Configuring the Forcepoint DLP Cloud Agent

Administrator Help | Forcepoint DLP | Version 8.4.x

The Forcepoint DLP Cloud Agent provides content inspection for files uploaded to and stored in enterprise cloud collaboration services, such as Microsoft OneDrive for Business and Box. The agent applies existing DLP policies to data stored in enterprise cloud applications in order to audit and prevent the storage of sensitive data that could expose an organization to data loss and compliance infringements.

For information on installing and deploying the agent, refer to the Forcepoint DLP Installation Guide. Using the agent requires a Forcepoint DLP Cloud Applications subscription.

A Forcepoint DLP deployment can include multiple Forcepoint DLP Cloud Agent instances, if needed.

Each cloud agent includes an ICAP server. To configure the ICAP server for a cloud agent instance, expand the cloud agent node on the System Modules page and click the component. See Configuring ICAP.

Use the Settings > Deployment > System Modules page in the Data Security module of the Security Manager to access configuration settings for each agent instance.

Select the agent node in the list of system modules, then:

Enter the Name of the module.

Enter a module Description.

Click Connect to connect a service to the Forcepoint DLP Cloud Agent, then follow the prompts to complete the process (see Connecting to cloud services). The configuration status updates when you make changes. Check the System Health page for details.

Click Disconnect to disconnect the agent from the cloud service.

Click Disable to disable the agent and discontinue content analysis.

Click Enable to resume content analysis that was previously disabled.

The page also lists the module type, hostname, IP address, and version, which cannot be changed.


	Note A Forcepoint DLP Cloud Agent module that has been deleted cannot be reactivated from the Security Manager. Run the installer and register the module again.