Forcepoint ONE SSE Deployment Guide Document Subtitle

Home
Protect cloud applications
This chapter describes how to setup various cloud applications in Forcepoint ONE SSE so that Admins can monitor the data at rest and data in motion.
Protecting data at rest
You can configure various cloud applications to enable offline scanning of cloud applications.

Verify access and perform initial configuration
Describes about initial account configurations, such as creating and assigning administrator accounts and roles, and configuring portal access and timeout policies in Forcepoint ONE Security Service Edge.
Integrate identity
You can configure user identity settings and synchronize user information from your directory in order to assign policies to users or groups.
Configure common components
Describes how to configure common components such as login policies, various notifications, custom notification files and so on.
Setup traffic steering
Forcepoint ONE SSE supports SmartEdge Agent and Cloud SWG traffic steering methods. This chapter describes steps to deploy each of those so that traffic can be forwarded to Forcepoint ONE SSE.
Configure DLP
DLP is a data loss prevention capability that allows for pattern matching (via regular expressions and keywords) against data as it is either being downloaded, uploaded, or scanned via API at rest.
Configure Zero Trust Network Access
Forcepoint ONE SSE's Agentless and Agent-based Zero Trust Network Access (ZTNA) provides an alternative to VPNs allowing admins to provide inline protection to internal apps without the need for VPN service to be running on the user's local machine.
Protect cloud applications
This chapter describes how to setup various cloud applications in Forcepoint ONE SSE so that Admins can monitor the data at rest and data in motion.
- Adding managed cloud applications
  There are two primary ways for adding a licensed application.
- Protecting data at rest
  You can configure various cloud applications to enable offline scanning of cloud applications.
  - Setting up API access to managed cloud applications
    To enable offline scanning of cloud applications, configure an API connection to one or more of your selected cloud applications. Then configure data at rest and API-based enforcement policy actions.
  - Setting up selective API scanning in Forcepoint ONE SSE
    After you have setup the API, you can choose specific settings for what is getting scanned. This can be specific folders or even users. Setting options may differ based on the application.
- Protecting data in motion
  You can configure single sign-on for cloud applications and then configure policies to audit and control access to these protected cloud applications.
- Configuring direct set cookies
  At times you may encounter applications that set cookies on direct request that prevents or breaks a login attempt to an application with users being sent through the Forcepoint ONE SSE reverse proxy.
Configure policies
Describes how to configure policies for your application in Forcepoint ONE SSE portal so that you can monitor the data at rest and data in motion.
Monitor and analyze traffic
You can perform steps to monitor and analyze the traffic. Forcepoint ONE SSE Log Export REST API allows customers to query and pull cloud and access Logs. Alternatively, customers with Splunk or QRadar can instead utilize the Forcepoint ONE SSE Splunk app or the Forcepoint ONE SSE QRadar App for easy integration with the Forcepoint ONE SSE REST API to extract Forcepoint ONE SSE logs.
Configure applications
Forcepoint ONE SSE supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.

Protecting data at rest

You can configure various cloud applications to enable offline scanning of cloud applications.

Setting up API access to managed cloud applications
To enable offline scanning of cloud applications, configure an API connection to one or more of your selected cloud applications. Then configure data at rest and API-based enforcement policy actions.
Setting up selective API scanning in Forcepoint ONE SSE
After you have setup the API, you can choose specific settings for what is getting scanned. This can be specific folders or even users. Setting options may differ based on the application.

Copyright © 2024 Forcepoint LLC