Hybrid service management of off-site users

With the Hybrid Module for Forcepoint Web Security, the hybrid service in the cloud can be configured to manage off-site users, regardless of how those users requests’ are handled when they are in-network.

• For users whose requests are handled by on-premises components (Filtering Service) when they are inside the network, you can configure the browser PAC file to determine whether the user is in-network or off-site before forwarding an Internet request.

  If you are using the PAC file generated by the hybrid service, this configuration occurs automatically based on the settings that you provide in the Forcepoint Security Manager.

• For users managed by the hybrid service both in and outside the network, no PAC file changes are required. When off-site users make an Internet request, they are prompted to log on to the hybrid service so that the appropriate user or group- based policy can be applied.
• A Permit when user is off-site option can be enabled to exclude roaming users from certain policy restrictions, giving them wider Internet access when not in the office.