Configuring FSM/FONE DS controlled policies for CASB and SWG channels

Forcepoint Data Security Cloud | SSE provides a capability to enforce DLP policy and associated actions setup in the Forcepoint Security Manager (FSM) or Forcepoint Data Security Cloud | DLP for CASB and SWG channels in Forcepoint Data Security Cloud | SSE.

This functionality is helpful for the customers who have Enterprise Forcepoint DLP or Forcepoint Data Security Cloud | DLP and would like to apply DLP Policies in the FSM/Forcepoint Data Security Cloud | DLP for the CASB and SWG channels in Forcepoint Data Security Cloud | SSE.

Important:

Forcepoint Data Security Cloud | DLP now seamlessly integrates with Forcepoint Data Security Cloud | SSE, enabling the direct application of Forcepoint DLP from the Cloud. This advancement eliminates the necessity for an on-premises Forcepoint Security Manager (FSM), streamlining data protection processes. To know more about theForcepoint Data Security Cloud | DLP application, refer to Forcepoint ONE Data Security Online Help.

The procedure to integrate Forcepoint Data Security Cloud | SSE with Forcepoint Data Security Cloud | DLP is similar to integrating with on-premises FSM.

The integration between the Forcepoint Data Security Cloud | SSE and the Forcepoint DLP is achieved via multi-directional communications among the customer-deployed FSM server, the cloud-hosted Data Protection Service (DPS), and the Forcepoint Data Security Cloud | SSE cloud infrastructure.

Policies are uploaded from the FSM to the cloud-hosted DPS.
End-user transfers sensitive data from/to a cloud application that is under monitoring.
This triggers the Forcepoint Data Security Cloud | SSE to send event details to the DPS for analysis.
DPS returns the policy mitigation (for example: block or permit) post analysis.
FSM downloads the incident and forensic information which can be viewed in the reporting section.

To know about end-to-end integration with FSM, refer to the following integration guides: