Configuring and deploying GRE and IPsec tunneling

Once you create GRE and IPsec tunnels in Forcepoint ONE SSE, you need to configure GRE and IPsec tunnels on your edge devices so that web traffic originating from your internal subnets is forwarded to Forcepoint ONE SSE Cloud via the configured tunnel successfully.

The router or firewall at the customer site must be configured to send only web traffic on TCP ports 80 and 443 over the tunnel to the Cloud-SWG. All other traffic should be routed direct to the internet. If traffic over any other ports is sent over the tunnel, it will be discarded.

To configure your edge device, you can follow the steps mentioned for your edge device: