Secure SD-WAN 7.1 Installation Guide

Home
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
Configuring FlexEdge Secure SD-WAN for the Layer 2 Engine role
Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Layer 2 Engine role.

Introduction to the Forcepoint FlexEdge Secure SD-WAN solution
Before setting up Forcepoint FlexEdge Secure SD-WAN, it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
FlexEdge Secure SD-WAN Manager deployment
SMC is the management component of the Secure SD-WAN system. SMC must be installed and running before you can deploy the Secure SD-WAN engines.
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
- Configuring Forcepoint FlexEdge Secure SD-WAN for the Engine/VPN role
  Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Engine/VPN role.
- Configuring FlexEdge Secure SD-WAN for the IPS role
  Configuring engine elements in the SMC prepares the SMC to manage FlexEdge Secure SD-WAN in the IPS role.
- Configuring FlexEdge Secure SD-WAN for the Layer 2 Engine role
  Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Layer 2 Engine role.
  - Types of interfaces for FlexEdge Secure SD-WAN Engines in the IPS and Layer 2 Engine roles
    Interface definitions are an important part of IPS and Layer 2 Engine elements.
  - Install licenses for FlexEdge Secure SD-WAN Engines
    Install the Secure SD-WAN Engine licenses that you downloaded while preparing for installation.
  - Defining Layer 2 engines
    Layer 2 Engine elements are a tool for configuring nearly all aspects of your Layer 2 Engines.
  - Bind engine licenses to Layer 2 Engine elements
    After you have configured the Layer 2 Engine elements, you must manually bind Management Server POL-bound licenses to specific Layer 2 Engine elements.
- Configuring FlexEdge Secure SD-WAN Engines as Master FlexEdge Secure SD-WAN Engines and Virtual FlexEdge Secure SD-WAN Engines
  Configuring engine elements in the SMC prepares the SMC to manage Master Secure SD-WAN Engines and Virtual Secure SD-WAN Engines.
- Configuring routing
  After creating the Secure SD-WAN Engine elements and defining the interfaces, you can configure the basic routing.
- Initial configuration of Secure SD-WAN Engine software
  After configuring the Secure SD-WAN Engines in the Management Client, apply the initial configuration of the Secure SD-WAN Engine and contact the Management Server.
- Creating and installing policies
  After successfully applying the initial configuration and establishing contact between the Secure SD-WAN Engines and the Management Server, the Secure SD-WAN Engine is in the initial configuration state. Now you can create and install policies for access control or inspecting traffic.
Maintenance
To maximize the benefit of Secure SD-WAN, upgrade the SMC and Secure SD-WAN regularly.
Appendices

Configuring FlexEdge Secure SD-WAN for the Layer 2 Engine role

Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Layer 2 Engine role.

Types of interfaces for FlexEdge Secure SD-WAN Engines in the IPS and Layer 2 Engine roles
Interface definitions are an important part of IPS and Layer 2 Engine elements.
Install licenses for FlexEdge Secure SD-WAN Engines
Install the Secure SD-WAN Engine licenses that you downloaded while preparing for installation.
Configuring Layer 2 Engines
Layer 2 Engine elements are a tool for configuring nearly all aspects of your Layer 2 Engines.
Bind engine licenses to Layer 2 Engine elements
After you have configured the Layer 2 Engine elements, you must manually bind Management Server POL-bound licenses to specific Layer 2 Engine elements.

Copyright © 2024 Forcepoint LLC