Transcript for "Office Hours: Cloud Web Security 'Ask Me Anything' Office Hours": Hello, everyone. Thank you for joining. My name is Jennifer. We're gonna give it just a couple of minutes here to let our attendee count go up, and then we'll get started. Alright. Giving it just maybe another thirty seconds here before we dive into content. Thank you again all for joining us this morning. There we go. We should all see our slides up here, but, yes, we'll give it just give me another thirty seconds. We'll go ahead and get started. Alright. Perfect. Let's go ahead and dive in. Thank you all for joining our Forcepoint Office Hours today for web security cloud or ask me anything. Just a couple housekeeping reminders before we get started. The presentation is available for download, under the docs tab, which will be to the right side of your screen so you can download that in a PDF format. This isn't ask me anything, so ask away all of your questions. Come in and join us. We are here for this question. So use your q and a box as much as you want throughout while Urvay presents on the road map update. You can ask questions during that, and then we'll, of course, open it up, when he is finished for all of our open q and a. As we get towards the end of the call, I will launch a post call survey. I do read every single response, and we do try to reach out as much as we can. So please complete the survey. Let us know how we did. Let us know if there's anything you wanna see, especially as we start to prepare for 2026. And then for those who joined live today, you will receive an email tomorrow with the recording as well. So that way you can watch the playback. And then for anybody who has registered, they will, of course, get that email recording as well. Alright. So just one quick housekeeping item as well before we dive in. Don't forget about the Forcepoint customer hub. Hopefully, all of you have been to it. You've been on it. You've used its resources. If you are new here or haven't had a chance to really get in and dig around, our Forcepoint customer hub is a wealth of knowledge across our help and resource center. With the knowledge base, we have a generative AI assisted search through that, which is really fantastic. All of your product documentation, your downloads for your products and things like that are all gonna be hosted in that help and resource center. We have our communities, which enables us to ask questions with our peers. We have force point representatives who do assist and answer those as well. Of course, case management. So if you are raising cases, you have you can manage all your cases in there as well as training through the Forcepoint Cyber Institute. Of course, we do have a listing of all of our office hours if there's any you ever wanna go back in and take a look at and our getting started guides. Alright. Well, looks like we are having a little bit of a technical error with Herve's laptop. So give him just a couple another couple minutes here to come back around. But as part of our presenters, Herve is our cloud web security product manager. And we have Jake, one of our senior tech support engineers joining us today as well to help answer all of your questions. Alright. So give us just a moment. I do apologize for the technical difficulty, while he gets his laptop up and going, but he will be going over a product road map today. So he's gonna cover what has been released throughout this year, as well as what just released in October and what is planned for November, as well as what the next several iterations of releases look like. So whether that's right now in our current release, what's coming next into 2026, and then, of course, what is coming on later towards the back half of the year and maybe potentially into 2027. And then we will dive into our questions. So if you did submit questions early, we will review those first, as well as dive into the different questions coming in through our q and a. Alright. Good little hold music for next time. Sorry, guys. Really appreciate your patience with us. Should be just another minute here while he's getting his laptop rebooted. Alright. Alright. We do have one question coming in, so I'll go ahead and read that live. So if a customer is using cloud web security and DSC to sync their users, is there a best practice if they wish to switch to SCIM with Azure, or should they remove the DSC synced users first? These could be hybrid active duty not active duty. Active directory users so they could be seen potentially as duplicate users. Jake, is that something you wanna cover? Yeah. So I've actually worked with a client that's, that's doing something similar there. Generally, we will get pro services involved to make sure that it's a true a a smooth transition. But in short, I believe if the NTLM ID is the same, the SCIM object will override or whatever the last sync method was. So if PSC was used last or if SCIM was used last, whatever holds the the NTLM ID will will take precedence. Awesome. Alright. Well, I'm I will well, everybody's still getting his laptop up and going. I'll go ahead and I will share the next screen on what's been released in 2025. I'm happy to read through these. Please feel free to ask your questions in the chat if you have any questions about these. Once Urbai is back with us, he can dive in and help answer some of those. But back in February, we released dedicated IP all traffic support, enhanced SCIM user management, better password policy on passphrases, and additional logic for IP address entries in proxied connections. In the April release, they saw the login flow, a good branding refresh with data security cloud, additional reporting areas for filtering sources updates, and certs updates for especially around SSO. June was a fixes and enhancements again around CFG deadlock, directory sync, active directory group sync, security updates, especially with preventing s XSS on block pages, a new feature for the unified pack for f one e, and a new resource center for Gainsight, which is really exciting. I know, Jake, if you have any as I go through these, if there's anything else you wanna share about them, I'm happy to pause. And then in September, with the September release, we had the real time policy deployment status, our custom category usability improvements, file blocking usability improvements, as well as reporting for additional attributes. And then in our latest release here in October, and I do believe we have one coming up in November as well. But for the October release, the web endpoint download for 25.0nine, policy posture upgrade, cloud apps catalog update, and an SIEM export modernization. And, Jacob, do you have any any extras shared there before we move on? Not specifically. Sorry. I was I was answering a. question in the chat. Yeah. Absolutely. Alright. I'll go ahead and share what they're coming up on. Again, these are things that they're working on right now, through the rest of 2025, and then what's gonna come up in 2026 and then potentially 2027. Of course, everybody has the guidance on those timelines, a little bit better, but just a look here on what's coming. Alright. So looks like we've got some web management updates for custom categorization API an f one e SEA coexistence, a new endpoint download, cloud apps and shadow IT database enhancements, and, again, SAIEM, then the JSON export. I'm not as familiar with some of the acronyms. Oh, perfect. And we did get a comment in the chat as well around the the XSS referring to. Looks like there is some integration support coming up in the next, several weeks. We have the RBI isolate action, the federated identity, and cloud DLP integration with the proxy modernizations, blacklisting controls, automatic blocking, OS updates, and security enhancements, and then a Paris data store when it comes to the DC modernization. Few more items, again, coming up next and later, somewhere around the web management with the crypto web category, the SIEM audit logs edition, and API bypass management, integration support with CASB inline via force point one endpoint in the mobile agent. For proxy modernization, they have some more OS updates and security enhancements, VPOP for additional egress IPs, and HTTP two. And then, some more DC modernization with The Kingdom Of Saudi Arabia and Chennai. And again, the later category, these are things probably coming in later twenty twenty six or early twenty twenty seven, around more block management, SSL decryption, device posture controls, and wildcard URL blocking, platform RBAC, UI and tech stack updates, plus further CASB inline synergies. And then for the proxy and DC modernization, protocols around WSS, native HTTP three and I p v six, the SBOM for FOSS, and the GeoDNS failover improvement. Alright. So some really awesome new features coming. Again, please feel free to ask your questions in the chat if there's anything that you guys are interested in, you wanna know more about. And then from there, we can go ahead and we'll come back. Once everybody's getting his laptop fixed and he's back on, we will go back through, his slides as well. But let's go ahead and dive into the early submission questions. So the first question we got in was around the web application firewalls, how they integrate with a cloud based platform like AWS, Azure, or cloud or Google Cloud. Excuse me. Everybody Jake, do you wanna go and take that one? Yeah. I can I can run with that one? This one, it's it's, a little ambiguous what kind of integration we're asking for, but this sounds like something that IPsec would, would likely would likely cover. You can create a tunnel between those those devices to the Forcepoint cloud proxies and then get your your web filtering that way. Let me throw this document in the in the docs, in the chat real quick. Thank you. I think I was just going to cover the same one and bring over the KB article. Don't actually, I don't see a way to directly attach it to the doc. So I'm just gonna put it into the chat, but I through IPsec, in the front of it. Perfect. And then for the VPNs configured, can you create a source IP based policy? Essentially, yes. This would be in the connections tab. I'm gonna drop yet another, article into the chat, but you can set up, source based filtering based off of the connection tabs and how you want that traffic. to be, routed and filtered. And then let's see. Can we have bandwidth monitoring for cloud web security direct? We do have, the the report builder that does have a metric for the, the bandwidth metric. Here is, again, a couple more docs regarding the, the report builder and kinda how to get familiar with it. Awesome. And then question four, if you are on the call today and question four was yours, we really appreciate that one. We will reach out because that does require a case to be submitted. And we do have Hervey back, so welcome back. I'm gonna back out a couple of slides. I probably didn't do, your updates justice. So appreciate you hopping back in and, apologies for the laptop issues. Yeah. No worries. Hopefully, can you hear me okay? I'm I'm a little bit flying blind. I'm not sure if my camera is on or not, but, I'll rely on on you, right, to, to tell me if that's okay, or if I'm going too fast. So, apologies for the, slight misfired folks. My laptop decided to go on a bit of a reboot as I was just, entering the stage. So, the the the joys of, doing, live, live events, live performance, and so on and so forth. So for those of you I haven't met, so my name is Herve. I'm the web security cloud product manager here at Forcepoint. And, and, again, we want to have this session to be very interactive. Jake was kindly, to answering already some of your questions. From my perspective, what I wanted to give you was also a little bit of a view of what we've been working on so far. Right? Again, I it might be a little bit, I know we just passed Halloween. We're not at the end of the year yet. There's still some more things to come, but it feels almost kind of like a a looking back at the year and what, what everything, has sort of been, released. Right? So there's I won't drain. I think the slides, the documents will be shared with you. I think it's just worthwhile to call, I think, some of the, true lines that we try to incorporate. A lot has to do, around the admin user experience. And, again, we, we we do listen for your feedback, and we do hope that you that you notice this. But we've been trying to tackle, a lot, I would say, quality of life improvements, for administrator. Jake was talking about reporting. There's definitely be a lot of changes around reporting, namely around the enhancements around IDK IP or egress IP or the endpoint endpoint versions, etcetera. Right? So all of those have been, made available on the report builder, transaction viewer, wherever essentially you get your your reports, available, when using, when using the web cloud. And there's, I would say there's there's there's more, obviously, that we're constantly trying to improve on, but reporting would think or or I think the the refinement or the additions of additional fields or or etcetera were were definitely coming, as as a way of feedbacks, and we're essentially, gradually working on fixing, enhancing, all of those. Right? The the login, login passwords, all those kind of things, again, that was done, to support organization who essentially wanted to use, pass freezes. So we moved to kind of a more secured, longer, passwords, as well as custom retention policies that are much more, much longer or etcetera. So if you do find yourself in situation where you find frustrated with having to change your password, as a cloud security admin, There are two paths, essentially. One is, the use of a single sign on. Another one is also just obviously just to get the, the password policy for your organization updated, again, if you can. Right? So depending on your admin role, you you you might not have that, but we definitely did some work there to kind of, enhance the experience. Right? There's also another true line that we're working on is, I would say around the platform integration. There's a ton of work that has been happening around identity, that we will, be in position to, to start to make available, quite soon, which is consuming the identity, out of the platform. So, again, if you only use Web Security Cloud, that might not necessarily be, as much as a revolution to you as it is for, consumer or, you know, folks who use other products like, Cloud DLP or or etcetera. Meaning that we're we're again, trying working hard to work on the concept of essentially define once and reuse everywhere so that's valid for, you know, your identity, users, and groups, and etcetera. So, obviously, we wanna, you know, bring, every, every already supported, elements and then add some more. Right? That's the kind of the the the requirements that we have around the platform. But, like, you know, things like, SAML scheme, DIRSync, or those, methods essentially to be supported from the platform and very soon to be enabling, that as, I would say the default identity provider. Obviously, if you already have your identity defined and set up, you can also, you know, in a way, migrate or keep using, keep using those existing flows. So just to kind of, put it, sort of, out there. The other two lines, of course, is the constant improvements around, bugs, fixes, or or etcetera. Again, we do apologize, when you're finding, issues and you're on the, I would say, the wrong case, of a at the wrong end of a case, but we, again, we we we thank you for, you know, raising those, and we constantly work in, you know, improving those. Right? So, again, if if you do have some additional feedbacks on on areas or, you know, certain bugs or elements where you find some frustration, I'd like to point you as well towards when you're connected on the on the admin, the cloud security portal. There's essentially a kind of a feedback, place, right, that has, coming from a Gainsight integration, you can essentially rate, right, your current experience, and you can also provide feedback. Right? So, and, again, as as as PM, I regularly review those. Some of you might actually been we actually also try to invite, users to debrief for interviews when, you know, this is around specific topics or, to dive a little bit deeper. So, again, just just to kind of, I know you're you're you already do, but just to put it on this side that, your feedback is incredibly valuable to us and that we do, you know, use that as a material to, to enhance the products. Right? The other, I would say, byline that we've seen around the years was all around the modernization, a little bit around DUI and, again, around the admin user experience, but also on the on the speed and the robustness of the infrastructure. Ton of work has gone around. I'm hoping you've seen, the change around the policy, deployment status. Again, we can we can show you, quickly in the UI how that looks like, but that's something that we've released in September. And we've, again, done a lot of work and simplifications around the policy, baking, rendering, and all those kind of, elements to ensure that when you do, make a change, to your policies, those changes are essentially being replicated across, all the proxies. Again, our our policy model is that, all the policies are kind of distributed and available worldwide. So, obviously, that takes a bit of time, right, to synchronize across all the data centers, again, replicated all the proxy servers and and etcetera. But we have now kind of giving you a real time view on how that policy is being propagated. Right? Just maybe as a a quick, sort of a tidbit on on on sort of a behind the scene, when you commit kind of a a policy change, essentially, we have an event listener, and that event listener fires on any change that has been happening within the last minute. Right? So sometimes you might see that the, I would say, the the the circle, takes a a a bit of time, to refresh. So that's kind of the the the one minute, I would say, delay. And then the indicator status, is being refreshed on the thirty seconds, kinda basis. And then I think you've seen, right, the kind of the hardware or the progress pool there, to kind of give you the visibility on the on the how your policy is being propagated across all the servers, again, all across all the Forcepoint's, data, data center, infrastructure. So, again, ton of work there. Some more that we have to do. I'll probably also put it out there. This is not necessarily called out as part of the, of the release notes as well, but we've we've done also some work to support the higher number of custom categories. As you know, there are, default limits around your custom categories. If you do want to increase those, again, this is a simple matter of freezing a case and then asking our support team, to increase those limits, but we are, generally speaking, quite comfortable, handling a lot more, custom categories, throughout the board. Right? So there's been also kind of a lot of work on that there. Right? As we looked at the kind of the recent release that we've done, so just, again, calling out just a very quick quick points, the new endpoint version, so twenty five zero nine has been made available. There's been also I think you've all seen that. We've done some communications around on the portal, as well as through tech alerts, but, there's been a security, posture update. So a restricted sets of security categories have been essentially moved to, to block. We will, do the second phase, I would say, around the handling of those exceptions, on the December 9, which is the essentially, the last, portal release, for the year, that we target. Right? And Jen kindly, shared the road map just to call out as well that as part of the, portal December release, what you will see as well, and I believe we've sent a communication, recently on this as well, is around the two new categories that we will have. One is for cryptocurrency. The other one is for crypto mining. There will be a slight, label change on the GenAI text and code. Again, this is more to do with the wider, Forcepoint product, ecosystem, as well as OEMs, just to ensure that those categories just get consumed, and digested. The way the categories will be made available, they will be essentially available in your in your policies, in the UI, but we will not move any existing URL. We will also provide an update on the test database, Forcepoint, or you can still use the test database webcents.com. But any you will be able essentially to define your policies or adapt them, based on those new categories, but there will be no, URL, change. The URLs will be updated on the January 15, so that allows you essentially, right, as we we we know, changes, especially on the end of the year, tend to be quite critical. So that allows you to have the categories available, tweak your policies, adapt it, you can test it, and etcetera. And then the change itself is gonna happen, about a month, months and a half later, which is on the January 15. Right? So just to call out, that, that change there. What we will expect also to have, although this is not gonna be as part of the the December release, would be the ability, to add the audit logs onto the SIEM. Right, some customers who wanted to have, or let's call also the audit trail or the admin, so whenever the policies are being updated or etcetera, those records are available today, in a, I would say, in a separate reporting location. We essentially want to make those records available, into SIEM. And, the good news is that we are already now supporting, the SIEM record in c f and JSON. That's all available through a new Python script, which is an improvement on the modernization, right, on the on the Perl, script. Again, if you have the integration for SIM and you're still leverage or already have the Perl script, you can also now start to use the, the Python script and have support for those additional formats if you, if you if you want. We will also expect as you look at sort of the now. Right? I'm sorry. I might be jumping a bit from topics to topics, but on the kind of, the things that we're we're sort of working on and or enabling, quite soon. There are quite a lot of exciting things around the RBI isolate action. So today, the integration is done through, to use of a custom block page. We're essentially gonna remove that. We will update as well the icons. The lid the readability, I would say, and the usability of the icons that are being used for, policy policy action will be updated at the same time, and we will have a new isolate, action, that will be made available. Right? Again, there definitely some, licensing, kind of, restrictions or or etcetera. So for example, you know, if you don't have, RBI or RBI essential or those kind of, those kind of elements, then essentially the the isolate action will, will not be visible, but you will see the enhanced usability, right, around the, the icons. Right? So, essentially, they go from the, the most, I would say, allow so it starts from essentially allowed, which is the URLs or the categories that you're absolutely sure that you want to provide access, the do not block, which is just a layer of, you know, you allow for further inspection, like real time content security scannings or etcetera to kind of, keep on going. And then, essentially, sort of, goes lower down the tree to either there's a user action, like, prompting authentication, or, you know, confirm. So when that's when you hit to kind of, the confirm or continue page, to confirm that, again, you either based on terms and conditions or others, that you wanna, access those type of, of categories and then essentially move on then to isolate and then block access. Right? So the structure essentially, I think we're we're gonna be a lot more, legible, as well as the icons as the icons themselves. Right? So I think I'll, I talked a bit about that. The customer were using the cloud DLP or DPS integration. So the auto category syncing, is something that we're working on. We're actually done, from our side in terms of, in terms of development. What is, gonna be enabled, I ex what I expect before the end of the year, but if not, it's gonna be in early January, is on the DLP side, so the receiving end, right, of that automation. So, again, stay tuned for, you know, your, release notes or etcetera. That's something that will be available quite, quite soon as well. Right? One last point as we look at the what is happening right now and things that you might be, aware or care about is that we have now a new data store, available in Paris. I have not yet, made the communication around that, so stay tuned. We will, reach out to your customers, definitely for customers who are located in, in EU, or others just to, make available the Paris store and do provide, right, the context that if you do, want to, for example, change, out of Frankfurt or or any other stores, again, the Paris store will be available, so we will provide information about the essentially, the the transition phase, from, your current, primary, secondary store, to Paris again should you want to use, Paris. If we look in the future, there's some more work again on the data centers, so there's couple of, I would say, sort of, hot topics, elements in there. Just again, I I won't provide, exact timelines on that, but we do want to provide a new data center footprint, notably in Middle East, as well as adding another point of presence, to our friends in APAC in India. So, again, this might not be necessarily, Chennai as I indicated on my slide, but it will be a secondary data center, in India, again, in a in a distributed or separated geographical location. Right? So, what else? So I think I talked a little bit around the updates around the web management, so crypto web categories, the SIMD audit logs. There's also, I think, a lot more work, but I think this one is probably gonna, take a good chunk of, the first quarter of the year, but we I think as you're aware, we do have now, APIs, customer facing external accessible, APIs for the managements of the custom categories. We wanna go further, and we will, you know, work on the next trench, of of API, which have to do with the managements of bypasses, right, generally speaking. So bypasses typically fall within either, proxy, authentication, or SSL. Right? So, again, the management of those is, something that we wanna provide to you, using, using APIs there. So I would expect the delivery of those, of those APIs. Typically, we make them available through early access. So if you're interested, stay tuned. And then once their early access is kind of, concluded, then we're sort of, make them, available. So I would expect Bypass to form the same, well trodden pass, right, on the same, lines of, early access or type of integrations or, others. Two, I think, elements that, again, depending on your needs or your use cases you might be interested about. One is the ability to, essentially send the cloud application to manage cloud application traffic, through force point one, f one e, essentially. So right now, we're leveraging two separate agents. There's the SmartDate agents as well as the 4.1, agent. We, early in the year, released the coexistence, the compatibility between those two agents, right, so that your cloud app traffic is being handled, by the Smart Edge agents, and then the rest that would save your web traffic is being handled by f one e. This is sort of a next phase, type of integration where you will essentially only have to use f one e, to send your, your CASB as well as your web traffic, there, right, to the single agent. So, again, as I mentioned, we fully expect to have an early access, there. Again, it would be the start of the next year, either in January or February. Those those are the kind of the timelines. And then the other one, the mobile agent is probably gonna be materialized itself a little bit later, on that portion of the year. For some of you who've been waiting for mobile, I too apologize for the time it's been taken. There's, some significantly significant, I would say, rewrite in terms of tech stack and architecture, and we we are in a good place, and I believe we have something very, robust there. So the mobile agent will be available in iOS. Again, I will just, at this stage, just mention that, you know, sometimes in q one, we do expect to have that early access, to be to be started. And for those of you who wonder what about Android, what about, you know, Chromebooks, etcetera, this is, this would be the next phase, right, of, of mobile. So we want to have first the iOS, footprints, solidified, but we do have the skill set and already work on the way, I think, on the stack to get towards, Android. Right? So, again, just for those of you, who wants mobile mobile agent, staging for more, there's definitely some more things coming. And then, on the on the follow on in terms of modernization, also what's kind of, right in front of us or that we're working on, it's the support of HTTP two, protocol for that one. I don't have a hard date that I can provide, but the work has already started. We're, I think, well on the way. We should be, I would say, exiting, the middle of the year with HTTP two support, kind of a fully available. Right? And then the next phase, obviously, of HTTP three or I p v six or others or even, you know, deep packet inspection around WebSockets, that are coming sometime later on the year. Right? So, again, I I don't wanna make it too dry or reread or repeat some of the points, that you see on the slide. Again, maybe if you do have questions or interest about specific things in here or if there are things, that you are interested about and you do not see here, I'm definitely interested in, you know, hearing from you and discussing. Right? Again, I'm kind of calling, I would say, some of the larger block items and not necessarily calling every single change, but you might have, for example, some change that are very important to you and, you know, might not have them captured here. So, again, from my perspective, would love to hear from you. Right? And I think with that, in the chat or in our q and a, please feel free to leave those within the survey as well because I will share those results with Harvey and I. Alright. Thank you. Well, you did so much justice to that. I walked through your slides, just to help as we were we were waiting on you to come back, so you definitely did that way better justice, than I did. So, Jake and I, we're just kinda following through the questions here. So we got down to question five. So this one is around. Do you have any suggestions on how to improve detection for endpoint clients when users are uploading files through web browsers, particularly Gmail? This would be more a a case for, like, the DLP agent. Webb does have, like, a DLP light service, but upload protection is is much more suited for the DLP product in general. Awesome. And then I think the last question we got in from our early submission questions was around the plans to support TLS one dot three with cloud web proxies. Herve, did you confirm the I I'm sorry. I had missed it. Does is t l s one three supported now? I forget. Yeah. It is? Yeah. Okay. It's it's been and this is where my memory on my side feeds a little bit. I don't know if it's two years or three years. I'm I I can try to fish out exactly when, but it's been it's been, it's been some years. I don't remember having any issues specifically with TLS one three like we have with, like, HTTP two point o. I I just couldn't remember. Mhmm. Okay. No worries. Thank you. Alright. So we'll keep it open for the q and a. We do have some if you did download the document, we do have some additional reference material around release notes, help guides, and then the custom category categorization API documentation, as well as some on prem content as well. Yeah. So let's go back to question four. So struggling to use Microsoft private access with Forcepoint applied number of bypasses for global secure access platform, but it's still disconnecting if a force if ForcePoint is enabled on the client. How can we fix this if we wanna go zero trust rather than traditional VPN? So I know this is a really a really specific question that will probably end up resulting in a case being necessary, but is there any anything else that we can share related to that question? Kind of a hard one to answer live without any actual data to look at because we don't know, you know, is it a block that's being imposed? Is it, you know, possibly WebSockets that's kicking in or something like that? So it's it's really hard to answer this one in this type of format. I would say let's get a case going and get as much information on it as possible with, like, agent logs and things like that so that we can better assess, what the what the actual issue is and then provide a suggestion. Okay. Perfect. Question coming in on the chat. Will there be fields available on the transaction viewer for Cloud web to see the reason for request being blocked? I think that this one would be whatever policy is applied, which you can see in transaction viewer. You would then backtrack the the policy logic and see why it's it's being, why the block is being imposed. Herve, do we do we have any new new fields or features in that area coming up? No. I guess, same as, I think, as you're you're going. Right? I think the point is, you can, you know, you can bring the policy, you can bring bring the policy there as, as an information. But I guess, yeah, to to your your point, it's only part of the answer. I guess you're probably trying to get to something a bit more binary or standard of, okay, you know, block because x, which, you know, that that's a that's a good point, and that's probably something we can we can look into. I don't I'm hoping okay. I don't wanna mess too much with the chat, but I'm hoping we can maybe, get the contact name of the person who submitted that and then, you know, dive a little bit deeper on this. Right? This also feels like a prime candidate for the, the policy checker, which will give you slightly more information about, you know, if an exception's applied, what categories are are being applied to the request. Those can really, really help zero in on, you know, exactly why the block is being imposed and what, you know, what policy modification Mhmm. needs to be made there. Oh, great. For the response on question four, I will take that one, and I will follow-up on your case, and see how that's going. And if you need any further assistance, I'll have your case owner reach out to you. And then as a follow-up for the transaction viewer, they said, yes. Was it blocked by file type or data loss prevention or by web filtering? I I'm sorry. I'm I'm not sure I'm fully following that one. For the transaction viewer, I think this kind of aligns with what you guys were referring to because the question kinda continued on with, was it, you know, yes. Was it blocked by file type or data loss prevention or by web filtering? Just in agreement, in what. you were saying. Alright. Go ahead and keep the questions coming. I am gonna go ahead and launch this survey here. Again, we do read every response, and we do follow-up. I know we have a few follow ups for today's phone call, which is great. And then if you keep adding it to the q and a let's see. So for web security on prem, we will we haven't published, the registration page just yet as we just finalized the date, earlier I guess it's Wednesday. So earlier this week, we just finalized the date, but our web security on prem office hours will be coming in mid December. So before the holiday seasons really kick in for everybody, so be on the lookout for that. I do believe we are targeting the December. But again, that registration will start to come out here in probably the next week or two. So be on the lookout for that, and I will ensure that as we get prepped for that, office hours that there are a lot of questions coming in about the road map. So I'll be sure to share that with the PM Anthony who will be joining us on that call. And I will share the questions that have come in for the on prem products, with him as well so he's prepared for that discussion. Alright. Any other questions? We've got the fifteen minute countdown going. Any please feel free to bring your questions in. Again, please fill out your survey. We do read all of the responses that come in and action them, so we definitely like to see the the feedback. Any of these suggestions for next year? Again, as we start to plan out our 2026 calendar for office hours, if you have any suggestions, anything you'd like to see, anything different, please note that in your survey comments. That way, we can also start preparing for next year. Alright. Give it a couple more minutes here. I know some folks are starting to drop into the top of the hour. Alright. We'll give it another, probably, thirty seconds to a minute, but, then we can go ahead and end a little early if there are no more questions coming in. Got all of our questions here. Oh, we got another one coming in. Would you recommend bypassing those IPs from going to the WCG entirely or on the w or on the WCG tunnel? Is this in regards to the Office 360 yeah. I think so. I think so. portal.azure.com and, one drive dot live dot com, Since those ones aren't currently in the the list, I would definitely include them as a as a WCG tunnel. If that doesn't work, then really your only recourse would be a proxy bypass to get those properly functioning. Alright. So we're trickling down here. I'll give another couple another thirty seconds to a minute. Perfect. Looks like they've we're bypassing them to test, and it did work. So that's good. Good. Good. Yeah. Alright. If there's no other questions coming in, we can go ahead and end today's session just a little early. Thank you all so much for joining, for asking your questions, and looking forward to reading your survey responses. Thank you all. Alright. Thank you. Thanks, everybody.