Forcepoint Network Security Platform 7.3 Installation Guide

Home
Introduction to the Forcepoint Network Security Platform solution
Before setting up Forcepoint Network Security Platform, it is useful to know what the different components do and what Security Engine roles are available. There are also tasks that you must complete to prepare for installation.
Preparing for installation
Before installing Forcepoint Network Security Platform, identify the components of your installation and how they integrate into your environment.
Installation security considerations

Introduction to the Forcepoint Network Security Platform solution
Before setting up Forcepoint Network Security Platform, it is useful to know what the different components do and what Security Engine roles are available. There are also tasks that you must complete to prepare for installation.
- Introduction to Forcepoint Network Security Platform
  The Forcepoint Network Security Platform solution consists of Security Engines and the Forcepoint Security Management Center (SMC). The SMC is the management component of the Forcepoint Network Security Platform solution.
- Preparing for installation
  Before installing Forcepoint Network Security Platform, identify the components of your installation and how they integrate into your environment.
  - Installation security considerations
    - Physical security
      All Forcepoint Network Security Platform components including SMC components and Security Engines, whether in physical or virtual form factors, must always be setup in secured and access controlled physical premises where only trusted administrators can physically access the appliances running the platform components.
    - Upgrade appliances
  - Supported platforms
    Several platforms are supported for deploying Security Engine and SMC components.
  - Clustering
    There are special considerations when you deploy an Security Engine as a Engine Cluster, IPS Cluster, or Layer 2 Engine Cluster.
  - Deployment options for IPS and Layer 2 Engines
    There are several ways to deploy Security Engines depending on how you want to inspect and respond to traffic.
  - Cable connection guidelines
    Follow these cable connection guidelines when connecting cables to Security Engine hardware and the SMC Appliance.
  - Speed and duplex
    Mismatched speed and duplex settings are a frequent source of networking problems.
  - Obtain installation files
    If you did not receive an installation DVD for the Security Engine software or the SMC, download installation files.
  - Licensing Security Engine components
    Generate and download a license for each SMC server and Security Engine node before you start installing the Security Engine.
  - Installation overview
    The process of installing Security Engine consists of several high-level steps.
Forcepoint Security Management Center deployment
SMC is the management component of the Security Engine system. SMC must be installed and running before you can deploy the Security Engines.
Forcepoint Security Engine deployment
Forcepoint Security Engine deployment consists of adding and configuring engine elements in the SMC, and configuring the Security Engine software on the engine.
Maintenance
To maximize the benefit of Security Engine, upgrade the SMC and Security Engine regularly.
Appendices

Installation security considerations

Physical security
All Forcepoint Network Security Platform components including SMC components and Security Engines, whether in physical or virtual form factors, must always be setup in secured and access controlled physical premises where only trusted administrators can physically access the appliances running the platform components.
Upgrade appliances