The Forcepoint ONE Secure Web Gateway (SWG) is one of the three foundational gateways of the Forcepoint ONE all-in-one cloud platform. Forcepoint ONE SWG monitors and controlsany interaction with any website, including blocking access to websites based on category and risk score, blocking download of malware, blocking upload of sensitive data to personal filesharing accounts, detecting shadow IT, and optionally providingRemote Browser Isolation (RBI) with Content Disarm andReconstruction (CDR).
N/A
SafeDNS
Score 9.0 out of 10
N/A
SafeDNS offers a cloud-based web filter for internet security and web content filtering powered by artificial intelligence and machine learning. It protects users online by blocking botnets, malicious, and phishing sites. Moreover, it filters out intrusive online ads and web content users consider inappropriate or work unrelated. Segments Web…
Over the years, [in our experience], the maintenance of the Forcepoint Web Security solution proved to be more cumbersome and troublesome with each version upgrade. In addition, it did not transition well to support the large increase of remote workers. We also experienced weird incompatibilities with the client. We have since replaced this solution with Zscaler Internet Access, a cloud-based secure web gateway solution with a client that behaves as expected, is more flexible, and requires significantly less administration.
it is well-suited for the following scenarios:Organizations that need to comply with regulatory requirements related to internet usage, such as data privacy and security laws, and that need to monitor and control employee internet activity.Organizations that are concerned about online threats and need to protect their networks and endpoints from malware, phishing, and other types of malicious content.Organizations that need to improve productivity by reducing distractions for employees, and/or need to restrict access to specific websites during work hours.Organizations that need to protect sensitive data such as customer information, financial transactions and other sensitive data, by monitoring and controlling the internet activity on the back-end systems.However, SafeDNS may not be as appropriate for the following scenarios:Organizations that have very limited IT resources and lack the skills and knowledge required to set up and manage SafeDNS Organizations that have specific needs and requirements that are not met by the features and capabilities of SafeDNS, for example organizations that require advanced threat detection and response capabilities.Organizations that may have limited budget, SafeDNS does require a subscription cost, that might not be feasible for smaller businesses with limited resources.Organizations that are using legacy systems that are not compatible with SafeDNS, that may not be able to integrate it to their infrastructure.
The user access logs contain a lot of useless information. I understand this is very hard to tackle as I've seen this across any product that logs web activity.
I would like to see more customization options of website block pages.
Filtering accuracy: While SafeDNS provides filtering of websites, it's possible that it could be improved to more accurately identify and block unwanted content. This could be achieved by implementing more advanced algorithms or incorporating more data sources.
Reporting and analytics: Some users may find that the reporting and analytics capabilities of SafeDNS are lacking and could be improved, for example by providing more detailed information about internet usage, or more sophisticated filtering and reporting tools.
Compatibility: Some organizations may have legacy systems that are not fully compatible with SafeDNS. Improving compatibility could make it easier for these organizations to integrate SafeDNS into their existing infrastructure.
It is very stable, the organisation has "locked in" the product and has no plans to change or try another product. We have already renewed our 2019-2020 licenses. It is user friendly and people catch on easily when they first use it. The only downtime is when we install Microsoft updates! It has excellent reporting which help in determining how the organisation's Internet is used and also during both internal and external IT audits.
Despite the intimidating Linux CLI when you use the appliance for troubleshooting, the web security usability compensates as most of the Administration of the system is done there. It is GUI based and has an easy to use UI where one can navigate around rather easily like getting reports, checking alerts, looking the whole setup under deployment to check if all services are running in one place though there are other parts to the system.
The is a quick first response to acknowledge your issue and the Engineers never take more than two hours to fix an issue and we hardly get issues looking at the fact that the system is pretty stable. There is also a robust Knowledge Base in the site for known problems.
Research known issues with upgrading from the Support Knowledge base, this will enable you avoid road blocks along the way and reduce your dependence on Forcepoint Support
To be honest, once using Forcepoint for our Web Security, I have not wanted to look anywhere else. The dashboard gives me quick insight of threats, productivity, and bandwidth usage. Again, this is a layer in my security and it fills many holes. I feel safe and I do like I can just let it do its thing
Being a non-profit the cost is a bit higher than some competitors so our ROI takes a bit longer to recoup. I would really like to see better non-profit pricing.
The ease of doing a report on someone cuts down on the IT man-hours to do website tracking for managers as we can do it from a central point whereas in the past (prior to Forcepoint/Websense) we would have to ghost their machine to look for activity as well as their local servers.
