Endpoint settings: the Advanced tab

Use the Advanced tab of the Settings > General > Endpoint page to configure applications or folders to decouple from Forcepoint DLP Endpoint drivers. These are typically applications that experience compatibility problems with the endpoint software.

Excluded Applications:

  1. Under Excluded Applications, use the Application/Folder field to enter the name of an application of folder to exclude.
    • For Windows endpoints, enter an executable filename in the form winword.exe (for Microsoft Word), or a folder name in the form \office15\ (for the entire Microsoft Office 2013 suite).

      Do not include the drive letter.

    • For macOS endpoints, enter a case-sensitive application name like TextEdit or a case-sensitive full path such as:

      /Applications/TextEdit.app/Contents/MacOS/TextEdit

      Mac endpoints do not support relative folders.

    • Filenames cannot include spaces.
    • File and folder names must be in ASCII characters.
    • Do not use wildcards.
  2. Select the operating system on which the application runs.
  3. Click Add to add the application to the Excluded Applications list.
  4. Repeat steps 1-3 for each application that you want to exclude.
  5. Click Save.

Customers can add up to 200 applications and folders to decouple from Forcepoint DLP Endpoint drivers.

File access is monitored for the listed applications, but there is no monitoring or enforcement for other operations, like copy/cut/paste and printing.

After the updated profile is deployed to an endpoint machine, the machine must be rebooted for this setting to take effect.

Excluded Domains For SSL Decryption by Endpoint Inline Proxy:

The domains included in the below list will not be SSL decrypted. Complete the steps below to add the domain that you do not want to be SSL decrypted when in inline proxy mode.

Note: This feature is fully supported with Forcepoint F1E v24.11 and above. For functionalities supported in earlier versions of Forcepoint F1E, refer the Forcepoint DLP Administrator help v10.2.

To search any specific URL, enter a search term in the Filter field.

To add the URL to the list, complete the steps below:
  1. Enter the domain name into URL field.
    Note: Do not use wildcards.
  2. Click the Add button to add the URL to the list of domains not to be SSL decrypted.

Alternatively, you can also use the Import button, which allows for the bulk addition of domain lists. This feature can save time and improve efficiency by importing multiple domains simultaneously.

To import the list of URLs, complete the steps below:
  1. Create a file listing the URLs.
    • The file must be in .CSV file format.
    • Ensure that the URLs in the CSV file are separated by commas.
    • The maximum number of URLs is 6000.
    • The maximum number of characters allowed in a URL is 254.
    • The maximum number of characters for the overall list is 120,000.
  2. Click Import button.
  3. Browse to the file you created, click OK.
To remove the URL from list, complete the steps below:
  1. Mark the desired boxes from the list to select the URLs.
  2. Click the Remove button to remove the URL.

Click Clear All button to clear all URLs from the list.

Note:

For enabling the Endpoint Inline Proxy mode, go to Deployment > Endpoint Profiles, and select an Endpoint Profile from list and navigate to Properties tab.

For more information about Endpoint Inline Proxy mode, refer " Endpoint Web Traffic Detection Mode" section in Endpoint profile: Properties tab.