What is the protector?
The protector is a component of Forcepoint DLP that can monitor and report on web traffic and act as an MTA to monitor, block, quarantine, and encrypt email traffic.
For enforcement over the HTTP/S channel, the protector can integrate with a third- party proxy that supports ICAP. (As an alternative, use the Web Content Gateway.)
The protector is additionally available as a software package and can be installed on supported CentOS Linux 7.x and RedHat 7.x servers within public cloud services. A site-to-site VPN is required when deploying the software protector in a public cloud environment.
If the Forcepoint Security Manager is deployed on premises, then in order for the protector to communicate with it, a site to site VPN is required.
Refer to the following resource for public cloud deployment: