Forcepoint™ Security Management Center Service Online Documentation

Home
Policy Creation and Administration
Access Control & Authentication Policies

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
Policy Creation and Administration
- Overview
  Policies are key elements that contain rules for allowing or blocking network traffic and inspecting the content of traffic.
- Creating and managing policy elements
  Policy elements are containers for the rules that determine how Engines, Master Engines, and Virtual Engines examine traffic. The policy elements for the Engines include Template Policies, Policies, and Sub-Policies.
- Rule Types within Policies
- Policy Supporting Elements
- Inspection & Content Filtering Policies
- Access Control & Authentication Policies
  - Setting up user authentication
    You can implement user authentication to control which resources different end users can access. You can use authentication as an access requirement in IPv4 Access and IPv6 Access rules in Engine Policies. You can use both internal and external user authentication servers.
  - Block listing IP addresses
    Block listing is a way to temporarily block unwanted network traffic either manually or automatically with block list requests from an Engine or SMCaaS Application. Engines, and Virtual Engines can use a block list for blocking traffic.
  - Integrating Forcepoint One Endpoint with Engine
    If you have installed Forcepoint One Endpoint clients on the endpoints in your network, you can collect information about endpoint clients, and use the information for access control in the SMCaaS Application.
- Policy Troubleshooting & Maintenance
Monitoring
VPN

Access Control & Authentication Policies

Setting up user authentication
You can implement user authentication to control which resources different end users can access. You can use authentication as an access requirement in IPv4 Access and IPv6 Access rules in Engine Policies. You can use both internal and external user authentication servers.
Block listing IP addresses
Block listing is a way to temporarily block unwanted network traffic either manually or automatically with block list requests from an Engine or SMCaaS Application. Engines, and Virtual Engines can use a block list for blocking traffic.
Integrating Forcepoint One Endpoint with Engine
If you have installed Forcepoint One Endpoint clients on the endpoints in your network, you can collect information about endpoint clients, and use the information for access control in the SMCaaS Application.