Name: Office Hours: Forcepoint CASB - Strengthening Your SaaS Security (EDT)
Uploaded: 2025-09-18T15:16:13.383Z
Duration: 48 min 12 s
Description: Office Hours: Forcepoint CASB - Strengthening Your SaaS Security (EDT)

Transcript for "Office Hours: Forcepoint CASB - Strengthening Your SaaS Security (EDT)": Welcome, everyone. Thank you all for joining. We are here for today's office hours for a task a really wonderful CASB session is planned today around strengthening our SaaS security with Forcepoint. We'll give it just a couple of minutes for more folks to join and then we'll get started. Alright. If you're just joining us, we're just giving it another minute or two here, and then we'll go ahead and dive in. Alright. Thank you all again for joining. Really excited for today's office hours session. So just to introduce our presenters today, we have Sarita, our senior director of product management, and Neeraj, our senior product marketing manager who will be leading us through today's content. We do a whole lot of really fun content planned ahead of doing our ask me anything. So just before we get started, as a reminder for those of you who haven't attended an office hours with us before, the presentation is available to download under the docs tab to the side of your screen. Start entering any of your questions into the q and a box around Forcepoint, and we have folks who will be answering those questions as well as we'll take some questions live. At the end of the session, if we get close to the end of the session, I will send out a post call survey. We do review and read every response that we receive. So we really appreciate everyone's feedback. You can use that survey as well if you have any sponsor suggestions on future office hour sessions. We're always taking recommendations for that. And then you will receive an email tomorrow with a link to watch the playback, for any of our registrants if you watch it here live with us or if you are gonna watch it later. Alright. I'll turn it over to Neeraj and take it away. Thank you, Jen. Hello, everyone. My name is Neeraj Naik. I'm the senior product marketing manager at Forcepoint. And in this session, we are going to talk about how can you secure your SaaS applications with Forcepoint CASB. Now before we dive in, let me quickly walk you through what we we are going to cover in today's session. So we'll talk about our unified data security vision and how it is delivered through the integration of CASB and Forcepoint DLP. Next, we'll be sharing early insights into the CASB roadmap and what are the new and upcoming features, and then we'll open the floor for question and answers. So let's get started with the first topic, unified data security and why it can become a game changer for your organization. Now with the explosion of SaaS, hybrid work, and generative AI, your data is now everywhere, and it is flowing through all of these different channels. And we have realized that the traditional siloed security approaches, they are not designed to protect the data anymore as it is changing context in a very rapid fashion. And one of the problems that we often encounter in the industry is organizations when they migrate their data and applications to the cloud, they end up maintaining multiple data protection policies to protect the data. And and then the IT teams, they have to spend hundreds and thousands of hours just to recreate the same policy, which they had already created for their on prem applications. Now they have to recreate that for SaaS, for web, for email, etcetera. And they probably just spend many many more dollars in this process. But at first point, our approach is quite simple, yet it's very powerful. We have the industry's best DLP product. And through the integration of Forcepoint DLP and CASB, we can extend the same DLP policies that are deployed across millions of endpoints to the SaaS applications with just a few simple clicks. What this means is that is that same proven DLP policies that we use for endpoint, now that you can apply them to your CAS feed to your SaaS applications, and you can go beyond to web and email. So there's no need for any policy migration or policy duplication, and you get consistent visibility and control from a single management console. Doesn't matter whether data is in the laptop, whether it is in the email, or in a Salesforce application. So as a customer, what benefit do you get from this unified data protection approach? First and foremost, you can reuse the policy that you already have that reduces your deployment complexity, your deployment time. You can reach time to value in just minutes when you migrate your data from on prem networks to SaaS applications. Additionally, you get consistent visibility and control across all channels that reduces the risk of data loss from blind spots through these different channels. And you also didn't don't need to manage multiple d DLP products to protect your data everywhere. Now we had done a joint research with IDC, and some of the results are quite compelling. So customers, they can achieve up to 31% reduction in operational complexity with unified DLP policies. And through our internal analysis, we can prove that you'll you can achieve an annual saving of around $600,000 by just eliminating policy duplication and avoiding unnecessary investment in redundant data protection solutions. So these are powerful proof points that underscore the tangible value that can deliver through this unified data security model. And if you're one of our DLP customers, you know the value that our DLP brings to the table. But imagine the same benefit now is getting expanded to SaaS, to web, to emails, to networks. That's the part of this unified data security model. Now let me quickly walk you through some of the top SaaS security use cases that we are solving through Forcepoint CASB. First is the API based scanning. This is about connecting to the SaaS applications via APIs in an out of band fashion and discovering sensitive data and model at risk in your SaaS applications. Now API model, it does not involve any agent deployment, on your endpoint devices or any proxy configuration. And it can help help you answer questions like, what is the volume of sensitive data in the cloud? What is the spread of data across the different applications? How is the data getting shared with the outside world? Is there any sensitive file that is getting exposed via open public links? Is my data in the cloud even compliant with all the, different regulatory mandates? Next is the data protection. Now as I spoke previously, by integrating CASB with Forcepoint DLP, you can instantly bring all the benefits of enterprise d DLP to the SaaS applications. That includes over 1,700 policy templates, 900 plus file types, compliance coverage for over 90 countries. And the best part is a single policy enforced from one console protecting your data across everywhere. And the next is controlling the SaaS applications. Now visibility and real time control, they are very critical to secure your data from exfiltration by external threads or insider threads. For Cassie, it can give you the insight into which users are connected to which application, what devices they are using, whether it is a managed device or an unmanaged device, what actions are they performing. And, you can enforce the granular policies, like, you you can prevent download of sensitive data to personal devices, or you can restrict risky actions like, preventing somebody from posting on social media. The fourth use case is securing access from any device. Now as a security organization, we have to act as an enabler for SaaS applications. We we can't enforce binary allow our block policies. That's that's counterproductive. We need to enable access to applications, but it should be context driven. The context can include, different attributes like your user identity, your device identity, device type, what's the security posture of the device, at what time of the day is the user trying to access the application, what is the location of the user, what is the sensitivity level of the data that is being accessed, and many more. And if these conditions are met, then allow the access. If not, you can simply block the access or you can ask for a step of authentication. In addition to this, Forcepoint CASB also offers malware detection protection. We can detect malware on upload or download, or we can detect malware address. We can, through our API controls, we can discover the malware in your SaaS applications, and we can define policies to quarantine those malware files. In other scenarios, when a user tries to upload an infected file from, let's say, a risky or an unmanaged device, we can immediately block that upload, and we can stop the spread of malware in your SaaS applications. We are also integrated with multiple leading antimalware engines and SIEM solutions to deliver deep visibility into threat related activities, and we can enforce advanced context error controls. So these are the top use cases that, I wanted to discuss. Next, I'll hand it over to Sayita to cover the the road map and all the different cool features that we're coming up with. Right. Thank you, Neeraj. Hi, everyone. My name is Sarita Chandlurada. I am the product management lead for CASB, and I also lead DSPM side of the world here at Forcepoint. And I see some questions already about the CASB implementation as well as the DSPM. So I hope through next slides, I will talk about the I'll set the context for our portfolio, in general and where CASB comes into picture and how we can use the Forcepoint data security platform as a whole for end to end data security. Some of some portions of this next section will cover road map. This needs to be taken directionally, not as a commitment. So just to set the high level context, I would like to, walk you all through, how sensitive data travels, then we go into CASB specific road map. Right? Where I want to actually paint the picture of how Forcepoint products help you with the sensitive data moment. So if you take this example on the screen here, this is a typical journey of sensitive data, for a given organization or a given employee. This shows how quickly sensitive data can proliferate across multiple destinations. In this example, say, to five locations in the matter of few minutes. An employee downloads a sensitive, report from Salesforce application, with a list of strategic customer accounts. Then, they download it to their local endpoint, then upload it to a SharePoint for their team's work, send it to chat GPT or Copilot for summarization top insights, followed by distribute the insights and the link to the file via Slack, via email, etcetera. In the matter of minutes, this has ended up in five or six destinations, which, leads to exposure. This type of exposure needs to have lot of governance, monitoring, and also especially with AI usage, we need to be able to make sure that, usage is secure and safe. So this is where overall Forcepoint product portfolio comes together to give you a lot of controls. Now if you look at some of these controls, what's going on is we we have this five fold approach. We start with discovery, classification, and prioritization. Understand where your data is and understand what type of data is it. Is it PII, PCI, or your regular, sensitive intellectual property? So discovering and classifying is the first challenge of your, problem to contain the sensitive data. Then prioritizing based on the type of data, this is this, actually solves half the problem. If you don't know where your data is and what type of data it is, it just multiplies your risk. Then the next portion is remediate and protect. Here is where you can apply manual remediation controls or automatic remediation controls. It could include blocking or it could include removing overexposed data from external, users, etcetera. So as a whole, Forcepoint platform, this is how it comes together. DSPM Forcepoint DSPM is extremely good at with AI mesh technology. It's extremely good at discovering data across various data sources on prem, cloud, or, you know, SMD file shares, etcetera. It's extremely good at discovering data, cat cat logging, and mapping the risk. DLP then protects based on the, categorization done by DSPM. DLP can protect data from exfiltrating through various channels, and the channels can include your cloud applications, your email, someone uploading data to web, or someone downloading data to endpoint. Right? These are the various channels or attack surfaces that you need to protect. Now with this grand picture in mind, Forcepoint DLP plus CASB is where we protect data that reside within your SaaS apps. So this is where the context of CASB comes into picture. If you think about DSPN, they are the the product is more on the preventative side where you are understanding, you're classifying your data. If you think about DLP plus CASB combinations, you're actually preventing the data that has been classified, identified from leaving, to any unauthorized parties. Now, with that in mind, I would also like to briefly touch on a topic, which is if you have DLP already or if you are new to CASB implementation, Some of you are our DLP customers. We have received questions on how do you implement CASB if you already have Forcepoint DLP. As my colleague, Niraj, mentioned earlier, Forcepoint DLP has that industry leading lowest false positive, DLP, advanced DLP capabilities with over 1,700 to 1,800 classifiers that can accommodate almost identifying any type of data that you'll have in your organization. So if you already have DLP, this is a three phased approach that we recommend to implementing CASB. The goal here is to progressively, enhance visibility, control, and protection of SaaS app data and user activity that goes on in the SaaS apps. The first phase we recommend, and this can be a matter of few hours to a day or so, to is to enable CASB API. Some of you have asked about Office three sixty five controls. Office three sixty five is one of the top app that we support. We follow Office three sixty five, applications like OneDrive, SharePoint, Planner, various different calendar, Outlook. We follow all of these very closely, and we do have extensive API controls, API based controls. That means, we connect, via the graph APIs, SharePoint, OneDrive APIs to be able to give you the granular visibility over your sensitive data. This is out of band, so there's no need to deploy agents or change any traffic path here. And you're able to get visibility into data in a few seconds. And you're also able to understand where your data is overexposed. In DLP, if you find that your data is overexposed, some matches with fingerprinted data or PII, PCI, or any type of data of interest, you're able to use, Forcepoint DLP to generate incidents, review the incidents, and conduct forensic analysis. So SAS app data can easily flow into DLP through API configuration, and you get that single pane of glass visibility directly from our Forcepoint DLP incident investigate feature. The the next phase of implementing CASB will be the inline controls. Once you understand where your data is, the inline controls then require some planning. You'd like to identify use cases, like, for example, what apps host your sensitive data. It could be Office three sixty five, Google. We support any app in the inline mode. Once we, once you identify the apps, you also want to think about the use cases. For example, do you want to allow your users to access your SaaS apps, your crown jewel SaaS apps from unmanaged devices, BYOD or personal devices? If you do want to allow them to access, what type of controls do you want to implement? Like, can they do anything or can they not download sensitive data? Typically, users don't allow downloading sensitive data on personal devices. So once you understand your apps and, types of access that you would need, you'll also need to map your users, user groups, and locations, where are they coming from to to be able to complete the zero trust picture here. Then you can choose agent based or agentless deployments. Agentless deployments are typically used for unmanaged devices where you will not have control over, the deployment of agents. So, typically, our customers use both agent based and agentless deployments for the full range of protection on managed and unmanaged devices. So once the traffic steering and the mapping between apps, users, and locations is complete, you can then move on to configuring the protection policies. Again, DLP will be the central control point for defining and passing the verdicts. And the verdicts can be, you know, block downloads on unmanaged apps or, alert or coach users when some unexpected actions occur. So these are the actions that can be driven from Forcepoint DLP so that you'll have complete visibility into your, incidents that are generated via SaaS channel or via CASB. I hope this gives you a picture on, you know, what could be possible CASB implementation strategy. Some customers directly prefer CASB inline and or some customers prefer CASB API because they get near real time controls without agent overhead. So, it's up to the organization, but, you can start anywhere and then you can progressively enhance, the controls that you have. Now briefly looking at the road map here, the road map, the horizon current, next, and later, this represents roughly from now to, say, next one year. Current is what we are currently working on and will be will be launching in the next month. Next is roughly first half of next year and later is roughly second half of next year. This road map is organized around three different areas. One is admin experience. We care a lot about admin experience as well as end user experience, that will ultimately help us drive adoption across, you know, and improve your protections as well. The next focus area is SaaS connectors. The breadth and depth of coverage that we can provide, the more data we scan and I flag the more protection you have, the more value gets delivered through Gatsby. So expanding SaaS connectors is the next thing. And the final thing that none of us can ignore is generative AI. How are we safely enabling you to use generative AI within your organization? And how we as a product are supporting generative AI, based integration so that you can get your data, assess your data faster. So these are some of the themes that are across our road map. Now I will, go to the first theme, admin experience. So what we are doing here, especially, I'm super excited to announce that in the next few weeks, we are expanding our CASB API infrastructure based on popular demand across several geos. The starting with Singapore nodes. So that will allow customers based out of, APAC region get to their clouds faster, lower latency, everything in terms of data visibility. Then later, we'll be expanding to Frankfurt and Dubai regions as well, in around '4, beginning of q one time frame. In terms of SaaS connectors, we are actively working on enhancing, the types of data that one can see from Office three sixty five. We can easily detect uploads, downloads, uploads, and that, if someone modifies a file or, you know, incorporate sensitive data, all of that are possible for OneDrive, SharePoint, Outlook, etcetera. But what we are also enhancing is additional event detection if someone viewed a sensitive file, someone downloaded a sensitive file, or renamed or deleted, we are actually, going to detect all these events and give you clear visibility across these type of activities. What this can in future help is to flag suspicious access patterns. So this is, let's say someone downloaded 100 files, in a minute or someone deleted, sensitive data from that that they should not be deleting. So we will be able to flag this type of, an analyst behavior, in near future with by, giving you visibility on these type of activities. Now as we expand into SaaS connectors, we already support roughly, 20 to 25 connectors within our application, and we plan to expand more. The goal here is to be able to support majority of enterprise applications that, our customers frequently use. So we have we already support, for example, Google, but we are adding Google classification label support, next. So that will allow you to leverage Google's labels, but then also control them via CASB. If a for example, if a label is removed, restore the label, or take a specific action based on, the label that was entered in Google. So we have listed a lot of apps. We have we are planning, super excited to announce a lot of apps over the next, few months. And if you see something missing of high value, please reach out to your account team and let us know. We may be able to prioritize in our list. The final grouping here is around generative AI support. Again, CASB is, one of the primary tools for you to get visibility into as you safely enable generative AI across your organization. What we want to do here through CASB is to make sure that you have visibility over, your enterprise AI apps. Like, who's actually sending which users or user groups are using, what apps are they using it with. For example, with Copilot, you know, if Copilot is getting used in Excel versus PowerPoint or, you know, several apps, how are your users using Copilot across these apps? Are they uploading sensitive data? Are they getting sensitive data downloaded, in responses from Copilot? And are they downloading it to their local devices? So these are some, levels of disability that we would like to provide to our generative AI support. Starting with Copilot Connector, which should launch in around October time frame, followed by ChatGPT and, Gemini, and we'll expand it to other, popular tools such as cloud, and tropic, etcetera. Later on, as we look at generative AI support, we are also enhancing our platform for you to be able to, use NLP type queries to be able to get to your data faster. And this is a platform wide initiative, not just CASB. We can we are doing working on several things such as policy recommendation engines, NLP based queries to get your data across various different products that you are already using. So this is work in progress, and we will be looking to release them in various milestones. Now I'd like to touch upon a few, few highlights from our road map. I talked about how we are introducing several different API nodes over the next few months. And what I would also like to talk about is, you know, how we are also keeping performance in mind, especially with API, out of bank coverage. One of the concerns that we hear from customer is how fast can you scan, how fast is your near real time. So what we do is we have implemented smart scanning logic within CASB. And what this means is, we, scan data, based on how it is changing. For example, we scan a file once and if if it has not changed in terms of who it is shared with, etcetera, the next time around we scan it, we don't do deeper scan on it. So all these type of enhancements within the scanning logic and adjustments to scanning logic, it actually prevents you from hitting, vendor, API throttling, which is a frequent problem when someone scanning a cloud using, APIs, vendors can throttle based on how frequently we are reaching those APIs. So our goal is to get you the visibility with minimum amount of throttling. And even when there is throttling, we able to implement retry automatically. So we've done several improvements across the board with, CASB. And if you're an organization of, say, five to 10,000 users, we should be able to scan your data, especially across OneDrive, SharePoint, very fairly quickly, ten to twenty minutes in near real time so that you will get utmost visibility, to your data quickly without the hassle of agents. One more change that we have recently, implemented is, if you have multiple SaaS applications, we should be able to scan them concurrently, especially if you are using our dedicated API infrastructure. We should be able to scan them concurrently so that you will, again, once again, not be in a queue in terms of how we are scheduling the scans. So you you get to data faster. For example, you have SharePoint and OneDrive. We should be able to scan concurrently and get you the insights as, parallel insights. So these type of scanning improvements allow us to get the data visibility that you require faster, and, you will be able to take actions quickly. The Copilot enhancement that I talked about as well, we are excited about it. So this is around giving you visibility around which users, what type of how many prompts are they using, what type of apps are, using Copilot, and what is the overall activity, you know. Are they sensitive? Are they sensitive uploads and downloads? And how do you prevent them via API as well as in real time? So this is our goal with enterprise, Copilot support coming up in the next, three to four weeks. Then another feature that I'm super excited to talk about, this is a feature from Forcepoint DLP. It has been, it's a premium feature, OCR, especially for those of you in financial services sector, health care sector, manufacturing sector. OCR, being able to recognize sensitive data embedded in images, PDFs is very important. So what we have recently done is certified CASB channel for OCR. So if you have any documents that have images, then these will be sent to Forcepoint DLP for OCR type scanning, and you should be able to see the incidents that are generated based on your DLP policies for OCR. So this is certification is complete. It should be available, in the matter of next couple of weeks. This is a premium SKU. You need to have a premium SKU for using OCR. Finally, there were some early questions for us around, how do we use Office three sixty five, if you have, say, e three or e five license? How do you use Forcepoint on top of that? This is a classic use case for us. You know? How is that better than, let's say, office you have e five license, and you can use Microsoft cloud email protection and, cloud apps, Defender cloud apps. What typical use cases for us is customers our customers can use e five or e three with Forcepoint. Especially with e three plus Forcepoint, they get the maximum value and here is why. Customers, they typically don't have just one environment, which is Azure. They they do have multiple environments, especially multi cloud, is more prevalent, these days. They also don't just use Microsoft apps. They also they use other non Microsoft apps, Salesforce, Slack, WhatsApp, Box, etcetera. So given this very hybrid environment, between e three and e five, e three gives you all the core services, And ForcePoint gives you support for not just Microsoft, but non Microsoft ecosystem that, you all have. So the best combination, the most, cost efficient of combination that we have found with our customers is e three to get all the core services that e five offers and layer a ForcePoint on top for advanced DLP capabilities, flexibility with hybrid environments, support for non Microsoft apps. So the strong defense in-depth kind of strategy with e three plus ForcePoint will give you the same amount of protection or even more while helping you save a lot of licensing costs. So this is the perspective that we hold with, Microsoft, with our Microsoft plus ForcePoint better together strategy. Now this concludes, the planned content for today's session. We are happy to answer any additional questions at this point. Thank you all. Thank you, Seretha. Really great con content this morning. Really appreciate it. We did have a couple early questions that came in. So, Seretha, you actually just answered question two regarding DLP on prem and Microsoft e five. Again, those docs are available for downloads. You just need to go back and review the content. And I did wanna address question number one, some really quick questions here around analyzing an environment before implementing CASB. I know you did have a slide earlier on as well about implementation. Any additional details you'd like to share around the questions asked here? For sure. So, thank you for the early submission that allowed us to fine tune our content today, especially to around the implementation strategy. So as I mentioned, CASDI API will be your easiest way to get visibility into your data. It will take a mat in a matter of few hours to start getting the visibility. So, we can always help you get started on that one as you plan for more deeper, inline controls. So I hope, the content that I covered earlier will, help you guide in that direction. Awesome. And then the final question here, just really around the terminology for CASB and anything else that, you know, could be missing with that. Any additional feedback on this one? For sure. Sorry. Just reading the question. CASB terminology is a bit odd. Cloud is now fully integrated with enterprise. What is the place for CASB broker? What am I missing? That's a great question. So, in my earlier content, right, I I shared about, I think I attempted to share about, you know, the importance of mapping, your users, your devices, your applications, to who needs access to what, Especially with this cloud enabled, you know, organizations, it's very easy to give over permissions to users and not have any visibility at all, which could ultimately lead to, you know, attacks or data exfiltration because of overexposure of your data. So CASB in this world is even more relevant because it gives you visibility around who is accessing what from where and when, and is that really what you want to see. Right? That early visibility into overall, SaaS posture is very important, and that is where CASDI helps you. Awesome. I hope that answers the question. Thanks, Erica. So So a couple questions coming in here on the chat. I'll go ahead and read these out loud. So there was a question around a plan to release an integrated agent supporting both DLP and CASB. The answer provided that is on the road map and a second question came in around how soon could that release be expected. Absolutely. So the work for it is in progress, as we speak. And in my road map, I believe I briefly shared it with, it's in the next horizon. So we are expecting the work to complete around the q four or the q one time frame. At which point, we are looking to, we are looking to invite for early access and then general access will follow afterwards around q one time frame. And one of the important points to note is we will be using our f one e agent that you already have on your environment for either web security or DLP for CASB traffic steering. And we are also expecting that there is no need to upgrade your agent for this unified agent. Whenever you're ready to turn on CASB, this agent version, there may be a requirement for a specific agent version that will be on a specific agent version. But we we will be using f one e, which is our most popular agent, so that customers are not required to use, or migrate. So that's our goal. It's a single agent for f one, DLP CASB and that's awesome. Thank you. And a another question came in around the MS three sixty five e three versus e five then why our product suite is more effective, together with e three versus e five. You shared a slide on that. I was curious if there's any other info you wanted to share. Yeah. I mean, so just our advanced DLP capabilities in industry leading, if you have advanced data security use cases, forensic analysis, it's unparalleled. Data is ultimately what we all are concerned about. Every every CISO, every, data administrator I talk to, they are concerned about protecting data. So we bring you the best in class DLP, and that's where, you know, we are unmatched. And our ability to control not just cloud apps and email, but web, our ability to identify, you know, threats, your cataloging of your data to our DSPM. As a platform, we are data centric, and that's why using Forcepoint for us, Microsoft, will offer you much better data controls with industry leading solutions across the board, across all channels. Awesome. And I know Pallavi just added a four point blog post here for review, but I did wanna bring up the question as well because it does relate to DSPM. But does the does our DSPM product integrate with existing Forcepoint DLP cloud or on prem solutions? Like I said, Flavio did link a blog post that can be read, but if there's anything else you wanted to share. Absolutely. We support both DLP cloud or DLP on prem. In fact, we have customers already using both. And we do this through the TPS integration. If you have data protection service on cloud, we it can integrate to, either on prem DLP or cloud DLP and this is very seamless. It's available for both. Awesome. I think I got through all the questions. Please, both, keep them coming if you have any additional questions Up here at the top. Alright. Give it another minute or two here in case anyone has any lingering questions. I am gonna go ahead and pop this survey up. Like I said, I do read all of these responses, so I really appreciate everyone taking the time to complete our survey and fill it out. Again, if you have any recommendations on future office hour sessions, I am here for any of those recommendations. Alright. Give another minute or two here in case we have any questions coming in. Sreed and Neeraj, really appreciate the content you guys shared with us today. It's really wonderful to see about what's coming with CASB, what's on the horizon, and learn more about new features. I see a question from Leslie. Is it okay, to take that? Okay. Okay. Hey, Leslie. I think, I'll read out the question slightly off topic. Does your DSPM product integrate with the existing Forcepoint DLP cloud on prem solutions? And if so, please tell us more. Yes. So our for, DSPM, Forcepoint DSPM, our customers use it, to identify data across various different data sources. We are rapidly expanding our data sources that are supported by DSPM. And, so the number one thing that, they do is using AI mesh, technology without requiring any predefined policies to identify data. We are able to identify and label the data. Now with Forcepoint DLP, what their customers can do is once the labeling is done on the ESPN side, they can apply policies using the labels, and prevent data from exfiltrating through various channels. So this is the top use case how our customers use DSPM and DLP together today. But that said, we are planning more integrations in future such as bringing in, AI mesh technology that has helped us, establish our position as a DSPM product, into DSP and across the rest of the products as well, using AI mesh for, policy recommendations, using AI mesh for second opinion classifications as we do incident investigate. These are some of the items that are on our road map to, even more tightly integrate DSPM and DLP. In the next quarter, there is another thing, also happening. You have your trusted DLP classifiers, 1,700, plus classifiers that we talk about. And these are also going to be integrated into our AI mesh technology as a hard signal so that our, technology that we have to automatically recognize data can also take input from the predefined classifiers that we have. So, you know, that that shows how our products are intertwined to give you that, even even lower, false positive rates. So we have, several of these integration points planned in future, and we also support the integration that I talked about, currently. So I appreciate the extra detail. Alright. We'll give it another minute or two. But, again, the questions are starting to wind down a bit. Again, thank you all for joining. Really appreciate your time this morning. We are also hosting the session next week. So if you're in the APAC, META, or early AMENA hours, we are also hosting another version of this next week as well. So if you have any colleagues that would like to attend. Alright. Alright. Well, if there's no further questions, again, thank you all for joining. We'll go ahead and end today's session, and hope everyone has a great rest of your day. Thank you. Thank you all. Thank you.