Checking the status of Forcepoint Endpoint Context Agent

The F1E status icon () is shown in the task bar’s notification area. To view the status of Forcepoint ECA, move your mouse over the icon. The following table describes the available status indicators.

Icon Meaning Description
Running Forcepoint ECA software is successfully connected to Forcepoint NGFW, configured and activated.
Disconnected

All Forcepoint ECA connections are disconnected from Forcepoint NGFW.

If other agents are installed on your endpoint machine, this status indicates that all installed F1E agents are disabled or disconnected.

To verify the connection status, move your mouse over the F1E icon. A pop-up window shows the connection status for all installed agents. All installed agents should show Disabled (Forcepoint ECA shows as Disconnected).

Fallback

Partially Disabled

This status may indicate that:

  • One or more installed agent (Forcepoint DLP Endpoint, Forcepoint Web Security Endpoint or Forcepoint ECA) is disabled, but at least one agent is enabled or running. If all agents are disabled, this status icon is not shown (the Disabled status icon described above is shown).
  • Forcepoint Web Security Endpoint is in Fallback mode. See Fallback mode for more information.

If your organization installs more than one F1E agent (Forcepoint Web Security Endpoint, Forcepoint DLP Endpoint and/or Forcepoint ECA) on your endpoint machine, you can access all installed agents from one Forcepoint icon on your task bar.

For more information about Forcepoint Web Security Endpoint and Forcepoint DLP Endpoint, see Forcepoint Web Security Endpoint and Forcepoint DLP Endpoint.