Home
Appendices
Example network (IPS)
To give you a better understanding of how Secure SD-WAN in the IPS role fits into a network, this example outlines a network with IPS engines.
Example Headquarters DMZ Network
This example shows a sample DMZ network.

Introduction to the Forcepoint FlexEdge Secure SD-WAN solution
Before setting up Forcepoint FlexEdge Secure SD-WAN, it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
FlexEdge Secure SD-WAN Manager deployment
SMC is the management component of the Secure SD-WAN system. SMC must be installed and running before you can deploy the Secure SD-WAN engines.
Forcepoint FlexEdge Secure SD-WAN deployment
Forcepoint FlexEdge Secure SD-WAN deployment consists of adding and configuring engine elements in the SMC, and configuring the Secure SD-WAN Engine software on the engine.
Maintenance
To maximize the benefit of Secure SD-WAN, upgrade the SMC and Secure SD-WAN regularly.
Appendices
- Default communication ports
  There are default ports used in connections between SMC components and default ports that SMC components use with external components.
- Command line tools
  There are command line tools for the SMC and the Secure SD-WAN Engines.
- Installing SMC Appliance software on a virtualization platform
  You can install the SMC Appliance software as a virtual machine on virtualization platforms such as VMware ESX.
- Installing Forcepoint FlexEdge Secure SD-WAN on a virtualization platform
  You can install the Secure SD-WAN Engine software as a virtual machine on virtualization platforms such as VMware ESX or KVM.
- Installing Forcepoint FlexEdge Secure SD-WAN software on third-party hardware
  You can install the Secure SD-WAN Engine software on third-party hardware that meets the hardware requirements.
- Installing the SMC with external certificate management
  When you install the SMC, you can use certificates issued by an external CA for internal TLS communication between system components.
- Example network (Engine/VPN)
  This example gives you a better understanding of how Secure SD-WAN in the Engine/VPN role fits into a network.
- Example network (IPS)
  To give you a better understanding of how Secure SD-WAN in the IPS role fits into a network, this example outlines a network with IPS engines.
  - Example network overview (IPS and Layer 2 Engine)
    This example network environment is used in all IPS examples.
  - Example Headquarters intranet network
    This example shows a sample headquarters intranet network.
  - HQ IPS Cluster
    In this example, the HQ IPS Cluster is an inline serial cluster located in the Headquarters network.
  - Example Headquarters DMZ Network
    This example shows a sample DMZ network.
    - DMZ IPS
      In this example, the DMZ IPS in the headquarters DMZ network is a single inline IPS engine.
- Cluster installation worksheet instructions
  For planning the configuration of network interfaces for the engine nodes, use the worksheet.

Example headquarters DMZ network

This example shows a sample DMZ network.

DMZ IPS
In this example, the DMZ IPS in the headquarters DMZ network is a single inline IPS engine.