New features

This release of the product includes these new features. For more information and configuration instructions, see the Forcepoint FlexEdge Secure SD-WAN Product Guide and the Forcepoint FlexEdge Secure SD-WAN Installation Guide.

Forward traffic to specific tunnels or routers

By configuring the Forced Next Hop (FNH) option in the access rule you can now force forward traffic to a specific tunnel or router.

The advantage of using this option is that you can forward the matched traffic to a specific application that has the server behind a tunnel.

For more information, see Configure Forced Next Hop routing section in Forcepoint Next Generation Firewall Product Guide.

SMC contact via FQDN

You can now use FQDN as the contact address to enable the engine to contact the SMC management server or log server. This can be beneficial when you run the SMC management server or log server in a cloud environment where managing long term static public IP address is not feasible or is difficult.

For more information, see Define Management Server or Log Server contact addresses, and Define contact address sections in Forcepoint Next Generation Firewall Product Guide.

Additional admin user authentication methods supported

The following admin user authentication methods are supported:
  • OpenID Connect authentication by using an OpenID Connect provider.
  • SAML authentication by using a SAML based identity provider.

For more information, see Authenticate administrators using OpenID authentication method, and Authenticate administrators using SAML v2 authentication method sections in Forcepoint FlexEdge Secure SD-WAN Product Guide.

Improved SMC Domain Overview

The Domain Overview is updated to improve its scalability and usability to help users to easily navigate and find the domain information that they are looking for.

For more information, see Log on to a Domain from the Domain Overview section in Forcepoint FlexEdge Secure SD-WAN Product Guide.

User Interface Themes

You can switch between light and dark theme for SMC.

For more information, see Customize the Management Client layout section in Forcepoint FlexEdge Secure SDWAN Product Guide.

DNS Sinkholing

You can now configure DNS sinkholing for UDP and TCP service elements. One of the scenarios where this feature can be useful is, when there is an infected machine in the internal network. It can be identified by using the DNS sinkholing.

For more information, see Create custom service elements section in Forcepoint Next Generation Firewall Product Guide.