token has the below endpoint privileges:

   • Read: /api/v2/incidents/dlpincidents
   • Read: /api/v2/events/dataexport/events/incident
   • Read + Write: /api/v2/incidents/update

   

   Field	Description
   Name	Name of the Netskope DLP integration configuration.
   Netskope Tenant	The Netskope base URL for the Netskope tenant.
   Netskope API v2 Token	Token configured for REST API v2 on your user account at Netskope.

5. Click Submit.

Result

Note:

Please connect netskope sub prod to the ServiceNow sub prod. Keep all the username and passwords in sync across the instances to avoid accounts getting logged out.

After you successfully validate and submit the configuration, the Netskope DLP Integration is saved on the Security Integrations page as a tile.