Forcepoint Next Generation Firewall How-To How to deploy Forcepoint Next Generation Firewall in the Amazon Web Services cloud

Home
Deploy NGFW in AWS
Deploying Forcepoint NGFW in the AWS cloud
You can deploy Forcepoint NGFW in the AWS cloud using 1-Click Launch or using Manual Launch when you have an existing SMC installation.
Deploy Forcepoint NGFW in AWS when you have an existing SMC installation
If you already have an existing SMC installation, you can deploy additional NGFW Engines in AWS.

Deploy NGFW in AWS
- Introduction
  You can deploy Forcepoint Next Generation Firewall in the Amazon Web Services (AWS) cloud to provide VPN connectivity, access control, and inspection for services in the AWS cloud.
- Deploying Forcepoint NGFW in the AWS cloud
  You can deploy Forcepoint NGFW in the AWS cloud using 1-Click Launch or using Manual Launch when you have an existing SMC installation.
  - Deploy Forcepoint NGFW using 1-Click Launch
    Create a Forcepoint NGFW instance, then deploy the SMC on your own hardware or in a separate instance on AWS.
  - Deploy Forcepoint NGFW in AWS when you have an existing SMC installation
    If you already have an existing SMC installation, you can deploy additional NGFW Engines in AWS.
    - Configure the SMC
      Configure the network connections and contact addresses for the SMC.
    - Create Single Firewall elements
      Create a Single Firewall element for each Forcepoint NGFW engine that you deploy in the AWS cloud.
    - Configure the AWS environment
      Prepare the AWS environment for the NGFW deployment.
    - Create a Forcepoint NGFW instance using Manual Launch
      Configure and launch an instance of the Forcepoint NGFW AMI using Manual Launch.
- Configure HA
  After you have deployed two NGFW Engines, configure high availability (HA).
- AWS Transit Gateway
- Managing Forcepoint NGFW Engines using the SSM Agent
  You can use the AWS Systems Manager Agent (SSM Agent) to manage Forcepoint NGFW Engines that are deployed in the AWS cloud using the same AWS tools that are used for other AWS resources.
- Maintenance
  All configuration information for the NGFW Engines is stored on the Management Server component of the SMC. After deployment, you can manage NGFW Engines in the AWS cloud using the Management Client component of the SMC in the same way as other NGFW Engines.
- Troubleshooting in the AWS console
  You can use diagnostics information provided by the AWS console for troubleshooting.
- Example deployment
  This example shows a deployment in an example network environment.
- Configuring VPC ingress routing for an Internet gateway
  VPC ingress routing can direct all traffic from an edge location, such as the Internet or a VPN gateway, through the Forcepoint NGFW Engine before reaching its final destination. These instructions describe how to configure VPC ingress routing for an Internet gateway.
- Configuring a route-based VPN to AWS with BGP
  The configuration for this scenario includes a virtual private cloud (VPC) with a public subnet and private subnets. A virtual private gateway enables communication with your own on-premises network over an IPsec VPN tunnel. All routing configuration is done using BGP.
- Find product documentation
  In the Forcepoint Customer Hub, you can find information about a released product, including product documentation, technical articles, and more.

Deploy Forcepoint NGFW in AWS when you have an existing SMC installation

If you already have an existing SMC installation, you can deploy additional NGFW Engines in AWS.

Configure the SMC
Configure the network connections and contact addresses for the SMC.
Create Single Firewall elements
Create a Single Firewall element for each Forcepoint NGFW engine that you deploy in the AWS cloud.
Configure the AWS environment
Prepare the AWS environment for the NGFW deployment.
Create a Forcepoint NGFW instance using Manual Launch
Configure and launch an instance of the Forcepoint NGFW AMI using Manual Launch.

© 2022 Forcepoint
Published 14 October 2022