Configuring your account information

Administrator Help | Forcepoint Web Security and Forcepoint URL Filtering | v8.5.x

Related topics:

Your subscription

Configuring database downloads

Protocol-based policy enforcement

Use the Web > Settings > General > Account page to enter or review subscription information, and to determine how your product responds when the subscription expires or, for Forcepoint URL Filtering deployments, when the subscription count is exceeded.

Also use the page to direct web protection components to send category and protocol usage data to Forcepoint Security Labs anonymously. This information may be used to help optimize the Forcepoint URL Database (see The Forcepoint URL Database) and contribute to Forcepoint ThreatSeeker Intelligence (see this site for additional information).

After installation, or any time you receive a new subscription key, you can use the Subscription key field to enter the key, and then click Apply. A check is done to verify the key syntax, and then Filtering Service attempts to download the Forcepoint URL Database.

If a key is displayed, but the Subscription key field is disabled, you are connected to a secondary Policy Server. This means that the Policy Server instance gets its key information from the primary Policy Server whose IP address appears below the number of subscribed users.

Use the Settings > General > Policy Servers page to manage subscription keys in multiple Policy Server environments (see Working in a multiple Policy Server environment).

If the key syntax is correct, but the Forcepoint URL Database download fails because the key is invalid or expired, a health alert message is displayed on the Status > Alerts page. By default, the message also appears on the System dashboard.

After the first successful Forcepoint URL Database download, the Account page displays the following information:


Key expires	End date for your current subscription. After this date, you must renew the subscription to continue analyzing traffic and enforcing policies.
Subscribed users	When you add the Hybrid Module to Forcepoint Web Security, this shows the sum of users managed by on-premises components and the hybrid service.
Subscribed network users	Number of in-network users whose Internet requests may be managed.
Subscribed remote users	When you add the Remote Filter Module to Forcepoint URL Filtering, this shows the number of users whose requests may be handled when they are outside the network.
Primary Policy Server	IP address of the Policy Server instance from which this Policy Server receives subscription key information. Appears only when viewing information for a secondary Policy Server.

Select Block users when subscription expires to block all Internet access for all users when the subscription expires. In Forcepoint URL Filtering deployments, selecting this option will also block all requests from users who exceed the subscription count.

Leave the option unselected to give users unrestricted Internet access when the subscription expires.

Mark Send category and protocol data to Forcepoint LLC to have web protection components collect usage data about pre-defined categories and protocols, and submit it anonymously to Forcepoint LLC.

This usage data helps web protection software to continually enhance its security capabilities.

(Hybrid Module for Forcepoint Web Security) To activate or update the connection between the on-premises and hybrid portions of your software:

Enter the Contact email address for your Forcepoint Web Security administrators. This is typically a group email alias that is monitored frequently. Alerts about hybrid service issues are sent to this address. Failing to respond appropriately to an alert could lead to temporary disconnection of your hybrid service.

Enter the Country in which the administrators are located.

User requests are not managed by the hybrid service until this information has been provided and validated. For more information, see Configure the Hybrid Service.

Under WebCatcher, mark Send URL information to Forcepoint to help improve URL categorization and security effectiveness. See What is WebCatcher? for more information about this tool.

To submit uncategorized URLs to be evaluated for categorization, mark Send uncategorized URLs to improve URL categorization.

To send in security-related URLs to help track malicious website activity, mark Send security URLs to improve security effectiveness.

To keep a local copy of the information that is sent, mark Save a copy of the data being sent to Security Labs.

When this option is enabled, WebCatcher saves the data as unencrypted XML files in the Websense\Web Security\bin\ directory on the Log Server machine. These files are date and time stamped.

Select the Country of origin for your organization. This should be the country where the majority of Internet activity is being logged.

Specify a Maximum upload file size. When the maximum size is reached, collected WebCatcher data is sent automatically and a new file is started.

Use the Daily start time field to indicate a time each day when WebCatcher should send the data it has collected if the maximum file size has not been reached.

When you are finished making changes, click OK. Changes are not implemented until you click Save and Deploy.

If you use the Management API to create and update API-managed categories, you must define a basic authentication account that will be used to send data to the API. Only one account may be defined per deployment. The account must include a password.

Click Advanced Options.

Note that this option is available only to Super Administrators and is not displayed if the API is not installed.

Enter a User name for the account.

Use only alphanumeric characters.

A default user name, apiadmin, is provided but will not be saved until a valid password is entered and confirmed.

Enter and confirm a Password for the account.

Passwords must be a minimum of 8 characters and include at least one:

Uppercase character

Lowercase character

Number