Configuring failover to the hybrid service

Administrator Help | Forcepoint Web Security | v8.5.x

It is possible to configure failover to the hybrid service for filtered locations that use explicit proxies. This ensures that users are able to access the Internet and policy enforcement always occurs, even if on-premises proxies are unavailable.

Failover to the hybrid service for a filtered location must be approved, to ensure that web protection services can provision the correct number of users at the data center nearest to your location. Once failover for a filtered location has been approved, it does not need to be re-approved if you change the failover details or later disable and then re-enable failover.

To configure failover to the hybrid service:

On the Settings > General > Filtered Locations page, select a filtered location name to edit it. This must be a location managed by local web protection software with the proxy mode set to Explicit.

Click Advanced.

Mark Enable failover to hybrid service.

Enter the Number of users filtered by this filtered location.

Select the Nearest data center to the filtered location.

Click OK to return to the Filtered Locations page, and then click OK again to cache your changes. Changes are not implemented until you click Save and Deploy.

When failover for a filtered location is approved, an alert appears on the System dashboard and on the Status > Alerts page. You can view the approval status of all failover requests on the Status > Hybrid Service page.


	Note If automatic proxy caching is disabled in Internet Explorer, end users may notice a delay on every page they visit as the browser checks the list of proxies. When automatic proxy caching is enabled, the browser checks the proxy list only on startup. For more information, see the Microsoft article at http://support.microsoft.com/kb/271361.