Before you begin

Before installing the Neo endpoint and setting up your Dynamic User Protection service, verify that the antivirus software allows Neo and that Neo can communicate with Amazon Web Services.

Before you begin Neo installation, check the antivirus software and open the required ports.
  • Some antivirus software may flag Neo. To ensure that installation can complete successfully, add the following executables and exclusions to the allow list for your antivirus software.
  • For Windows:
    • fpneoclient.exe
    • fpneocommonsvc.exe
    • fpneonetworksvc.exe
    • fpneoprotectionsvc.exe
    • fpneotextextractor.exe
    • setwebconnectivitymode.exe
    • fpneoxengine.exe
    • fpneostophdrv.exe
    • fpneodiagnostic.exe
    • openssl.exe
    • %programfiles%\Forcepoint\
    • %programdata%\Forcepoint\
    • %systemroot%\system32\drivers\fpepdc.sys
    • %systemroot%\System32\drivers\fpepdci.sys
    • %systemroot%\System32\drivers\fpepflt.sys
    • %systemroot%\System32\drivers\fpeph.sys
  • For macOS:
    • com.forcepoint.neo.es
    • com.forcepoint.neo.ne
    • fpneoprotectiond
    • fpneonetworkd
    • fpneocommond
    • com.forcepoint.neo.privilege-helper
    • fpneotextextractor
    • fpneoxengine
  • The Neo endpoint communicates with managed Amazon Web Services (AWS) Cloud Services. If you have a proxy or a special network, ensure that Neo can connect to the following URLs based on the tenant region. You can find the tenant region using the Neo cloud portal > user icon > Tenant information > Region.
Note: In case the organization has proxy that requires authentication, before installing the Forcepoint Neo endpoint, the administrator should add the proxy information on the Settings > Neo endpoint. Post this download the package which will contain the updated proxy configuration.
Table 1. List of regions/URLs
Region URLs
us-east-1 Register: https://register-device.prd01.us-east-1.dup.forcepoint.io
Credentials: https://c1c2sj3lm55h1g.credentials.iot.us-east-1.amazonaws.com/
Reporting/notifications: wss://a8wj55vrq7x0p-ats.iot.us-east-1.amazonaws.com:443
Presigned URL: https://store-forensic.prd01.us-east-1.dup.forcepoint.io
Uploading/downloading:

Certificate revocation list (CRLs):
eu-central-1 Register: https://register-device.prd01.eu-central-1.dup.forcepoint.io
Credentials: https://c1c2sj3lm55h1g.credentials.iot.eu-central-1.amazonaws.com
Reporting/notifications: wss://a8wj55vrq7x0p-ats.iot.eu-central-1.amazonaws.com:443
Presigned URL: https://store-forensic.prd01.eu-central-1.dup.forcepoint.io
Uploading/downloading:

Certificate revocation list (CRLs):
ap-south-1 Register: https://register-device.prd01.ap-south-1.dup.forcepoint.io
Credentials: https://c1c2sj3lm55h1g.credentials.iot.ap-south-1.amazonaws.com/
Reporting/notifications: wss://a8wj55vrq7x0p-ats.iot.ap-south-1.amazonaws.com:443
Presigned URL: https://store-forensic.prd01.ap-south-1.dup.forcepoint.io
Uploading/downloading:
Certificate revocation list (CRLs):