Netskope Custom Application Signature

Hi,

Please review the below links to guide you further:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Custom-IPS-signatures-from-Fortinet/ta-p/194530?externalID=13831
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-apply-and-validate-a-custom-application/ta-p/205867
https://docs.fortinet.com/document/ipsengine/7.4.0/custom-ips-and-application-control-signature-syntax-guide/274110/creating-ips-and-application-control-signatures
https://community.fortinet.com/t5/FortiGate/Technical-Tip-custom-application-signature-to-block-Facebook/ta-p/250626

Thanks,

Hi,

For the application signature we need to allow:
gateway-kcdsb.goskope.com tcp-443
gateway-backup-kcdsb.goskope.com tcp-443
addon-kcdsb.goskope.com tcp-443
download-kcdsb.goskope.com tcp-443
achecker-kcdsb.goskope.com tcp-443
eproxy-kcdsb.goskope.com port 8081
vpn-kcdsb.goskope.com tcp-443
sfchecker.goskope.com tcp-443

I'm thinking it would be something like:
F-SBID(--name "Netskope.Custom";--protocol tcp,udp; --service http,https; --dst_port 443,8081; --flow from_client; --pattern ".goscope.com"; --context host; --distance 0,context; --no_case; --pattern "/v/"; --context uri; --within 15,context; --no_case; --context uri; --distance 0; --weight 20;--app_cat <#>;)

Not sure if the syntax is correct and for app_cat what would I replace <#> with to have it go under Cloud.IT?

Thanks.