Deploying Windows endpoints

Important: After deploying Forcepoint DLP Endpoint, you must restart the Forcepoint F1E software to complete the installation process.
There are a few ways to distribute the Forcepoint F1E software on Windows endpoint machines:
  • Deploy Forcepoint F1E manually on each endpoint machine.

    See Manually deploying Forcepoint F1E agents on a Windows endpoint machine.

  • Deploy Forcepoint DLP Endpoint to a shared server that hosts Citrix XenApp, Citrix XenDesktop, or Citrix Virtual Apps desktop virtualization software, or deploy Forcepoint ECA to a shared server that hosts Citrix XenDesktop software. This deployment method is similar to the manual deployment, but you deploy the installation package to a network server instead of each endpoint machine.

    Supported Citrix versions are listed in the Certified Product Matrix.

    For more information about specific installation and configuration instructions for Forcepoint DLP Endpoint, see Deploying Forcepoint DLP Endpoint on Citrix XenApp, XenDesktop, and Virtual Apps clients.

    For more information about deploying software to a Citrix virtual environment, see the Citrix documentation.

  • Deploy Forcepoint ECA to a limited set of endpoint machines using the ECA Evaluation deployment option. Forcepoint NGFW 6.6 or later is required to use the ECA Evaluation feature.

    For more information, see Knowledge Base article 16193.

  • Deploy Forcepoint F1E using a third-party deployment tool for Windows. Forcepoint F1E can be remotely deployed using your preferred deployment server or distribution system, as long as it accepts an Executable (.exe) or ZIP (.zip) file as the input and can run the installation command remotely.

    Important: If you deploy Forcepoint F1E using GPO, do not restrict access to the command prompt. The Disable the command prompt script processing also? option should be set to No.