Secure SD-WAN 7.2.1 Installation Guide

Home
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
Configuring routing
After creating the Secure SD-WAN Engine elements and defining the interfaces, you can configure the basic routing.

Introduction to the Forcepoint FlexEdge Secure SD-WAN solution
Before setting up Forcepoint FlexEdge Secure SD-WAN, it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
FlexEdge Secure SD-WAN Manager deployment
SMC is the management component of the Secure SD-WAN system. SMC must be installed and running before you can deploy the Secure SD-WAN engines.
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
- Configuring Forcepoint FlexEdge Secure SD-WAN for the Engine/VPN role
  Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Engine/VPN role.
- Configuring FlexEdge Secure SD-WAN for the IPS role
  Configuring engine elements in the SMC prepares the SMC to manage FlexEdge Secure SD-WAN in the IPS role.
- Configuring FlexEdge Secure SD-WAN for the Layer 2 Engine role
  Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Layer 2 Engine role.
- Configuring FlexEdge Secure SD-WAN Engines as Master FlexEdge Secure SD-WAN Engines and Virtual FlexEdge Secure SD-WAN Engines
  Configuring engine elements in the SMC prepares the SMC to manage Master Secure SD-WAN Engines and Virtual Secure SD-WAN Engines.
- Configuring routing
  After creating the Secure SD-WAN Engine elements and defining the interfaces, you can configure the basic routing.
  - Getting started with routing
    Routes to directly connected networks are automatically added according to the interfaces defined for each Secure SD-WAN Engine. You must manually add other routes or configure dynamic routing.
  - Add routers
    A Router element represents a next-hop gateway’s IP address in routing configurations.
  - Add or view the default route
    You can check which route is currently set as the default route for traffic leaving the Secure SD-WAN Engine and set a new default route.
  - Add static routes
    You can add a static route to a network in the routing configuration.
- Initial configuration of Secure SD-WAN Engine software
  After configuring the Secure SD-WAN Engines in the Management Client, apply the initial configuration of the Secure SD-WAN Engine and contact the Management Server.
- Creating and installing policies
  After successfully applying the initial configuration and establishing contact between the Secure SD-WAN Engines and the Management Server, the Secure SD-WAN Engine is in the initial configuration state. Now you can create and install policies for access control or inspecting traffic.
Maintenance
To maximize the benefit of Secure SD-WAN, upgrade the SMC and Secure SD-WAN regularly.
Appendices

Configuring routing

After creating the Secure SD-WAN Engine elements and defining the interfaces, you can configure the basic routing.

Getting started with routing
Routes to directly connected networks are automatically added according to the interfaces defined for each Secure SD-WAN Engine. You must manually add other routes or configure dynamic routing.
Add routers
A Router element represents a next-hop gateway’s IP address in routing configurations.
Add or view the default route
You can check which route is currently set as the default route for traffic leaving the Secure SD-WAN Engine and set a new default route.
Add static routes
You can add a static route to a network in the routing configuration.

Copyright © 2024 Forcepoint LLC