Configuring Data Protection Service

Administrator Help | Forcepoint DLP | Version 8.9

Use the Data Protection Service tab of the Settings > General > Services page to connect to Data Protection Service. Uploading tenant information is part of the connection process.

Data Protection Service:

Enables enforcement of DLP rules that protect cloud applications through integration with Forcepoint CASB, for the DLP Cloud Proxy, DLP Cloud API, and Cloud Data Discovery channels.


	Note To support these channels, DLP Cloud Applications must be activated. For more information, see Configuring DLP Cloud Applications.

Protects data over web traffic through integration with Forcepoint Web Security Cloud.


	Note As part of the integration with the Forcepoint Web Security Cloud, URL categories can now be imported from the Forcepoint Web Security Cloud Portal. See Linking Service and mapping URL categories for more information.

Enables enforcement of DLP rules for the Network Email channel though integration with Forcepoint Email Security Cloud. For more information, see the Forcepoint Email Security Cloud and Forcepoint DLP Integration Guide.

First, Data Protection Service must be connected. This is done by uploading tenant information from a JSON file received by email as part of the onboarding process. Note that each time a file is uploaded, the system resets as if this is the first connection:

Click Select File, and in the dialog box that appears, click Choose File. Browse to the JSON file you received from Forcepoint, and then click OK.

The file is uploaded to the server, and the information begins to appear in the Connection area of the Data Protection Service tab.

Click Connect to establish the connection with Data Protection Service:

Click Deploy to begin enforcing policies in cloud channels.

Click OK at the bottom of the screen to complete the process.

When the connection is active, the Connect button turns into a Disconnect button, enabling disconnection of Data Protection Service from Forcepoint DLP.

In the Data Protection Service Status area, upon successful connection, the status is marked as Connected successfully, the time and date of the connection is displayed, and the Recheck connection link is enabled. This link is used to check the connection status in the event of problems. If an error is returned upon checking the connection, the status is listed as Failed to connect.

Error handling

If Data Protection Service shows the status "Failed to connect", the module is temporarily unavailable. Click Connect or Recheck Connection to try to connect again. If the problem continues, contact Forcepoint Technical Support.

If the JSON file is uploaded for the first time, and when you click Connect the connection fails, the status shown is "Never connected". This is because the Forcepoint Security Manager has never successfully connected to the Cloud Policy Engine. In this case, it is probable that a Cloud Policy Engine was not created. Contact Forcepoint Technical Support for assistance

If you receive the following message in the Data Protection Service Status area:

This service is not connected to Forcepoint CASB. Incident reporting and policy enforcement will be affected for cloud channels. See "Explain this page" for more information.

This means that there is a connection issue, and DLP Cloud API and Cloud Data Discovery channels will not enforce DLP policies, and the DLP Cloud Proxy channel might not report incidents to the Forcepoint Security Manager. See Viewing deployment status for more information.