Forcepoint Network Security Platform 7.3 Installation Guide

Home
Forcepoint Security Engine deployment
Forcepoint Security Engine deployment consists of adding and configuring engine elements in the SMC, and configuring the Security Engine software on the engine.
Configuring Security Engines as Master Engines and Virtual Engines
Configuring engine elements in the SMC prepares the SMC to manage Master Security Engines and Virtual Security Engines.

Introduction to the Forcepoint Network Security Platform solution
Before setting up Forcepoint Network Security Platform, it is useful to know what the different components do and what Security Engine roles are available. There are also tasks that you must complete to prepare for installation.
Forcepoint Security Management Center deployment
SMC is the management component of the Security Engine system. SMC must be installed and running before you can deploy the Security Engines.
Forcepoint Security Engine deployment
Forcepoint Security Engine deployment consists of adding and configuring engine elements in the SMC, and configuring the Security Engine software on the engine.
- Configuring Forcepoint Security Engines with Layer 3 Interfaces
  Configuring engine elements in the SMC prepares the SMC to manage Security Engine with Layer 3 Interfaces.
- Configuring Security Engine for the IPS role
  Configuring engine elements in the SMC prepares the SMC to manage Security Engine in the IPS role.
- Configuring Security Engine for the Layer 2 Engine role
  Configuring engine elements in the SMC prepares the SMC to manage Security Enginew with the Layer 2 Engine role.
- Configuring Security Engines as Master Engines and Virtual Engines
  Configuring engine elements in the SMC prepares the SMC to manage Master Security Engines and Virtual Security Engines.
  - Master Engine and Virtual Security Engine configuration overview
    Virtual Security Engines are logically separate virtual engine instances on a physical engine device. A Master Security Engine is a physical engine device that provides resources for Virtual Security Engines. One physical Master Security Engine can support multiple Virtual Security Engines.
  - Install licenses for Security Engines
    Install the Security Engine licenses that you downloaded while preparing for installation.
  - Add a Master Engine element
    To introduce a new Master Security Engine to the SMC, add a Master Security Engine element that stores the configuration information for the Master Security Engine and Virtual Security Engines.
  - Create Virtual Engine elements
    Virtual Engine elements store the configuration information related to the Virtual Engines.
  - Create Virtual IPS elements
    Virtual IPS elements store the configuration information related to the Virtual IPS engines.
  - Create Virtual Layer 2 Engine elements
    Virtual Layer 2 Engine elements store the configuration information related to the Virtual Layer 2 Engines.
- Configuring routing
  After creating the Security Engine elements and defining the interfaces, you can configure the basic routing.
- Initial configuration of Security Engine software
  After configuring the Security Engines in the SMC Client, apply the initial configuration of the Security Engine and contact the Management Server.
- Creating and installing policies
  After successfully applying the initial configuration and establishing contact between the Security Engines and the Management Server, the Security Engine is in the initial configuration state. Now you can create and install policies for access control or inspecting traffic.
Maintenance
To maximize the benefit of Security Engine, upgrade the SMC and Security Engine regularly.
Appendices

Configuring Security Engines as Master Engines and Virtual Engines

Configuring engine elements in the SMC prepares the SMC to manage Master Security Engines and Virtual Security Engines.

Master Security Engine and Virtual Security Engine configuration overview
Virtual Security Engines are logically separate virtual engine instances on a physical engine device. A Master Security Engine is a physical engine device that provides resources for Virtual Security Engines. One physical Master Security Engine can support multiple Virtual Security Engines.
Install licenses for Security Engines
Install the Security Engine licenses that you downloaded while preparing for installation.
Add Master Security Engine elements
To introduce a new Master Security Engine to the SMC, add a Master Security Engine element that stores the configuration information for the Master Security Engine and Virtual Security Engines.
Create Virtual Engines
Virtual Engine elements store the configuration information related to the Virtual Engines.
Create Virtual IPS engines
Virtual IPS elements store the configuration information related to the Virtual IPS engines.
Add Virtual Layer 2 Engine elements
Virtual Layer 2 Engine elements store the configuration information related to the Virtual Layer 2 Engines.

Copyright © 2025 Forcepoint LLC