Forcepoint ONE CASB vs Forcepoint ZTNA
| Forcepoint ONE CASB | Forcepoint ZTNA | |
|---|---|---|
| Platforms | macOS, Web, Windows | macOS, self-hosted, Web, Windows |
| Deployment model | hybrid | hybrid |
| Inline controls | Yes | Yes |
| API-based controls | Yes | Yes |
| DLP controls | Yes | Yes |
| Shadow IT discovery | Yes | Yes |
| Threat detection | Yes | Yes |
| Free plan | No | |
| Isolation mode | hybrid | |
| Malware scanning | No | |
| File transfer controls | Yes | |
| Data loss prevention | Yes | |
| Deployment | hybrid | |
| Endpoint controls | Yes | |
| Network controls | Yes | |
| Cloud app controls | Yes | |
| Data discovery | Yes | |
| Removable media control | Yes | |
| Incident workflows | Yes | |
| Phishing detection | Yes | |
| Attachment scanning | Yes | |
| Quarantine access | user_and_admin | |
| Supported mail platforms | Microsoft Exchange, Gmail for Business, and other email providers | |
| Quarantine retention | 30 days | |
| Deployment type | cloud_gateway | |
| Change control | Yes | |
| API access | Yes | |
| Policy automation | Yes | |
| User risk scoring | Yes | |
| Insider-risk workflows | Yes | |
| Data exfiltration detection | Yes | |
| Credential misuse detection | Yes | |
| Case management | Yes | |
| Intrusion prevention | Yes | |
| SSL inspection | Yes | |
| Site-to-site VPN | Yes | |
| Access methods | both | |
| Device posture checks | Yes | |
| Supported app protocols | SSH, RDP, HTTP, HTTPS, SMB, SFTP |
Listed together in Best Cloud Access Security Broker SoftwareBest Secure Access Service Edge Software