Installing Supplemental Forcepoint DLP Servers
After Forcepoint DLP has been installed on the management server (as described in Installing the Management Server), supplemental Forcepoint DLP servers can be installed to distribute analysis load.
Do not install any Forcepoint DLP component on a domain controller.
Medium to large organizations may require more than one Forcepoint DLP server to perform content analysis efficiently. Having multiple Forcepoint DLP servers improves performance and allows for custom load balancing, as well as providing for organizational growth.
The following components are included on supplemental Forcepoint DLP servers:
- Policy engine
- Secondary fingerprint repository (the primary is on the management server)
- Endpoint server
- Crawler
The crawler is the discovery and fingerprinting agent. It is installed automatically with every supplemental Forcepoint DLP server; no separate crawler installation is needed.
Multiple crawlers may be deployed. When creating a discovery or fingerprinting task, administrators select which crawler performs the scan. Forcepoint recommends using the crawler that is located closest to the data you are scanning.
To view crawler status in the Security Manager, go to the page, select the crawler, and click Edit.
- Optical Character Recognition (OCR) server
Review the following article for possible upgrade paths: Optical Character Recognition (OCR) backward compatibility in DLP and Upgrade path.
Note: In production environments, do not install a Forcepoint DLP server on a Microsoft Exchange, or print server. These systems require abundant resources.