Forcepoint Risk Adaptive Protection for DLP Reviews

I have experience with Forcepoint Data Loss Prevention and Netwrix Endpoint Protector, as I am currently working with both. My experience is primarily with Forcepoint.

I am mostly working with Forcepoint DLP, Web Proxy, Data Classification, and I handle total implementation and operations by myself. I have hands-on experience with Forcepoint DLP, CASB, DLP, and Web Proxy, which means three products. I also have hands-on experience with Fortra DLP, which means Digital Guardian, and I have experience with SentinelOne EDR as well. Additionally, I am currently trying out Fortinet Firewall.

I do not have experience with Forcepoint's Next-Generation Firewall as I just started with Fortinet Firewall.

I have hands-on experience with Forcepoint CASB, but I am not totally dependent on it. My focus is on DLP, Web Proxy, and Data Classification. I know how CASB works, and I have nearly five years of experience with DLP, Web Proxy, and Data Classification.

I am familiar with Forcepoint Risk Adaptive Protection for DLP.

The most valuable features in Forcepoint Risk Adaptive Protection for DLP include policy management and endpoint status, as well as supplementary servers, OCR, IRR, and additional features.

Integration with Forcepoint Risk Adaptive Protection for DLP is available with DLP and SIEM, and we can integrate DLP logs with the SIEM.

The real-time adaptability in Forcepoint Risk Adaptive Protection for DLP policy enforcement is totally dependent on the organization's data, which means customization is required. There are predefined policies as well, which we follow for various organizations such as government and health sector organizations, and we define the rules based on that.

In my perspective, there are several things that need to be improved in Forcepoint Risk Adaptive Protection for DLP, such as the inability to monitor some encrypted data or data leaking in incognito mode. Additionally, Forcepoint Risk Adaptive Protection for DLP cannot monitor encrypted applications such as Microsoft Teams because it is end-to-end encrypted.

In terms of additional features, there are many aspects of Forcepoint Risk Adaptive Protection for DLP that need improvement. Right now, two or three items are necessary, such as testing every policy to make sure they are configured correctly. We cannot go directly to production due to the extensive fine-tuning required, which typically takes two to three weeks to monitor the policy after customization.

A lot of time has been consumed in the two to three weeks needed, which is something that should be reduced. Additionally, concerning the predefined policies, we cannot see the backend condition or backend script, which makes it difficult to modify the predefined policy.

I do not use Forcepoint Risk Adaptive Protection for DLP Context-Driven Insights feature at all.

We classify data security by writing policies and conditions based on the organization's commitments, which helps us enhance our data security practices.

Regarding Forcepoint adaptive security policies, there are many policies based on the organization's requirements, such as for health sector, finance, and government. Forcepoint recommends using three types of policies: default, narrow, and wide, and the default needs to be fine-tuned to reduce negative logs and incidents. We customize the policy if needed, which allows us to reduce incidents and have the correct one in place.

Regarding licensing costs, it is expensive. If you require only DLP, you can get it in bulk, but overall, the Forcepoint suite, which includes email protection, email security, web proxy, and DLP, is costly. If you only want the DLP solution, while it can be taken, it is still costly. Overall, the total suite is more expensive.

My overall rating for this product is six out of ten.

We use it exclusively for data loss prevention.

We chose Forcepoint as part of our cybersecurity strategy, and one of the key expectations was to prevent data leakage. Currently, we have it configured to alert us when someone plugs in a USB device, which has been an advantage.

We are still in monitor mode and haven't fully utilized its blocking capabilities.

From an end user's perspective, it's not always clear what's happening with the DLP. It would be beneficial to have more use cases available, perhaps on a countrywide basis.

Additionally, we'd appreciate more guidance and suggestions from the partner or OEM, such as when new policies are released. They could also provide input on how to configure the product in accordance with evolving regulations, like potential DLP legislation in India.

We use Forcepoint DLP, and we have been able to stabilize the product. Currently, it's in monitor mode, but we are working with our partner to transition it to blocking mode.

We have been using it for one and a half years.

We found no issues with the stability. The deployment took some time due to our different locations; we needed the person to be available and push it remotely.

We had a lot of discussions during the implementation phase, but those issues have been clarified.

The customer service and support could be more proactive in explaining things and providing regular updates. They should also connect directly with clients to ensure configurations are correct and suggest improvements.

We did evaluate different solutions before choosing this one. We worked with a local partner who presented us with two options for each technology. When it came to DLP, they offered Forcepoint and Symantec.

We compared them and found Forcepoint to be the best fit in terms of data classification and DLP features.

The onboarding process wasn't inherently complex, but it did take some time to open ports and configure the server. We're using three components of DLP: Endpoint DLP, email DLP, and web DLP.

Web DLP isn't fully configured yet because we don't have a proxy. Email DLP took some additional coordination with a third party, and our Office 365 API, but those challenges were resolved.

We have it installed and deployed on-premises. We have a partner who maintains it.

It covers around 3,000 endpoints. It's deployed across our branches, factories, warehouses, and head office. It covers all endpoints in those locations.
The deployment took some time due to our different locations.

We work with our partner, who is helping us to stabilize the product. So, we are still in the implementation phase.

It's implemented in terms of server-level configuration and agent deployment. However, we still need to configure it for the specific use cases of each department.

We're still working on some configuration issues. For example, in India, we have a 12-digit Aadhaar number. When we put our mobile number in a WhatsApp chatbot signature, the DLP flags the Aadhaar number. It's extra work for us to double-check and understand why it's happening.

These are country-specific issues that Forcepoint needs to address to avoid extra work for us. It's taking some time.

The pricing is on the higher side with other options, considering it's not priced in Indian rupees but converted from a foreign currency.

I'd emphasize the importance of post-sale support. It's also crucial to see a quick return on investment. Those two things are crucial. I'd say the same thing to anyone who asks me.

There are other tools out there, too. Recently, we found one called— it's called—Ghangor Cloud. That one seems good because it has data classification, DLP, and CASB—cloud access security broker—all in one tool.

I recommend that kind of thing because as an end user, I don't want multiple agents in my system slowing things down. With a tool like Ghangor Cloud, you have CASB, DLP, and data classification all in one place. It takes care of everything.

Right now, we manage two separate products, which is more work. It would be better to have one integrated solution. Maybe Forcepoint will come out with something like that in the future that combines DLP and data classification.

Overall, I would rate the solution a seven out of ten.

Our main use cases are monitoring, classification, and auto-discovery. 

Auto-discovery is required for existing protection, and data classification is a newly added feature still under development by a third party. We also use it for email, file, and folder data classification. 

Risk monitoring is an add-on, but it still relies on the same platform. Overall, discovery and classification are the most essential features for us.

The solution's real-time analytics has impacted the data loss prevention strategies. 

The impact is around 50% in the initial stage because customers are eager to avoid delays. These projects typically take six to eight months to deploy, but we aim to complete them within three to four months. 

However, closures often extend to eight to ten months due to various factors. It can be challenging to achieve faster completion.

It primarily influences policy enforcement, cloud application access control, and endpoint network coverage. It offers options for roaming profile categorization, providing more flexibility compared to similar features in Trend Micro for policy adjustments.

Ideally, it should have some native analytical tools with good graphical options, but the current options lack customization. 

Improved analytical tools would provide a more granular technical view and a user-friendly management dashboard view. This is an area that needs improvement.

Forcepoint should prioritize its cloud-based or SaaS platform. It exists, but they're not actively promoting it in India due to compatibility concerns. They primarily focus on on-premises DLP solutions here. 

Secondly, policy automation and data file classification need to be more automated and accurate.

I have been using it for six years now. Initially, I used it very little, but I have been using it extensively for last four years now. 

It's generally stable.

Currently, more than 15 customers use it regularly. We receive around two to three inquiries per week for Forcepoint, which involves gathering requirements and fine-tuning the engine for proof-of-concept, which can be time-consuming.

The deployment is a little bit difficult. It requires two to three separate servers for databases and the application. 

Additionally, sandboxing involves a separate setup. Overall, it requires skilled personnel for installation.

Currently, Forcepoint is primarily focused on on-premises solutions. They recently discontinued their on-premises SaaS platform. 

The licensing cost is roughly 90 US dollars per year, per license.

For a first-time customer, understanding can be eased by taking some self-service training before the implementation. 

This will help them channel their needs effectively. Later, they can get hands-on experience with their existing environment during the implementation phase.

Overall, I would rate the solution a seven out of ten.