Forcepoint Data Loss Prevention Reviews

We use Forcepoint for compliance, PCI DSS, and data protection at the network, endpoint, and data discovery levels.

Forcepoint has out-of-the-box rules and policies for PCI DSS and GDPR compliance. The compliance features are easy to deploy and implement. If your data is not classified, you need to do that first, but the functionality is out-of-the-box otherwise. 

Forcepoint offers many policies that conform to global DLP best practices, including requirements specific to regions like the Middle East, Europe, etc. They have a policy database in their product. That feature is unique to Forcepoint. Their AI and fingerprinting are incredibly effective and robust. We have tested it multiple times. It always catches the correct data being leaked.

They can improve a bit in the OCR category. The OCR deployment could be simplified. Right now, you have to set up a separate server to manage all the data going through the network, especially the images. Forcepoint could better integrate the OCR component with central management. 

Many customers ask how we will detect data in the OCR images. We must tell them that we'll deploy another machine to manage OCR. However, smaller enterprises have limited hardware. An enterprise can provide the necessary hardware but not the SMEs. This is a critical category because data can be leaked through images. 

I would also like Forcepoint to add support for AIX machines and databases. The solution still doesn't support certain machines like IBM AIX machines. Forcepoint typically supports QRadar integration, so maybe they can increase the work support on the server side.

We have been using Forcepoint DLP for three years.

Forcepoint Data Loss Prevention is a stable product. We have had any serious issues on the client side. 

Forcepoint supports huge deployments of more than 20,000 endpoints. You can scale up from hundreds to thousands. It's easy to scale by adding devices and increasing the hardware to support more systems in the same architecture or the same infrastructure. It covers everything, from clouds to networks and endpoints, Linux servers, Mac laptops, etc.

I rate Forcepoint support eight out of 10. Their support is good, but not excellent. At the same time, their presales service is strong. Overall, their standard support is not bad. They try to resolve problems in time and usually ask relevant questions. They are knowledgeable, but you'll need to pay for a higher tier if you want faster response times and 24/7 support.  

Positive

I rate Forcepoint 10 out of 10 for ease of setup. It's one of the simplest DLP solutions I've used. Symantec is more difficult than Forcepoint. Setting up Forcepoint is straightforward. 

They have an extensive knowledge base online, and the steps are well-defined in those documents. We have a console server called Forcepoint Management Center. We also need to deploy DLP agents a Protective Appliance on the network server. Forcepoint has extensive support for integrating with other vendors, so the setup is quite fast. We can integrate the product with any of the proxies available in the customer environment.

I rate Forcepoint eight out of 10 for pricing. We have a different team that handles the pricing, quotes, and presales. I'm on the technical side, so I'm not sure about the cost.  Our customers tell us they prefer Forcepoint because of their market presence. It's also the leader on Gartner's Magic Quadrant and has high ratings on third-party platforms. They prefer Forcepoint. I don't believe the price is too high, but Forcepoint is a premium service and the cost is consistent with the product they are providing.

I'm referring to the price from a vendor perspective. When a customer asks us to provide this product to meet their budget, Forcepoint will cooperate with us and provide discounts. 

I rate Forcepoint Data Loss Prevention 10 out of 10. It's the best product on the market. When our customers compare it with Symantec, McAfee, or Trend Micro, the response is extremely positive. The product is stable and scalable, and the licensing tiers are fairly simple. It's easy for us to explain to customers which features are available for each pricing tier. 

The most useful features of Forcepoint Data Loss Prevention are the transfer through Bluetooth can be blocked and the transfer to the cloud-based storage can be blocked. The features are wonderful.

Forcepoint Data Loss Prevention can improve by having an uninstall option for the client or restart of a client agent can be controlled from the server. This feature is missing which is available with other solutions. 

I have been using Forcepoint Data Loss Prevention for approximately two years.

Forcepoint Data Loss Prevention is a stable solution.

The scalability of Forcepoint Data Loss Prevention is good.

We have approximately 500 users using this solution in my organization.

I used the support a couple of times and they were good.

I rate the support from Forcepoint Data Loss Prevention a four out of five.

Positive

I have previously used Symantec.

Forcepoint Data Loss Prevention is a medium level of difficulty for the initial setup. It's not easy or very complicated. 

We required a consultant for the implementation of Forcepoint Data Loss Prevention. I do the maintenance and support for the solution.

Forcepoint Data Loss Prevention is costlier than other brands, but not all. Of the solutions, I have used Forcepoint Data Loss Prevention is more costly.

I rate Forcepoint Data Loss Prevention a seven out of ten.

The solution helps with data loss prevention. It helps to prevent the loss of customer information in the environment.

The solution’s content classification is the best.

The tool needs to integrate data classification.

I have been using Forcepoint for three years.

I would rate the tool’s stability an eight out of ten. The product is stable.

I would rate the solution’s scalability an eight out of ten. The tool is scalable but it depends on the customer using it. Our company has around 80-90 customers for the solution.

The setup is not complex and it will take around two to three hours for deployment to complete.

I would rate the tool a nine out of ten. I would recommend the solution as a digital guardian.

We use this solution for data theft and for some forensic work.

Forcepoint DLP has very good reporting whether it is at the gateway or it is the LP. The product is user-friendly. 

We faced some issues with the endpoint installation of the agent as it is not from a common ground. Rather than being able to give a command from the central control and install the agents on the laptop, you need to install them one by one.

I have been using Forcepoint Data Loss Prevention for 10 and a half years.

This solution is stable. There is no specific maintenance of Forcepoint DLP, it is just a matter of tweaking the product to comply with any new or amended corporate policies.

Forcepoint DLP is scalable, it is just a matter of installing the agents.

Previously, I worked with Symantec DLP and McAfee DLP. Forcepoint is more user-friendly than both of these products.

The initial setup of Forcepoint DLP is neither easy nor complex. The technical setup is easy, however, the user education takes time and can be a bit of a strain. 

If you are considering implementing Forcepoint Data Loss Prevention into your organization, be sure to be clear of your initial requirements. Sometimes users are thinking something totally different and the DLP will not meet those needs. 

Overall, I would rate this solution an eight out of 10.

We use this product to ensure that our intellectual property is protected. DLP gives us control over IPs and company-sensitive data. It also helps us ensure compliance with global policies and industrial policies like CISS, personally identifiable information, and all sorts of data. 

Forcepoint has a unique fingerprinting technology. We set a policy and as soon as a document goes into the repository, the policy applies. When I receive a document from my MD and want it to remain within the organization, I move it into a repository and it's viewed as sensitive. It's an efficient way to ensure that documents are safe. DLP ensures that data doesn't flow out. 

I would also add that the predefining feature is a very simple process. You pick your industry, add the email, choose your country, populate the type of policies that suit your region, and your industry, and then you can choose what to block and what to allow. 

In general, Forcepoint is miles ahead of its competitors. The closest similar solution would be Symantec, but they're still miles behind.

Currently DLP is an on-prem product and the cloud version is an add-on. I'd like to see DLP as a cloud or hybrid option so we can deploy it as a full cloud solution or on-prem as we choose. I hope they're looking in that direction, it would make a huge difference.

Most of my customers are looking for the ability to control or shut down the USB port devices so that content coming out of the port is blocked. Forcepoint added it to the DUP add-on. McAfee DLP has that feature and most of our customers requesting this have moved from McAfee and want it in Forcepoint DLP.

I've been using this solution for five years. 

The solution is stable. It's been around for a while and has never needed a patch or hub fix. 

The solution is scalable, we currently have 2,600 users. 

If I have all the prerequisites, all the firewalls open and everything, I can deploy in one day. The initial setup requires some expertise to implement. It's easy for me because it's something I've been running for a couple of years. Policies are the issue and they have to be tweaked every day. 

The product is very cheap because it's a DLP switch. It comprises DLP for endpoint, DLP for the network, and DLP for discovery. Forcepoint sells the DLP endpoint, the DLP network, and the DLP discovery separately, and you can choose what you want. We go for the suite which comprises all three which is cheaper.

This is a good product. It's important to understand your needs and pain points.  Once you're clear about why you want it, it's easy to set up and then build from scratch in line with what you want to achieve. 

I rate this solution nine out of 10. 

Forcepoint DLP's most valuable feature is that it provides complete end-to-end security. It gives us an understanding of any violation happening in the network or via endpoint.

The post-optical character recognization feature could be improved because it only really works on documents with some length (at least three paragraphs). If someone has copied half a paragraph or half the content from a webpage, it doesn't work. In the next release, Forcepoint should include DLP, antivirus, and encryption in the same solution, which would resolve many of the IT problems we face.

I've been working with Forcepoint DLP for about five years.

Forcepoint DLP is stable.

This is a scalable solution.

Forcepoint's technical support is very good - they help you the moment you log the ticket. They're much more helpful than Broadcom, Symantec, or McAfee.

The initial setup is very simple and can be completed without an integrator.

Forcepoint has been very cost-effective because they gave us a good deal while procuring the DLP solution, and we just needed to add one license as we already had the appliance-based solution for the web proxy.

We evaluated Symantec, McAfee, and Trend Micro but found that Forcepoint was the best for complete on-premise without comparing the CASB solution, had the best UI, and was the most easily maintained.

I would recommend Forcepoint DLP to other users and would give it a rating of nine out of ten.

We have different areas of DLP like drive, chat, email, network, and endpoint protection. We have different data classifications which are regulated in our industry. Based on that data regulation, we created a few policies as per our government standards, like the social identity number, personally identifiable information, and personal health information. 

We categorized data for different sectors, and we have applied policies, and Forcepoint DLP actively filters it. If I'm sending some PII to you, it should get filtered out because it's against the organization's norm. It does its job actively.

I like that you can quickly create policies and enforce them in a matter of minutes. 

It would be better if we could easily integrate with other products. Suppose I want to integrate this DLP with some other CASB solutions or a firewall solution. In that case, it takes a considerable amount of time because Forcepoint DLP doesn't come with a legacy firewall or CASB solutions to integrate with it. We need to do it separately.

It's not improvised for different sectors, and I need to look for other solutions. I'm investing a lot of time researching and implementing other solutions for other areas. That is one point where I can't feel satisfied with this Forcepoint DLP.

The only problem we have faced is that it consumes most of the CPU whenever a Forcepoint DLP is deployed on an endpoint. This is when users feel some lag in their machine's performance or their Internet performance. That's when we uninstall and try to reinstall, or we'll give a cloud link to which it gets access. We use Forcepoint DLP for endpoint protection, not for email or cloud. For email and drive, we went with the Google DLP.

Forcepoint DLP isn't as efficient on drive or chat, or email. For that, we have some specialized solutions, but it would be better to have a single console where you can control all these areas. It would be pretty easy for a consumer who is going to use this product. All in one shot, you can try to track it and enforce your policies on a single dashboard. That is one point currently lacking in Forcepoint, and I feel they need to work on it.

In the next release, I would like to use this DLP across different solutions like network, firewall, email, or chat with a consolidated dashboard and with integration facilities with other solutions.

Security should work as a whole. It shouldn't work individually in blocks. It does not serve our purpose. It should be integrated with multiple solutions. For that, it should have enough intelligence to work with other tools.

I'm looking forward to seeing that kind of capability with Forcepoint.

I have been using Forcepoint Data Loss Prevention for three years.

Forcepoint Data Loss Prevention is a stable solution.

Forcepoint Data Loss Prevention is a scalable solution. 

Technical support is pretty good. I don't see any kind of delay. As soon as we raise the request, we always get support from Forcepoint DLP immediately.

I heard that the implementation was pretty simple. Only the policy creation took time because we had to build use cases for it. Your industry might have a different use case, and my industry might have a different use case. It took a little bit of time, and it came from an implementation standpoint, and I felt it was pretty good. 

You just need one person working in shifts to use this solution. As we have 8,000 employees, we are doing it in shifts with three professionals.

We used an integrator to implement this solution.

We evaluated Google DLP and Netskope DLP. We chose Forcepoint Data Loss Prevention because of the ease of policy creation. For any DLP solution to work effectively, we need to create our use cases. On top of use cases, we need to build policies and enforce them. In Forcepoint DLP, it's pretty simple to create any kind of policy and enforce them. It doesn't take a lot of time to get it enforced. It all takes a matter of minutes, and I feel this is the biggest advantage of using this DLP solution.

If the organization is pretty small, then I can recommend this solution. However, if it's a pretty huge organization, I will step back a little bit because it won't serve its whole purpose.

On a scale from one to ten, I would give Forcepoint Data Loss Prevention a six.

Forcepoint DLP is a part of a data protection program. A customer will rely on a main DLP and use a complementary tool, in addition to the DLP, such as a data classification solution like Boldon James or Microsoft Information Protection. They will also complement the solution with a rights management solution like Microsoft Rights Management. Forcepoint is part of a big portfolio for data protection.

We deploy the solution at customer sites. Most of our customers are in two sectors, financial and telecom. All of our deployments are on-prem.

Among the most valuable features are the

• network DLP, which has two components 
• DLP agent installed on endpoints
• discovery, as it covers the endpoints and shared folders on servers. 

These features are important for control. A main part of DLP is its use as a tool that provides different layers of controls.

The Forcepoint tool is well developed. It is ranked in many evaluations at the top when it comes to enterprise DLP solutions. It has good artificial intelligence that enables our customers to focus on specific incidents, instead of having a complicated list of uncategorized incidents.

There is room for improvement regarding OCR. I would like to see it enhanced to handle multiple languages and it should be easier to manage.

There are also options that could be handled smartly in the tool, like the way a web data source is handled. It would be good if any downloaded document could have the same policy.

I've been using Forcepoint Data Loss Prevention for three years. We are not regular users, we are admin. We provide the solution for our customers.

The stability is good. Issues are generally related to the agent. Whenever the agent is stable, the solution is stable. Whenever there are issues, it is common for them to be connected to the agent, making the solution unstable. Based on our experience, the stability has not been very good, but it has also not been bad.

We have implemented the solution on anywhere between 1,000 and 10,000 endpoints.

We get good feedback regarding the support. They respond well and provide support whenever required. They are aware of their product in a professional way. And whenever we escalate to the highest level, we get to a suitable person who can provide us with what we require.

One thing that could be improved is that escalation could be done faster.

Neutral

I have seen Forcepoint replace Symantec or McAfee in some cases. I haven't seen any cases where a client wants to replace Forcepoint.

A mandatory process that should be done before implementing the tool is a data classification analysis and the setting of a policy for data classification. These processes are done through an analysis session with different departments. The session includes teaching them about data classification policies and getting information from them regarding the data that needs to be protected and the recommended classification level that data should have.

We then deploy the server-side in the data center and start installing a sample agent. We test this agent and we test sample policies to ensure everything is okay on the sample agent. Finally, we do a full deployment.

Maintenance, post-deployment, involves making sure the solution is updated to the latest version. It has different components, and each component should be updated to the appropriate version. The same goes for the agents on the computers. The configuration should be reviewed and maintained over time, as well. One person is enough to maintain a Forcepoint instance.

As a partner, we have seen ROI with Forcepoint. We cover our costs through licenses, implementation services, and SLAs in which we support our customers and help resolve their issues whenever they want to open cases or adjust configuration.

They are flexible regarding the pricing and they have a good model for an OEM data classification tool. This makes for good pricing. Forcepoint has been one of the most competitively priced products over the last few years.

Overall, Forcepoint has good strategy and development. It is stable and has not changed as a company for a long time. It is focused on a specific solution and that makes for a good portfolio.