Global settings

Manage global settings that apply to all Data Protection policies.

  1. Click the Edit button next to Global settings.
  2. On the Global settings dialog, we have following fields:

    • Endpoint Email Domains: This includes defining which directions may be monitored for endpoint email (for instance, only outbound). The direction or directions that are actually enforced are determined by the Destination on the custom rule of a policy. In the rule, if you choose a direction that is not allowable per the Email Domains setting, endpoint email traffic is not analyzed.

      Enter a domain and click the plus symbol to add the domain to the list. Select the following traffic direction(s) to monitor:
      • Outbound: To monitor traffic between a source domain defined in the Internal email domains list and any destination domain that is not in the list.
      • Internal: To monitor email traffic between source and destination domains that are both in the Internal email domains list.
    • Endpoint Microsoft MIP: Enable the option to decrypt and analyze Microsoft Office files that were encrypted by Microsoft Information Protection on Windows endpoints. This includes files found on Windows endpoints (discovery) or sent via any endpoint channel.

      This feature enables enterprises to maintain sensitive data visibility and control for files protected using MIP. Forcepoint ONE Data Security interacts directly with MIP, enabling MIP to work both on and off the network. It can also be used to better understand how MIP is being used by employees to protect sensitive data.