Forcepoint Direct Connect Endpoint

Forcepoint Direct Connect Endpoint routes traffic directly to the Internet and contacts a new endpoint cloud service to determine whether to block or permit a request, perform analysis of traffic content, and/or deliver endpoint configuration. Forcepoint Direct Connect Endpoint is available for both full cloud and hybrid deployments.

Forcepoint Direct Connect Endpoint may be beneficial for roaming users where proxy-type connections are problematic. This includes, for example, websites that do not work well with a proxy, areas where geographic firewalls prohibit the use of proxies, situations where localized content is required regardless of user location, and complex/changing network environments.

When to use Forcepoint Direct Connect Endpoint instead of Forcepoint Proxy Connect Endpoint

The Forcepoint Direct Connect Endpoint is now available alongside the existing Forcepoint Proxy Connect Endpoint. The Forcepoint Proxy Connect Endpoint will continue to be available and supported and remains the default solution for securing roaming users in most situations.

The Forcepoint Direct Connect Endpoint extends roaming user protection to use cases where a proxy-based approach can be problematic. In general, you should consider using Forcepoint Direct Connect Endpoint if the following applies to your organization:
  • Geo-localized content: Localized content is critical; for example, your Marketing organization translates content into many languages.
  • Unmanaged/third-party/complex networks: You have complex networks and changing network connections; for example, you have a remote workforce traveling and operating on client sites.
  • Geographic firewalls: A geographical firewall prevents proxy use; for example, due to a national firewall or local network security system.
  • Frequently changing network conditions: Frequent switching between different network connections; for example using a mix of mobile, wifi and on-prem networks.
  • Proxy unfriendly websites: You use a significant number of websites that do not work well with proxy technology and would otherwise require proxy bypass.
  • Proxy unfriendly applications: You have non-browser and/or custom applications that require bypasses due to conflicts with proxy technology.
Forcepoint Direct Connect Endpoint and Forcepoint Proxy Connect Endpoint can both be used in the same customer deployment. However, only one type can be installed on an individual endpoint machine.
Important: Although Forcepoint Direct Connect Endpoint can provide improved security coverage as outlined in the use cases above, check that the networking requirements and level of feature support are acceptable in your intended deployment.