Configuring content categorization categorizes content from URLs that are not in the Forcepoint URL Database and from sites with dynamic content, as identified by Forcepoint Security Labs. Analysis returns a category for use in policy enforcement.

Configuring tunneled protocol detection analyzes traffic to discover protocols tunneled over HTTP and HTTPS. Such traffic is reported to Filtering Service for protocol policy enforcement. Analysis is performed on both inbound and outbound traffic.

Configuring content security analyzes inbound content to find security threats such as malware, viruses, phishing, URL redirection, web exploits, proxy avoidance, and others.

Configuring file analysis can apply to as many as 2 methods of inspection to detect security threats.

Traditional antivirus (AV) definition files to find virus-infected files.

Advanced File Analysis sends suspicious files for analysis and can be configured to send alerts via email, SNMP, or both when a file is found to contain malicious content.

Content Gateway outbound security analysis provides 2 types of outbound analysis. The first performs outbound content analysis that mirrors your inbound Security Threats content analysis and file analysis configuration. The second performs data theft analysis, looking for and blocking outbound custom encrypted files, password files, and other sensitive data.

The Content Categorization and Scanning Sensitivity control allows you to tune the Content Categorization and Content Analysis sensitivity thresholds (Content Gateway advanced analysis options).

For large, streaming, or slow transactions, the Content Delay Handling option provides some control over how long to wait before releasing a portion of buffered content to the client (Content Gateway advanced analysis options).

The Scanning Timeout, File Size Limit and Content Stripping Advanced Options apply to all traffic transiting the proxy (Content Gateway advanced analysis options).

SSL decryption bypass options support the specification of clients, websites, and website categories that are not subject to decryption and analysis as they flow through the proxy. These options apply only if SSL support is enabled in Content Gateway. See SSL decryption bypass.

Authentication bypass supports the ability to bypass Content Gateway user authentication for requests to selected cloud applications. See Authentication bypass

Content Gateway bypass is used to bypass the proxy server for requests to selected cloud applications.See Content Gateway bypass.

On the Settings > General > Account page

On the Settings > General > Policy Servers page, after selecting a Policy Server instance to edit.