Forcepoint ONE Data Security

Home
Endpoint management
Endpoint management dashboard is used to view and manage your Forcepoint endpoints.
Agent installation
This section captures the steps for installing the agent on the endpoints in your organization.
macOS installation
Forcepoint ONE agent can be installed on endpoints running macOS either manually or using any of the MDM solutions.

Introduction
Forcepoint ONE Data Security (FONE DS) secures your data everywhere. It prevents sensitive data exfiltration across cloud, web, email, and endpoint with DLP (SaaS). Policies and incidents are managed from a single platform hosted in the cloud.
Product updates
Details of new and updated features, as well as known issues.
Sign into the management portal
Signing into the management portal with multi-factor authentication ensures that your account remains secure.
Endpoint management
Endpoint management dashboard is used to view and manage your Forcepoint endpoints.
- My Endpoints
  The My Endpoints tab lists the endpoints, the agents status on the endpoint, and other details such as the operating system running on the endpoint, the domain and logged in user information, etc.
- Profiles
  Profiles are a set of attributes that define the endpoint agent behavior. The Default profile can be configured by each tenant to support its sepcific needs. Profiles can also be used to set different behavior for different segments in the same tenant.
- Agent installation
  This section captures the steps for installing the agent on the endpoints in your organization.
  - System requirements
    Before installing the agent, verify the system requirements for your endpoints.
  - Before you begin
    Pre-requisites for installing the agent.
  - Downloading the agent Installer
  - Windows Installation
  - macOS installation
    Forcepoint ONE agent can be installed on endpoints running macOS either manually or using any of the MDM solutions.
    - Deploying the Forcepoint Outlook Add-in
    - Creating the Endpoint SSL Identity
      For the Forcepoint Agent to be able to securely communicate with your Outlook Email client, the Endpoint must be given an SSL identity, and the client machine must be set up to trust that identity.
    - Trusting the SSL Identity for your endpoint
      This step is only required if you intend to monitor email on the endpoint and if your email client is Microsoft Outlook.
    - (MaC/Manual) Installing F1A on systems that have F1E
      F1A installer will uninstall F1E before installing F1A on a macOS system.
    - Manual install
      Install the agent on macOS endpoints after downloading from Forcepoint ONE Data Security portal.
    - Manual uninstall
      Manually uninstall the agent from your macOS endpoints.
    - Installing the agent using Jamf
      Installing the agent using Jamf is the recommended installation method. Deploying the agent configuration profile in this fashion automatically grants the necessary permissions and accessibility to the agent and avoids complicated administrator or user confirmation dialogs.
    - Uninstalling the agent using Jamf
      Uninstall the agent from macOS endpoints using Jamf Pro.
    - Troubleshooting the agent installation when installation is done using Jamf
      Troubleshooting helps you resolve common problems that you may encounter when installing F1A on macOS endpoints using Jamf.
    - Configuring Jamf and MDM configuration profiles
      The deployment of the agent on a macOS machine requires a software management tool such as Jamf. Jamf is a centralized device management system for macOS and iOS, using the MDM technology.
    - Manually creating the MDM profile
      You can manually create the MDM profile if you have issues importing the MDM profile provided by Forcepoint.
- Enabling the agent to operate in on-prem mode.
  The steps in this procedure are applicable if you are moving from using F1E DLP to F1A current version or if you are moving from a previous version of F1A to the current version of F1A.
- Release code
- Agent update
  If you have previously installed the agent on your endpoints, you can update to the latest version manually or automatically when a new version is available, or on demand to meet your schedule.
- Agent status
  The Endpoint management dashboard and Details panel display the status of the agent running on each endpoint.
- Moving from F1E DLP to F1A
  To know on agent support for on-prem DLP subset of use cases, contact Forcepoint customer support to see if this is suitable for you.
- Agent Interoperability
Dashboards
Dashboards provide overview on Users, Endpoints, and Devices.
Investigation
Investigation tab displays a list of all your end-users, alerts or devices allowing you to view and filter related activities to drill down for further information.
Policy
Forcepoint ONE Data Security policies enable monitoring and control of the flow of sensitive data throughout an organization.
Settings
The Settings dashboard provides access to user configuration for your organization. Administrators can use this dashboard to set up accounts and view tenant information. Analysts or Helpdesk admins do not have access to this dashboard.
Integrations with other Forcepoint products
Appendix

macOS installation

Forcepoint ONE agent can be installed on endpoints running macOS either manually or using any of the MDM solutions.

Deploying the Forcepoint Outlook Add-in
Creating the Endpoint SSL Identity
For the Forcepoint Agent to be able to securely communicate with your Outlook Email client, the Endpoint must be given an SSL identity, and the client machine must be set up to trust that identity.
Trusting the SSL Identity for your endpoint
This step is only required if you intend to monitor email on the endpoint and if your email client is Microsoft Outlook.
(MaC/Manual) Installing F1A on systems that have F1E
F1A installer will uninstall F1E before installing F1A on a macOS system.
Manual install
Install the agent on macOS endpoints after downloading from Forcepoint ONE Data Security portal.
Manual uninstall
Manually uninstall the agent from your macOS endpoints.
Installing the agent using Jamf
Installing the agent using Jamf is the recommended installation method. Deploying the agent configuration profile in this fashion automatically grants the necessary permissions and accessibility to the agent and avoids complicated administrator or user confirmation dialogs.
Uninstalling the agent using Jamf
Uninstall the agent from macOS endpoints using Jamf Pro.
Troubleshooting the agent installation when installation is done using Jamf
Troubleshooting helps you resolve common problems that you may encounter when installing F1A on macOS endpoints using Jamf.
Configuring Jamf and MDM configuration profiles
The deployment of the agent on a macOS machine requires a software management tool such as Jamf. Jamf is a centralized device management system for macOS and iOS, using the MDM technology.
Manually creating the MDM profile
You can manually create the MDM profile if you have issues importing the MDM profile provided by Forcepoint.

Copyright © 2024 Forcepoint LLC