Forcepoint Data Security Cloud Features
Administration (12)
-
Data Management
Administrators can access and organize data related to incidents to produce reports or make data more navigable.
-
Incident Logs
Information on each incident is stored in databases for user reference and analytics.
-
Reporting
Produces reports detailing trends and vulnerabilities related to bot management and performance.
Workflow Management
Create, design and manage workflows for repetitive tasks
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Configuration Management
Identify component attributes like servers, hardware, software, and manage relationships across all services
Data Storage Management
Manage and store data in a database
Policy Management
Create, manage, and track policies and procedures within an organization
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Web Threat Management
Incident Management
Manage and track all disruptions and incidents
Governance (4)
-
Access Control
Supports LDAP Protocol to enable access control and governance.
-
Compliance
Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.
-
Data Visibility
Similifies data identification to increase visibility and management capabilities
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Security (18)
-
Encryption
Protects data with within and as it leaves your secure or local network.
-
Endpoint Intelligence
Analysis for users to examine threat intelligence data specific to their endpoint devices.
-
Activity Monitoring
Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.
-
Breach Detection
Provides incident alerts for leaks or breaches and provides capabilities to inform administrators of attacks.
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Security Automation
Allows administrative control over automated security tasks.
Application Security
Protects application access and data. Prompts additional authentication for suspicious users.
Workload Protection
Protects computing resources across a network. Prompts additional authentication for suspicious users.
Data Protection
Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.
-
Governance
Allows users to create, edit, and relinquish user access privileges.
-
Data loss Prevention
Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
-
Data Encryption/Security
Manages policies for user data access and data encryption.
-
Access Control
Supports LDAP Protocol to enable access control and governance.
Cloud Encryption
Encrypt data to and from the cloud and on cloud storage devices
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Cloud Application Security
Identify and respond to security threats to cloud applications
Data Leak Prevention
Detect and prevent data breaches, exfiltration, or unwanted destruction of sensitive data.
Data Governance
Collection of processes, policies, and standards to manage the storage & usability of enterprise data
Network Management (4)
Network Segmentation
Allows administrative control over network components, mapping, and segmentation.
Network Mapping
Allows visual display of networks segmented components and their connected resources.
Security Analytics
Utilizes behavioral analysis to improve security procedures and documentation.
API/Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Identity Management (3)
Adaptive Access Control
Provides a risk-based approcach to determining trust within the network.
Identity Scoring
Calculates risk based on user behavior, permissions, and requests.
User Monitoring
Monitors users attempting unauthorized access to databases, applicaitons, and othe network components.
Analysis (5)
-
User Analytics
Allows for reporting and documentation of individual user behavior and privileges.
-
Cloud Gap Analytics
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
-
Anomoly Detection
Monitors acivity related to user behavior and compares activity to benchmarked patterns.
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Usage Tracking/Analytics
Track and interpret metrics on the usage of company resources
Functionality (3)
-
SSO
Provides a single access point for users to access multiple cloud products without multiple logins.
-
Cloud Registry
Details SaaS products the cloud security product can integrate with and provide security for.
-
Mobile Device Mangement
Offers the ability to set standards for types of mobile devices and networks capable of accessing data.
Management (4)
Multicloud Management
Allows users to track and control cloud spend across cloud services and providers.
DLP Configuration
Offers data loss prevention tools to protect data from leaving the environments it is allowed to.
Dynamic Scaling
Scale resources automatically, adjusting for usage demands.
Policy Enforcement
Enables administrators to create access policies and applies policy controls throughout request and provisioning processes
Monitoring (3)
Data Center Networking
Provides advanced data center network services to deliver multiple high-speed IP.
Multicloud Visibility
Allows users to track and control activity across cloud services and providers.
Anomaly Detection
Constantly monitors system to detect anomalies in real time.
Protection (4)
Firewall-as-a-Service
Managed, cloud-delivered firewall that protects devices, assets, networks, and other cloud services from web-based threats.
Cloud Application Brokerage
Provides a single access point for users to access multiple cloud applications, services, and products through a central gateway
Web Gateway
Provides a private web gateway for secure internet browsing.
Adaptive Access Control
Provides a risk-based approach to determining trust within the network.
Generative AI (2)
AI Text Summarization
Condenses long documents or text into a brief summary.
AI Text Generation
Allows users to generate text based on a text prompt.
Components - Secure Access Service Edge (SASE) (5)
Zero Trust Network Access (ZTNA)
Enforces zero trust access rules.
Wide Area Network (WAN)
Integrates wide area network (WAN) capabilities, such as SD-WAN.
Cloud Access Security Broker (CASB)
Enforces security requirements and secures connections with cloud resources.
Secure Web Gateway (SWG)
Prevents unauthorized web domains from entering a network and protects against web-based threats.
Firewall as a Service
Provides cloud-based firewall protection.
Artificial Intelligence - Secure Access Service Edge (SASE) (3)
Predictive Capabilities
Uses predictive analytics to anticipate emerging threats.
Real-Time Threat Detection
Utilizes AI algorithms to identify anomolies and block access to malicious sites.
Automation
Automates common workflows and remediation tasks.
Identity and Access Management - Zero Trust Platforms (4)
Single sign-on (SSO)
Simplifies user authentication across multiple services while maintaining security.
Multi-factor authentication (MFA)
Ensures that users are verified through multiple credentials before access is granted, reducing the risk of compromised accounts.
Role-based access control (RBAC)
Grants access based on the user’s role within the organization, adhering to the principle of least privilege.
Identity federation
Integrates with external identity providers to manage user identities across different platforms and services.
Security - Zero Trust Platforms (5)
Encryption
Mandatory encryption of data both at rest and in transit protects against unauthorized access.
Endpoint detection and response (EDR)
Continuous monitoring and real-time response capabilities with EDR help detect and mitigate threats on endpoint devices.
Device posture assessment
Verifies the security status of a device before granting access to network resources, ensuring that only compliant devices can connect.
Micro-segmentation
Divides the network into isolated segments to prevent lateral movement by attackers, ensuring that if one segment is compromised, others remain secure.
Zero trust network access (ZTNA)
Replaces traditional VPNs by enforcing granular, context-aware access to applications based on user identity, device, and other factors.
Data Security - Zero Trust Platforms (2)
Data loss prevention (DLP)
Detect and prevent unauthorized access or transfer of sensitive data.
Data classification
Data classification automatically categorizes data based on its sensitivity, allowing for appropriate security measures to be applied
Application Visibility - Zero Trust Platforms (5)
API support
API support ensures that the zero trust platform can integrate seamlessly with other security tools and existing infrastructure
Application-level controls
Provides the ability to enforce security policies at the application layer, ensuring that access to specific applications is tightly controlled.
Secure application access
ensures that only authorized users can access critical applications, protecting against unauthorized entry points
User and entity behavior analytics (UEBA)
UEBA identifies unusual behavior that may indicate a security threat, enabling proactive threat managemen
Continuous monitoring
Provides real-time visibility into all network traffic, user activities, and data flows to detect anomalies
Reporting and Policies - Zero Trust Platforms (5)
Policy automation
allows for automatic application of security policies based on predefined criteria, reducing the risk of human error and ensuring consistent enforcement
Regulatory compliance
Regulatory compliance assists organizations in adhering to industry-specific regulations, such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), or the California Consumer Privacy Act (CCPA)
Cross-platform compatibility
This works across different environments, including on-premises, cloud, and hybrid setups, ensuring comprehensive security coverage
Policy enforcement
This ensures that security policies are consistently applied across all users, devices, and application
Comprehensive reporting
Detailed reports that provide insights into security events help organizations maintain compliance and optimize their security posture
Agentic AI - Secure Access Service Edge (SASE) Platforms (4)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Cross-system Integration
Works across multiple software systems or databases
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Agentic AI - Zero Trust Platforms (4)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Cross-system Integration
Works across multiple software systems or databases
Adaptive Learning
Improves performance based on feedback and experience
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Components - Secure Service Edge (SSE) (4)
Secure Web Gateway (SWG)
Prevents unauthorized web domains from entering a network and protects against web-based threats.
Firewall as a Service
Provides cloud-based firewall protection.
Zero Trust Network Access (ZTNA)
Enforces zero trust access rules.
Cloud Access Security Broker (CASB)
Enforces security requirements and secures connections with cloud resources.
Artificial Intelligence -Secure Service Edge (SSE) (3)
Automation
Automates common workflows and remediation tasks.
Predictive Capabilities
Uses predictive analytics to anticipate emerging threats.
Real-Time Threat Detection
Utilizes AI algorithms to identify anomolies and block access to malicious sites.
Agentic AI - Secure Service Edge (SSE) (4)
Decision Making
Makes informed choices based on available data and objectives.
Autonomous Task Execution
Capability to perform complex tasks without constant human input.
Cross-system Integration
Works across multiple software systems or databases.
Proactive Assistance
Anticipates needs and offers suggestions without prompting.
Additional Functionality (59)
Personally Identifiable Information Protection
Prevent unauthorized access to personally identifiable information
Data Discovery
Discover and connect variety of data sources to the application for analysis
Behavior Tracking
Track visitors'/audience's responses across web pages and other optimized content
Remote Wipe
Remotely delete data from devices without needing physical access
Risk Analysis
Analyze potential risks across the organization
Insider Threat Protection
Prevent malicious actions by individuals connected to the organization, such as current and past employees, contractors, or associates
Anti Virus
Prevents, detects and removes malware
Whitelisting/Blacklisting
Control system access and/or deliverability for applications and email addresses
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Watermarking
Add a digital mark to show ownership of an image, video, document, etc.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
API
Application programming interface that allows for integration with other systems/databases
Ransomware Protection
Protects systems from ransomware attacks and mitigates attack risks
Multi-Factor Authentication
Request two or more credentials to prove user's identity before granting access to systems
Automatic Backup
Data is backed up automatically to prevent data loss
Multi-Device Support
Support multiple types of devices
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Real-Time Analytics
Analyze and gain insights into data in real-time
Secure Data Storage
Securely stores data to prevent data loss or breaches
Data Recovery
Ability to restore deleted, hidden, or lost data from an email server/system
Activity Tracking
Track and document all activities across devices, networks, and other systems
External Storage Device Blocking
Restrict data transfer to and from external storage systems such as USB and disk drives
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
File Quarantining
Isolate suspicious files to prevent harm to computer systems
Disaster Recovery
Plan and implement business continuity measures in case of unforeseen events
Intellectual Property Protection
The process of discovering content on the web that is same or similar to logos, trademarks or other proprietary content
Alerts/Escalation
System alerts about the need to escalate an issue or request
Risk Assessment
Initiate collection and analysis of known risks
Sensitive Data Identification
Identify sensitive or personal information collected from users
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
Data Classification
Grouping log entries based on similar attributes.
Data Replication
Process of copying and storing data in more than one site or node
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
File Transfer
Move files across different systems or networks
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Multi-Cloud Management
Allows businesses to monitor and secure applications and workloads across multiple public clouds
Risk Scoring
Assess and score risks using risk matrices
Device Auto Discovery
Automatically scan the network for devices and take pre-defined actions upon discovery
API
Application programming interface that allows for integration with other systems/databases
Real-time Alerts
Receive notification of issues as soon as they occur
Configuration Management
Identify component attributes like servers, hardware, software, and manage relationships across all services
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Risk Analysis
Analyze potential risks across the organization
User Activity Monitoring
Threat Protection
Protect incoming and outgoing communications against malware, spam, display spoofing, and other threats
Cloud Security Policy Management
A set of guidelines regarding cloud security management
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Device Management
Maintenance and upkeep of physical and/or virtual devices
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Performance Analysis
Monitor and analyze the performance and status of a server or system/application
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier


