Adding an internal HTTP/S app via ZTNA

Once the installation and configuration of ZTNA connector is complete, you can now add your internal apps to Forcepoint ONE SSE to provide contextual access controls and inline protection. Adding apps will follow a similar setup to adding cloud-based apps except you will instead select our Any HTTP/S ZTNA App/Service template instead.

Follow the below steps to provide access to internal apps via ZTNA over HTTP or HTTPS:

Steps

  1. In the Forcepoint ONE SSE portal, click Protect > Add Apps > Managed Apps.
  2. On the Managed Apps page, select the Any HTTP/S ZTNA App/Service option.
  3. In the new window, fill out the fields to configure your app:
    1. Provide a name for the app.
    2. Select the Display on Admin Portal app Launcher’ checkbox to display ZTNA application name in Navigation Bar.
    3. You can (optionally) upload an image that will appear on the policies page as well as a small icon that will be used on logs and Dashboard pages.
    4. Enter the internal hostname for your app.
    5. Select server type.
    6. Enter the port that is accessed over.
    7. Select the datacenter name that we configured in the prior section in step 6 above. Again, this is a name that will be used in logs (that is, this app is located in the "Campbell, CA" office location).
    8. Add any other additional domains associated with the app to ensure full functionality when a user is being proxied to the app.
      You can add up to 50 rows.
    9. Enter the HTTP/S ports that the internal application can be accessed over. This field supports individual ports and ports ranges.
      You can add up to 50 rows.
    10. Enter download DLP URL one per row.
      You can add up to 50 rows. To know about Download DLP URLs, refer to Download DLP Configuration section under Configuring inline DLP for custom applications.
  4. Now with the app added, you can go back to the Protect > Policies page and apply contextual access controls and inline DLP policies just like any other cloud app (notice it will indicate ZTNA HTTP/S on the top left of the app logo and datacenter name at the bottom of the app logo).