I use Forcepoint ONE to protect sensitive data, enforce security and compliance policies, and ensure secure access to cloud applications, web resources, and endpoints. It enables me to monitor user activity, detect and prevent unauthorized data sharing, enforce access controls based on roles, devices, or locations, and secure interactions across cloud and web platforms. Additionally, it helps safeguard against malware, phishing, and other threats, providing comprehensive visibility and control over the organization’s IT environment while maintaining compliance and reducing risk.
Forcepoint ONE - ZTNA Private App Security
ForcepointExternal reviews
External reviews are not included in the AWS star rating for the product.
Bundled security has reduced costs and staffing needs but support and hybrid migration need work
What is our primary use case?
How has it helped my organization?
Forcepoint ONE has significantly improved our data security by preventing unauthorized access and the sharing of sensitive information. It provides clear visibility into user activity across endpoints, cloud applications, and web resources, allowing me to detect and respond to potential risks quickly. The platform enforces security and compliance policies consistently across the organization, helping us maintain regulatory adherence. It also streamlines monitoring and management, reduces operational overhead, and enhances our overall security posture, giving the team confidence that critical data and systems are well protected.
What is most valuable?
Forcepoint ONE offers Zero Day Trust Network Access, DLP, and Data Loss Prevention as the best features. Zero Day Trust Network Access and DLP features help my team significantly in daily operations by assigning trust to users. Zero Day Trust Network Access provides access to network, cloud apps, network endpoints, and related resources. DLP also helps in preventing users from uploading or taking sensitive data outside the environment.
Forcepoint ONE has positively impacted my organization in a very good way. I can share a specific example of measurable outcomes where Forcepoint ONE made a difference, particularly regarding cost reduction because all the features that Forcepoint ONE bundles are in one package, as opposed to other solutions where you have to buy every single module individually.
What needs improvement?
Forcepoint ONE could be improved in terms of scalability to better support hybrid environments, as many organizations still operate partially on-premises while gradually moving to the cloud. Enhancing its ability to handle such mixed setups would make migrations smoother and adoption easier. Additionally, customer support could be strengthened by prioritizing enterprise license holders and addressing critical issues more promptly, ensuring faster resolution and a more reliable overall user experience.
For how long have I used the solution?
I have been using Forcepoint ONE for one year.
What do I think about the stability of the solution?
Forcepoint ONE is very stable.
What do I think about the scalability of the solution?
Its scalability is very good, and it can handle a high workload.
How are customer service and support?
Customer support is very good, but it can be better.
Which solution did I use previously and why did I switch?
I did not use any solution before.
What about the implementation team?
My experience with pricing, setup cost, and licensing was very good. It was a very seamless experience. Forcepoint salespeople helped me to achieve a seamless deployment, and it was good.
What was our ROI?
I have seen a return on investment, and the improvement is very good. Money saved is evident because the license for Forcepoint ONE is a bundled package. Time saved is also noticeable because more incidents are handled and reviewed in a short period of time. Additionally, I have fewer employees because Forcepoint ONE does the work that I used to rely on a team of engineers to previously detect.
Which other solutions did I evaluate?
I did not evaluate other options before choosing Forcepoint ONE.
What other advice do I have?
I advise others looking into using Forcepoint ONE to study its features, as it covers many of the use cases usually associated with customers looking into solutions like this. I would rate this product a 7.
Delivers reliable policy control and improves data protection across cloud and endpoints
What is our primary use case?
My main use case for Forcepoint ONE is delivering data loss prevention and data protection to help customers comply with corporate or regulatory data protection requirements such as PII protection, and I also use it to prevent data leaks through web uploads, cloud storage, and email, while monitoring and controlling sensitive data transfer from managed endpoints.
From a vendor perspective, Forcepoint ONE helps us deliver centralized data protection for multiple clients under a single management framework, reducing operational overhead and providing visibility into how sensitive data moves across different channels, and it is essential for compliance and data governance.
No other use case for Forcepoint ONE comes to mind.
What is most valuable?
The best features Forcepoint ONE offers include the DLP engine with predefined policies for common data types that help us determine and use it directly, as well as cloud app control to protect SaaS platforms like Microsoft 365 and Google Workspace. We are also helped by the Incident Management Dashboard for quick review and policy tuning, along with integration with Forcepoint Endpoint DLP, allowing us consistent enforcement across devices.
The DLP engine and Incident Management Dashboard have made our work much more efficient in daily operations, as detection accuracy reduces the need for manual review, and the centralized dashboard helps us quickly identify which incidents need escalation or policy adjustment. It shortens response time for our clients, allowing their security team to view incidents in real-time, classify them easily, and focus on genuine risks instead of sorting through false positives, and it simplifies reporting and audit preparation since all the relevant data is consolidated in one place.
One feature that really stands out for us and our client is the seamless integration between Forcepoint ONE and the on-premise Forcepoint DLP, as it allows consistent data protection policy across both cloud and endpoint environments, making it much easier to manage.
Forcepoint ONE has positively impacted our organization by streamlining DLP policy management and reducing time spent on troubleshooting and manual reviews, providing faster compliance reporting for internal needs and compliance with local regulation, and improving visibility into how sensitive data moves across cloud and endpoint environments. Overall, it helps our customers operate more efficiently and confidently in enforcing data protection controls.
What needs improvement?
Overall, Forcepoint ONE performs well, but I think the dashboard could be made more intuitive, and the policy synchronization between cloud and on-prem components could also be faster and more transparent, alongside having more flexible reporting and alert customization to tailor insights for different clients and compliance needs.
It would be more helpful to have better integration documentation for complex hybrid deployments.
For how long have I used the solution?
I have been working in my current field for five months, and for Forcepoint ONE specifically, my hands-on experience is two months.
What do I think about the stability of the solution?
I think Forcepoint ONE is pretty stable, as the connection and agent synchronization are reliable, but it can still be improved.
What do I think about the scalability of the solution?
Forcepoint ONE offers good scalability overall, as it is a cloud-native SSE platform built on a multi-tenant architecture. It can easily scale to support thousands of users and devices without requiring major infrastructure changes, and from what I've seen while supporting clients, performance remains stable as the environment grows, whether that's adding more endpoints, expanding DLP coverage, or integrating with additional SaaS apps.
How are customer service and support?
Customer support has been responsive and professional in my experience, as the Forcepoint support team usually replies within a reasonable timeframe and provides clear guidance for troubleshooting. Having a local principal support available also helps speed up communication and coordination, especially for urgent or region-specific cases.
I would rate customer support 8 out of 10, as they are generally responsive and helpful when we open tickets, and having a local principal team really helps with faster issue resolution. There is still room for improvement in response time during complex cases, but overall, the experience has been positive and reliable.
How would you rate customer service and support?
Positive
What was our ROI?
Since I'm on the technical side, I don't handle ROI or financial metrics directly, but based on client feedback, many have seen improvements in operational efficiency mainly through centralized policy management and reduced manual investigation time, resulting in time savings and better visibility across their environments.
What other advice do I have?
My advice would be to clearly define your data protection goals before deployment and take time to properly configure policies that match your organization workflows. Forcepoint ONE is a powerful platform, especially when integrated with DLP and CASB capabilities, but it works best when you plan your deployment architecture early, whether for endpoints, cloud apps, or web channels, and also ensure to involve both IT, security, and business teams so the protection policies don't interfere with productivity.
On a scale of 1-10, I rate Forcepoint ONE an 8.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Effective web filtering blocks and reports dodgy websites quickly
What is our primary use case?
What is most valuable?
What needs improvement?
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
Which solution did I use previously and why did I switch?
How was the initial setup?
What's my experience with pricing, setup cost, and licensing?
What other advice do I have?
Easy to deploy product with efficient monitoring features
How has it helped my organization?
The product is important for protecting the environment and information.
What is most valuable?
The platform's cloud-based console is quite valuable. Additionally, its integration with DLP is effective.
What needs improvement?
The solution's integration with other products needs improvement.
For how long have I used the solution?
We have been using Forcepoint ONE for two years.
What do I think about the stability of the solution?
I rate the product stability an eight.
What do I think about the scalability of the solution?
Our clients are typically enterprise businesses with around 1000 Forcepoint ONE users.
How are customer service and support?
We have encountered numerous issues with support over the past two years, particularly with response times.
Which solution did I use previously and why did I switch?
We used other solutions before.
How was the initial setup?
The setup is relatively straightforward. We encountered challenges while integrating it with WhatsApp. I rate the process an eight.
What's my experience with pricing, setup cost, and licensing?
The product is reasonably priced compared to other vendors. I rate the pricing a two or three.
What other advice do I have?
The platform has a great capacity for protecting and managing data.
I recommend it because deploying, monitoring, and configuring policies is easy.I rate an eight out of ten.
Provides centralized system monitoring and has a valuable feature for data protection
What is our primary use case?
The primary use case of the product is to ensure security and protection in a SASE (Secure Access Service Edge) environment. It serves multiple purposes, including securing roaming users and protecting users accessing resources outside the office. Another key aspect is safeguarding Insight applications using ZTE (Zero Trust Exchange) and preventing data leakage. In daily operations, it is primarily utilized through ZPA (Zero Trust Network Access), ensuring users have secure access to the internet. It involves protecting corporate devices from advanced threats and malicious sites and enforcing data isolation policies to prevent unauthorized data access or leakage. Additionally, the solution facilitates the secure transfer of sensitive data through various applications like Dropbox, utilizing policies set within the SSE (Secure Web Gateway) solution, potentially incorporating a model such as CASB (Cloud Access Security Broker).
What is most valuable?
The most valuable features of Forcepoint include Zero Trust Network Access and remote user protection for private applications. These features prioritize data security regardless of the user's location, ensuring that data is always protected. In terms of threat defense, the thread detection feature stands out as particularly valuable. It includes various capabilities such as web isolation to isolate unknown static, blocking access to malicious sites, and employing intelligence-driven checks based on configured policies. Integrating third-party sandboxing further enhances threat detection and response capabilities, providing comprehensive protection against advanced threats. It collectively contributes to a robust defense mechanism, safeguarding organizations against various security threats.
What needs improvement?
Areas for improvement for the platform include addressing scalability and architecture concerns, especially for large deployments involving more than 500 or 1,000 users.
Additionally, integrating sandboxing features directly into the solution, either on-premise or in the cloud, is crucial for comprehensive threat detection and response. It would eliminate the need to rely on third-party sandboxing solutions, streamlining security operations and enhancing overall efficiency and effectiveness in combating threats.
For how long have I used the solution?
We have been using Forcepoint ONE for 14 months.
What do I think about the stability of the solution?
Regarding stability, I have confidence in Forcepoint's technology and its ability to perform well in the market. However, being hosted on AWS has its architectural challenges, as is typical with any cloud-based solution. While it has the potential to overcome these challenges and further enhance its capabilities, it's important to acknowledge the inherent complexities that can arise in a public cloud environment.
What do I think about the scalability of the solution?
We have around 5,000 Forcepoint ONE users. Scalability is one of the product's notable strengths. Its architecture facilitates rapid scalability, particularly its polytexture architecture deployed on AWS. Spinning a virtual machine (VM) in any location is almost instantaneous. It gives it an edge over solutions like Zscaler, which may require setting up entire private data centers for expansion. While Forcepoint's scalability advantage is evident, it still faces challenges inherent to its architecture.
By consolidating multiple security functions into a single client, particularly incorporating Data Loss Prevention (DLP) and Secure Web Gateway (SWG) functionalities, Forcepoint has streamlined our security infrastructure.
How are customer service and support?
Resolving issues has sometimes taken longer than expected. While the initial response time has been problematic, support effectiveness improves upon escalation.
Which solution did I use previously and why did I switch?
We previously used a different solution before transitioning to Forcepoint. The decision to switch was driven by various factors, including the need for improved sandboxing capabilities, especially regarding onboarding. Additionally, Forcepoint's deployment in a public cloud environment posed challenges for organizations needing to utilize AWS, such as those favoring the Google Cloud Platform. This discrepancy in cloud provider compatibility influenced the decision to transition to a solution that aligns better with our organization's cloud infrastructure preferences and requirements.
How was the initial setup?
The initial setup was straightforward, primarily because everything was managed from the Forcepoint side, requiring no additional maintenance efforts. Deployment was relatively simple, especially when the organization clearly understood its objectives and requirements. The process took little time as long as the objectives were well-defined. However, if the organization needs to be clearer about its needs, it could prolong the setup process. In general, the technology was simple, and anyone could become proficient in managing it properly. Therefore, while the setup could vary depending on the clarity of objectives, the technology itself was relatively easy to implement.
What other advice do I have?
Integrating services within Forcepoint has significantly enhanced our organization's security posture by enabling seamless authentication, centralized monitoring, comprehensive data correlation, and compatibility with third-party technologies. It ensures streamlined access management, proactive threat detection, informed decision-making, and cohesive security operations, ultimately fortifying our defenses against advanced threats and maintaining a proactive security stance.
Its data protection capabilities have greatly benefited our organization by providing comprehensive protection for our intellectual property and sensitive data. With Forcepoint, users accessing corporate applications and the internet are shielded from accessing malicious sites or falling victim to threats. It ensures that our data remains secure, whether in motion, use, or rest. It safeguards against data leakage, whether intentional or unintentional, by monitoring and controlling data transfer through various channels such as private apps, public SaaS applications, or third-party emails.
Forcepoint ONE shows significant potential for improvement while still being a commendable product. I would give it around an eight out of ten.