Terminology

Forcepoint CASB and Forcepoint DLP share common features, but sometimes use different terms. The following table maps the terms and definitions for common items you might see in either Forcepoint CASB or Forcepoint DLP.

DLP term	CASB term	Definition
Action/ Action plan	Mitigation	The action that should take place in case of a breach. For example: “Block”, “Permit”.
Case	Incident	An aggregation of incidents (Forcepoint DLP) or alerts (Forcepoint CASB).
Cloud application	Asset	An instance of a cloud service. For example: “My_Company_Box”, “My_Company_AWS”.
Cloud application type	Asset type	A cloud service. For example: “Box”, “AWS”.
Cloud data discovery	Data at rest (DAR)	A feature that allows the Forcepoint DLP Data Agent (DA)/ Forcepoint CASB integration service to scan data at rest on cloud applications.
Cloud service	N/A	A Forcepoint DLP channel.
DLP Data Agent (DA)	N/A	A DLP agent hosted in Forcepoint’s cloud that enables the DLP system to access the data necessary to analyze specific types of traffic, or the traffic from specific servers.

DLP term	CASB term	Definition
DLP Cloud API	API Service provider logs Near real-time	A feature that allows the Forcepoint DLP DA / Forcepoint CASB integration service to take action soon after a breach occurs on cloud application activities. The file scan is completed in a very specific time frame.
DLP Cloud Proxy	Proxy Real-time	A feature that allows the Forcepoint DLP Data Protection Service and Forcepoint CASB solution to take immediate action as a breach occurs on cloud application activities.
Data Protection Service	N/A	The Forcepoint DLP service that enables detection and enforcement of sensitive data breaches on cloud applications.
Event	Activity	A transaction or activity that was monitored and sent for policy analysis.
Incident	Alert	The output of the policy analysis if there is a match in the transaction.
Operation	Action	The atomic action monitored by Forcepoint CASB that an end user completed. For example: “Upload a file”, “Download a file”.