Forcepoint Data Security Cloud | App Security Online Help

EARLY ACCESS | 2026-11-03

Home
Appendices
M365 deployment
This article will cover the steps that administrators must take to complete a successful M365 setup.

Introduction
Forcepoint Data Security Cloud | App Security provide data security and access management for SaaS applications, ensuring safe and compliant cloud usage. Security teams rely on Cloud Access Security Broker (CASB) to perform the following types of functions:
Product updates
Explore the details of newly introduced and updated features here, along with an overview of resolved and known issues.
Getting started
This page helps the admins in setting up and configuring the Forcepoint Data Security Cloud | App Security for the first time and also explains the layout of Forcepoint Data Security Cloud | App Security.
User management
This section explains how administrators manage users, roles, and access permissions.
Home
The Home page provides a visually intuitive, data-driven dashboard that consolidates critical SaaS data discovery metrics, including Summary and Activity Log, along with quick access to key product updates.
Analyze
The Analyze section contains all of your log reports and alerts for visibility into user's activity and suspicious behavior.
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
Settings
The Settings section contains the majority of your setting configurations to be used in policies or integrations.
Appendices
- Building complex policies
  Customers sometime require the ability to control access to application with granularity. For example, a customer may want to allow usage of the standard mobile email client, but block usage of the Outlook mobile application.
- M365 deployment
  This article will cover the steps that administrators must take to complete a successful M365 setup.
  - Importing users
    Prior to an end user being able to use Forcepoint Data Security Cloud | App Security, the user must exist within the portal under the Users and Groups page.
  - Setting up external authentication
    Once users have been added and configured in the Forcepoint Data Security Cloud | App Security portal, you will then need to configure Forcepoint Data Security Cloud | App Security to point to the external authentication.
  - Creating policy
    Policy rules are used to match the context of a user's access to either a secure, allow, or deny action. Each rule operates in a similar manner to other common security appliances, e.g. next-generation firewall (NGFW) (next-generation firewall), with match criteria and top down rule matching.
  - Recommended default M365 policy
    When deploying M365 for the first time, set up two policies: one allowing Direct App Access through Client Apps for Any Group, Device, or Location, and one restricting ActiveSync and Web access through Secure App Access (with applied Data Loss Prevention (DLP)).
  - Application SSO
    Once the policy has been created, you will then need to setup Forcepoint Data Security Cloud | App Security as single sign-on (SSO) inside of Microsoft 365.
  - Examples
    From the example policy above, let’s take a look at a few users and how they are accessing the cloud application. For the sake of this example let’s assume that you are using an external IdP such as Okta or Ping for authentication.
- Download agents
  Consolidates download links for all available agents such as the SmartEdge agent or Active Directory (AD) sync agent.
- Download certificates
  Consolidates download links for Syslog Open Virtual Appliance (OVA) and Certificate ISO.
- Supported apps and browsers
  List of supported cloud apps, thick client apps, and browsers.
- Forcepoint Data Security Cloud bypass lists for firewalls and security software
  Ensure the following domains/URLs are permitted through your firewall to guarantee seamless service and functionality while using Forcepoint Data Security Cloud | SSE services. Unless explicitly specified, most requests are made to Forcepoint Data Security Cloud Cloud Services via HTTPS on port 443.
- Forcepoint Data Security Cloud | SSE datacenters and IPs
  This article will provide details on the Amazon Web Services (AWS) servers from which Forcepoint Data Security Cloud | SSE will send the traffic to your internal applications and servers.
- Data retention policy
  Protecting sensitive customer data is a core aspect of the Forcepoint Data Security Cloud | App Security solution. Forcepoint Data Security Cloud | App Security only sits in front of applications that house or assist in the transfer of corporate data. Forcepoint Data Security Cloud | App Security provides IT with visibility and control over these applications.
- Release notes
  Releases include new features as well as bug fixes.
- Known limitations
  Lists the known limitations.
- App supported features
  This page will walk you through which features are support by Application.
- Viewing Forcepoint Data Security Cloud | SSE supported file MIME types

M365 deployment

This article will cover the steps that administrators must take to complete a successful M365 setup.

Importing users
Prior to an end user being able to use Forcepoint Data Security Cloud | App Security, the user must exist within the portal under the Users and Groups page.
Setting up external authentication
Once users have been added and configured in the Forcepoint Data Security Cloud | App Security portal, you will then need to configure Forcepoint Data Security Cloud | App Security to point to the external authentication.
Creating policy
Policy rules are used to match the context of a user's access to either a secure, allow, or deny action. Each rule operates in a similar manner to other common security appliances, e.g. next-generation firewall (NGFW) (next-generation firewall), with match criteria and top down rule matching.
Recommended default M365 policy
When deploying M365 for the first time, set up two policies: one allowing Direct App Access through Client Apps for Any Group, Device, or Location, and one restricting ActiveSync and Web access through Secure App Access (with applied Data Loss Prevention (DLP)).
Application SSO
Once the policy has been created, you will then need to setup Forcepoint Data Security Cloud | App Security as single sign-on (SSO) inside of Microsoft 365.
Examples
From the example policy above, let’s take a look at a few users and how they are accessing the cloud application. For the sake of this example let’s assume that you are using an external IdP such as Okta or Ping for authentication.

Copyright © 2026 Forcepoint LLC
DRAFT | 2026-11-03