Configuring inline proxy integration

This section Provides an overview of how to configure Forcepoint CASB and Forcepoint Web Security Cloud using inline proxy integration.

Before you begin

To integrate CASB with Web Security, review the following requirements based on your current setup:

If you already use CASB service and want to add Web Security Cloud service:
- Uninstall the SEA agent. For more information, see the Uninstall SEA page.
- Install the F1E or F1A agent in PCEP mode. For details, see:
  - Forcepoint F1E Install Guide and Configuring the F1E PCEP Mode.
  - F1A Install Guide and Configuring the F1A PCEP Mode.
If you have Web Security Cloud service and want to add CASB service:
- Change your F1E/F1A agent deployment from DCEP mode to PCEP mode. For details, see:
  - Configuring the F1E PCEP Mode
  - Configuring the F1A PCEP Mode
If you use DLP Endpoint and want to add CASB and Web Security Cloud services:
- Install the F1E agent in hybrid mode to support both web proxy and DLP endpoint functionality. For more details, see the F1E hybrid deployments page.
If you use the agentless mode:
- You can still integrate CASB with Web Security Cloud and the traffic will be routed through the Web Security Cloud proxy using IPsec or GRE tunnels.

Important: User provisioning must be consistent across CASB and Web Security. The same user identity (for example, user@domain.com) must exist in both systems to avoid policy enforcement issues.

Steps

Log in to Forcepoint Web Security Cloud.
Navigate to Web > Policies > Cloud apps.
In the CASB Managed cloud application widget, toggle Enable Forcepoint CASB protection to ON.
1. By default, Steer CASB managed cloud app traffic via web proxy is selected. Keep this setting unchanged.
  
  Once the changes are applied, CASB-managed app domains will rely solely on the CASB cloud applications configuration. Web Security Cloud policies will not take action on these CASB-managed app domains. For more details, see the Policies page.
After enabling inline proxy integration, certain CASB features (such as Forward Proxy) will no longer be supported because they are unnecessary. Unsupported features will display a Custom Notification at the top of the page.
1. Clicking Details opens a dialog with more information.
You can also review user actions in the CASBInline collections. For more details, see the Transaction Viewer logs page.