Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Server Administration for Web Protection Solutions > Web protection components > Policy enforcement and management components
Policy enforcement and management components
Administrator Help | Forcepoint Web Security and Forcepoint URL Filtering | v8.5.x
Related topics:
*
Reporting components
*
User identification components
*
Interoperability components
Component
Description
Policy Database
Stores configuration and policy information. Installed automatically with Policy Broker.
Policy Broker
Manages requests from web protection components for policy and general configuration information.
Policy Server
*
Identifies and tracks the location and status of other web protection components.
*
Stores configuration information specific to a single Policy Server instance.
Configure Policy Server settings in the Security Manager (see Working with Policy Server).
Policy and most configuration settings are shared between Policy Servers that share a Policy Database (see Working in a multiple Policy Server environment).
Filtering Service
Provides Internet policy enforcement in conjunction with Content Gateway (Forcepoint Web Security), or with Network Agent or a third-party integration product (Forcepoint URL Filtering). When a user requests a site, Filtering Service receives the request and determines which policy applies.
*
Filtering Service must be running for Internet requests to be managed and logged.
*
Each Filtering Service instance downloads its own copy of the Forcepoint URL Database.
Configure Filtering Service behavior in the Security Manager (see Internet Usage Filters and Configuring filtering settings).
Network Agent
*
Enhances policy enforcement and logging functions
*
Enables protocol management
*
Enables policy enforcement in a standalone environment
For more information, see Configure Network Agent.
Forcepoint URL Database
*
Includes millions of websites, sorted into more than 90 categories and subcategories
*
Contains more than 100 protocol definitions for use in managing non-HTTP protocols
Download the Forcepoint URL Database to activate policy enforcement, and make sure that the database is kept up to date. If the Forcepoint URL Database is more than 2 weeks old, no policy enforcement can occur. See The Forcepoint URL Database for more information.
INFRASTRUCTURE
The platform that supports and unites the Web, Data, and Email modules of the Forcepoint Security Manager.
Maintains an internal database of global settings that apply to all management modules.
Web module (part of the Forcepoint Security Manager)
Serves as the configuration, management, and reporting interface for your web protection software.
Use the Web module of the Security Manager to define and customize Internet access policies, configure components, report on Internet activity, and more.
The Web module is made up of the following services:
*
Websense - TRITON Web Security
*
Websense Web Reporting Tools
*
Websense Explorer Report Scheduler
*
Websense Information Service for Explorer
*
Websense Reporter Scheduler
See Working in the Forcepoint Security Manager for more information.
Usage Monitor
*
Enables alerting based on Internet usage.
*
Provides Internet usage information to Real-Time Monitor.
Usage Monitor tracks URL category access (shown in Real-Time Monitor) and protocol access, and generates alert messages according to the alerting behavior you have configured. See Alerting and Real-Time Monitor for more information.
Content Gateway
*
Provides a robust proxy and cache platform.
*
Can analyze the content of websites and files in real time to categorize previously uncategorized sites.
*
Enables protocol management.
*
Analyzes HTML code to find security threats (for example, phishing, URL redirection, web exploits, and proxy avoidance).
*
Inspects file content to assign a threat category (for example, viruses, Trojan horses, or worms).
*
Strips active content from certain web pages.
See Content Gateway Analysis.
Remote Filtering Client
*
Resides on client machines outside the network firewall.
*
Identifies the machines as clients to be managed, and communicates with Remote Filtering Server.
See Manage Off-site Users for more information.
Remote Filtering Server
*
Allows policy enforcement for clients outside a network firewall.
*
Communicates with Filtering Service to provide policy enforcement for remote machines.
See Manage Off-site Users for more information.
State Server
In multiple Filtering Service environments, tracks client quota, confirm, password override, and account override sessions to ensure that access time is allocated correctly.
To enable this functionality, deploy one State Server per Policy Server.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Server Administration for Web Protection Solutions > Web protection components > Policy enforcement and management components
Copyright 2022 Forcepoint. All rights reserved.