Forcepoint CASB Reviews

We are security-centered and security-conscious. It's more of a security thing for us, however, there are other environments that are more in compliance.

The visibility around the usage of cloud applications within my tenant is the most valuable aspect of the solution. The administrator gets visibility and control of these applications. Or for users, whether on-premise or not, whether using pocket devices or their IOD.

The price is good.

The product offers an easy initial setup.

It offers good scalability.

It's very stable. 

We use the tool for web security. 

The tool's most valuable feature is its management ease. 

We work on CASB solutions to protect Salesforce and ServiceNow applications and app-based applications for the CASB solution - basically, for the technical applications.

We are not happy with the solution.

If you look at this kind of CASB solution or Palo Alto in-line solution, these solutions are integrated into the Secure Web Gateway or firewalls. Basically, the firewall with Palo Alto, or the secure gateway with Zscaler, the code-based secure gateway, it's also the CASB solution. 

With Forcepoint, the secure gateways are separate from the CASB. So basically, this is one thing that is really impactful, that the Secure Web Gateways and the CASB solution are not one and the same basically. And in many cases, the secure gateways can take the user traffic and send it to the CASB, however, this ups the latency, basically. The Forcepoint CASB and the Forcepoint Secure Web Gateway should be under the same roof.

We've had latency and performance issues. 

When using the Forcepoint CASB, and you are a remote worker, basically not in the office, you have to have an agent on your computer, a Forcepoint agent. However, with many other CASB solutions, they can integrate with MDM. If the device is in there in the MDM, there's no need for another agent to be installed on the computer.

We use Forcepoint for endpoint security. We profile for endpoint security devices such as laptops, and we configure different types of user groups for it.

I would say macro integration is a great feature as are the IDs for credentials. I like that the layout and configuration are easy compared to other solutions on the market. 

We use the solution to detect the logins from specific geolocations. We are able to detect malware when it comes to logins around our cloud services. If you have about three failed attempts, it deactivates your accounts and the administrator has to reinstate you to log in. 

We have specified a list of countries, which we would and wouldn’t accept logins from. Once we have the geolocation policy set up, logins from the blacklisted countries get dropped. It gives us the complete capability to have a bit of control over the actions of our users. Like, we can see what our users are doing with the cloud applications. It also gives us the capability to scan and see Shadow IT applications our users are using as transaction applications. So, it serves its purpose.

I like the Shadow IT Discovery feature. I like the fact that I can get to see all the applications my users are using. So it gives me data to make decisions around blocking. I get to know about the applications that will be productive for organizations to function well. I like that feature. I run the cloud discovery to know about the applications my users use for daily business certification. If an application addresses the organization, we know how to block it.

We primarily use the solution to protect data going out of cloud applications.

The most valuable aspect for us is the fact that the product seamlessly integrates with the Forcepoint DLP.

The web and DLP are very stable.

We provide solutions to our consumers.

Each of our customers has different requirements it is difficult to say which is most valuable.