Forcepoint Network Security Platform 7.3 Installation Guide

Home
Appendices
Example network (IPS)
To give you a better understanding of how Security Engine in the IPS role fits into a network, this example outlines a network with IPS engines.
Example Headquarters DMZ Network
This example shows a sample DMZ network.

Introduction to the Forcepoint Network Security Platform solution
Before setting up Forcepoint Network Security Platform, it is useful to know what the different components do and what Security Engine roles are available. There are also tasks that you must complete to prepare for installation.
Forcepoint Security Management Center deployment
SMC is the management component of the Security Engine system. SMC must be installed and running before you can deploy the Security Engines.
Forcepoint Security Engine deployment
Forcepoint Security Engine deployment consists of adding and configuring engine elements in the SMC, and configuring the Security Engine software on the engine.
Maintenance
To maximize the benefit of Security Engine, upgrade the SMC and Security Engine regularly.
Appendices
- Default communication ports
  There are default ports used in connections between SMC components and default ports that SMC components use with external components.
- Command line tools
  There are command line tools for the SMC and the Security Engines.
- Installing SMC Appliance software on a virtualization platform
  You can install the SMC Appliance software as a virtual machine on virtualization platforms such as VMware ESX.
- Installing Forcepoint Security Engine on a virtualization platform
  You can install the Security Engine software as a virtual machine on virtualization platforms such as VMware ESX or KVM.
- Installing Forcepoint Security Engine software on third-party hardware
  You can install the Security Engine software on third-party hardware that meets the hardware requirements.
- Installing the SMC with external certificate management
  When you install the SMC, you can use certificates issued by an external CA for internal TLS communication between system components.
- Example network (Engine/VPN)
  This example gives you a better understanding of how Security Engines with Layer 3 Interfaces fits into a network.
- Example network (IPS)
  To give you a better understanding of how Security Engine in the IPS role fits into a network, this example outlines a network with IPS engines.
  - Example network overview (IPS and Layer 2 Engine)
    This example network environment is used in all IPS examples.
  - Example Headquarters intranet network
    This example shows a sample headquarters intranet network.
  - HQ IPS Cluster
    In this example, the HQ IPS Cluster is an inline serial cluster located in the Headquarters network.
  - Example Headquarters DMZ Network
    This example shows a sample DMZ network.
    - DMZ IPS
      In this example, the DMZ IPS in the headquarters DMZ network is a single inline IPS engine.
- Cluster installation worksheet instructions
  For planning the configuration of network interfaces for the engine nodes, use the worksheet.

Example headquarters DMZ network

This example shows a sample DMZ network.

DMZ IPS
In this example, the DMZ IPS in the headquarters DMZ network is a single inline IPS engine.