Introduction

The following items are known limitations of the Forcepoint GRE solution.

• Internet Explorer: version 7 and above is required. Versions earlier than this do not support SNI, which is required for Forcepoint GRE.
• SNI is required for HTTPS traffic when using transparent proxy.
  • Windows XP does not support SNI and is, therefore, not supported for Forcepoint GRE.
  • Encrypted Client Hello (aka Encrypted SNI) is not supported when using transparent proxy.
• To support PAC file enforcement, you must use the alternate (port 80/443) PAC file address. The standard PAC file address (using port 8082/8087) is not supported.
• Forcepoint Web Security Endpoint is not supported for use with Forcepoint GRE.
• Secure form-based authentication is not supported for use with Forcepoint GRE.
• When using GRE tunneling, Dropbox is not supported for use with the Protected Cloud Apps feature in Forcepoint Web Security Cloud.
• Safari: if the customer policy has authentication enabled, Safari users must change the Block cookies setting to Never to ensure web pages load properly.