Forcepoint Data Security Cloud | SSE Administrative Guide Document Subtitle

Home
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
Configuring Advanced Threat Protection
Forcepoint Data Security Cloud | SSE provides Advanced Threat Protection (ATP) via partnerships with Bitdefender.
Understanding supported file types
Each of the OEM vendors you partner with may support different file types for scanning. This is also contingent on the Forcepoint Data Security Cloud | SSE mode the file is passing through (SWG, Reverse proxy, API, etc).
Viewing Forcepoint Data Security Cloud | SSE supported file MIME types

Introduction
CASB provide data security and access management for SaaS applications, ensuring safe and compliant cloud usage. Security teams rely on CASB to perform the following types of functions:
Product updates
Explore the details of newly introduced and updated features here, along with an overview of resolved and known issues.
Sign into the Forcepoint Data Security Cloud | SSE portal
Signing into Forcepoint Data Security Cloud | SSE to configure manage CASB, web and private application traffic.
Getting started
This page helps the admins in setting up and configuring the Forcepoint Data Security Cloud | SSE for the first time and also explains the layout of Forcepoint Data Security Cloud | SSE.
Home
The Home page provides a visually intuitive, data-driven dashboard that consolidates critical SaaS data discovery metrics, including Summary and Activity Log, along with quick access to key product updates.
Analyze
The Analyze section contains all of your log reports and alerts for visibility into user's activity and suspicious behavior.
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
- Add Applications
- Configure applications
  Forcepoint Data Security Cloud | SSE supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.
- Application Controls
- Configuring notifications
  Admins can create custom notification objects that can be applied to policies and reports. This will determine which admins or users are notified when a policy is violated and what the custom message says.
- Setup traffic steering
  Forcepoint Data Security Cloud | SSE supports SmartEdge Agent and Cloud SWG traffic steering methods. This chapter describes steps to deploy each of those so that traffic can be forwarded to Forcepoint Data Security Cloud | SSE.
- Configuring SWG policies
  You can configure SWG Connection Policy, Cloud SWG Authentication Policy and SWG Content Policy to manage traffic through Cloud SWG and SmartEdge agent.
- Device Profiling Proxy
  The Device Profiling Proxy page will allow you to both configure the means to distinguish between a managed and an unmanaged device as well as implement a forward proxy deployment for applying inline policy actions.
- Configure Zero Trust Network Access
  Forcepoint Data Security Cloud | SSE's Agentless and Agent-based Zero Trust Network Access (ZTNA) provides an alternative to VPNs allowing admins to provide inline protection to internal apps without the need for VPN service to be running on the user's local machine.
- Configuring Advanced Threat Protection
  Forcepoint Data Security Cloud | SSE provides Advanced Threat Protection (ATP) via partnerships with Bitdefender.
  - Setting ATP scanning policy
    You can protect your cloud application from malware by setting up ATP scanning using any of the ATP options that you have purchased. Setting up ATP scanning for your cloud application, is same as configuring any other data pattern with minor difference.
  - Understanding supported file types
    Each of the OEM vendors you partner with may support different file types for scanning. This is also contingent on the Forcepoint Data Security Cloud | SSE mode the file is passing through (SWG, Reverse proxy, API, etc).
    - Viewing Forcepoint Data Security Cloud | SSE supported file MIME types
      - Viewing supported file MIME types for both inline and API scanning
        Lists supported file MIME Types for both access and API scanning.
      - Viewing additional file MIME types supported specifically for API scanning
        Lists additional file MIME Types supported specifically for API scanning.
- Encrypting data
  Forcepoint Data Security Cloud | SSE enterprise edition allows users to encrypt data at rest in cloud applications for both file and field level data. Keys can be managed in the Forcepoint Data Security Cloud | SSE Keystore or customers can add their own KMIP Key Store to utilize existing key management appliance/servers (KMS or HSM).
- Integration
IAM
The IAM section contains the configuration pages used for maintaining your organization in Forcepoint Data Security Cloud | SSE (adding your domain, managing users/devices/etc).
Settings
The Settings section contains the majority of your setting configurations to be used in policies or integrations.
Support
The Support section contains links to Admin guide, URL Lookup page, and Forcepoint Customer Hub.
Appendices

Viewing Forcepoint Data Security Cloud | SSE supported file MIME types

Forcepoint Data Security Cloud | SSE supports inline DLP scanning, and API (Cloud) scanning.

Viewing supported file MIME types for both inline and API scanning
Lists supported file MIME Types for both access and API scanning.
Viewing additional file MIME types supported specifically for API scanning
Lists additional file MIME Types supported specifically for API scanning.

Copyright © 2025 Forcepoint LLC