
Overview
Forcepoint ONE is an all-in-one cloud platform that makes security simple for distributed businesses and government agencies with remote and hybrid workers. It gives employees, contractors, and other users safe, controlled access to business information everywhere - on the web, in the cloud, in private applications - keeping attackers out and sensitive data in.
The Web Security Edition includes the Secure Web Gateway (SWG) along with inline protection for unlimited cloud applications and Shadow IT.
Forcepoint ONE SWG brings performance and security together with a flexible, scalable architecture, that delivers a pathway to a full single-vendor SASE solution. Bring Shadow IT into the light, with in-line cloud app capabilities that provide comprehensive controls around the use of the web and cloud apps. Enforce best-in-class DLP and malware protections, with distributed enforcement that doesn't compromise performance. RBI with CDR enables Zero Trust web access for the most secure browsing experience; safe access to ANY website and ANY download.
2024 Product Additions:
Forcepoint Web Security Cloud: Cloud native Secure Web Gateway, protection from online security threats, filtering, acceptable-use company policy. Web Security Cloud Extended Reporting (12 months): Extends reporting data retention period from default 90 days to 12months. Forcepoint Data Protection Service: Protects sensitive data with cloud-based DLP analysis service that integrates with Forcepoint solutions. Web Security Dedicated IP: Enterprise solution providing globally available set of egress IPs for advanced MFA, cloud application security.
Minimum User Count: The minimum user count is of 500 users. User counts for all modules and their core product must match, with the exception of Forcepoint Remote Browser Isolation. Any subscription with a user quantity less than 500 will be cancelled. Custom packaging will be offered.
Selective RBI license covers 10% of licensed users accessing the RBI Service concurrently. For example, if subscription is for 1000 users, 500 users may connect to RBI service concurrently.
Forcepoint ONE Add-ons for Web Security Edition
Cloud Security Posture management Forcepoint ONE Cloud Security Posture Management (CSPM) is an optional component of the Forcepoint ONE all-in-one cloud platform that lets security and compliance personnel detect, report on, and remediate risky configurations in AWS, Azure Cloud, and Google Cloud tenants.
SaaS Security Posture Management Forcepoint ONE SaaS Security Posture Management (SSPM) is an optional component of the Forcepoint ONE all-in-one cloud platform that lets security and compliance personnel detect, report on, and remediate risky configurations in popular SaaS including Salesforce and ServiceNow.
Forcepoint Remote Browser Isolation RBI applies a Zero Trust approach of treating all web pages as compromised and rendering them in a remote, disposable environment, enabling people to use the web without being attacked and applies Content Disarm and Reconstruction (CDR) to downloaded documents. CDR sanitizes files as users download them to remove foreign elements, such as malware embedded in an image file using steganography.
Notes Prices displayed are suggested end-user prices.
Renewals: Same List Prices as below.
For custom offers and packages please contact us: AWSPrivateOffer@forcepoint.com .
Highlights
- Distributed enforcement - send web traffic from sites to the Forcepoint ONE cloud for inspection and policy enforcement or deploy the unique agent-based SWG for high performance web security for remote users.
- Unified platform - use the same DLP and malware policies across channels, from web to cloud apps to private apps.
- Unlimited Cloud App support - Includes licensing for unlimited inline cloud app control and Shadow IT visibility.
Details
Unlock automation with AI agent solutions

Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
| Dimension | Description | Cost/12 months | 
|---|---|---|
| ONEWEB | Forcepoint ONE - Web Security Edition (per user) | $55.00 | 
| ONECSPM | Forcepoint ONE - Cloud Security Posture Management (per acct) - add-on | $10,000.00 | 
| ONESSPM | Forcepoint ONE - SaaS Security Posture Management (per acct) - add-on | $10,000.00 | 
| FRBIS | Forcepoint Remote Browser Isolation - Selective (per user) - add-on | $32.00 | 
| WBSA | Forcepoint Web Security Cloud | $50.00 | 
| EDRW12X | Web Security Cloud Extended Reporting (12 months) | $2.00 | 
| FDPS | Forcepoint Data Protection Service | $60.00 | 
| FDIP | Web Security Dedicated IP | $75.00 | 
Vendor refund policy
Not refundable or cancellable after purchase.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
With global facilities and highly trained technical service engineers, Technical Support offers 24/7 support for your security issues. Highly proactive support options include: frequent holistic account reviews, solution health checks, migration planning, upgrade assistance, and on-site visits. With our support, you can advance your security posture, enhance your network infrastructure, and embrace new solutions with confidence. Support |
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.


Standard contract
Customer reviews
Has improved data visibility and control while offering room for easier marketplace availability
What is our primary use case?
My main use case for Forcepoint ONE is for data protection in the cloud. I use Forcepoint ONE for data loss prevention, specifically data loss prevention in the cloud for my client. Forcepoint ONE helps me in data protection for a particular case of my client.
What is most valuable?
I use Forcepoint ONE for data protection in the cloud, and the CASB feature stands out for me as it allows me to view how the data is managed in the cloud. The features of Forcepoint ONE for data protection in the cloud are very useful and are very easy to configure for use cases; I think it is easier and safer. Forcepoint ONE is very positive for my organization because with this product, I know how the data and information are working around the company, and I can have all the information for this.
What needs improvement?
Forcepoint ONE could be improved.
For how long have I used the solution?
I have been using Forcepoint ONE for more or less three years.
What do I think about the stability of the solution?
Forcepoint ONE is a stable solution.
What do I think about the scalability of the solution?
Forcepoint ONE is very scalable because it is located in the cloud, and I don't have to manage the machines or anything with the infrastructure.
How are customer service and support?
Customer support for Forcepoint ONE is very good because they help a lot of the time.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I did not use a different solution before Forcepoint ONE.
What about the implementation team?
My company has a business relationship with this vendor other than being a customer.
What was our ROI?
It is very difficult to measure the return on investment, but the control for the data is very important for companies because without an application similar to Forcepoint ONE, there is no control. My company needs to deploy regularization and controls, and I find Forcepoint ONE very useful for this.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing is positive; the pricing is better than all, and the setup cost is very simple, making it very useful to deploy the solution and manage the use case.
Which other solutions did I evaluate?
My company evaluated other options because it didn't have all the investment in Microsoft before choosing Forcepoint ONE.
What other advice do I have?
It would be very useful to have the product available in the Azure Marketplace. My advice for others looking into using Forcepoint ONE is that it is a very useful solution, and in one console, you have all of this. The review rating for Forcepoint ONE is 7.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Have applied web filtering policies seamlessly while identifying areas for better documentation and reporting
What is our primary use case?
I've been using Forcepoint ONEÂ to apply web security policies across my organization.
What is most valuable?
Forcepoint ONEÂ 's best feature is its ease of use. The UI is basic, so users don't have to spend much time learning.
The UI looks modern without particular shortcuts or dashboards, making it simple to find options.
The integration with the local LDAP server is particularly useful. By using the agent, you can connect the local LDAP server to Forcepoint ONE. The Azure integration is also beneficial.
Using a cloud-based application means giving up controlling the resources. This eliminates the need to maintain on-premise servers or handle their maintenance.
While I don't have specific metrics, I'm confident it reduced costs because when we used non-cloud-based solutions, we had to upgrade them periodically, which consumed our engineers' time. Instead, we now delegate that responsibility to the cloud provider.
Though there aren't metrics to share, we now require fewer employees for specific tasks that we used to do for this solution. Forcepoint ONE provides an easy-to-use UI, reducing time and effort on day-to-day tasks.
What needs improvement?
Additional integrations could be useful.
More documentation would be beneficial as there aren't many articles about the solution.
I rate Forcepoint ONE a seven because it needs improvement in reporting and integrations. Currently, there's an issue with the WebSocket protocol when using a proxy. The reporting tab could be enhanced by adding more product reports. On the troubleshooting side, more documentation about current issues would be helpful.
For how long have I used the solution?
I've been using Forcepoint ONE for the last one year.
What do I think about the stability of the solution?
Currently, there's no downtime or reliability issues because it's a cloud-based solution.
What do I think about the scalability of the solution?
It can handle growth because it's a cloud-based solution without any challenges.
How are customer service and support?
I haven't had much interaction with customer support because we haven't encountered significant issues. During our limited interactions, they were very helpful.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
We used Forcepoint Web Security on-premises and changed to Forcepoint ONE because we needed to move to cloud. We needed a better-administered solution that offered improved control.
What's my experience with pricing, setup cost, and licensing?
It's not expensive and we can afford it. The licensing is straightforward and easy to understand.
Which other solutions did I evaluate?
We evaluated Symantec's cloud solution for proxies.
What other advice do I have?
When a customer requests to browse a website, it's simple to go to the page and add that customer to the exceptions list.
I would suggest using Forcepoint ONE.
I rate this solution seven out of ten.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Delivers reliable policy control and improves data protection across cloud and endpoints
What is our primary use case?
My main use case for Forcepoint ONEÂ is delivering data loss prevention and data protection to help customers comply with corporate or regulatory data protection requirements such as PII protection, and I also use it to prevent data leaks through web uploads, cloud storage, and email, while monitoring and controlling sensitive data transfer from managed endpoints.
From a vendor perspective, Forcepoint ONEÂ helps us deliver centralized data protection for multiple clients under a single management framework, reducing operational overhead and providing visibility into how sensitive data moves across different channels, and it is essential for compliance and data governance.
No other use case for Forcepoint ONE comes to mind.
What is most valuable?
The best features Forcepoint ONE offers include the DLP engine with predefined policies for common data types that help us determine and use it directly, as well as cloud app control to protect SaaS platforms like Microsoft 365 and Google Workspace . We are also helped by the Incident Management Dashboard for quick review and policy tuning, along with integration with Forcepoint Endpoint DLP , allowing us consistent enforcement across devices.
The DLP engine and Incident Management Dashboard have made our work much more efficient in daily operations, as detection accuracy reduces the need for manual review, and the centralized dashboard helps us quickly identify which incidents need escalation or policy adjustment. It shortens response time for our clients, allowing their security team to view incidents in real-time, classify them easily, and focus on genuine risks instead of sorting through false positives, and it simplifies reporting and audit preparation since all the relevant data is consolidated in one place.
One feature that really stands out for us and our client is the seamless integration between Forcepoint ONE and the on-premise Forcepoint DLPÂ , as it allows consistent data protection policy across both cloud and endpoint environments, making it much easier to manage.
Forcepoint ONE has positively impacted our organization by streamlining DLP policy management and reducing time spent on troubleshooting and manual reviews, providing faster compliance reporting for internal needs and compliance with local regulation, and improving visibility into how sensitive data moves across cloud and endpoint environments. Overall, it helps our customers operate more efficiently and confidently in enforcing data protection controls.
What needs improvement?
Overall, Forcepoint ONE performs well, but I think the dashboard could be made more intuitive, and the policy synchronization between cloud and on-prem components could also be faster and more transparent, alongside having more flexible reporting and alert customization to tailor insights for different clients and compliance needs.
It would be more helpful to have better integration documentation for complex hybrid deployments.
For how long have I used the solution?
I have been working in my current field for five months, and for Forcepoint ONE specifically, my hands-on experience is two months.
What do I think about the stability of the solution?
I think Forcepoint ONE is pretty stable, as the connection and agent synchronization are reliable, but it can still be improved.
What do I think about the scalability of the solution?
Forcepoint ONE offers good scalability overall, as it is a cloud-native SSE platform built on a multi-tenant architecture. It can easily scale to support thousands of users and devices without requiring major infrastructure changes, and from what I've seen while supporting clients, performance remains stable as the environment grows, whether that's adding more endpoints, expanding DLP coverage, or integrating with additional SaaS apps.
How are customer service and support?
Customer support has been responsive and professional in my experience, as the Forcepoint support team usually replies within a reasonable timeframe and provides clear guidance for troubleshooting. Having a local principal support available also helps speed up communication and coordination, especially for urgent or region-specific cases.
I would rate customer support 8 out of 10, as they are generally responsive and helpful when we open tickets, and having a local principal team really helps with faster issue resolution. There is still room for improvement in response time during complex cases, but overall, the experience has been positive and reliable.
How would you rate customer service and support?
Positive
What was our ROI?
Since I'm on the technical side, I don't handle ROI or financial metrics directly, but based on client feedback, many have seen improvements in operational efficiency mainly through centralized policy management and reduced manual investigation time, resulting in time savings and better visibility across their environments.
What other advice do I have?
My advice would be to clearly define your data protection goals before deployment and take time to properly configure policies that match your organization workflows. Forcepoint ONE is a powerful platform, especially when integrated with DLP and CASBÂ capabilities, but it works best when you plan your deployment architecture early, whether for endpoints, cloud apps, or web channels, and also ensure to involve both IT, security, and business teams so the protection policies don't interfere with productivity.
On a scale of 1-10, I rate Forcepoint ONE an 8.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Has supported flexible policy setup but needs improved domain limits and streamlined configuration
What is our primary use case?
My main use case for Forcepoint ONEÂ is deploying Force for customers, so I help them to configure policies according to my customer environment; what they mainly want to do is use it from a content filtering perspective, where they would want to block users from accessing the internet or certain parts of the URL or anything like that.
A quick specific example of how I've set up Forcepoint ONEÂ for a customer is that they were trying to port over from an on-prem Forcepoint Content Gateway to a cloud one. As a deployment team, I receive a purchase order where my pre-sales and sales size the customer environment and suggest going with Forcepoint ONE, and what we did was port over certain parts of the policies, so it's more of a migration where we migrated the URLs that can be allowed and cannot be allowed to the particular Forcepoint ONE portal.
I have nothing unique to add about how my customers use Forcepoint ONE; they mainly use it for the content filtering perspective of it.
What is most valuable?
From my experience, the best features Forcepoint ONE offers include that most of their URLs are quite updated and it's easy to reclassify certain URLs or certain domains, making it quite user-friendly. I don't have much experience with other solutions because I've been working with Forcepoint most of the time, but I can say that compared to their on-prem or even cloud Content Gateway, Forcepoint ONE is a bit less easy to configure the policies due to certain limitations or the number of domains that can be added for one particular policy, whereas for the cloud one and the on-prem one, there are no such limits.
I feel that the on-prem one is more user-friendly apart from Forcepoint ONE, but I understand that Forcepoint ONE's main focus is not on content filtering; it has other features as well.
Their RBI is pretty useful as well as CASBÂ , allowing certain people to access the app, and their ZTNAÂ is also quite helpful; all those are actually pretty useful features in Forcepoint ONE.
Forcepoint ONE has positively impacted my organization and my customers, as it pretty much meets the expectations because they migrated from an on-prem one to a cloud one.
What needs improvement?
I believe that Forcepoint ONE could be improved when configuring certain policies; for content filtering, when trying to whitelist or blacklist certain domains, you can only do up to about 50 domains or URLs, which is a limitation that could be addressed.
Additionally, the administrating portion is quite messy in the sense that there are multiple places that need to be changed in order to reach one particular goal, so streamlining this could be much better. They could take example from their current tools, which are their cloud proxy as well as the on-prem proxy, to use as a baseline.
For how long have I used the solution?
I have been using Forcepoint ONE specifically for close to six months.
What do I think about the stability of the solution?
There have been some specific outcomes since switching to Forcepoint ONE. I did hear customer feedback that says it was slower in their portion, but I believe it's not due to Forcepoint ONE, it's due to their bandwidth issue. Other than that, there are no complaints because we didn't actually receive any particular feedback or any positive or negative feedback on this.
What about the implementation team?
We did not purchase Forcepoint ONE through the AWS Marketplace ; it was purchased through Forcepoint.
What other advice do I have?
My advice for others looking into using Forcepoint ONE is that if you're solely getting it for content filtering, I wouldn't recommend it; however, if you're aiming for ZTNAÂ or CASBÂ , as an all-in-one solution, then I would recommend it. If it's only for specific tools, I wouldn't recommend it, but for a wholesome approach, I would recommend it.
There are areas for improvement as mentioned previously, so focusing on that could yield better results.
On a scale of 1-10, I rate Forcepoint ONE a 7.