sd-wan NEWS

TMCNet:  Forcepoint Data-First SASE Pioneers Industry's Most Complete Single-Vendor Offering

[November 17, 2022]

Forcepoint Data-First SASE Pioneers Industry's Most Complete Single-Vendor Offering

Global security leader Forcepoint is now offering a single-vendor Secure Access Service Edge (SASE) solution. With the Forcepoint ONE Security Service Edge (SSE) platform and FlexEdge Secure SD-WAN, distributed businesses and government agencies can connect and protect their hybrid workforces with a wide range of centrally managed networking and security solutions that are sourced and supported from a single company. This approach avoids the burdens, inefficiencies, and risks that otherwise come with piecing together a patchwork of point products and dealing with multiple vendors.

As organizations around the world bring people back into the office, SASE provides a cloud-based architecture that can simplify their adoption of Zero Trust. Forcepoint's Data-first SASE solutions take this a step further, building advanced data security into its adaptive-access gateways and intelligently distributing enforcement of security policies based on where each user is working.

Incorporating Zero Trust Web Access technology into Forcepoint ONE's secure web gateway (SWG) service enables web security policies to be configured centrally and enforced in the cloud for sites or on the endpoint for people working from home. This distributed enforcement provides the breadth of protection needed at offices-where BYOD, IoT, specialty workstations, and guest computers are commonplace-as well as the fast user experience that remote workers now expect. Forcepoint's endpoint-based web security makes this possible by eliminating the latency that comes with cloud-only approaches, enabling secure web browsing to run up to twice as fast.

Forcepoint's cloud-based and endpoint-based web security both take advantage of the Zero Trust-based advanced threat protection and data loss prevention capabilities built into Forcepoint ONE. Risky or unknown websites can automatically be routed through the platform's remote browser isolation (RBI) service and used safely, even if they're harboring malicious code. Forcepoint RBI incorporates the company's advanced content, disarm and reconstruction (CDR) technology to sanitize documents as they are being downloaded. As a result, even compromised websites can be used without exposing devices, networks, and sensitive business data to internet-based attacks. New dashboards in Forcepoint ONE also make it easy for administrators to see when threats have been encountered and blocked.




As part of this introduction, the company is also making zero trust network access (ZTNA) , one of the core elements of SASE, easier to deploy. Data centers and remote sites that have private business applications needed by remote workers can use FlexEdge security appliances (virtual or physical) to automatically connect those private apps via Forcepoint ONE's ZTNA cloud service so that users anywhere can safely access the apps without the complexity, bottlenecks and risks of VPNs.

"Remote workers and hybrid workers at office sites need security that automatically adjusts to their needs, no matter where they are," said Forcepoint Chief Product Officer Rees Johnson. "As one of the few companies with expertise in both networking and security, Forcepoint's innovative data-first approach to SASE enables modern organizations to deliver safe, fast access to business data everywhere people need it. Our distributed enforcement automates security for sites while still providing superior performance for remote workers. And, our integration of uniform identity, intelligent adaptive access control, and strong data security makes it easier for businesses and government agencies to adopt Zero Trust."

Innovations in Forcepoint ONE and FlexEdge Secure SD-WAN highlighted in today's introduction include:

  • Zero Trust Web Access combines secure web gateway (SWG) technologies with remote browser isolation (RBI) and content, disarm and reconstruction (CDR) services to give remote workers the most productive browsing experience and sites the most comprehensive protection using the same cloud-managed security policies. Those security policies are enforced directly on remote endpoints via the company's SmartEdge agent while sites and branch offices can forward web traffic to the Forcepoint ONE cloud platform using open networking protocols such as GRE and IPsec.
  • ZTNA App Connector in FlexEdge appliances (virtual or physical) enables private apps within data centers and branch/home offices to be remotely accessed via Forcepoint ONE's ZTNA cloud service without having to deploy separate connector software. This avoids infrastructure and operational costs while simplifying the deployment of ZTNA.
  • Enhanced Reporting includes the "Threat" dashboard which reports users that encounter known and zero-day threats detected in downloads or uploads, and the "Data Security" dashboard reporting users that encounter data uploaded to unsanctioned websites in downloads or uploads.

All of these new features and functionality are immediately available worldwide. To learn more visit: https://www.forcepoint.com/use-case/sase-secure-access-service-edge

Resources

About Forcepoint

Forcepoint simplifies security for global businesses and governments. Forcepoint's all-in-one, truly cloud-native platform makes it easy to adopt Zero Trust and prevent the theft or loss of sensitive data and intellectual property no matter where people are working. Based in Austin, Texas, Forcepoint creates safe, trusted environments for customers and their employees in more than 150 countries. Engage with Forcepoint on www.forcepoint.com, Twitter and LinkedIn.


[ Back To SD-WAN Homepage ]