Domain considerations

  • The servers running Forcepoint DLP software can be set as part of a domain or as a separate workgroup. If there are multiple servers, or if the system will be configured to run commands on file servers in response to discovery, it is best practice to make the servers part of a domain.

    Do not install Forcepoint DLP on a domain controller machine.

  • Strict GPOs may interfere with Forcepoint DLP and affect system performance, or even cause the system to halt. To avoid this issue, when adding Forcepoint DLP servers to a domain, make them part of an organizational unit that does not enforce strict GPOs.
  • Certain real-time antivirus scanning can downgrade system efficiency. This problem can be reduced by excluding some directories from that scanning (see Antivirus). Please contact Forcepoint Technical Support for more information on enhancing performance.