Secure SD-WAN 7.2.1 Installation Guide

Home
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
Initial configuration of Secure SD-WAN Engine software
After configuring the Secure SD-WAN Engines in the Management Client, apply the initial configuration of the Secure SD-WAN Engine and contact the Management Server.
Using automatic configuration
In automatic configuration, you configure the engine automatically using a USB drive that contains the initial configuration files.

Introduction to the Forcepoint FlexEdge Secure SD-WAN solution
Before setting up Forcepoint FlexEdge Secure SD-WAN, it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
FlexEdge Secure SD-WAN Manager deployment
SMC is the management component of the Secure SD-WAN system. SMC must be installed and running before you can deploy the Secure SD-WAN engines.
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
- Configuring Forcepoint FlexEdge Secure SD-WAN for the Engine/VPN role
  Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Engine/VPN role.
- Configuring FlexEdge Secure SD-WAN for the IPS role
  Configuring engine elements in the SMC prepares the SMC to manage FlexEdge Secure SD-WAN in the IPS role.
- Configuring FlexEdge Secure SD-WAN for the Layer 2 Engine role
  Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Layer 2 Engine role.
- Configuring FlexEdge Secure SD-WAN Engines as Master FlexEdge Secure SD-WAN Engines and Virtual FlexEdge Secure SD-WAN Engines
  Configuring engine elements in the SMC prepares the SMC to manage Master Secure SD-WAN Engines and Virtual Secure SD-WAN Engines.
- Configuring routing
  After creating the Secure SD-WAN Engine elements and defining the interfaces, you can configure the basic routing.
- Initial configuration of Secure SD-WAN Engine software
  After configuring the Secure SD-WAN Engines in the Management Client, apply the initial configuration of the Secure SD-WAN Engine and contact the Management Server.
  - Options for initial configuration
    You can configure the Secure SD-WAN Engine software using plug-and-play configuration, automatic configuration, or the Secure SD-WAN Configuration Wizard.
  - Using plug-and-play configuration
    In plug-and-play configuration, the Secure SD-WAN Engine appliance automatically connects to the Installation Server, downloads the initial configuration file, then contacts the Management Server.
  - Using automatic configuration
    In automatic configuration, you configure the engine automatically using a USB drive that contains the initial configuration files.
    - Prepare for automatic configuration
      To use automatic configuration, save the initial configuration files on a USB drive.
    - Configure Forcepoint FlexEdge Secure SD-WAN engine software using automatic configuratione
      Automatic configuration is primarily intended to be used with Secure SD-WAN Engine appliances, and might not work in all environments when you use your own hardware.
  - Configure Forcepoint FlexEdge Secure SD-WAN engine software with the NGFW Configuration Wizard
    You can import or manually configure the settings for the Secure SD-WAN Engine using either the command line or the web browser version of the Secure SD-WAN Configuration Wizard.
- Creating and installing policies
  After successfully applying the initial configuration and establishing contact between the Secure SD-WAN Engines and the Management Server, the Secure SD-WAN Engine is in the initial configuration state. Now you can create and install policies for access control or inspecting traffic.
Maintenance
To maximize the benefit of Secure SD-WAN, upgrade the SMC and Secure SD-WAN regularly.
Appendices

Using automatic configuration

In automatic configuration, you configure the engine automatically using a USB drive that contains the initial configuration files.

Prepare for automatic configuration
To use automatic configuration, save the initial configuration files on a USB drive.
Configure Forcepoint FlexEdge Secure SD-WAN Engine software using automatic configuration
Automatic configuration is primarily intended to be used with Secure SD-WAN Engine appliances, and might not work in all environments when you use your own hardware.

Copyright © 2024 Forcepoint LLC