Network Security Platform 7.3.0 Online Help

Home
Controlling Security Engines
You can command and set options for engines through the SMC Client or on the engine command line. You can also stop traffic manually.
Controlling Security Engine operation
You can command and set options for Engines, Layer 2 Engines, IPS engines, Master Engines, Virtual Engines, Virtual IPS engines, and Virtual Layer 2 Engines through the SMC Client.
Set Security Engine options
You can set options for Engines, Layer 2 Engines, IPS engines, Master Engines, Virtual Engines, Virtual IPS engines, and Virtual Layer 2 Engines through the SMC Client.

About this Help
This online help was created for Forcepoint Network Security Platform, version 7.3.0.
Introduction to the Forcepoint Network Security Platform solution
Before setting up Forcepoint Network Security Platform, it is useful to know what the different components do and what engine roles are available.
Deployment
Before you can set up the system and start configuring elements, you must consider how the different SMC components should be positioned and deployed.
Setting up
After deploying the SMC components, you are ready to start using the SMC Client and carrying out some of the first configuration tasks.
Monitoring
You can use the SMC to monitor system components and third-party devices. You can also view and filter logs, and create Reports from them.
Controlling Security Engines
You can command and set options for engines through the SMC Client or on the engine command line. You can also stop traffic manually.
- Controlling Security Engine operation
  You can command and set options for Engines, Layer 2 Engines, IPS engines, Master Engines, Virtual Engines, Virtual IPS engines, and Virtual Layer 2 Engines through the SMC Client.
  - Commanding Security Engines remotely
    You can send commands to Security Engines remotely through the SMC Client.
  - Set Security Engine options
    You can set options for Engines, Layer 2 Engines, IPS engines, Master Engines, Virtual Engines, Virtual IPS engines, and Virtual Layer 2 Engines through the SMC Client.
    - Enable or disable status monitoring
      By default, monitoring is automatically activated for all engines, but can be turned off as necessary.
    - Enable or disable diagnostics
      Diagnostics mode provides more detailed log data for troubleshooting purposes.
    - Enable or disable user database replication
      You can enable or disable the replication of the Management Server’s internal LDAP database to a Engine or a Master Engine.
    - Enable or disable status surveillance
      Status surveillance generates an alert when engines change to an unknown state.
    - Enable or disable SSH access
      Secure remote access to the engines is provided by the SSH daemon process. This process can be started and stopped remotely.
    - Change the Security Engine root password
      The password for access to the Security Engine command line can be changed remotely through the SMC Client.
  - Change a NetLink state manually
    You can manually command NetLinks to the Enable or Disable state.
  - Disable cluster nodes temporarily
    Disabling a cluster node allows continued management of the other cluster members if one node goes out of operation.
  - Re-enable disabled cluster nodes
    You can re-enable nodes in a cluster that you have temporarily disabled.
  - Editing Security Engine configurations
    The Security Engines can be configured in various ways.
- Working on the Security Engine command line
  Although the engines are managed remotely, some operations on the Linux command line on the engines are useful for troubleshooting and local maintenance operations.
SMC configuration
SMC Manager configuration allows you to customize how the SMC components work.
Security Engine configuration
You can create and modify Engines, IPS engines, Layer 2 Engines, Master Engines and Virtual Security Engines. You can configure the Security Engine properties, activate optional features, and configure advanced Security Engine settings.
Routing
Use the SMC Client to configure static or dynamic routing, and use a Multi-Link configuration to manage and distribute inbound and outbound connections.
Traffic inspection policies
Policies are key elements that contain rules for allowing or blocking network traffic and inspecting the content of traffic.
Users and authentication
User accounts are stored in internal databases or external directory servers. You can use Forcepoint Network Security Platform in the Engine/VPN role or external authentication servers to authenticate users.
Virtual private networks
Forcepoint Network Security Platform supports both policy-based and Route-based Tunnels between VPN gateways. For full remote access, Forcepoint Network Security Platform supports both IPsec and SSL VPN tunnels for VPN clients.
Maintenance and upgrades
Maintenance includes procedures that you do not typically need to do frequently.
Troubleshooting
Troubleshooting helps you resolve common problems in the Forcepoint Network Security Platform and SMC.
Appendices

Set Security Engine options

You can set options for Engines, Layer 2 Engines, IPS engines, Master Engines, Virtual Engines, Virtual IPS engines, and Virtual Layer 2 Engines through the SMC Client.

Enable or disable status monitoring
By default, monitoring is automatically activated for all engines, but can be turned off as necessary.
Enable or disable diagnostics
Diagnostics mode provides more detailed log data for troubleshooting purposes.
Enable or disable user database replication
You can enable or disable the replication of the Management Server’s internal LDAP database to a Engine or a Master Engine.
Enable or disable status surveillance
Status surveillance generates an alert when engines change to an unknown state.
Enable or disable SSH access
Secure remote access to the engines is provided by the SSH daemon process. This process can be started and stopped remotely.
Change the Security Engine root password
The password for access to the Security Engine command line can be changed remotely through the SMC Client.

Copyright © 2025 Forcepoint LLC