Integrate Reveal(x) Enterprise with Netskope
This integration enables you to configure ExtraHop sensors to ingest packets from your Netskope solution to detect threats, discover and monitor devices, and gain insight into traffic.
Enable Netskope packet ingest
You can enable Netskope packet ingest on one or more sensors on the ExtraHop system.
Before you begin
- Your user account must have full write privileges or higher on Reveal(x) Enterprise.
- Your Reveal(x) system must be connected to an ExtraHop sensor with firmware version 9.4 or later.
- Your ExtraHop sensor must be dedicated to ingesting Netskope packets only.
- You must configure at least one interface on your ExtraHop sensor; all interfaces must specify a mode that includes GENEVE encapsulation.
- You must configure TAP mode in your Netskope environment.
- Log in to the Administration settings on the ExtraHop system through https://<extrahop-hostname-or-IP-address>/admin.
- From the Network Settings section, click Connectivity.
- From the Netskope Settings section, select Enable Netskope packet ingest.
- Click Save.
Next steps
- Log into Administration settings on the connected Reveal(x) Enterprise console to check the status of sensors integrated with Netskope.
- From the Assets page, you can search for this sensor to view traffic and detections observed from the Netskope data.
Thank you for your feedback. Can we contact you to ask follow up questions?