Forcepoint Mobile Endpoint Agent Online Help Document Subtitle

EARLY ACCESS | 2026-07-02

Home
Deploying the agent
This section provides essential guidance for deploying the Forcepoint Mobile Endpoint Agent through a supported Mobile Device Management (MDM) solution, including application setup, certificate and VPN configuration, and steps to uninstall the agent and its associated profiles from managed devices.
iOS/iPadOS
Forcepoint Mobile Endpoint Agent provides security and management capabilities for iOS/iPadOS devices in your organization. This section covers deployment procedures for your iOS/iPadOS devices.
Deploy the agent via Microsoft Intune

Introduction
This chapter introduces the Forcepoint Mobile Endpoint Agent (Mobile Endpoint Agent) and explains how it extends cloud‑based security policies to iOS and iPadOS devices, ensuring consistent protection for mobile users on and off the corporate network.
Product updates
This section summarizes the latest enhancements, fixes, and known issues included in the current release.
Deploying the agent
This section provides essential guidance for deploying the Forcepoint Mobile Endpoint Agent through a supported Mobile Device Management (MDM) solution, including application setup, certificate and VPN configuration, and steps to uninstall the agent and its associated profiles from managed devices.
- iOS/iPadOS
  Forcepoint Mobile Endpoint Agent provides security and management capabilities for iOS/iPadOS devices in your organization. This section covers deployment procedures for your iOS/iPadOS devices.
  - System requirements
    Before deploying the solution, ensure devices meet the supported platform / component versions.
  - Prerequisites
    This topic outlines the prerequisites that must be completed before deploying the Mobile Endpoint Agent.
  - Deploy the agent via Microsoft Intune
    - Deploy using certificate-based authentication (SCEPman)
      This section explains how to deploy the Forcepoint Mobile Endpoint Agent using Microsoft Intune, including adding the application, configuring certificate and VPN profiles, and assigning the required settings to manage iOS and iPadOS devices.
    - Deploy using MDM-supplied UPN (certificate-free)
      This section explains how to deploy Forcepoint Mobile Endpoint Agent using Microsoft Intune without requiring certificates. This certificate-free method uses username/password authentication and delivers the user's User Principal Name (UPN) through an app configuration policy.
  - Uninstall the agent
    This section outlines how to remove the Forcepoint Mobile Endpoint Agent from managed devices, including MDM‑based removal of the application and configuration profiles, as well as manual uninstallation options available to device users.
Using the application
This section describes how the Mobile Endpoint Agent functions after installation, including how users interact with the app, view connection status, and understand the protection enforced on their device.
Managing endpoints
Endpoint management provides a centralized console for managing all organization‑wide endpoints, simplifying administration, and ensuring consistent security policies across devices and users.
Configuring policy
This section explains how the Forcepoint Mobile Endpoint Agent applies to web access policies configured in the Secure Gateway to manage and secure device traffic.
Reviewing logs
This section describes how to view web activity logs and administrative actions recorded for devices using the Forcepoint Mobile Endpoint Agent.
Appendices
This section provides supplementary reference information for the Mobile Endpoint Agent, including managed bypass lists and migration guidance.

Deploy the agent via Microsoft Intune

Deploy using certificate-based authentication (SCEPman)
This section explains how to deploy the Forcepoint Mobile Endpoint Agent using Microsoft Intune, including adding the application, configuring certificate and VPN profiles, and assigning the required settings to manage iOS and iPadOS devices.
Deploy using MDM-supplied UPN (certificate-free)
This section explains how to deploy Forcepoint Mobile Endpoint Agent using Microsoft Intune without requiring certificates. This certificate-free method uses username/password authentication and delivers the user's User Principal Name (UPN) through an app configuration policy.