Background details:
The main difference in behavior between the file-based encryption technology and the container-based encryption technology, is that the former constrains the device use to systems with FRP installed (onsite access only). In contrast, the latter allows for access on systems without FRP software installed using the offsite browser (with offsite access). This behavioral change is the main theme of the new user interface for both policy categories:

• Onsite access only - FRP installed
• Offsite access - Access on systems without FRP installed