Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working With Web DLP
Working With Web DLP
Help | Content Gateway | v8.5.x
Related topics:
*
Deploying Content Gateway to work with Forcepoint DLP
*
Registering Content Gateway with Forcepoint DLP
*
Configuring the ICAP client
*
ICAP failover and load balancing
When Forcepoint Web Security is deployed with the DLP Module:
*
Organizations are protected from data loss over web channels (HTTP, HTTPS, FTP, and FTP over HTTP).
A full Forcepoint DLP deployment can extend data loss prevention to include channels such as mobile devices, removable media, and printers.
*
Forensics data appears in the Threats dashboard.
*
Content Gateway records DLP Module transaction statistics.
To start using the DLP Module:
1.
Install Forcepoint Web Security with the DLP Module, as described in the Installation Guide.
2.
Configure Content Gateway to work with DLP Module components.
How the Forcepoint Web Security DLP Module works
When the DLP Module is enabled:
1.
Content Gateway intercepts outbound content and provides that content to Forcepoint DLP.
2.
Forcepoint DLP analyzes the content to determine if the web posting or FTP upload is allowed or blocked, based on the Web DLP policy.
*
Transactions over HTTP, HTTPS, FTP, and FTP over HTTP can be examined.
*
The disposition is communicated to the proxy.
*
Forcepoint DLP logs the transaction.
3.
The proxy acts on the Forcepoint DLP determination.
*
If the content is blocked, it is not transmitted to the remote host and Forcepoint DLP returns a block page to the sender.
*
If the content is allowed, it is forwarded to its destination.
 
* 
Note 
When a request is blocked and the DLP server sends a block page in response:
*
Content Gateway forwards the block page to the sender in a 403 Forbidden message.
*
The block page must be larger than 512 bytes or some browsers will substitute a generic error message.
In addition to applying Web DLP policies, the DLP Module can be used to enable data theft analysis for outbound traffic. Configure outbound security options in the Web Security module of the Forcepoint Security Manager on the Scanning > Scanning Options page.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working With Web DLP
Copyright 2023 Forcepoint. All rights reserved.