Install and configure the Netskope DLP integration for Data Loss Prevention
Install and configure the Netskope DLP integration from ServiceNow Store ServiceNow AI Platform instance. You can start investigating DLP incidents using the Netskope DLP incident data.
Before you begin
Role required: sn_dlir.admin
Procedure
Download the Netskope DLP integration from the ServiceNow Store and install it.
Navigate to Security Operations ** > Integrations ** > Integration Configurations
Search for
DLP Incident Response Integration with Netskopetile, and click Configure.On the form, fill in the fields.
Note: Make sure your Netskope API v2 Token has the below endpoint privileges:
- Read: /api/v2/incidents/dlpincidents
- Read: /api/v2/events/dataexport/events/incident
- Read + Write: /api/v2/incidents/update
Create REST API Token\[Omitted image "netskope-config.png"\] Alt text: Netskope Configuration
|Field|Description|
|-----|-----------|
|Name|Name of the Netskope DLP integration configuration.|
|Netskope Tenant|The Netskope base URL for the Netskope tenant.|
|Netskope API v2 Token|Token configured for REST API v2 on your user account at Netskope.|
- Click Submit.
Result
Note: Please connect netskope sub prod to the ServiceNow sub prod. Keep all the username and passwords in sync across the instances to avoid accounts getting logged out.
After you successfully validate and submit the configuration, the Netskope DLP Integration is saved on the Security Integrations page as a tile.
Parent Topic:Data Loss Prevention Incident Response Integration with Netskope