TrustRadius: an HG Insights company

Forcepoint Secure Web Gateway

Score8.1 out of 10

139 Reviews and Ratings

What is Forcepoint Secure Web Gateway?

The Forcepoint ONE Secure Web Gateway (SWG) is one of the three foundational gateways of the Forcepoint ONE all-in-one cloud platform. Forcepoint ONE SWG monitors and controlsany interaction with any website, including blocking access to websites based on category and risk score, blocking download of malware, blocking upload of sensitive data to personal filesharing accounts, detecting shadow IT, and optionally providingRemote Browser Isolation (RBI) with Content Disarm andReconstruction (CDR).

Forcepoint Web Security Review

Use Cases and Deployment Scope

-Securing internal clients to access malicious external sites

-Granular user access controls

-Managing access to business related application only

-Differentiates access to internal server and clients

Pros

  • Wide range of external application categories
  • Implementation of policies are so effective for gateways
  • Exceptions have a lot of controls as well
  • Investigation reports section displays a lot of helpful data
  • Hybrid implementation

Cons

  • Single FSM should to be able to enforce policy to a single gateway rather than enforcing to all the gateways
  • Gateway level control should be there for allowing specific clients
  • Some sort of security still should be there for tunneling
  • Implementation with DLP is bit tedious as sometimes installing agents throw a lot manual burden

Return on Investment

  • Best Compliance
  • Risk mitigation
  • Productivity
  • Negative impact: sometimes a lot of false positives arise due to not handling exceptions and block rules efficiently

Usability

Alternatives Considered

Forcepoint Data Loss Prevention, F5 BIG-IP Local Traffic Manager (LTM) and F5 Big-IP Advanced WAF

Other Software Used

Forcepoint Data Loss Prevention, Forcepoint Email Security

Forcepoint is a force to reckon with!

Use Cases and Deployment Scope

Force point is used at EWS for monitoring and DLP policies of the organization. For more effectivity, we’ve defined dictionary clearly to be used for monitoring by enabling EWS_Keywords as the dictionary traveling over outgoing communication and over internet through USB storage, FTP, chat applications, HTTP, HTTPS through browser, including plaintext and printing document and constantly enhancing it

Pros

  • DLP protection via keywords identified
  • Multiple mediums coverage like Outgoing emails, USB storage, FTP, Chat applications etc.
  • Constantly learning interface by enhancing the keywords

Cons

  • Restricted to keywords entered by the client. Could do well with giving suggestions based on industry trends
  • Needs to be used in conjunction with other security tools like Crowdstrike to block external devices connecting with laptop
  • Deep document level indexing & monitoring capabilities would be great to have in Forcepoint

Most Important Features

  • Key word monitoring
  • Multiple medium support like Outgoing emails, USB Storage, Chat Applications, FTP, HTTP, HTTPS through browser
  • Plaintext format , Printing Document

Return on Investment

  • Very impactful in supporting our data security strategy
  • Helped us achieve our information security ambitions

Alternatives Considered

Palo Alto Networks Advanced Threat Prevention and Fortinet FortiGate

Other Software Used

CrowdStrike Falcon

WebSecurity

Use Cases and Deployment Scope

PIL is using Forcepoint Web Security throughout the whole organization; it addresses surf content filtering and prevents malicious infection.

Pros

  • Hybrid mode deployment —cloud.
  • Able enforce web content filtering at home.
  • Implement for both office and remote users.

Cons

  • In recent hybrid mode deployment, it was discovered that quota time was not able to apply for the remote user.
  • The existing office encountered a challenge to deploying Forcepoint Web Security.
  • To consider price competitive for global deployment.

Return on Investment

  • Central deployment
  • China deployment needs to reconsider
  • Economic of scale

Alternatives Considered

Data Resolve - DLP - inDefend, Clearswift Endpoint Data Loss Protection (DLP) and Forcepoint Data Loss Prevention

Forcepoint Web Security- The Industy leader in Content filtering and Security

Use Cases and Deployment Scope

Earlier we were using the URL filtering from other Firewall vendors for our web security but we were so many challenges with that as it had so many categorization issues. Sports sites were getting blocked in the Movies category and some unwanted URLs were not getting blocked. Our users were facing many problems in their daily tasks. Then we decided to go ahead with Forcepoint Web Security and trust me it was life-changing decision for our infra. First, it got installed in our Data Center on-premises and their categorization is just perfect. After implementing it, we got our web security covered and users didn't face any issues after that.

Pros

  • Categorization
  • Real-time security updates for threat protection
  • It has a centralized granular policy controls
  • Content Filtering

Cons

  • Customer Support
  • Scalability and throughput
  • Documentation availability
  • Pricing should be bit lower

Return on Investment

  • Perfect categorization and content filtering helped agents to work flawlessly which increased their productivity
  • Web related issue tickets were less which improved the IT engineers efficiency as they started focusing on other issues/troubleshooting
  • During any problem with it, Customer support was not up to the mark as expected
  • Deployment flexibility as it can be installed on premises, cloud or hybrid

Alternatives Considered

Zscaler Internet Access

Forcepoint Web Security offers comfort and security

Pros

  • Advanced threat protection
  • Set it and forget it
  • Any user, any device, any location
  • Change in web content control happens quickly

Cons

  • None I can think of

Return on Investment

  • Adds an extra layer
  • Budget friendly