--- sourceDocument: Store Version History Release Notes sourceDocumentLink: https://www.servicenow.com/docs/r/store-release-notes Release : - store ft:locale : - en-US ft:publication_title : - Store Version History Release Notes ft:clusterId : - rnst bundleId : - rnst --- # DLP Incident Response integration with Netskope release notes # DLP Incident Response integration with Netskope release notes {#ariaid-title1} Release version: Store Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of DLP Incident Response integration with Netskope release notes The DLP Incident Response integration with Netskope enables ServiceNow customers to import and manage Data Loss Prevention (DLP) incidents from Netskope within the ServiceNow platform. This integration supports incident ingestion, status mapping, evidence file management, and user access controls, providing a comprehensive incident response workflow that enhances security operations. Show full answer Show less ## Key Features * **DLP Incident Ingestion:** Supports importing DLP incidents from Netskope, replacing the deprecated alerts ingestion and allowing near real-time and on-demand scans. * **Incident Status Mapping:** Maps DLP incident states between Netskope and ServiceNow to maintain consistent tracking and management of incidents. * **Evidence File Management:** Allows previewing and downloading of evidence files directly within the DLP Workspace, simplifying review and retrieval processes. * **Access Control:** Implements Access Control Lists (ACLs) in the DLP Incident Response workspace to manage user permissions and secure sensitive data. * **Security Enhancements:** Upgraded dictionary-level fields to Strict Read-Only to prevent unauthorized changes across UIs, scripts, and integrations. * **Correlation ID and Archival Support:** Added mapping for correlation IDs and support for archiving DLP incidents to streamline incident tracking and lifecycle management. * **End-User Portal Actions:** Enables end-users to perform actions within the DLP end-user portal, improving engagement and response efficiency. ## Fixes and Improvements * Resolved issues with stalled incident ingestion when Netskope API returned empty responses. * Fixed access issues for analysts querying tables to ensure smooth operation. * Corrected problems with accessing match content and mapping of Netskope fields like actinguser. * Ensured manual updates to incident state fields by customers are preserved and not overwritten by the system. * Addressed intermittent issues with empty values in Integration Source and Domain fields during incident creation. * Fixed mapping issues between Netskope fields and ServiceNow, ensuring accurate data synchronization. ## Practical Benefits for ServiceNow Customers This integration streamlines the ingestion and management of Netskope DLP incidents in ServiceNow, enabling faster and more secure incident response workflows. Customers gain enhanced visibility into violating content, improved evidence handling, and stronger access controls, all contributing to more effective data loss prevention and compliance efforts. Version history for the DLP Incident Response integration with Netskope on the ServiceNow Store. Important: For details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website. ## Version history Version 1.2.4 - September 2026 : Fixed: Netskope DLP incident ingestion no longer stalls the profile in a Running state when the dataexport incidents API returns an empty response Version 1.2.2 - June 2026 : Fixed: Access issues for analysts while querying tables. Version 1.2.1 - January 2026 : Fixed: Fixed accessing match content. Version 1.1.0 - December 2025 : New: Upgraded all dictionary-level read-only fields to Strict Read-Only to enhance security and prevent unauthorized changes. This update ensures the server consistently enforces read-only behavior across all UIs, scripts, and integrations. Version 1.0.30 - August 2025 : Fixed: Resolved an intermittent issue during DLP incident ingestion from NetSkope, where incidents were being created with empty values for Integration Source and Domain fields. Version 1.0.18 - July 2025 : * Fixed: * Netskope DLP Status Mapping Overwrite: * Resolved an issue where updates made by customers to the state of a DLP record in the sn_dlir_incident table were being automatically overwritten by the system user. With this fix, the system will no longer override the state field if it has been manually updated by the customer, ensuring customer changes are preserved as expected. {#store-secops-rn-dlp-incident-response-netskope__ul_yzn_q32_wfc} {#store-secops-rn-dlp-incident-response-netskope__ul_jsl_q32_wfc} {#store-secops-rn-dlp-incident-response-netskope__ul_cjc_q32_wfc} Version 1.0.17 - May 2025 : * Fixed: * Updated Netskope's acting_user field for End User Lookup mapping. * Ingestion of Netskope DLP Incidents from when status mapping enabled. {#store-secops-rn-dlp-incident-response-netskope__ul_gjj_zmb_cfc} {#store-secops-rn-dlp-incident-response-netskope__latest-store-secops-rn-dlp-incident-response-integration-ms} {#store-secops-rn-dlp-incident-response-netskope__latest-store-secops-rn-dlp-incident-response-integration-ms} Version 1.0.16 - February 2025 : * New: * Evidence File Preview with Download Option: * Added a preview icon for evidence files in the DLP Workspace. * Users can now preview evidence files and download them directly from the preview interface, simplifying evidence review and retrieval. {#store-secops-rn-dlp-incident-response-netskope__ul_mfm_pk2_d2c} {#store-secops-rn-dlp-incident-response-netskope__ul_w2m_pk2_d2c} Version 1.0.14 - December 2024 : Fixed: Access Control Lists (ACLs) applied to the Data Loss Prevention Incident Response(DLP IR) end-user workspace to regulate and manage user permissions and access. Version 1.0.12 - August 2024 : * New: * Added support for ingesting DLP incidents. * Deprecated support for alerts ingestion. * View the forensic details (violating content) of the DLP Incidents in both DLP IR Analyst workspace and DLP End user workspace. * Downloading evidence file directly from Netskope on demand. * Map the DLP incidents status between Netskope Object Status and ServiceNow incident status. {#store-secops-rn-dlp-incident-response-netskope__ul_p2c_pwk_dcc} Version 1.0.4 - February 2024 : * New: * Added correlation ID mapping for DLP incidents in the transform map. * Added support for the DLP incidents archival. {#store-secops-rn-dlp-incident-response-netskope__ul_umc_z3v_21c} Version 1.0.3 - June 2023 : Fixed: The existing fields in Netskope are not mapped to ServiceNow, this issue is now fixed. Version 1.0.0 - May 2022 : * New: * Import DLP incidents from Netskope to provide an incident response workflow for customers * Support incidents created by data-at-rest scan from Netskope: both near real-time as well as on-demand scan * Provides the ability to perform actions from within DLP end-user portal for end-users {#store-secops-rn-dlp-incident-response-netskope__latest-store-secops-rn-dlp-incident-response-netskope} {#store-secops-rn-dlp-incident-response-netskope__latest-store-secops-rn-dlp-incident-response-netskope}