Forcepoint ONE SSE Deployment Guide Document Subtitle

Home
Verify access and perform initial configuration
Describes about initial account configurations, such as creating and assigning administrator accounts and roles, and configuring portal access and timeout policies in Forcepoint ONE Security Service Edge.
Manage portal administrators
System Administrators can create and mange users, groups and admin roles.

Verify access and perform initial configuration
Describes about initial account configurations, such as creating and assigning administrator accounts and roles, and configuring portal access and timeout policies in Forcepoint ONE Security Service Edge.
- Sections in Forcepoint ONE SSE
  Forcepoint ONE SSE's navigation UI allows admins to quickly maneuver through the portal to make configuring Forcepoint ONE SSE simpler and more efficient.
- Forcepoint ONE Bypass Lists for Firewalls and Security Software
  Ensure the following domains/URLs are permitted through your firewall to guarantee seamless service and functionality while using Forcepoint ONE SSE services. Unless explicitly specified, most requests are made to Forcepoint ONE Cloud Services via HTTPS on port 443.
- Forcepoint ONE SSE datacenters and IPs
  This article will provide details on the AWS servers from which Forcepoint ONE SSE will send the traffic to your internal applications and servers.
- Manage portal administrators
  System Administrators can create and mange users, groups and admin roles.
  - Understanding Admin Roles
    The Admin Roles page is where Forcepoint ONE SSE admins can create different and unique admin roles to assign to users or groups. The role permissions can allow users to Edit, View, or Disabled (hidden) to each individual tab and the sub-component within the tab.
  - Creating a local administrator account
    You should create at least two administrator accounts, that is one for nominal tasks and the other as a backup, with System Administrator role or the custom administrator role which is equivalent to the one that you just created.
  - Creating a local user group
    Admins can assign admin role membership to groups which users can inherit by being members of those groups. However, users can only be assigned a single role membership so admins must be aware when assigning users to groups with admin roles.
- Configuring Admin portal policy
  The Forcepoint ONE SSE Admin Portal tile allows you to manage user or group access to the Forcepoint ONE SSE Admin Portal itself. You can access the Admin Portal tile under the Protect > Policies page.
Integrate identity
You can configure user identity settings and synchronize user information from your directory in order to assign policies to users or groups.
Configure common components
Describes how to configure common components such as login policies, various notifications, custom notification files and so on.
Setup traffic steering
Forcepoint ONE SSE supports SmartEdge Agent and Cloud SWG traffic steering methods. This chapter describes steps to deploy each of those so that traffic can be forwarded to Forcepoint ONE SSE.
Configure DLP
DLP is a data loss prevention capability that allows for pattern matching (via regular expressions and keywords) against data as it is either being downloaded, uploaded, or scanned via API at rest.
Configure Zero Trust Network Access
Forcepoint ONE SSE's Agentless and Agent-based Zero Trust Network Access (ZTNA) provides an alternative to VPNs allowing admins to provide inline protection to internal apps without the need for VPN service to be running on the user's local machine.
Protect cloud applications
This chapter describes how to setup various cloud applications in Forcepoint ONE SSE so that Admins can monitor the data at rest and data in motion.
Configure policies
Describes how to configure policies for your application in Forcepoint ONE SSE portal so that you can monitor the data at rest and data in motion.
Monitor and analyze traffic
You can perform steps to monitor and analyze the traffic. Forcepoint ONE SSE Log Export REST API allows customers to query and pull cloud and access Logs. Alternatively, customers with Splunk or QRadar can instead utilize the Forcepoint ONE SSE Splunk app or the Forcepoint ONE SSE QRadar App for easy integration with the Forcepoint ONE SSE REST API to extract Forcepoint ONE SSE logs.
Configure applications
Forcepoint ONE SSE supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.

Manage portal administrators

System Administrators can create and mange users, groups and admin roles.

Understanding Admin Roles
The Admin Roles page is where Forcepoint ONE SSE admins can create different and unique admin roles to assign to users or groups. The role permissions can allow users to Edit, View, or Disabled (hidden) to each individual tab and the sub-component within the tab.
Creating a local administrator account
You should create at least two administrator accounts, that is one for nominal tasks and the other as a backup, with System Administrator role or the custom administrator role which is equivalent to the one that you just created.
Creating a local user group
Admins can assign admin role membership to groups which users can inherit by being members of those groups. However, users can only be assigned a single role membership so admins must be aware when assigning users to groups with admin roles.

Copyright © 2024 Forcepoint LLC