Forcepoint ONE ZTNA demo

Granular access control, DLP and malware protection for individual web apps are chief use cases for zero trust network access (ZTNA). Supporting these use cases in a fashion that preserves user feel, while extending all of the capabilities of the Forcepoint ONE CASB opposite proxy for public SaaS to private web apps, is a fundamental benefit of the Forcepoint I ZTNA gateway.



To bring this to life,
Shane Moore
demonstrates how piece of cake information technology is to use the ZTNA for both end users and administrators.





Cardinal features demonstrated:




  • User experience: Once logged in to Forcepoint 1, the user clicks on the tile corresponding to their individual web app and automatically logs in to that app.



  • User experience: The user navigates to a file in the private app and attempts to download it. Since the user has a managed connectedness to this app, downloads laissez passer through the Forcepoint One reverse proxy and tin can be scanned for sensitive data. In this case, sensitive data is detected, and a bulletin is displayed that the download is denied. The file that ordinarily would contain the sensitive data is created on the user’s device, but it is blank.




  • User experience: An attempt to upload a file containing malware is blocked and a block bulletin is displayed showing which malware scanning engine detected the malware.



  • Administrator experience: ZTNA for private web apps uses the same blazon of policy policies used past the CASB for managing access to SaaS apps. A private spider web app connection can be unmanaged (no data in motion is scanned for sensitive information or malware), denied, or managed. Managed access lets the ambassador specify multiple upload and download policies inside the same proxy policy using friction match patterns from a dropdown list of predefined and custom patterns. When a pattern is matched, the upload or download can exist blocked, reported, or both. These match patterns can include the reserved patterns for invoking malware scanning from CrowdStrike or Bitdefender.




Cardinal takeaways:




  • Forcepoint 1 ZTNA provides one click admission to any spider web app hosted behind a firewall without the need for the user to plant a VPN connection and without the need for any on-device agent. This requires the Forcepoint ONE ZTNA connector software to exist installed in the aforementioned information center as the private app existence accessed.




  • User experience is simplified by allowing tiles for individual spider web apps to coexist with tiles for managed SaaS apps in the aforementioned user portal: either the Forcepoint ONE user portal or the user portal of any SAML-compliant IdP integrated with your Forcepoint ONE tenant.



  • The aforementioned type of proxy polices used for managing access to managed SaaS with the CASB can exist used to manage access to private web apps with ZTNA, simplifying the administrator experience. This includes admission to the same library of match patterns for detecting sensitive information and malware on upload or download and blocking it with the same type of user notification messages.



If you observe this video useful, it’southward part of a longer Forcepoint Ane demo. Register to spotter
the full platform demo.


Jeff Birnbaum







Jeff Birnbaum
is a Sr. Production Marketing Manager at Forcepoint, where he serves every bit an evangelist for the visitor’s Security Service Border (SSE) offering: SWG, CASB, and ZTNA. His previous feel ranges from product marketing and production





Read more articles by Jeff Birnbaum

Forcepoint is the leading user and data protection cybersecurity company, entrusted to safeguard organizations while driving digital transformation and growth. Our solutions suit in existent-time to how people collaborate with information, providing secure access while enabling employees to create value.

Source: https://www.forcepoint.com/blog/x-labs/forcepoint-one-demo-ztna-private-apps

Check Also

Will Dogecoin Go Up In Value

Will Dogecoin Go Up In Value

On Dec. 6, 2013, Billy Markus and Jackson Palmer decided to combine their dearest of …