Forcepoint CSG is a converged cloud security service that provides visibility, control, and threat protection for users and data, wherever they are. Integrated functionality reduces time to value and ensures maximum capabilities are available. Eliminating multiple point products enables enterprises to cut costs, reduce complexity, and decrease operational overhead while eliminating overlap between product and security teams. The Forcepoint Cloud Security Gateway: • Extend protection to users both on and off the corporate network—in the office, at home, and on the go. • Apply consistent policies across your organization— for safe access to web content and cloud applications while protecting your critical data. • Prevent and stop threats across the entire kill chain— even the ones you can’t see like zero-day threat. • Discover risky cloud application usage. • Enable policies to protect data without impacting productivity. • Decrease costs and hardware footprint. • Eliminate gaps in security operations and streamline IT and workflow management. • Reduce vendors and point product overload. • Simplify regulatory compliance. Utilize pre-defined regulatory policy templates to remove guesswork and reduce effort. • Ensure employee productivity. • Secure your global and remote workforce

Dynamic User Protection (DUP) is a User Activity Monitoring (UAM) solution designed to alert organizations of risky behavior, so they can protect critical data and reduce the risk associated with insiders. The solution collects user behavior and Forcepoint DLP incidents (through DLP 8.8 integration) then computes the user’s risk using Forcepoint’s Indicator of Behavior (IOB) analytic models. This risk score is actively communicated to DLP to automate policy enforcement based on the risk level. The Dynamic User Protection solution operates within both the endpoint and cloud, which balances immediate detection and enforcement capabilities with scalability. Forcepoint’s commitment to privacy is recognized through various technical and operational controls across our organization, and this continued commitment will shape our future as a privacy leader.

Forcepoint Dynamic Edge Protection (DEP) implements Gartner’s SASE model for unifying web, network, and application security in the cloud. Secure Access Service Edge (SASE) brings security that used to be delivered via a patchwork of point products into the cloud. It dramatically improves and simplifies how you can keep your people and data safe. Forcepoint Dynamic Edge Protection (DEP) provides true SASE security-as-a-service that is ideal for safeguarding branch offices, SD-WAN connections, and Wi-Fi networks without deploying security hardware. With your applications, data, and people constantly moving outside the traditional bounds of your enterprise, old approaches to security can’t keep up. Putting stacks of hardware at every location or using different products for remote workers leaves holes for attackers, drives up costs, and drains scarce IT resources. That’s why we created our Forcepoint Dynamic Edge Protection (DEP) suite of SASE and Zero Trust solutions. DEP lets you safely provide controlled access to web, cloud, and internal applications—protected against advanced threats and data loss—to all of your people wherever they’re working: at home, in the office or on the road. Analysts call this new cloud-native approach Secure Access Service Edge (SASE) and Zero Trust. DEP is a suite of purpose-built cloud solutions such as Forcepoint Cloud Security Gateway (CSG) and Forcepoint Private Access (PA) that weave together advanced security microservices to provide web content inspection, URL Filtering, Shadow IT controls, Zero Trust Network Access (ZTNA), firewalling with intrusion prevention, malware scanning, data loss prevention, and more. These unified capabilities eliminate the gaps and redundancies you used to wrestle with in point products. DEP frees your people to work safely anywhere while helping you keep your business efficient and secure. Forcepoint Dynamic Edge Protection offers: • Greater Productivity – give remote users faster access to cloud apps without putting your business at risk. • Lower Costs – cut CAPEX and OPEX by not having to buy, deploy, and manage patchworks of security hardware and software. • Reduced Risk – deliver strong, extensible security against advanced threats and data loss without gaps or redundancies. • Streamlined Compliance – increase your visibility and control for faster incident response.

Forcepoint CASB Cloud Access Security Broker discovers cloud application use, analyze risk, and enforce appropriate controls for SaaS and custom applications. Forcepoint CASB offers enhanced security for data in cloud apps, so your end-users can access their favorite apps without restriction. The Forcepoint CASB: • Discover and risk-prioritize all unsanctioned cloud use (Shadow IT) to quickly and easily determine if applications meet governance rules and avoid compliance issues • Unleash the power of BYOD with improved employee productivity and cost savings while ensuring security of employees and corporate resources in the cloud • Identify anomalous and risky user behavior in the cloud to stop malicious users, as well as clamp down on user activities that don’t meet best practices • Reduce the risk of exposing sensitive cloud data to unauthorized users in violation of governance and regulatory rules • Identify potentially inappropriate privilege escalation to prevent the impact associated with root account takeover • Implement geo-location-based access and activity monitoring for legitimate users and malicious actors • Track application usage for compliance, licensing, and cost savings of unused accounts Forcepoint CASB integrates with DLP solutions to provide unified data protection extending from on-premises to the cloud environment. It also integrates with solutions such as web security, email security, next-generation firewall and more. CASB creates a risk profile based on threat likelihood and business impact. It utilizes analytics based on thousands of apps and activities to provide risk prioritized alerts for SOC and incident response teams. Forcepoint CASB has the most comprehensive use case coverage, with API and forward/reverse proxy support. This provides granular device and activity control for unmanaged devices. Forcepoint CASB has flexible product architecture to support any application, including custom applications, without product changes. Users can fully audit and protect application usage in a matter of hours or days.

Forcepoint Advanced Malware Detection (AMD) leverages proven Lastline technology to detect zero-day and other advanced malware. Using Lastline’s Deep Content Inspection technology, Forcepoint AMD emulates an entire host, interacting with malware to expose and observe a malicious object’s possible actions. These include advanced evasion techniques, O/S or application specific threats, dormant code analysis and even CPU and in-memory activity. Forcepoint Advanced Malware Detection provides leading malware detection capabilities. The sandbox is based on a unique architecture that emulates and analyzes the activity of an entire host, including the CPU, system memory and all input/output devices. Often missed by other security technologies, AMD’s Deep Content Inspection provides visibility into the behavior of malicious code by emulating a complete operating system and hardware environment. Emulation eliminates the clues that malware often uses to evade detection in more traditional, virtualized sandboxes. AMD is available as a fully integrated option for Forcepoint CASB, NGFW, Web Security and Email Security. In this integration, Forcepoint’s core solutions first assess the broader context of an internet transaction for potential indicators of compromise. After performing static analysis of suspicious files, AMD can be called upon to perform the deep behavioral analysis necessary to identify zero-day threats and other modern malware. Available as a cloud service for high availability, scalability, low maintenance and other SaaS benefits, on-premises for cloud-adverse organizations, or even deployed as an air gapped solution with Forcepoint NGFW for physically isolated network requirements. Forcepoint AMD is the perfect complement to your Forcepoint CASB, NGFW, Web Security or Email Security solution. It provides unparalleled threat detection, as well as consistent threat forensic information, to optimize incident response teams. Forcepoint AMD will give you all the information you need—regardless of the threat vector—while ‘zero-false positives’ means you’ll spend your valuable time working against true threats. Regardless of your size or industry, Forcepoint provides the comprehensive security solutions you need to challenge today’s fast evolving, highly evasive threats.