Introduction

Internet policy enforcement requires interaction between several web protection components:

• User requests for Internet access are received by Content Gateway (Forcepoint Web Security), or by Network Agent or an integrated third-party product or device (Forcepoint URL Filtering).
• The requests are sent to Filtering Service for processing.
• Filtering Service communicates with Policy Server and Policy Broker to respond appropriately to requests.

The central Policy Broker gives other components access to client, filter, policy, and general configuration information. (It is possible to deploy additional, replica Policy Broker instances with read-only copies of this information, but only the central, or primary, instance is used to make updates to policy or configuration data.)

The Forcepoint Security Manager is associated with the central Policy Broker, and can be used to configure any Policy Server in the deployment.