Configuring Data Security Cloud

This section describes how to connect Forcepoint Security Manager to your Forcepoint Data Security Cloud Platform tenant. You connect once, and the same connection serves the Executive Overview dashboard, AI Security (AI Detection & Response), MCP Gateway (AI Agent Gateway), and URL categories for DLP Endpoint.

Note: Forcepoint AI Security, MCP Gateway and URL categories for DLP Endpoint are supported from Forcepoint DLP 10.4.5.

Note: The Executive Overview Dashboard feature is available in Forcepoint DLP v10.4.1 and above. To keep enjoying the benefits of this feature when upgrading from 10.3.3 to 10.4, you must install immediately the latest available 10.4.x maintenance release, since the feature is not supported in DLP 10.4 release.

If you already completed this connection for another feature, do not repeat steps 1-2. Check that the status is Connected and continue from step 3 or 4. If you upgraded from 10.4, the connection is kept, but the entries in the Data Module section show an unknown status until you select Recheck availability.

Steps

Go to Global Settings > General > Data Security Cloud.
To configure the Data Security Cloud Connection section, do the following:
1. Enter the email address in the Admin email field, and click Send Access Link.
  
  Note: If the detected certificates are not the expected ones, a pop-up is displayed prompting you to review and approve the certificates before the connection is established and the access link is sent. If you click Cancel, you will be asked to contact Forcepoint Support to certify the connection between Forcepoint Security Manager and Forcepoint Data Security Cloud.
  
  The Forcepoint Data Security Cloud platform sends the registration link to the email. The connection status appears as pending until you access the link and establish the connection. You can click Recheck to refresh the status.
2. Click Access Your Tenant.
  The Forcepoint Data Security Cloud platform sign in page opens.
3. To login to the Forcepoint Data Security Cloud platform, do the following:
  1. Enter your credentials in the First Name and Last Name fields.
  2. Create and confirm the password.
  3. In Primary Region for Data Storage, select a region.
    Note: The region you select determines where the log data behind your Executive Overview dashboard is stored. Select the region that matches where your organization operates.
  4. Click Access Account.
  5. A confirmation message appears stating that configuration cannot be altered post confirmation.
  6. Click Confirm.
    A message appears stating successful tenant access.
  7. Click OK.
    You will be redirected to the Forcepoint Data Security Cloud platform.
4. Enter your credentials and click Sign in.
  Once connected to the Forcepoint Data Security Cloud platform, the status updates to Connected. The Executive Overview and the Data Module sections become available.
If you use the Executive Overview dashboard, turn on the Enable Executive Overview toggle to generate the dashboard.

On the Forcepoint Data Security Cloud platform, the incident details can be viewed on the Transaction Viewer page and the insights metrics are displayed on the Executive Overview page. For detailed information, refer the Executive Overview Dashboard Solutions Guide.
In Data Module, do the following:
1. Review the status shown beneath each resource and service.
  
  Each entry shows whether the corresponding license is available. If a license is missing, the license required for that resource is named and the toggle is not shown.
  Three resources and services are provided:
  - AI Security (AI Detection & Response) applications - Synchronizes the AI applications configured on the Forcepoint Data Security Cloud platform, so that you can select them over the DLP Cloud API channel in DLP policies. For more information, see Getting started with AI Security (AI Detection & Response) over DLP Cloud API channel in the Forcepoint DLP Getting Started Guide.
  - MCP Gateway (AI Agent Gateway) resources - Synchronizes the AI agents, AI agent groups, and MCP Gateway connectors, so that you can use them in the MCP Gateway channel in DLP policies. For more information, see Getting started with the MCP Gateway channel in the Forcepoint DLP Getting Started Guide.
  - URL categories for DLP Endpoint - Retrieves the web context identifier that enables URL category enforcement on the endpoint web channel. This is a service rather than a resource list, so when it is unavailable the entry reads Service is not available. For more information, see Supporting URL categories for the endpoint web channel in the Forcepoint DLP Getting Started Guide.
2. Set Enable automatic sync of AI Security applications resources to ON.
3. Set Enable automatic sync of MCP Gateway resources — AI agents, AI agent groups, MCP Gateway connectors to ON.
  
  Both toggles are OFF by default. Enable only the ones you intend to use.