What's New

URL Categorization support

The macOS version of Forcepoint Agent now monitors URL categories including categories to identify AI sites for a policy, so that a rule scoped to URL categories is enforced on endpoint HTTP and HTTPS channels. For more information of this functionality at Hybrid DLP and Cloud DLP end, refer the below documents:

For working with URL categories in Forcepoint DLP on-prem, refer to Supporting URL categories for the endpoint web channel.
For information on URL category configuration in Forcepoint Data Security Cloud DLP, refer to URL Categories and refer to the Web section under Destination here.

DLP Mode switching

The macOS version of Forcepoint Agent now supports DLP mode switching, allowing endpoint profiles to be switched between On-Premise and Cloud management modes. For more information, refer to the Data Protection section in Create Custom Profile.

Fingerprint classifier support in Cloud mode

The macOS version of Forcepoint Agent now supports the following fingerprint classifiers when operating in Cloud mode:

Note: The agent already supports fingerprinting when running in hybrid DLP mode.

File fingerprint - Classifies unstructured data by fingerprinting a known file or directory so a policy can recognize that data, or the files themselves, wherever they appear.
Database fingerprint - Classifies structured data by fingerprinting a known structured source, such as a database table or spreadsheet, so a policy can recognize that same data wherever it appears.

When fingerprint classifier updates are deployed from the cloud, the endpoint receives and places them in the correct location for the DLP Policy Engine, which then matches content against the deployed fingerprints and enforces policy as part of policy evaluation.

For more information on configuring and working with the fingerprint classifiers, refer to the File fingerprint and Database fingerprint sections in Forcepoint Data Security Cloud DLP documentation.

Device Control

The macOS version of Forcepoint Agent now supports device control, so that access rules defined for removable storage devices are enforced on macOS endpoints.

The agent also displays the end-user notification that is configured for the matched rule, and reports device control activity to the portal, where it can be reviewed from the Alerts tab of the Investigation page.

On the endpoint, the Forcepoint DLP Endpoint console displays a Devices tab that lists the removable storage devices currently connected to the endpoint together with the access permission applied to each one, and provides the Device bypass option.

To enable device control for an endpoint profile, refer to the Products section in Create Custom Profile.

For information on defining the device control policy in Forcepoint Data Security Cloud DLP, refer to Device control.

Custom domain name for local users

Administrators can now set a custom domain name for local users in the endpoint profile. When set, the agent reports local users with the configured UPN domain name and NTLM domain name, as domain users. By default, the host name is used.

To configure this option, refer to the General section in Create Custom Profile.