Forcepoint Data Security Cloud | App Security Online Help

EARLY ACCESS | 2026-11-03

Home
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
Configure applications
Forcepoint Data Security Cloud | App Security supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.
Dropbox
Forcepoint Data Security Cloud | App Security supports the ability to control access to Dropbox via single sign-on (SSO) and API.

Introduction
Forcepoint Data Security Cloud | App Security provide data security and access management for SaaS applications, ensuring safe and compliant cloud usage. Security teams rely on Cloud Access Security Broker (CASB) to perform the following types of functions:
Product updates
Explore the details of newly introduced and updated features here, along with an overview of resolved and known issues.
Getting started
This page helps the admins in setting up and configuring the Forcepoint Data Security Cloud | App Security for the first time and also explains the layout of Forcepoint Data Security Cloud | App Security.
User management
This section explains how administrators manage users, roles, and access permissions.
Home
The Home page provides a visually intuitive, data-driven dashboard that consolidates critical SaaS data discovery metrics, including Summary and Activity Log, along with quick access to key product updates.
Analyze
The Analyze section contains all of your log reports and alerts for visibility into user's activity and suspicious behavior.
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
- Add Applications
- Configure applications
  Forcepoint Data Security Cloud | App Security supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.
  - Microsoft
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Microsoft 365 via single sign-on (SSO) and API. Forcepoint Data Security Cloud | App Security also supports Cloud Security Posture Management (CSPM) audit scanning for Azure.
  - Google Workspace
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Google Workspace and Google Cloud Platform (GCP) via single sign-on (SSO) and API. Forcepoint Data Security Cloud | App Security also supports Cloud Security Posture Management (CSPM) audit scanning for GCP.
  - Dropbox
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Dropbox via single sign-on (SSO) and API.
    - Dropbox: deploying Forcepoint Data Security Cloud | App Security as a SAML identity provider
      This section will guide you through configuring Forcepoint Data Security Cloud | App Security as a Security Assertion Markup Language (SAML) Identity provider for Dropbox single sign-on (SSO) authentication. This will ensure visibility and access control of Dropbox via Forcepoint Data Security Cloud | App Security Cloud Access Security Broker (CASB).
    - Dropbox: configuring API access
      These instructions show how to authorize Forcepoint Data Security Cloud | App Security to access your Dropbox account via the API. All the files at rest will then be analyzed against Data Loss Prevention (DLP) Patterns and a report will be generated to identify any DLP violations in your corporate account.
  - Box
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Box via single sign-on (SSO) and API.
  - AWS
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Amazon Web Services (AWS) via single sign-on (SSO) and API. Forcepoint Data Security Cloud | App Security also supports Cloud Security Posture Management (CSPM) audit scanning.
  - Slack
    Forcepoint Data Security Cloud | App Securitysupports the ability to control access to Slack via single sign-on (SSO) and API.
  - Salesforce
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Salesforce via single sign-on (SSO) and API.
  - ServiceNow
    Forcepoint Data Security Cloud | App Security supports the ability to control access to ServiceNow via single sign-on (SSO) and API. Also, Forcepoint Data Security Cloud | App Security supports SaaS Security Posture Management (SSPM) scanning feature.
  - Atlassian (Confluence and JIRA)
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Atlassian via single sign-on (SSO) and API.
  - GitHub
    Forcepoint Data Security Cloud | App Security provides single sign-on (SSO) and API integrations with GitHub in order to scan and surface sensitive data at rest.
  - Egnyte: configuring API access
    This guide page will walk you through how to setup Egnyte for API scanning with Forcepoint Data Security Cloud | App Security. It is important to note that Egnyte enforces API rate limits on all tenants which will not be suitable enough for Forcepoint Data Security Cloud | App Security API scanning.
  - Configure Forcepoint Security Manager
    Forcepoint Security Manager (FSM) is an Any HTTP/S ZTNA App/Service application which can be used for adding multiple FSM Zero Trust Network Access (ZTNA) internal applications while onboarding a large customer.
  - Cisco WebEx Teams (formerly Spark): configuring API access
    Forcepoint Data Security Cloud | App Security can provide visibility into data at rest inside of Cisco WebEx Teams (Spark) and quarantine sensitive files.
  - Mobile mail cutoff (M365, Google, Exchange)
    Mobile Mail cutoff features enable you to enforce that all ActiveSync traffic goes through Forcepoint Data Security Cloud | App Security.
- Application Controls
- Configuring notifications
  Admins can create custom notification objects that can be applied to policies and reports. This will determine which admins or users are notified when a policy is violated and what the custom message says.
- Setup traffic steering
  Forcepoint Data Security Cloud | SSE supports SmartEdge Agent and Cloud Secure Web Gateway (SWG) traffic steering methods. This chapter describes steps to deploy each of those so that traffic can be forwarded to Forcepoint Data Security Cloud | SSE.
- Configuring SWG policies
  You can configure Secure Web Gateway (SWG) Connection Policy, Cloud SWG Authentication Policy and SWG Content Policy to manage traffic through Cloud SWG and SmartEdge agent.
- Configuring advanced threat protection
  Forcepoint Data Security Cloud | SSE provides Advanced Threat Protection (ATP) via partnerships with an antimalware provider.
- Integration
Settings
The Settings section contains the majority of your setting configurations to be used in policies or integrations.
Appendices

Dropbox

Forcepoint Data Security Cloud | App Security supports the ability to control access to Dropbox via single sign-on (SSO) and API.

Dropbox: deploying Forcepoint Data Security Cloud | App Security as a SAML identity provider
This section will guide you through configuring Forcepoint Data Security Cloud | App Security as a Security Assertion Markup Language (SAML) Identity provider for Dropbox single sign-on (SSO) authentication. This will ensure visibility and access control of Dropbox via Forcepoint Data Security Cloud | App Security Cloud Access Security Broker (CASB).
Dropbox: configuring API access
These instructions show how to authorize Forcepoint Data Security Cloud | App Security to access your Dropbox account via the API. All the files at rest will then be analyzed against Data Loss Prevention (DLP) Patterns and a report will be generated to identify any DLP violations in your corporate account.

Copyright © 2026 Forcepoint LLC
DRAFT | 2026-11-03