Neo integration with Forcepoint Web Security Cloud (Mac)

Added 14-July-2021 Forcepoint Web Security Cloud customers can now install Neo on Mac endpoints to analyze web traffic through either a proxy connection or a direct connection. Neo for macOS is only supported on Intel endpoints running Big Sur 11. Neo is not supported on endpoints running the M1 chipset.

Note: This release supports Neo installation on Mac endpoints for Forcepoint Web Security Cloud only. Hybrid deployments are not supported in this release.

Neo provides protection through the cloud proxy connection, then intelligently switches to a direct connection when the cloud proxy connection is unstable or unavailable. The new Neo proxy connect and direct connect modes are an upgrade from the current classic Proxy Connect Endpoint and Direct Connect Endpoint agents, because Neo provides both modes on one endpoint while both classic endpoint agents cannot be installed on the same endpoint at the same time.

Forcepoint Web Security Cloud customers download Neo through the Forcepoint Cloud Security Gateway portal in the same location that they can download the classic Proxy Connect Endpoint and Direct Connect Endpoint (Web > Settings > Endpoint).

For more information about installing and configuring Neo proxy connect and direct connect modes, see the related topics referenced below, or see the Forcepoint Cloud Security Gateway Portal Help available on the Forcepoint support website.

Limitations:

While Neo 21.06 contains most of the functionality available in the classic Forcepoint Web Security Endpoint agents (Proxy Connect Endpoint and Direct Connect Endpoint), some capabilities from the classic agents are not supported in this Neo release:
  • Direct connect scanning is not supported in Neo 21.06. This functionality will be added in a future release.
  • If an application is not PAC file aware, it does not receive enforcement. This functionality will be added in a future release.
  • Neo 21.06 does not support the option to set default proxy settings. If a specific URL is included in the Web domain bypass list on Forcepoint Cloud Security Gateway and an organization defines that all traffic must go through a proxy to reach the Internet, then the domains configured in the domain bypass list go directly to the Internet and get blocked by the organization's firewall.

For a full list of known issues in this release, see the article: https://support.forcepoint.com/KBArticle?id=000019401 (Forcepoint Support login is required).