Secure SD-WAN 7.2.1 Installation Guide

Home
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
Configuring FlexEdge Secure SD-WAN for the IPS role
Configuring engine elements in the SMC prepares the SMC to manage FlexEdge Secure SD-WAN in the IPS role.

Introduction to the Forcepoint FlexEdge Secure SD-WAN solution
Before setting up Forcepoint FlexEdge Secure SD-WAN, it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
FlexEdge Secure SD-WAN Manager deployment
SMC is the management component of the Secure SD-WAN system. SMC must be installed and running before you can deploy the Secure SD-WAN engines.
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
- Configuring Forcepoint FlexEdge Secure SD-WAN for the Engine/VPN role
  Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Engine/VPN role.
- Configuring FlexEdge Secure SD-WAN for the IPS role
  Configuring engine elements in the SMC prepares the SMC to manage FlexEdge Secure SD-WAN in the IPS role.
  - Types of interfaces for FlexEdge Secure SD-WAN Engines in the IPS and Layer 2 Engine roles
    Interface definitions are an important part of IPS and Layer 2 Engine elements.
  - Interface numbering
    The interfaces have their own numbering in the SMC called the interface ID. The interface IDs are mapped to the corresponding network interfaces on the Secure SD-WAN Engine when you configure the Secure SD-WAN Engine software.
  - Install licenses for FlexEdge Secure SD-WAN Engines
    Install the Secure SD-WAN Engine licenses that you downloaded while preparing for installation.
  - Defining IPS engines
    IPS elements are a tool for configuring nearly all aspects of your physical IPS components.
  - Bind engine licenses to IPS elements
    After you have configured the IPS elements, you must manually bind Management Server POL-bound licenses to specific IPS elements.
- Configuring FlexEdge Secure SD-WAN for the Layer 2 Engine role
  Configuring engine elements in the SMC prepares the SMC to manage Secure SD-WAN Engines in the Layer 2 Engine role.
- Configuring FlexEdge Secure SD-WAN Engines as Master FlexEdge Secure SD-WAN Engines and Virtual FlexEdge Secure SD-WAN Engines
  Configuring engine elements in the SMC prepares the SMC to manage Master Secure SD-WAN Engines and Virtual Secure SD-WAN Engines.
- Configuring routing
  After creating the Secure SD-WAN Engine elements and defining the interfaces, you can configure the basic routing.
- Initial configuration of Secure SD-WAN Engine software
  After configuring the Secure SD-WAN Engines in the Management Client, apply the initial configuration of the Secure SD-WAN Engine and contact the Management Server.
- Creating and installing policies
  After successfully applying the initial configuration and establishing contact between the Secure SD-WAN Engines and the Management Server, the Secure SD-WAN Engine is in the initial configuration state. Now you can create and install policies for access control or inspecting traffic.
Maintenance
To maximize the benefit of Secure SD-WAN, upgrade the SMC and Secure SD-WAN regularly.
Appendices

Configuring FlexEdge Secure SD-WAN for the IPS role

Configuring engine elements in the SMC prepares the SMC to manage FlexEdge Secure SD-WAN in the IPS role.

Types of interfaces for FlexEdge Secure SD-WAN Engines in the IPS and Layer 2 Engine roles
Interface definitions are an important part of IPS and Layer 2 Engine elements.
Interface numbering
The interfaces have their own numbering in the SMC called the interface ID. The interface IDs are mapped to the corresponding network interfaces on the Secure SD-WAN Engine when you configure the Secure SD-WAN Engine software.
Install licenses for FlexEdge Secure SD-WAN Engines
Install the Secure SD-WAN Engine licenses that you downloaded while preparing for installation.
Configuring IPS engines
IPS elements are a tool for configuring nearly all aspects of your physical IPS components.
Bind engine licenses to IPS elements
After you have configured the IPS elements, you must manually bind Management Server POL-bound licenses to specific IPS elements.

Copyright © 2024 Forcepoint LLC