Configuring policy

This section explains how the Forcepoint Mobile Endpoint Agent applies to web access policies configured in the Secure Gateway to manage and secure device traffic.

Policy configuration for the Mobile Endpoint Agent follows the same core structure as Secure Gateway policies. The Mobile Endpoint Agent enforces the web access rules that administrators define in the Secure Gateway application, ensuring consistent protection across endpoints.

The Secure Gateway provides multiple layers of protection, including URL filtering, SSL inspection, DLP and content scanning. Once a user is assigned a policy, the Mobile Endpoint Agent retrieves that policy from the cloud and applies the corresponding rules to the device’s network traffic.

As a result, mobile devices receive the same visibility and control as other protected endpoints, regardless of network or location. For instructions on creating and managing Secure Gateway policies, see Defining Web Policies.

Default Policy

When mobile traffic reaches the Secure Gateway, the system analyzes the connection headers to determine which user is associated with that traffic.
  • If the user is mapped to a specific web policy, that policy is applied.
  • If the user is not mapped to any policy, the system falls back to the Default policy configured in the mobile services.
  • If a user was previously mapped but later removed, the system again applies to the Default policy defined in the Mobile Services configuration.
This ensures that every mobile device always receives an appropriate policy, even when the user is unknown, unmapped, or removed from a specific policy assignment.
To configure the default policy:
  1. Open the Secure Gateway application in the Forcepoint Data Security Cloud.
  2. Navigate to Web > Device Management > Mobile Services.
  3. Select the mobile service entry and click the Edit icon.

    This opens the Assign Forcepoint Mobile App Policy page.

  4. Under Policy Assignment, the only configurable option is the Default policy, which you select from the drop‑down list.