Forcepoint ONE Data Security

Home
Policy
Forcepoint ONE Data Security policies enable monitoring and control of the flow of sensitive data throughout an organization.
Policy Elements
Policy elements are the building blocks which include the resources and classifiers.
Resources
Resources collectively define the data sources and destinations, endpoint device or application used, or policy action to take when a violation is detected (permit and audit, confirm or block).
Computers
List of endpoint machines as obtained from the endpoints status updates.

Introduction
Forcepoint ONE Data Security secures your data everywhere. It prevents sensitive data exfiltration across cloud, web, email, and endpoint with DLP (SaaS). Policies and incidents are managed from a single platform hosted in the cloud.
Product updates
Details of new and updated features, as well as known issues.
Sign into the management portal
Signing into the management portal with multi-factor authentication ensures that your account remains secure.
Getting Started
The Getting Started section, has links to download the agent, links to sections in documentation to get you started using Forcepoint ONE Data Security, and Before you begin information.
Dashboards
Dashboards provide overview on Users, Endpoints, and Devices.
Investigation
Investigation tab displays a list of all your end-users, alerts or devices allowing you to view and filter related activities to drill down for further information.
Endpoint management
Endpoint management enables organizations to centrally manage all their related endpoints through the a single portal, streamlining management and ensuring consistent security throughout the organization.
Policy
Forcepoint ONE Data Security policies enable monitoring and control of the flow of sensitive data throughout an organization.
- Data protection
  Data protection comes with a rich set of predefined policies that cover the data requirements for a wide variety of organizations. Policies can be customized to meet an organization's specific needs, ensuring that sensitive data is always protected from unauthorized access, use, and disclosure.
- Device control
  Device control is a measure of protection that restricts user access to removable storage devices.
- User activity monitoring
  Using the User activity monitoring tab, administrators can customize the IOBs (modify the IoB predefined severity and exclude or include certain users and groups).
- Policy Elements
  Policy elements are the building blocks which include the resources and classifiers.
  - Resources
    Resources collectively define the data sources and destinations, endpoint device or application used, or policy action to take when a violation is detected (permit and audit, confirm or block).
    - Edit resources
      Administrators can edit resources, such as custom computers, domains, networks, endpoint devices, endpoint applications, endpoint application groups, endpoint printers, business units, or action plans.
    - Duplicate resources
      To create a copy of the specific resource.
    - Delete resources
      Administrators can delete resources, such as custom computers, domains, networks, endpoint devices, endpoint applications, endpoint application groups, endpoint printers, business units, or action plans.
    - Custom computers
      Use the Custom computers resources view to set up a list of local computers that are possible sources or destinations of information in your organization, in addition to the computers in the user directory.
    - Domains
      Use the Domains dialog to define the domains that are sources or destinations of information in your organization, typically for HTTP transactions.
    - Networks
      Use the Networks dialog to define the networks that are possible sources or destinations of sensitive information in your organization.
    - Endpoints devices
      Use the Endpoints devices dialog to define specific USB removable media devices for use in DLP policies. If you do not define devices, all devices are covered.
    - Endpoints applications
      Forcepoint provides a list of built-in applications you can choose to monitor when you set up your endpoint policy. These applications, including web applications and SaaS applications, are included in Endpoint Applications.
    - Endpoints application groups
      Use the Endpoints application groups dialog to define application groups that are not in the Forcepoint defined list.
    - Endpoints printers
      Use the Endpoints printers dialog to review the endpoint printers monitored by the system.
    - Business units
      Use the Business units dialog to define or manage custom groups that can be sources or destinations of information in your organization.
    - Action plans
      Use the Action plans dialog to define how the system responds when various breaches are discovered.
    - Users
      Under Users an administrator can review users automatically detected by the Endpoint. Also using the Import users button can import users in advance or enrich user information with additional user attributes.
    - Group directory
      Under Group directory an administrator can review users group membership. Group membership is automatically detected by the Endpoint based on logged in users. Use the Import Groups button to import groups in advance.
    - Organizational units
      Organizational Unit (OU) is a group of users that belong to a part or all of an organization.
    - Computers
      List of endpoint machines as obtained from the endpoints status updates.
    - Cloud applications
      Cloud applications resources are instances of cloud application types (such as Office365) that can be defined as destinations of sensitive data rules.
    - URL Categories
  - Classifiers
    Policies use content classifiers to describe the data that is being protected. Content can be classified according to file properties, file labeling, key phrases, regular expression (regex) patterns, and dictionaries. Administrators can access the Classifiers in the cloud portal by navigating to Policy > Policy Elements > Classifiers.
Settings
The Settings dashboard has configuration settings for the email connector, audits logs, and other settings for amazon web service provider.
Appendix

Computers

List of endpoint machines as obtained from the endpoints status updates.

The details are obtained from Forcepoint ONE platform.

Copyright © 2024 Forcepoint LLC