Endpoint tab
Use the Endpoint tab to enable secure transparent authentication with the web endpoint for end users whose requests are managed by this policy.
The cloud service uses the User Principal Name (UPN) or the NTLM ID provided by the endpoint agent to match endpoint users to the appropriate policy. The service first attempts to match the UPN. If no match is found, or if no UPN is available, the service attempts to find a user match using the NTLM ID.
From this tab you can deploy the Proxy Connect endpoint to either the roaming users or all users in the policy directly from the cloud. (The Direct Connect endpoint and F1A must be installed manually; automatic installation from this tab is not supported.)
- Proxy Connect users in your network will be asked to install the endpoint software on their machine when they start a browsing session.
- Roaming users must first authenticate themselves via the Roaming home page before being asked to install the endpoint software.
See this Knowledge Base article for a list of browsers that support Proxy Connect endpoint deployment directly from the cloud.
For F1A, Proxy Connect, and Direct Connect endpoint software, you can push the endpoint manually to selected client machines using your preferred distribution method. For more information, see Configure Endpoint settings.
For both F1E Direct Connect and Proxy Connect endpoint clients, you can choose to automatically update endpoint whenever a new version is released. Note that if you select an automatic update option, it applies to all users in the policy who have installed the endpoint on the selected operating system, regardless of how the endpoint software was originally deployed.
For F1A, automatic updates are enabled by default but can be configured on the F1A management portal, accessed from the Forcepoint Dynamic User Protection Help.
page. For more information, see Settings section of the