Enable Forcepoint Endpoint Context Agent (ECA) on the Secure SD-WAN Engine
Enable Forcepoint Endpoint Context Agent (ECA) on the Secure SD-WAN Engines on which you want to receive Forcepoint One Endpoint client information.
For more details about the product and how to configure features, click Help or press F1.
Steps
Next steps
Engine Editor > Add-Ons > Endpoint Integration
Use this branch to enable endpoint integration on the engine and change the settings for the endpoint client communication.
Option | Definition |
---|---|
When Endpoint Service is Forcepoint Endpoint Context Agent | |
ECA Listener Certificate | The internal certificate for the Secure SD-WAN Engine that listens for Forcepoint One Endpoint traffic. The certificate is generated automatically when you save the Forcepoint One Endpoint configuration. |
Signing CA | The internal CA that signed the certificate. |
ECA Configuration | The selected ECA Configuration element. Click Select to select an element. |
Source Networks | Add the networks or zones that contain the Forcepoint One Endpoint clients. The Forcepoint One Endpoint clients located in these networks or zones send endpoint information to this Engine. Click Add to add an element to the table, or Remove to remove the selected element. |
Destination Networks | Add the networks or zones where outbound connections are going. The Forcepoint One Endpoint clients send endpoint information only if the
destination address is located in these networks or zones. If filtering based on both source address and destination address, both conditions must be met. Click Add to add an element to the table, or Remove to remove the selected element. |
Listening Interfaces | The interfaces or zones the Secure SD-WAN Engine uses to listen for Forcepoint One Endpoint traffic. Click Add to add an element to the table, or Remove to remove the selected element. |
Listening Port | The port on which the Secure SD-WAN Engine listens for Forcepoint One Endpoint traffic. |
Export Configuration for Endpoint Clients | Opens the Export ECA Configuration dialog box, where you can export an XML file that contains the Forcepoint One Endpoint configuration and details of all the Secure SD-WAN Engines that use the same ECA Configuration element. You must first save the Secure SD-WAN Engine configuration. |
Properties dialog box (ECA Certificate)
Use this dialog box to review the properties of an ECA Certificate.
Option | Definition |
---|---|
General tab | |
Name | The name of the element. |
Subject Name | The identifier of the certified entity. |
Public Key Algorithm | The algorithm used for the public key. |
Key Length | The length of the key in bits. |
Serial Number | The sequence number of the certificate. The number is issued by the CA. |
Signature Algorithm | The signature algorithm that was used to sign the certificate. |
Signed By | The CA that signed the certificate. |
SubjectAltName | The subject alternative name fields of the certificate. |
Valid From | The start date of certificate validity. |
Valid To | The end date of certificate validity. |
Fingerprint (SHA-1) | The certificate fingerprint using the SHA-1 algorithm. |
Fingerprint (SHA-256) | The certificate fingerprint using the SHA-256 algorithm. |
Fingerprint (SHA-512) | The certificate fingerprint using the SHA-512 algorithm. |
Option | Definition |
---|---|
Certificate tab | |
Certificate text area | The contents of the certificate. |
ECA Configuration Export dialog box
Use this dialog box to export the Forcepoint One Endpoint configuration in XML format.
Option | Definition |
---|---|
ECA Configuration | Click Select to select an element. If you opened this dialog box from the Engine Editor, the ECA Configuration is automatically selected. |
Export File | The path where you want to save the exported XML file. |
Export | Exports the XML file. |