Before you begin

  • For best practice, start by deploying and testing Forcepoint F1E software on a few local network machines, then increase to a limited number of remote machines before deploying the software throughout your enterprise.
  • Check that your endpoint machines meet the minimum system requirements. See System requirements for details.
  • Verify that you have administrator access rights on the endpoint machine. Forcepoint F1E installation requires local administrator rights.
  • Exclude the Forcepoint F1E directories from any antivirus software deployed to the endpoint machines. For a full list, see Excluding Forcepoint files from antivirus scans.
  • Ensure the Forcepoint F1E installation path is not encrypted by file and folder encryption software. All folders and files within the installation path must be left unencrypted.
  • Forcepoint F1E can be installed on an endpoint machine encrypted using full disk encryption. Forcepoint F1E must be installed after the disk has been encrypted.
  • If you are deploying Forcepoint DLP Endpoint, disable the auto-update feature in the Web Security module of the Forcepoint Security Manager.
  • For hybrid web deployments, make sure that your user accounts are synchronized with the hybrid service. To verify, log on to the Web Security module of the Forcepoint Security Manager and select Main > Status > Hybrid Service. It is okay if you have not yet used the hybrid service.

  • For Forcepoint Endpoint Context Agent (Forcepoint ECA) deployments, ensure that there are no network address translation (NAT) devices between the Forcepoint Next Generation Firewall (Forcepoint NGFW) Engine and the endpoint machine.