New features

This release of the product includes this new feature. For more information, see the Forcepoint ONE SSE Admin Guide.

Web Debug Logs

Forcepoint ONE SSE enables you to generate Web debug logs, for the websites accessed by users with the SmartEdge agent and Cloud SWG, to enable more effective debugging. Once the Web Debug feature is enabled for your tenant and once the debug mode is enabled, you can see the logs within 5 minutes as soon as logs are generated so that you can debug issues like policy hits, policy migrations, and so on.

You can access the Web Debug page by navigating to Analyze > Logs > Web Debug.

To know how to generate Web Debug logs, refer to Generating Web debug logs.

Introducing AI & ML categories in Forcepoint ONE SSE ThreatSeeker URL Database

The existing set of categories used by Forcepoint ONE SSE ThreatSeeker URL Database is enhanced with the addition of new categories pertaining to Artificial Intelligence (AI) and Machine-Learning (ML).

Four (4) new sub-categories are added within the Information Technology parent category for easy and fine-grained policy management. With these sub-categories, you are better positioned to reap the benefits as well as protect yourselves against the potential risks coming with the game changing innovations happening in the field of AI and ML technologies.

The new categories are:
  • Other AI ML Applications
  • Generative AI – Multimedia
  • Generative AI - Conversation
  • Generative AI - Text & Code

The website for testing web categories can be accessed at https://testdatabaseforcepoint.com/.

Importing Cloud SWG Authentication Policies

Forcepoint ONE SSE now provides admins the ability to import Cloud SWG Authentication Policies via csv file into Forcepoint ONE SSE. This feature is useful for customers migrating from Cloud-Web to Forcepoint ONE SSE.

To know how to import Cloud SWG Authentication Policies, refer to Importing Cloud SWG Authentication Policies.

Scanning Nested Zipped Files

Forcepoint ONE SSE now supports DLP scanning capability to scan double/nested zipped files and to take action on double/nested zipped files as per the Download DLP setup.

Rich Text Editor Support

The following pages under the Protect > Notifications now supports Rich Text Editor to format and style the content and to add links and email addresses in notifications.

  • Inline Popup
  • User Emails
  • Group Emails

To know about the notifications in detail, refer to Configuring notifications and reports.

New PAC file for SmartEdge Agent 2.0.0 and later versions

The SmartEdge Agent 2.0.0 and later versions uses a new smaller PAC file. This new PAC file makes it easier for customers using Agent Proxy Chaining feature together with Chain to Explicit Proxy as they will have to open access to fewer domains (used in the new PAC file) on their Firewall.

You can access the new PAC from the Protect > Forward Proxy > SmartEdge Proxy > PAC File URL (2.0.0 and Newer Agents) field.

Cloud SWG Explicit Proxy

Forcepoint ONE SSE provides you the ability to enforce Cloud SWG policies simply by forwarding traffic from known locations (branch offices) using the host PAC file and a Certificate for SSL decryption, without requiring a SmartEdge agent.

To know about Cloud SWG Explicit Proxy in detail, refer to Configuring explicit proxy.

Proxy Chain support

SmartEdge agent supports proxy chaining from the SmartEdge Agent 2.1.0 version onwards. When the SmartEdge agent arrives at an office location with the site Type set to Explicit Proxy, the agent detects the Site and proxy chains based on the Agent Override setting defined in the Site configuration.

Note:
  • The first site on your tenant will be available in all regions after 10 minutes for the agent's Chain to Explicit Proxy feature to work.
  • If you uninstall the SmartEdge Agent from a user device of the first tenant and install to a user device of a new tenant, then the agent's Chain to Explicit Proxy feature will be available only after 40 minutes. To reduce this waiting period, follow the recommended steps:
    1. Uninstall the SmartEdge Agent from a user device of Company A.
    2. Remove the SmartEdge Agent associated with Company A's Forcepoint ONE SSE.
    3. Wait at least 11 minutes.
    4. Install the SmartEdge Agent on a user device of Company B.

To know about Proxy chain support in detail, refer to Configuring explicit proxy.