Secure SD-WAN 7.1 Installation Guide

Home
Appendices
Example network (Engine/VPN)
This example gives you a better understanding of how Secure SD-WAN in the Engine/VPN role fits into a network.
Example Single Engine
The Branch Office engine is a Single Engine located in the Branch Office network.

Introduction to the Forcepoint FlexEdge Secure SD-WAN solution
Before setting up Forcepoint FlexEdge Secure SD-WAN, it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
FlexEdge Secure SD-WAN Manager deployment
SMC is the management component of the Secure SD-WAN system. SMC must be installed and running before you can deploy the Secure SD-WAN engines.
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
Maintenance
To maximize the benefit of Secure SD-WAN, upgrade the SMC and Secure SD-WAN regularly.
Appendices
- Default communication ports
  There are default ports used in connections between SMC components and default ports that SMC components use with external components.
- Command line tools
  There are command line tools for the SMC and the Secure SD-WAN Engines.
- Installing SMC Appliance software on a virtualization platform
  You can install the SMC Appliance software as a virtual machine on virtualization platforms such as VMware ESX.
- Installing Forcepoint FlexEdge Secure SD-WAN on a virtualization platform
  You can install the Secure SD-WAN Engine software as a virtual machine on virtualization platforms such as VMware ESX or KVM.
- Installing Forcepoint FlexEdge Secure SD-WAN software on third-party hardware
  You can install the Secure SD-WAN Engine software on third-party hardware that meets the hardware requirements.
- Installing the SMC with external certificate management
  When you install the SMC, you can use certificates issued by an external CA for internal TLS communication between system components.
- Example network (Engine/VPN)
  This example gives you a better understanding of how Secure SD-WAN in the Engine/VPN role fits into a network.
  - Example Engine Cluster
    This example shows Engine Cluster interfaces in the example network.
  - Example Single Engine
    The Branch Office engine is a Single Engine located in the Branch Office network.
  - Example Headquarters management network
    This example shows a sample management network.
- Example network (IPS)
  To give you a better understanding of how Secure SD-WAN in the IPS role fits into a network, this example outlines a network with IPS engines.
- Cluster installation worksheet instructions
  For planning the configuration of network interfaces for the engine nodes, use the worksheet.

Example Single Engine

The Branch Office engine is a Single Engine located in the Branch Office network.

Figure: Example Single Engine

Copyright © 2024 Forcepoint LLC