Next steps

Forcepoint GRE Guide | Forcepoint Web Security Cloud and Hybrid Solutions

Once you have completed the setup steps in the preceding section, your next steps are to:

Enable notification pages for HTTPS sites (if required)

Configure browsers for NTLM identification (if required)

Using single sign-on

Ensure you have configured policies to manage traffic from your network. See Forcepoint Web Security Cloud Help - Defining Web Policies for information on policy configuration.

Test your policies.

Enable notification pages for HTTPS sites

In order for notification pages to be displayed for HTTPS sites - for example, block pages if the website is in a category that is blocked, or the Pre-logon welcome page for authentication - you must configure a root certificate on each client machine. This acts as a Certificate Authority for secure requests to the cloud proxy.

The setting is found on the Web > Block & Notification Pages page, under Settings. To enable it, mark the checkbox Use certificate to serve notifications for HTTPS pages.

This page also has a link to download the Forcepoint root certificate, which should be installed on client machines. For further details, see Forcepoint Web Security Cloud Help - Configure Block & Notification Pages.

Configure browsers for NTLM identification

If you are using NTLM identification, you must add the authentication URLs for the Forcepoint cloud service to your browsers' local intranet zone.

The following URLs must be trusted:

http://proxy-login.blackspider.com

https://ssl-proxy-login.blackspider.com

For guidance on adding these URLs for various browsers, see the following article in the Forcepoint Knowledge Base: Configuring browsers for NTLM identification.

Using single sign-on

Single sign-on using the SAML standard is supported for GRE tunneling.

Single sign-on must be configured in the cloud portal. See Configure Single Sign-On settings in the cloud portal Admin Guide for more information.

Test your policies

Your policies can be tested using the proxy query page:

http://query.webdefence.global.blackspider.com/?with=all

Verify that traffic is going through the cloud service and that the correct policies are being applied. The following graphic shows the result of a successful test.