Netskope CFW blocks outbound connection to malicious IP/C2 or high-risk port

KQL Cowboy@KQLCowboy

•updated Aug 18, 2026•0•0•2

This rule detects outbound network connections that were blocked by security controls due to matching a threat signature or being categorized as malicious or command-and-control (C2) traffic.