Things to consider when changing the Secure SD-WAN Engine role

You can change the role of an Secure SD-WAN Engine, converting one type of Secure SD-WAN Engine to another, if you have a specific need to do so.

Consider these things when changing the role:

• You can only change the Secure SD-WAN Engine role for engines that currently have Secure SD-WAN software installed. To change the role of engines that currently have specific engine software (for example, Engine/VPN) installed, you must reinstall the engine software. See the Forcepoint FlexEdge Secure SD-WAN Installation Guide.
• Changing the engine role is only supported on modular appliances, for engines installed on a virtualization platform, or for engines installed on your own hardware. You cannot change the engine role on small appliances.
• You must have an Secure SD-WAN Engine license that is valid for all engine roles. You cannot change the role of engines that have a license for a specific type of engine.
• If using the Secure SD-WAN Configuration Wizard on the engine command line, you must connect through a serial console or VGA console. It is not possible to change the engine’s role using an SSH connection to the engine.