For existing Forcepoint CASB and Forcepoint DLP customers

Forcepoint recommends that Forcepoint DLP customers migrate to Forcepoint Cloud Security Gateway, because it integrates the full Forcepoint CASB and Forcepoint Web Security Cloud functionality with Forcepoint DLP to provide unified data protection.

If you only want to integrate your existing Forcepoint DLP deployment with Forcepoint CASB, you can extend their DLP policies to sanctioned enterprise cloud applications, such as Office 365, G Suite, Box, Dropbox, Salesforce, and ServiceNow, via the DLP Cloud Applications or Forcepoint CASB with DLP Cloud Applications licenses.

  • Forcepoint DLP Cloud Applications: Provides the ability to extend DLP policies to sanctioned cloud applications and supports API-based (offline) activity analysis, data discovery, and file sharing controls for supported cloud applications.
  • Forcepoint CASB with DLP Cloud Applications: Provides the ability to control access and extend DLP policies to sanctioned cloud applications and supports both inline controls and API-based activity analysis, data discovery, and file sharing controls for supported cloud applications. It includes integration with the cloud-hosted Data Protection Service.

Access to the Forcepoint CASB Portal is provided in both licenses.

Note: Both Forcepoint CASB and DLP Cloud Applications licenses are required to have the full set of capabilities covering API-based and real-time inline controls for sanctioned cloud applications.

After you purchase DLP Cloud Applications, you receive a fulfillment email that contains a new or updated DLP XML license file that includes DLP Cloud Applications.

If you are upgrading to Forcepoint DLP 8.8:
  • Customers upgrading from any Forcepoint DLP version that supports DLP Cloud Applications to Forcepoint Web Security Cloud 8.8.1 must connect to Data Protection Service to support the DLP Cloud Proxy, DLP Cloud API, and Cloud Data Discovery channels. To connect to Data Protection Service, request a JSON file with tenant information from Forcepoint Support. If your Data Security Manager is already connected to Data Protection Service, you do not need a new file or any additional action. For more information, see Connect Data Protection Service in the Forcepoint Security Manager, and Activate DLP Cloud Applications channels after a Forcepoint DLP upgrade(both mentioned below).
  • After upgrading to Forcepoint DLP 8.8.x and adding another license: If you activate Data Protection Service before updating the subscription on the Subscription page for the DLP Manager, the updated license information does not reach Data Protection Service until a new policy configuration is deployed. To resolve this issue, follow the instructions provided in Knowledge Base article 18998.

After you receive the license, you will enter the information in the Forcepoint Security Manager to connect Forcepoint DLP with Forcepoint CASB. For more information, see Configuring the Forcepoint DLP and Forcepoint CASB connection(mentioned below).