New features

This release of the product includes the following new features. For more information, see the Forcepoint ONE SSE Admin Guide.

Cloud SWG vPoP

Forcepoint ONE SSE now support Virtual Points of Presence (also known as VPoP) to improve content localization for Cloud SWG customers.

When the Forcepoint ONE SSE end users access websites, those websites localize traffic to the country of the Cloud SWG datacenter and not the country where the end user is located. Forcepoint’s VPoPs will solve this localization issue using patent-pending technology to emulate localization for over 100 countries worldwide.

To understand the Cloud SWG vPoP feature in detail, refer to Cloud SWG vPoP IP addresses.

You can select the applicable Localization Country to which your web content should be localized while creating Sites for Transparent Proxy (IPsec and GRE Tunnels) and Explicit Proxy.

Exporting Logs to AWS S3 Bucket

Forcepoint ONE SSE provides an option to export logs of your tenant from the Forcepoint ONE SSE data lake onto your own AWS S3 bucket using Amazon S3 Access points.

To know how to export logs of your tenant, refer to Exporting Logs to AWS S3 Bucket.

Moved RBI Profiles from Forcepoint ONE SSE to Remote Browser Isolation application in Platform

Forcepoint ONE SSE deprecated the Protect > Objects > RBI Profile page and moved all the existing RBI Profiles that you have created under the Protect > Objects > RBI Profile page in Forcepoint ONE SSE to the RBI Profiles page in the Remote Browser Isolation application.

To create RBI Profiles in the Remote Browser Isolation application, select Remote Browser Isolation from application waffle and navigate to the RBI Profiles page. Refer to RBI Profiles to know in detail.

Exporting Devices list

Forcepoint ONE SSE now enables you to export the list of SmartEdge devices linked to your tenant in .csv format from the Analyze > Devices > SmartEdge Agent page. You can use this information for auditing, deprovisioning, and other compliance purposes.

Cloud SWG Explicit Proxy

Forcepoint ONE SSE provides you the ability to enforce Cloud SWG policies simply by forwarding traffic from known locations (branch offices) using the host PAC file and a Certificate for SSL decryption, without requiring a SmartEdge agent.

To know about Cloud SWG Explicit Proxy in detail, refer to Configuring explicit proxy.

SWG Policies - URL categories limit

While configuring SWG policies, you should select maximum of 50 URL categories per policy rule. If you add more than 50 categories per policy rule and click OK, then the Please limit your entry to 50 URL categories or fewer to proceed successfully. error gets displayed.

You can avoid this error by creating two or more policy rules within SWG policy, with each policy rule having 50 or fewer URL categories.

To know about SWG policies in detail, refer to Configuring SWG policies.

M365 API scanning application Directory Write Permissions

Forcepoint ONE SSE removed Directory Write permissions from Microsoft 365 API scanning application.

Standardizing Waffle switching across platform products

Forcepoint ONE SSE made following changes as a part of standardizing products across platform:
  • Updated UI (fonts, icons, and Favicon) as per Forcepoint design standards.
  • When you click the application, platform service, and portals from Waffle, it opens in the same browser tab or window.
    • Insights is renamed to Admin.
  • When you click an internal application or managed application from Waffle, it opens in a new browser tab or window.
  • The User Portal link is moved to the Logged In User initials icon.

Current Policy Version in Forcepoint ONE SSE and SmartEdge Agent Tray

Starting from the SmartEdge Agent 2.2.0 version onwards, the SmartEdge Agent tray displays current Policy Version on which it is operating. Customers can compare and validate a recent policy change using Policy Version on the Protect > Policies page with Policy Version on the SmartEdge Agent tray.

If the Policy Version on the SmartEdge Agent tray is not the latest, then customer can use the Policy Sync option below the Policy Version option on the SmartEdge Agent Tray to initiate the manual download of latest policy.

Important: Updated policies works after 5-10 minutes even though the Policy Version gets updated on clicking policy Sync option.