Battlecard: Forcepoint ONE

Forcepoint ONE 60-Second Pitch Others’ Weaknesses Forcepoint ONE Strengths

Forcepoint ONE is a true all-in-one cloud platform that makes security as simple as 3-  Lack of mature data  Agentless enforcement of data protection policies
2-1 for distributed organizations with remote or hybrid workers. It gives employees, protection across ANY applications (cloud apps & private apps)
contractors, and other users safe, controlled access to business information
 Inability to do agentless  300 Points of Presence and elastic scalability to easily
everywhere—on the web, in the cloud, in private applications—keeping attackers out DLP for any application accommodate changing customer needs at any
and sensitive data in. location
 Fragmented products
Unlike competing security solutions that merely bundle portfolios of fragmented  Unified endpoint agent for Web, Cloud, Private apps
 Slower web
products together, Forcepoint ONE integrates Zero Trust and SASE Security Service performance  Single pane of glass to manage policies across use of
Edge technologies into a unified cloud platform so that organizations can manage one the web, cloud apps, and private apps (including DLP
set of policies, in one console, connected to from one endpoint agent. As a result,  Complexity
and threat protection)
Forcepoint ONE safely makes users more productive, whether remote or in the office,  Weaker cloud presence,
and businesses more efficient.  SmartEdge ephemeral agent for fast, reliable on-
no hyperscaler
device web security even when behind other defenses
backbone
(hotels, Wi-Fi spots)
 Frictionless end-user experience, that enables hybrid
workforces to easily access business resources
securely, from anywhere they need to work
What to Listen for in Distributed Organizations
Focus on customers who are already interested in switching how their remote workers
or remote sites get to the web and cloud. Listen for ‘replacing VPNs,’ ‘going direct-to- What’s Driving Change Questions to Ask
cloud,’ or ‘making Microsoft Office 365 run fast for remote users’.  Lack of consistent  How do your remote workers and remote sites get to
visibility, control and the web and cloud?
protection of remote
 What visibility and control do you have over remote
workers and cloud data
workers’ use of your data on the web or in the cloud?
 Work-from-home over
 What would happen if ransomware or data harvesters
VPNs is complex and
got onto a remote workers’ desktop?
300 Millions 99.99% expensive
 Are your remote workers happy with the performance
Points of Presence (PoPs) Users protected by Verified uptime  Cloud apps need direct-
of Microsoft 365 and other interactive apps?
globally our cloud to-internet connectivity
to perform properly  How does supporting a hybrid workforce fit with your
Others’ Claims How-to-Win Response digital transformation plans?

Everybody’s SWG offers DLP Most SWG vendors’ “DLP” is really just Why Forcepoint Wins Resources
trivial pattern matching. Forcepoint is a
9-time Leader in Gartner’s DLP Magic  Best web & app  Whitepaper: 5 Steps to SASE

Quadrant, offering unrivaled DLP performance  Webcast: Protect the Remote Workforce: A SASE Game Plan
support.  Better data protection  Report: ESG: Quantifying the Benefits of SASE

 Unified, cloud-native  Report: Gartner: How to Avoid Failures When Migrating to a

Forcepoint doesn’t know how to do cloud Based on the cloud-native heritage of Cloud-based SWG
platform
Bitglass, the Forcepoint ONE platform  Report: Enterprise Guide to Cloud Security Essentials
is the only mature SSE solution built on  Rich threat prevention
a hyperscaler backbone.  Hyperscaler backbone

14 February 2022 v2 forcepoint.com continue 

 Capability Others Forcepoint ONE
One-Liners
Cloud Security (CASB)  Weak reverse proxy (i.e. agentless  Strong reverse proxy capabilities to protect ANY
protection) that can only protect 2-3 application without an agent  Enable Zero Trust access to
dozen applications, or no reverse proxy business applications without
 Fast application traffic through hyperscaler requiring an agent so business data
 Lack of direct-to-cloud connectivity slows backbone, with whitelisted app traffic going direct-to- can stay protected while still being
application performance cloud accessible for employees and
 Smaller cloud footprint means slow  Global presence with localized user experience contractors alike
performance for remote sites
 Hyperscaler backbone enables elastic scalability of
workloads to accommodate surges anywhere in the  Provide your users with robust web
world security without slowing down web
performance (compared to
Private Application  Most competitors require an agent  Agentless ZTNA means employees as well as competitors that reduce bandwidth
Security (ZTNA) contractors, consultants, or auditors can all access by up to 50%)
 Often separate management console
appropriate business resources with identity based
with coverage not consistent to CASB
access control and in-line DLP & Threat Protection
capabilities  Forcepoint ONE offers one of the
 Unified management provides consistent security only agentless ZTNA solutions on
 McAfee/Trellix has no ZTNA
coverage and lower technical cost of ownership the market

Web Security (SWG)  Forces traffic through cloud infrastructure  On-device SWG provides for the best user  Consistent DLP and threat
which slows down web performance for performance, and covers more use cases protection controls across the three
users core channels: the web, cloud, and
 Forcepoint ONE has indexed over 600,000
 Limited shadow IT visibility applications for shadow IT visibility while others only private apps, means more effective
have about 30,000 protection and lower false positives
 Limited DLP capabilities
 Mature DLP capabilities including fingerprinting
 Forcepoint ONE has the strongest
Data Loss Prevention  Multiple DLP engines (McAfee/Trellix)  Recognized industry DLP leader cloud architecture of SSE platforms
(DLP) complicate management with 300+ PoPs and a hyperscaler
 Strong integrated DLP capabilities including backbone for elastic scalability
 “DLP Lite” capabilities (Zscaler & fingerprinting and customizable logic
Netskope) means ineffective coverage
 Future integrations starting in Q2 to bring
for critical channels, plus duplication of  Forcepoint ONE has a validated
Forcepoint’s Enterprise DLP capabilities to
admin overhead by typically uptime of 99.99%
Forcepoint ONE’s Integrated DLP capabilities
necessitating separate DLP point-
products
 As a unified SaaS based security
platform, management overhead
and technical cost of ownership are
reduced and can further drive down
costs by replacing multiple point
products with a single, unified
solution that is easier to use

© 2021 Forcepoint forcepoint.com 14 February 2022 v2