Forcepoint Data Security Cloud | DLP

Home
Policy
Forcepoint Data Security Cloud | DLP policies enable monitoring and control of the flow of sensitive data throughout an organization.
Policy Elements
Policy elements are the building blocks which include the resources and classifiers.
Resources
Resources collectively define the data sources and destinations, endpoint device or application used, or policy action to take when a violation is detected (permit and audit, confirm or block).
Computers
List of endpoint machines as obtained from the endpoints status updates.

Introduction
Forcepoint Data Security Cloud | DLP secures your data everywhere. The Data Loss Prevention (DLP) application prevents sensitive data exfiltration across cloud, web, email, and endpoint. Policies and incidents are managed from a single platform hosted in the cloud.
Product updates
Details of new and updated features, as well as resolved and known issues.
Sign in to the portal
Forcepoint Data Security Cloud is the common management portal for all Forcepoint offered services.
Getting Started
The Getting Started section, has links to download the endpoint agent. Before you bring highlights important ore-requisites that must be addressed before attempting to install the agent while the Quick links section has direct links to important sections in online help.
Dashboards
Dashboards provide overview on Users, Endpoints, and Devices.
Investigation
Investigation tab displays a list of all your end-users, alerts or devices allowing you to view and filter related activities to drill down for further information.
Endpoint management
Endpoint management enables organizations to centrally manage all their related endpoints through the a single portal, streamlining management and ensuring consistent security throughout the organization.
Policy
Forcepoint Data Security Cloud | DLP policies enable monitoring and control of the flow of sensitive data throughout an organization.
- Data protection
  Data protection comes with a rich set of predefined policies that cover the data requirements for a wide variety of organizations. Policies can be customized to meet an organization's specific needs, ensuring that sensitive data is always protected from unauthorized access, use, and disclosure.
- Device control
  Device control is a measure of protection that restricts user access to removable storage devices.
- User activity monitoring
  Using the User activity monitoring tab, administrators can customize the IOBs (modify the IoB predefined severity and exclude or include certain users and groups).
- Policy Elements
  Policy elements are the building blocks which include the resources and classifiers.
  - Resources
    Resources collectively define the data sources and destinations, endpoint device or application used, or policy action to take when a violation is detected (permit and audit, confirm or block).
    - Edit resources
      Administrators can edit resources, such as custom computers, domains, networks, endpoint devices, endpoint applications, endpoint application groups, endpoint printers, business units, or action plans.
    - Duplicate resources
      To create a copy of the specific resource.
    - Delete resources
      Administrators can delete resources, such as custom computers, domains, networks, endpoint devices, endpoint applications, endpoint application groups, endpoint printers, business units, or action plans.
    - Custom computers
      Use the Custom computers resources view to set up a list of local computers that are possible sources or destinations of information in your organization, in addition to the computers in the user directory.
    - Domains
      Use the Domains dialog to define the domains that are sources or destinations of information in your organization, typically for HTTP transactions.
    - Networks
      Use the Networks dialog to define the networks that are possible sources or destinations of sensitive information in your organization.
    - Endpoints devices
      Use the Endpoints devices dialog to define specific USB removable media devices for use in DLP policies. If you do not define devices, all devices are covered.
    - Endpoints applications
      Forcepoint provides a list of built-in applications you can choose to monitor when you set up your endpoint policy. These applications, including web applications and SaaS applications, are included in Endpoint Applications.
    - Endpoints application groups
      Use the Endpoints application groups dialog to define application groups that are not in the Forcepoint defined list.
    - Endpoints printers
      Use the Endpoints printers dialog to review the endpoint printers monitored by the system.
    - Business units
      Use the Business units dialog to define or manage custom groups that can be sources or destinations of information in your organization.
    - Action plans
      Use the Action plans dialog to define how the system responds when various breaches are discovered.
    - Users
      Under Users an administrator can review users automatically detected by the Endpoint and obtained from Forcepoint ONE platform. Also using the Import users button can import users from another AD setup.
    - Group directory
      Under Group directory an administrator can review users group membership detected by the Endpoint based on logged in users obtained from Forcepoint ONE platform. Also using the Import Groups button can import users from another AD setup.
    - Import and export users and groups from Active Directory
    - Organizational units
      Organizational Unit (OU) is a group of users that belong to a part or all of an organization.
    - Computers
      List of endpoint machines as obtained from the endpoints status updates.
  - Classifiers
    Policies use content classifiers to describe the data that is being protected. Content can be classified according to file properties, file labeling, key phrases, regular expression (regex) patterns, and dictionaries. Administrators can access the Classifiers in the cloud portal by navigating to Policy > Policy Elements > Classifiers.
Settings
The Settings dashboard has configuration settings for the email connector, audits logs, and other settings for amazon web service provider.
Appendix

Computers

List of endpoint machines as obtained from the endpoints status updates.

The details are obtained from Forcepoint Data Security Cloud platform.

Copyright © 2025 Forcepoint LLC