Installation security considerations

Physical security

All Forcepoint Network Security Platform components including SMC components and Security Engines, whether in physical or virtual form factors, must always be setup in secured and access controlled physical premises where only trusted administrators can physically access the appliances running the platform components.

If appliances are to be in general office space, it is recommended to place appliances in a locked room or cabinet where access is available only to trusted administrators. Do not place platform components in public areas such as hallways, reception areas, or shared spaces where tampering risk is higher.

Upgrade appliances

When installing physical appliances, upgrade appliance to the latest recommended version as part of installation procedure. Important functionality and security updates may have become available between the time the appliance was manufactured and when the appliance is deployed. See the Upgrading Security Engines chapter for Security Engine upgrade options and the Patching and upgrading the SMC Appliance chapter for SMC Appliance upgrade options.