Forcepoint ONE SSE Administrative Guide Document Subtitle

Home
Protect
Configure applications
Forcepoint ONE SSE supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.
AWS
Forcepoint ONE SSE supports the ability to control access to AWS via SSO and API. Forcepoint ONE SSE also supports CSPM audit scanning.

Admin Portal
Analyze
Protect
- Add Applications
- Configure applications
  Forcepoint ONE SSE supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.
  - Microsoft
    Forcepoint ONE SSE supports the ability to control access to Microsoft 365 via SSO and API. Forcepoint ONE SSE also supports CSPM audit scanning for Azure.
  - Google Workspace
    Forcepoint ONE SSE supports the ability to control access to Google Workspace and Google Cloud Platform (GCP) via SSO and API. Forcepoint ONE SSE also supports CSPM audit scanning for GCP.
  - Dropbox
    Forcepoint ONE SSE supports the ability to control access to Dropbox via SSO and API.
  - Box
    Forcepoint ONE SSE supports the ability to control access to Box via SSO and API.
  - AWS
    Forcepoint ONE SSE supports the ability to control access to AWS via SSO and API. Forcepoint ONE SSE also supports CSPM audit scanning.
    - Amazon Web Services: Deploying Forcepoint ONE SSE as a SAML IdP
      Configuring Amazon Web Services as an IaaS app protected by Forcepoint ONE SSE is similar to the configuration for SaaS apps.
    - Amazon S3: Configuring API access
      This section will walk you through how to enable and setup API scanning into Amazon S3 buckets to surface sensitive content and apply controls.
    - AWS: Configuring CSPM audit
      Forcepoint ONE SSE can scan AWS for configuration management to ensure the setting configuration is in compliance with frameworks such as CIS Benchmark.
  - Slack
    Forcepoint ONE SSE supports the ability to control access to Slack via SSO and API.
  - Salesforce
    Forcepoint ONE SSE supports the ability to control access to Salesforce via SSO and API.
  - ServiceNow
    Forcepoint ONE SSE supports the ability to control access to ServiceNow via SSO and API. Also, Forcepoint ONE SSE supports SSPM scanning feature.
  - Atlassian (Confluence and JIRA)
    Forcepoint ONE SSE supports the ability to control access to Atlassian via SSO and API.
  - GitHub
    Forcepoint ONE SSE provides SSO and API integrations with GitHub in order to scan and surface sensitive data at rest.
  - Egnyte: Configuring API access
    This guide page will walk you through how to setup Egnyte for API scanning with Forcepoint ONE SSE. It is important to note that Egnyte enforces API rate limits on all tenants which will not be suitable enough for Forcepoint ONE SSE API scanning.
  - Configure Forcepoint Security Manager
    Forcepoint Security Manager (FSM) is an Any HTTP/S ZTNA App/Service application which can be used for adding multiple FSM ZTNA internal applications while onboarding a large customer.
  - Cisco WebEx Teams (Formerly Spark): Configuring API access
    Forcepoint ONE SSE can provide visibility into data at rest inside of Cisco WebEx Teams (Spark) and quarantine sensitive files.
  - Mobile Mail Cutoff (M365, Google, Exchange)
    Mobile Mail cutoff features enable you to enforce that all ActiveSync traffic goes through Forcepoint ONE SSE.
- Application Controls
- Configuring notifications
  Admins can create custom notification objects that can be applied to policies and reports. This will determine which admins or users are notified when a policy is violated and what the custom message says.
- Setup traffic steering
  Forcepoint ONE SSE supports SmartEdge Agent and Cloud SWG traffic steering methods. This chapter describes steps to deploy each of those so that traffic can be forwarded to Forcepoint ONE SSE.
- Configuring SWG policies
  You can configure SWG Connection Policy, Cloud SWG Authentication Policy and SWG Content Policy to manage traffic through Cloud SWG and SmartEdge agent.
- Device Profiling Proxy
  The Device Profiling Proxy page will allow you to both configure the means to distinguish between a managed and an unmanaged device as well as implement a forward proxy deployment for applying inline policy actions.
- Configure Zero Trust Network Access
  Forcepoint ONE SSE's Agentless and Agent-based Zero Trust Network Access (ZTNA) provides an alternative to VPNs allowing admins to provide inline protection to internal apps without the need for VPN service to be running on the user's local machine.
- Configuring Advanced Threat Protection
  Forcepoint ONE SSE provides Advanced Threat Protection (ATP) via partnerships with Crowdstrike and Bitdefender.
- Encrypting data
  Forcepoint ONE SSE enterprise edition allows users to encrypt data at rest in cloud applications for both file and field level data. Keys can be managed in the Forcepoint ONE SSE Keystore or customers can add their own KMIP Key Store to utilize existing key management appliance/servers (KMS or HSM).
- Integration
IAM
Settings
Support
The Support section contains links to Admin guide, URL Lookup page, and Forcepoint Customer Hub.
Deployment Guides
Other

AWS

Forcepoint ONE SSE supports the ability to control access to AWS via SSO and API. Forcepoint ONE SSE also supports CSPM audit scanning.

Amazon Web Services: Deploying Forcepoint ONE SSE as a SAML IdP
Configuring Amazon Web Services as an IaaS app protected by Forcepoint ONE SSE is similar to the configuration for SaaS apps.
Amazon S3: Configuring API access
This section will walk you through how to enable and setup API scanning into Amazon S3 buckets to surface sensitive content and apply controls.
AWS: Configuring CSPM audit
Forcepoint ONE SSE can scan AWS for configuration management to ensure the setting configuration is in compliance with frameworks such as CIS Benchmark.

Copyright © 2024 Forcepoint LLC