AWS Transit Gateway

The AWS transit gateway service provides inter-connectivity across thousands of VPCs, AWS accounts, and on-premises networks. It lets you to control communications between VPCs and to connect to the on-premises networks using a single gateway.

This section provides detailed instructions on how to integrate Forcepoint FlexEdge Secure SD-WAN engine and AWS Transit Gateway using a CloudFormation template, which includes an auto-scaling template that connects the AWS Transit Gateway using an AWS Lambda function and configures FlexEdge Secure SD-WAN engines in the existing Forcepoint FlexEdge Secure SD-WAN Manager (SMC). This deployment provides connectivity for on-premise traffic to networks within AWS VPCs and vice versa.

This CloudFormation template lets system administrators to automatically:

• Deploy all AWS resources necessary to setup FlexEdge Secure SD-WAN Engines and AWS Transit Gateway.
• Connect Forcepoint FlexEdge Secure SD-WAN engines deployed as EC2 instances from the auto-scaling template with an existing Forcepoint SMC.
• Configure and connect on-premise and EC2-based FlexEdge Secure SD-WAN engines to bridge traffic between on-premise and AWS workloads.

The following diagram provides a description of the workflow between the components involved in this solution: