# Layer 2 Engine deployment example

This example shows how to deploy Forcepoint Network Security Platform in the Layer 2 Engine role in an organization.

The scenario presented here is not meant to be representative of a typical installation. The main focus here is to highlight some of the criteria that can be used in planning deployment. The example covers considerations that affect most installations, but does not comprise an exhaustive list of all factors that you might need to consider. The Layer 2 Engines can be deployed in alternative ways in this example scenario. For example, depending on issues that are not covered here, such as the physical layout of the individual local networks, the hardware available, and budget constraints.

## Single Layer 2 Engine example

This example uses a Single Layer 2 Engine in an organization that has a large internal network. Administrators want to prevent hosts connected to different switches in the same network segment from communicating directly at the protocol level. Using the Layer 2 Engine makes it possible to implement access control for any Ethernet protocols between switches within the same network segment. There is no need to change the network topology.

Figure: Single Layer 2 Engine in an intranet