Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Filtered locations
Administrator Help | Forcepoint Web Security  | v8.5.x
Related topics:
Use the Settings > General > Filtered Locations page to review, add, or edit information about the locations whose Internet traffic is managed by the hybrid service or handled by Forcepoint CASB.
Filtered locations with CASB
A filtered location is the external IP address, IP address range, or subnet for any location from which Internet requests are managed by instances of Content Gateway.
If you do not have the Hybrid Module, continue to Adding or editing filtered locations.
Filtered locations with hybrid (including hybrid with CASB)
A filtered location is the external IP address, IP address range, or subnet from which Internet requests appear to originate when seen by the hybrid service. Hybrid policy enforcement can be applied to off-site users, regardless of how requests from those users are managed when they are in the network.
You can define filtered locations for both of the following:
*
Enter their in-network location details and specify that the location is managed by the hybrid service. When users make an Internet request from off site, they are prompted to log on to the hybrid service so that the appropriate user or group-based policy can be applied.
Because the hybrid service is hosted outside your network, any locations managed by the hybrid service must be external addresses, visible from the Internet. Locations managed by the hybrid service:
*
*
*
These locations are NOT:
*
*
*
Doing this serves two purposes:
1.
2.
The PAC file generated by the hybrid service is configured automatically based on your Filtered Locations settings.
When defining a site managed by on-premises components as a Filtered Location:
3.
4.
5.
Each location that you define appears in a table that combines a name and description with technical configuration details, including the selected proxy mode, the type of location (single IP address, IP address range, or subnet), and the actual external IP address or addresses from which requests originate.
*
*
*
*
If you have added or edited a location entry, click OK to cache your changes. Changes are not implemented until you click Save and Deploy.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Copyright 2020 Forcepoint. All rights reserved.