F1A

The F1A endpoint agent is a single agent that installs on the endpoint machine and includes both proxy connect and direct connect modes. F1A can automatically switch between the two modes depending on network conditions and performance.

Once F1A is activated, full functionality of proxy connect or direct connect is available. F1A uses the appropriate endpoint mode, based on network conditions. When proxy connect mode is in use but cannot connect to the proxy or if performance becomes an issue, F1A will switch to the direct connect mode.

F1A collects activity data from the endpoint and, for customers who have purchased Forcepoint Dynamic User Protection, sends the data there where it is analyzed for the purpose of risk score calculation.